Project

General

Profile

Actions
Copy link

Feature #4234

open

allow for strict user <> cn validation of mobile ipsec users when using rsa+xauth

Added by Pi Ba over 7 years ago. Updated over 5 years ago.

Status:
Assigned
Priority:
Low
Assignee:
-
Category:
IPsec
Target version:
Future
Start date:
01/18/2015
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:

Description

Allow for strict user <> cn validation of mobile ipsec users when using rsa+xauth
It seems the gui setting is missing, but the background code is already in place to allow this.

Actions
Copy link
 #1

Updated by Renato Botelho over 7 years ago

  • Target version changed from 2.2 to 2.2.1

Push it to 2.2.1

Actions
Copy link
 #2

Updated by Chris Buechler over 7 years ago

  • Target version changed from 2.2.1 to 2.2.2
Actions
Copy link
 #3

Updated by Chris Buechler about 7 years ago

  • Target version changed from 2.2.2 to 2.2.3
Actions
Copy link
 #4

Updated by Chris Buechler almost 7 years ago

  • Target version changed from 2.2.3 to 2.3
Actions
Copy link
 #5

Updated by Jim Thompson over 6 years ago

  • Assignee set to Matthew Smith
Actions
Copy link
 #6

Updated by Jim Thompson over 6 years ago

  • Assignee changed from Matthew Smith to Marc Dye
Actions
Copy link
 #7

Updated by Jim Thompson over 6 years ago

  • Status changed from New to Assigned
Actions
Copy link
 #8

Updated by Matthew Smith about 6 years ago

  • Target version changed from 2.3 to Future

The backend code that exists in /etc/inc/ipsec.auth-user.php is not actually something that can be used. It looks like that code is very closely modeled after code in the openvpn.auth-user.php script. OpenVPN passes the common name in as an environment variable when it calls an auth script. Strongswan doesn't do this so the code won't work.

Actions
Copy link
 #9

Updated by Renato Botelho over 5 years ago

  • Assignee deleted (Marc Dye)
Actions
Copy link

Also available in: Atom PDF