diff options
author | Tobias Brunner <tobias@strongswan.org> | 2015-11-12 14:22:28 +0100 |
---|---|---|
committer | Tobias Brunner <tobias@strongswan.org> | 2015-11-12 14:22:28 +0100 |
commit | d801fedb19e6373d0ca841d43da1c2acef489793 (patch) | |
tree | c010a03f3ae558a65bf6dbaa73ae7d8ef50a50e5 /scripts/bin2sql.c | |
parent | 3af7e0927166b1f9db9acd1c13fa3fda043870ef (diff) | |
parent | 1d4b76727550bbedcc5d5f75580561b57cfbbe6e (diff) | |
download | strongswan-d801fedb19e6373d0ca841d43da1c2acef489793.tar.bz2 strongswan-d801fedb19e6373d0ca841d43da1c2acef489793.tar.xz |
Merge branch 'eap-mschapv2-eap-identity'
This replaces the EAP-Identity with the EAP-MSCHAPv2 username, which
ensures the client is known with an authenticated identity. Previously
a client with a valid username could use a different identity (e.g. the
name of a different user) in the EAP-Identity exchange. Since we use
the EAP-Identity for uniqueness checks etc. this could be problematic.
The EAP-MSCHAPv2 username is now explicitly logged if it is different
from the EAP-Identity (or IKE identity).
Fixes #1182.
Diffstat (limited to 'scripts/bin2sql.c')
0 files changed, 0 insertions, 0 deletions