summaryrefslogtreecommitdiff
path: root/usr.sbin/npppd
AgeCommit message (Collapse)Author
2012-07-08Increase maximum number of tun interfaces to 8.giovanni
ok yasuoka@
2012-06-05don't use `reigai' that means `exception' in Japanese as labels.YASUOKA Masahiko
no binary change. from Michael W. Bombardieri
2012-05-08Delete rtev* that was to work around routing socket overflows.YASUOKA Masahiko
This was forgotten on the prior commit.
2012-05-08Fix a null reference bug on terminating the process.YASUOKA Masahiko
seems ok henning, ok mcbride
2012-05-08Result-Code AVP of StopCCN was not parsed properly.YASUOKA Masahiko
seems ok henning, ok mcbride
2012-05-08Ignore NAK of authentication protocol option on LCP that was notYASUOKA Masahiko
requested. ok mcbride henning
2012-05-08Fix double free bug in PAP with radius authentication.YASUOKA Masahiko
(found by yus at iij) ok mcbride henning
2012-05-08Ignore ACCM option on LCP. This was required by some LAC that usesYASUOKA Masahiko
the option in proxied LCP. ok mcbride henning
2012-05-08Trivial changes from the upstream(IIJ).YASUOKA Masahiko
- fix styles, compile errors in some ifdef condition and compiler warnings. - delete rtev* that was to work around routing socket overflows. - delete is_ctrl argument from l2tp_ctrl_send_packet(). It's not used. - tweak returning the exit status. - use IPV6_IPSEC_POLICY for IPv6 socket. (though npppd cannot set up a ipsec policy to the socket yet.) ok mcbride henning
2012-05-08Fix comments and styles. Delete unused variables and labels.YASUOKA Masahiko
No binary changes. ok mcbride henning
2012-02-24Correct the spelling of "transferred" and "transferring"Philip Guenthe
from Tobias Ulmer (tobiasu at tmux.org); ok jmc@, krw@
2012-01-23Add handling of `rx connect speed' avp to avoid the bug of xl2tpd.YASUOKA Masahiko
Reported and tested by sebastia@ ok sthen sebastia giovanni
2012-01-23The ingress filter of pipex and npppd become configurable and disabledYASUOKA Masahiko
by default. After this change we need to add ppp.ingress_filter: true to npppd.conf if it is needed. ok sthen
2012-01-18npppdctl related files should be removed. Added a mention about that.YASUOKA Masahiko
2012-01-18Replace npppdctl(8) by new npppctl(8). npppctl was written fromYASUOKA Masahiko
scratch, it uses parser.c derived from ikectl(8) to have OpenBSD's fashion. This includes related changes listed below: - changed npppd control IPC heavyly. - support IPv6 as tunnel source address. - deleted support changing the configuration of npppd_ctl on running. Because it is not so needed but it requires privilege operations. - refactors. man page helps from jmc. tested by sebastia. ok deraadt sebastia sthen
2012-01-18Fix compiler warnings and some styles.YASUOKA Masahiko
ok sebastia sthen
2012-01-06mkdir needs -m to set the modeSebastian Reitenbach
OK yasuoka@
2011-12-24formatting errors, found using freebsd's "igor";Jason McIntyre
2011-10-28use existing _ppp instead of _npppd as a user/group id for npppd.YASUOKA Masahiko
ok deraadt@ henning@
2011-10-15Added "provision for rewound PPP frames" that allows receivingYASUOKA Masahiko
reorder packets to pass to the upper layer without reorder. It will improve performance (throughput or loss rate) for PPTP or L2TP(/IPesc) on networks that latency is unstable such as mobile network. As our test environment (bandwidth: 6Mbps, latency: 50ms for 97% of traffic and 52ms for rest of traffic), throughput has changed from 0.76MB to 2.17MB on file upload by PPTP connected Windows Vista ftp.exe. Developed by UMEZAWA Takeshi at IIJ. ok jmatthew@ tested jmatthew@ and myself.
