Feature #4234
open
allow for strict user <> cn validation of mobile ipsec users when using rsa+xauth
Added by Pi Ba almost 10 years ago.
Updated almost 8 years ago.
Description
Allow for strict user <> cn validation of mobile ipsec users when using rsa+xauth
It seems the gui setting is missing, but the background code is already in place to allow this.
- Target version changed from 2.2 to 2.2.1
- Target version changed from 2.2.1 to 2.2.2
- Target version changed from 2.2.2 to 2.2.3
- Target version changed from 2.2.3 to 2.3
- Assignee set to Matthew Smith
- Assignee changed from Matthew Smith to Marc Dye
- Status changed from New to Assigned
- Target version changed from 2.3 to Future
The backend code that exists in /etc/inc/ipsec.auth-user.php is not actually something that can be used. It looks like that code is very closely modeled after code in the openvpn.auth-user.php script. OpenVPN passes the common name in as an environment variable when it calls an auth script. Strongswan doesn't do this so the code won't work.
- Assignee deleted (
Marc Dye)
Also available in: Atom
PDF
Updated by 
Updated by 
Updated by 
Updated by