diff options
| author | Martin Willi <martin@revosec.ch> | 2012-04-02 13:58:21 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2012-04-02 13:58:21 +0200 |
| commit | 4bc7577db2eb45c20d7714979c17a06a48721f75 (patch) | |
| tree | 9339913edb674d78bcde73268c5b9eb0f7759407 /NEWS | |
| parent | 0293f0959711c5241a0ec4d91706cad009982ced (diff) | |
| download | strongswan-4bc7577db2eb45c20d7714979c17a06a48721f75.tar.bz2 strongswan-4bc7577db2eb45c20d7714979c17a06a48721f75.tar.xz | |
More detailed NEWS about RADIUS extensions
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 11 |
1 files changed, 9 insertions, 2 deletions
@@ -4,8 +4,15 @@ strongswan-4.6.3 - The tnc-pdp plugin implements a RADIUS server interface allowing a strongSwan TNC server to act as a Policy Decision Point. -- Added infrastructure to listen to RADIUS Dynamic Authorization - Extension requests. +- The eap-radius authentication backend enforces Session-Timeout attributes + using RFC4478 repeated authentication and acts upon RADIUS Dynamic + Authorization extensions, RFC 5176. Currently supported are disconnect + requests and CoA messages containing a Session-Timeout. + +- The eap-radius plugin can forward arbitrary RADIUS attributes from and to + clients using custom IKEv2 notify payloads. The new radattr plugin reads + attributes to include from files and prints received attributes to the + console. - Added support for untruncated MD5 and SHA1 HMACs in ESP as used in RFC 4595. |