summaryrefslogtreecommitdiff
path: root/usr.sbin/npppd
AgeCommit message (Collapse)Author
2014-10-25Remove unnecessary netinet/in_systm.h include.Lawrence Teo
ok millert@
2014-10-18Use reallocarray()Theo de Raadt
ok doug
2014-08-23close fd when fdopen failsdoug
ok yasuoka@
2014-08-22remove an uneeded testJonathan Gray
ok yasuoka@
2014-08-14Do not set RTF_MASK, it is not used anymore.Martin Pieuchot
ok yasuoka@
2014-07-22Correct the initializer for tunnconf_default_pptpPhilip Guenther
ok yasuoka@
2014-07-22Handle msgbuf_write() returning EAGAIN.YASUOKA Masahiko
from krw
2014-07-21Switch from <sys/endian.h> or <machine/endian.h> to the new,Philip Guenther
being-standardized <endian.h> ok deraadt@ millert@ beck@
2014-07-18Fix privsep.c. Call missing imsg_free() after imsg_get(). Also addYASUOKA Masahiko
missing #include <net/if.h> to use IFNAMESIZ and replace some strncmp() by startswith().
2014-07-13Some functions need to dup() before sending a socket by imsg and don'tYASUOKA Masahiko
need to close() after sending socket since imsg_compose() closes the passing socket.
2014-07-12Fix a potential bug. privsep.c didn't check the interface nameYASUOKA Masahiko
correctly if it's pppx.
2014-07-12Fix error in previous.YASUOKA Masahiko
2014-07-12Fix the sentence in the BUGS section. Colon is usable for password.YASUOKA Masahiko
Also add a mention about the escape sequence for the password. pointed out giovanni
2014-07-12Use imsg(3) for the IPC between the privileged process and theYASUOKA Masahiko
non-privileged process to be unify the way. Also fix style.
2014-07-10Tweak accept pacing in pptp. Add handling when accept_add() fails andYASUOKA Masahiko
add logging when accept() fails in EMFILE or ENFILE.
2014-07-08Fix a double free bug in parsing the config. It had occurred when aYASUOKA Masahiko
syntax error exists in radius {authentication,accounting}-server configuration. No need to free curr_radconf because it is a part of auth_conf. Pointed out Vladimir Seleznev
2014-07-08Fix npppd not to access freed memory when it is exiting.YASUOKA Masahiko
2014-06-13Fix tcp-mss-adjust of pipex and npppd to update the pointer ofYASUOKA Masahiko
tcp option and check the boundary correctly.
2014-05-30Use calloc instead of malloc and memset.YASUOKA Masahiko
from Benjamin Baier
2014-05-28Fixed chap_input() and chap_authenticate() not to be used as if theyYASUOKA Masahiko
return a value. Since they are void function. pointed out daniel, ok daniel
2014-05-07Initialize struct iface by zero. Without this, npppd had used randomYASUOKA Masahiko
configuration. from Anders Berggren.
2014-05-07calloc is simpler. suggested by Peter Malone and halexTed Unangst
2014-05-07use calloc. from Peter MaloneTed Unangst
2014-05-05Delete duplicated "mppe" entry in keywords[].YASUOKA Masahiko
2014-04-18Do not set RTF_DONE flag on route message, only the kernel is allowed toClaudio Jeker
set that to indicate that it processed the message. Also de-#ifdef the RTF_MASK part, OpenBSD is not that archaic. OK yasuoka@ long time ago
2014-04-16sync with iked chap_ms.cJonathan Gray
2014-03-22Now tunnel can have multiple listen addresses.YASUOKA Masahiko
2014-03-22Reimplement control part of npppd(8) with imsg. Also add "monitor"YASUOKA Masahiko
command for npppctl(8) to monitor PPP session start/stop events.
2014-03-22Add an assert not to call radius_cancel_request() on callback. If theYASUOKA Masahiko
assert is disabled by compile time, the function returns immediatly on that condition.
2014-03-22Fixed a bug in npppd_auth_get_user() which caused segmentation faults afterYASUOKA Masahiko
a user authentication is succeeded in case the authentication config option has `username-suffix' and 'strip-atmark-realm' is yes. Delete `username-prefix' from authentication setting. This config option was mis-leading and useless.
2014-03-22In RADIUS accounting, realm_framed_ip_address was mistakenly used forYASUOKA Masahiko
Framed-IP-Address. acct_framed_ip_address should be used for that purpose.
2014-03-22Don't stop listening 1723/tcp when accept() is failed.YASUOKA Masahiko
2014-03-22Stop output "Stopped" log message of the tunnel protocols.YASUOKA Masahiko
2014-03-16lint is dead (long live the lint!), so stop using it as a cpp conditionalPhilip Guenther
(namespace pollution!) or talking about its opinion on code. ok krw@
2013-11-25use u_char for buffers in yylex, for ctype callsSebastian Benoit
found by millert@, ok deraadt@
2013-09-20Don't assume the length of chap challenges.YASUOKA Masahiko
2013-09-20Add length check for Proxy LCP and Authentication AVPs.YASUOKA Masahiko
2013-09-13fix some gcc warningsYASUOKA Masahiko
2013-09-11some npppd.conf(5) should be npppd(8).YASUOKA Masahiko
2013-08-26replace rand(3)/random(3) calls with secure arc4random*()Christian Weisgerber
npppd ok yasuoka@ ok millert@
2013-08-24Extraneous local variable with useless increment applied.Mike Larkin
found by Maxime Villard
2013-08-12Clarify what "mru" config option does.YASUOKA Masahiko
input and ok giovanni jmc
2013-06-03Stop doing pipex ioctl if no tunnel interface is configured.YASUOKA Masahiko
2013-04-26fix typo in comment; OK yasuoka@Gleydson Soares
2013-04-20Don't use random() because it's not safe. Use arc4random() instead ofYASUOKA Masahiko
it. Suggested by deraadt.
2013-04-20PPPoE server was broken since last configuration rework. CallingYASUOKA Masahiko
pppoed_init() was accidentally deleted. Revert it in npppd_init() and rearrange l2tpd_init() and pptpd_init() to the same place. ok todd
2013-04-16Fix some AVPs of SCCRP to comply RFC 2661.YASUOKA Masahiko
- Firmware revision and vendor name AVP are not mandatory. - Hostname AVP must have 1 octect at least.
2013-04-16Fixed `max-session' and `user-max-session'. They has been broken by theYASUOKA Masahiko
configuration reworking.
2013-04-16Existing authentication realms are removed mistakenly whenYASUOKA Masahiko
the configuration is reloaded.
2013-04-16Configuration option `strip-nt-domain' and `strip-atmark-realm' didn'tYASUOKA Masahiko
work since the parser mistakenly treated them as `eap-capable' option. Pointed out by markus