diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2012-10-16 16:39:49 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2012-10-18 14:48:11 +0200 |
| commit | d2c8bc4df0eb8bb2ed5e3f70bbcb334f90591a23 (patch) | |
| tree | ae27128dfcaca3a47fe6b4859439ca7fe5dcedcb /src/libcharon/plugins/eap_radius/eap_radius.c | |
| parent | a5436657e977e8157d7e79f390ec6081f00c1bce (diff) | |
| download | strongswan-d2c8bc4df0eb8bb2ed5e3f70bbcb334f90591a23.tar.bz2 strongswan-d2c8bc4df0eb8bb2ed5e3f70bbcb334f90591a23.tar.xz | |
Handle type of first EAP-RADIUS response more sophisticated
Diffstat (limited to 'src/libcharon/plugins/eap_radius/eap_radius.c')
| -rw-r--r-- | src/libcharon/plugins/eap_radius/eap_radius.c | 21 |
1 files changed, 18 insertions, 3 deletions
diff --git a/src/libcharon/plugins/eap_radius/eap_radius.c b/src/libcharon/plugins/eap_radius/eap_radius.c index 870ed1fc0..6009d3a1f 100644 --- a/src/libcharon/plugins/eap_radius/eap_radius.c +++ b/src/libcharon/plugins/eap_radius/eap_radius.c @@ -181,9 +181,23 @@ METHOD(eap_method_t, initiate, status_t, if (response) { eap_radius_forward_to_ike(response); - if (radius2ike(this, response, out)) + switch (response->get_code(response)) { - status = NEED_MORE; + case RMC_ACCESS_CHALLENGE: + if (radius2ike(this, response, out)) + { + status = NEED_MORE; + } + break; + case RMC_ACCESS_ACCEPT: + /* Microsoft RADIUS servers can run in a mode where they respond + * like this on the first request (i.e. without authentication), + * we treat this as Access-Reject */ + case RMC_ACCESS_REJECT: + default: + DBG1(DBG_IKE, "RADIUS authentication of '%Y' failed", + this->peer); + break; } response->destroy(response); } @@ -365,7 +379,8 @@ METHOD(eap_method_t, process, status_t, break; case RMC_ACCESS_REJECT: default: - DBG1(DBG_IKE, "RADIUS authentication of '%Y' failed", this->peer); + DBG1(DBG_IKE, "RADIUS authentication of '%Y' failed", + this->peer); status = FAILED; break; } |