diff options
| author | Martin Willi <martin@revosec.ch> | 2014-10-06 18:31:14 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2014-10-06 18:31:14 +0200 |
| commit | 7d3c58a511ae6825353020571b8cdaa45238fa6c (patch) | |
| tree | 1657a6d3b8290c8e058f142655a395ae40ad5beb /conf/plugins | |
| parent | 100c1a4bf1f59414af8a1bfb6acb14b1a98e3349 (diff) | |
| parent | 9180c921e85a4a55e0ba487d6a0751b127de3471 (diff) | |
| download | strongswan-5.2.1dr1.tar.bz2 strongswan-5.2.1dr1.tar.xz | |
Merge branch 'ext-auth'5.2.1dr1
Integrates the ext-auth plugin by Vyronas Tsingaras. The new child process
abstraction simplifies implementation in both the new ext-auth and the existing
updown plugin, and makes them available on the Windows platform.
Diffstat (limited to 'conf/plugins')
| -rw-r--r-- | conf/plugins/ext-auth.opt | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/conf/plugins/ext-auth.opt b/conf/plugins/ext-auth.opt new file mode 100644 index 000000000..bf127b9d7 --- /dev/null +++ b/conf/plugins/ext-auth.opt @@ -0,0 +1,15 @@ +charon.plugins.ext-auth.script = + Shell script to invoke for peer authorization. + + Command to pass to the system shell for peer authorization. Authorization + is considered successful if the command executes normally with an exit code + of zero. For all other exit codes IKE_SA authorization is rejected. + + The following environment variables get passed to the script: + _IKE_UNIQUE_ID_: The IKE_SA numerical unique identifier. + _IKE_NAME_: The peer configuration connection name. + _IKE_LOCAL_HOST_: Local IKE IP address. + _IKE_REMOTE_HOST_: Remote IKE IP address. + _IKE_LOCAL_ID_: Local IKE identity. + _IKE_REMOTE_ID_: Remote IKE identity. + _IKE_REMOTE_EAP_ID_: Remote EAP or XAuth identity, if used. |