eap-radius: Forward Cisco and Microsoft specific DNS/NBNS attributes

Fixes #677.

diff --git a/src/libcharon/plugins/eap_radius/eap_radius.c b/src/libcharon/plugins/eap_radius/eap_radius.c
index 6719497d3be8cf3d4c0554cac477d2563c84cfbd..60d12dc1d312b52c56ef80f1292206bba0890ae0 100644 (file)
--- a/src/libcharon/plugins/eap_radius/eap_radius.c
+++ b/src/libcharon/plugins/eap_radius/eap_radius.c
@@ -413,6 +413,30 @@ static void add_unity_attribute(eap_radius_provider_t *provider, u_int32_t id,
        }
 }
 
+/**
+ * Add a DNS/NBNS configuration attribute
+ */
+static void add_nameserver_attribute(eap_radius_provider_t *provider,
+                                                                        u_int32_t id, int type, chunk_t data)
+{
+       /* these are from different vendors, but there is currently no conflict */
+       switch (type)
+       {
+               case  5: /* CVPN3000-Primary-DNS */
+               case  6: /* CVPN3000-Secondary-DNS */
+               case 28: /* MS-Primary-DNS-Server */
+               case 29: /* MS-Secondary-DNS-Server */
+                       provider->add_attribute(provider, id, INTERNAL_IP4_DNS, data);
+                       break;
+               case  7: /* CVPN3000-Primary-WINS */
+               case  8: /* CVPN3000-Secondary-WINS */
+               case 30: /* MS-Primary-NBNS-Server */
+               case 31: /* MS-Secondary-NBNS-Server */
+                       provider->add_attribute(provider, id, INTERNAL_IP4_NBNS, data);
+                       break;
+       }
+}
+
 /**
  * Add a UNITY_LOCAL_LAN or UNITY_SPLIT_INCLUDE attribute
  */
@@ -515,6 +539,16 @@ static void process_cfg_attributes(radius_message_t *msg)
                        {
                                switch (type)
                                {
+                                       case  5: /* CVPN3000-Primary-DNS */
+                                       case  6: /* CVPN3000-Secondary-DNS */
+                                       case  7: /* CVPN3000-Primary-WINS */
+                                       case  8: /* CVPN3000-Secondary-WINS */
+                                               if (data.len == 4)
+                                               {
+                                                       add_nameserver_attribute(provider,
+                                                                       ike_sa->get_unique_id(ike_sa), type, data);
+                                               }
+                                               break;
                                        case 15: /* CVPN3000-IPSec-Banner1 */
                                        case 28: /* CVPN3000-IPSec-Default-Domain */
                                        case 29: /* CVPN3000-IPSec-Split-DNS-Names */
@@ -546,6 +580,22 @@ static void process_cfg_attributes(radius_message_t *msg)
                                                break;
                                }
                        }
+                       if (vendor == PEN_MICROSOFT)
+                       {
+                               switch (type)
+                               {
+                                       case 28: /* MS-Primary-DNS-Server */
+                                       case 29: /* MS-Secondary-DNS-Server */
+                                       case 30: /* MS-Primary-NBNS-Server */
+                                       case 31: /* MS-Secondary-NBNS-Server */
+                                               if (data.len == 4)
+                                               {
+                                                       add_nameserver_attribute(provider,
+                                                                       ike_sa->get_unique_id(ike_sa), type, data);
+                                               }
+                                               break;
+                               }
+                       }
                }
                enumerator->destroy(enumerator);