2011-07-08Include PIPEX in kernel by default. And add new sysctl variableYASUOKA Masahiko
`net.pipex.enable' to enable PIPEX. By default, pipex is disabled and it will not process packets from wire. Update man pages and update HOWTO_PIPEX_NPPPD.txt for testers. discussed with dlg@, ok deraadt@ mcbride@ claudio@
2011-07-08Improved npppd privileged separations:YASUOKA Masahiko
- Changed finalizing way to the privileged process. In old way, the privileged process could not aware abnormal exit of the process in jail. Then the processes in jail remained as zombies. Created a pipe to monitor the privileged process, the privileged process can exit in peace by using the pipe. - npppd will exit abnormally when the privileged process exits abnormally. - PF_KEY socket requires privileges. - Return correct "errno" to the jail in priv_open(). - Cleanup. ok hsuenaga@
2011-07-06I forgot to delete files on my previous commit. sorry.YASUOKA Masahiko
2011-07-06Add RADIUS accounting support and some authentication related changes:YASUOKA Masahiko
- Add functions to radius+.c that are required to implement RADIUS accounting. - Send RADIUS Account-Start and Account-Stop messages with attributes that are defined by RFC 2866, 2868, 2869. - If any authentication realm is deleted from the configuration, npppd may exit by segmentation fault. - Delete radius_common.c, radius_common.h and eap.c because they are not used. - Retransmission and failover are reimplemented. - Cleanup
2011-07-05Fixed some bugs of priv_send(). The bugs caused sending routing messagesYASUOKA Masahiko
failures. 'errno' returned by the privileged process was not initialized. 'tolen' in priv_sendto() was garbage. ok hsuenaga@
2011-05-15disable pipex for L2TP on disconnect, too; yasuoka@ agrees.Markus Friedl
2011-04-02add support for pppx interfaces instead of tun interfaces.David Gwynne
pppx mode will create a pppx interface for each ppp session in the kernel, and will rely on the kernel to handle the routing rather than doing it itself. as a bonus it will configure the interfaces description with the username of the person connecting (which makes systat if pretty). ok claudio@ yasuoka@ as part of a larger diff from jonathan matthew weve been running all this in production for a month now..
2011-03-16spelling.Okan Demirmen
ok yasuoka@
2011-03-16use timerclear macro. while here, fix spelling.Okan Demirmen
ok yasuoka@
2011-02-28fix a buffer overflow in the pppoe receive packet handling.David Gwynne
diff from yasuoka@ ok deraadt@
2011-01-20- tyop, recieve -> receiveJasper Lievisse Adriaanse
ok sthen@
2010-09-27IP_PIPEX mistakenly was applied to the 1723/tcp socket. Apply the optionYASUOKA Masahiko
to the gre socket.
2010-09-26correct the path of npppd, and use modp1024 on the sample ipsec.confYASUOKA Masahiko
because iPhone doesn't support modp2048.
2010-09-24Add support pipex for L2TP call and L2TP on IPv6.YASUOKA Masahiko
- pipex requires unique session-id in protocol, so session-id generation algorithm has been changed. - change to fit the new PIPEX ioctl. ok dlg@
2010-09-24npppd didn't setup a PIPEX session if MPPE is not required by config andYASUOKA Masahiko
CCP is failed to be opened because the peer doesn't support MPPE. Fixed to setup a PIPEX on such case.
2010-09-23Add the same license text to these files as the rest of npppd.Jonathan Gray
ok yasuoka@
2010-09-23remove support for talking to the zebra routing socket whichJonathan Gray
was not enabled, we use a kernel routing socket for such things. ok yasuoka@ claudio@
2010-09-22unify MS-CHAP implementation to sbin/iked/chap_ms.[ch].YASUOKA Masahiko
copy sbin/iked/chap_ms.[ch] and fixed chap.c and eap.c to compile with it.
2010-09-22make the arguments match the format string in usageJonathan Gray
ok yasuoka@
2010-09-20Update instructions for testing npppd and pipex. The instructions wasYASUOKA Masahiko
out-of-date-ed after my privilege separation work at n2k10.
2010-08-02Fix use of logical and where binary and was intended.Jonathan Gray
Spotted by Mike Belopuhov, ok yasuoka@
2010-07-31delete IIJ local functionalities.YASUOKA Masahiko
2010-07-20opration -> operationMiod Vallat
2010-07-02add $OpenBSD$ and remove trailing space. no functional change.YASUOKA Masahiko
2010-07-02fix mistakes that have been created by my porting to OpenBSD.YASUOKA Masahiko
- delete a change only for debug - add missing 'else'
2010-07-01add man page of npppdctl.YASUOKA Masahiko
(this should be included in my previous commit)
2010-07-01Translate Japanese comments or labels into English. Translation wasYASUOKA Masahiko
done by IIJ people (MATSUI Yoshihiro, SAITOH Masanobu, Tomoyuki Sahara), yuo@ and myself. This diff also includes - delete part of useless comments, correct spelling. - add man page of npppdctl. There is no functional change.
2010-05-12Remove the tiny bit of C++ that is not realy needed so that we get a pureClaudio Jeker
C application. OK yasuoka@, reyk@
2010-01-31add HOWTO_PIPEX_NPPPD.txt for people who try to use pipex and npppd beforeYASUOKA Masahiko
everything is done.
2010-01-31privilege separation of npppd.YASUOKA Masahiko
- Drop privilege after daemon initializing. - Some system calls that requires root privileges were replaced to wrapper functions that communicate with a separated privileged process via IPC. And the privileged process checks whether the operations are acceptable.
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-30 23:01:47 +0000