eurephia.git/plugin, branch release/1.1

plugin: Don't treat not found sessions in eurephinalearn_address() as a failure

2015-01-08T19:26:13+00:00

This function is called also with IP adresses from networks behind clients, and
eurephia doesn't really need to process them.

Signed-off-by: David Sommerseth 
(cherry picked from commit 31193a9d4f764bd54e00fc9e277c98319f198acd)

plugin: Improved logging of not found addresses in eurephia_learn_address

2015-01-08T14:16:44+00:00

If routing subnets over the VPN tunnel, OpenVPN will learn addresses
inside these subnets.  As these IP addresses are not directly connected
to a eurephia session, these errors can be silenced in normal operation.
So this logging was moved to DEBUG().

Signed-off-by: David Sommerseth 
(cherry picked from commit 0628a765e4ecdf44a966b9a3fd6717aca9b9d09f)

Correct ugly boundary checks in database init

2014-12-05T15:02:10+00:00

The check if dbargc exceeds MAX_ARGUMENTS was done _after_ it was checked
if the array element is NULL.  This was not the intention.

Signed-off-by: David Sommerseth 
(cherry picked from commit 51f8c8e930221cc5feeac4f84be5550b4e5be9dd)

eurephia-auth: Fixed a double-free situation with dev-type is not obvious

2012-10-11T00:06:51+00:00

If OpenVPN is configured with a unkown --dev name and --dev-type is used,
eurephia would in some specific situations double-free a memory region
keeping the dev-type information.  GETENV_*() functions returns a pointer
to a buffer which is supposed to be free'd, but pointers returned by
eGet_value() should not be free'd.

And in the error situation if dev-type is not forced or detected, the
memory allocated by GETENV_DEVNAME() was not properly free'd.

Signed-off-by: David Sommerseth 
(cherry picked from commit 00bd0ac4cc901004aeaf4548813bb465bce5243f)

Updated copyright dates

2012-10-08T00:18:14+00:00

Signed-off-by: David Sommerseth

Fix bug with TUN mode disconnects being logged wrongly.

2012-09-13T15:59:40+00:00

This fixes a bug which appeared with newer OpenVPN versions, where
the OPENVPN_PLUGIN_LEARN_ADDRESS would be called in the end - also
in tun mode.  And with the clean-up in session seed, in regards to
the netmask not being part of the session seed, this little code
made things worse.  So lets get rid of it!

Signed-off-by: David Sommerseth

Added a new database driver function: eDBregister_vpnclientaddr()

2012-09-13T15:48:30+00:00

This function replaces eDBregister_vpnmacaddr().  This new function
will in addition to the MAC address (if OpenVPN is running in TAP mode)
also register the client's IPv4 VPN address.  It's also prepared for
logging the client's IPv6 VPN address.

This function supports both TUN and TAP mode, while the old function
only handled TAP mode.

Signed-off-by: David Sommerseth

Remove VPN IP netmask from session seed

2012-09-13T15:38:38+00:00

This is sometimes NULL, which is noticed more often when OpenVPN is
configured in tun mode.  This makes it difficult to identify the
proper session key, as the seed isn't consistent.

It does not affect much in regarding to the seed itself, as the
netmask is most likely going to be the same for all clients anyhow.

Signed-off-by: David Sommerseth

eurephia-auth: eurephiaInit() may not always return a context

2012-01-05T18:53:19+00:00

Check if we have a context available before setting ctx->tuntype.

Signed-off-by: David Sommerseth

Do not link in libdl explicitly

2010-12-31T16:59:54+00:00

The functions related to dynamic loading of shared objects are a part
of the standard libc library on FreeBSD, while in Linux it is in libdl.
However, the linker on Linux seems to add the libdl linking automatically
when needed, so no need to explicitly link this library.

Signed-off-by: David Sommerseth