]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Avoid partial authentication state when using --disabled in CCD configs
authorDavid Sommerseth <davids@redhat.com>
Wed, 11 Nov 2015 13:01:39 +0000 (14:01 +0100)
committerGert Doering <gert@greenie.muc.de>
Tue, 24 Nov 2015 20:16:46 +0000 (21:16 +0100)
commit6c2d790ad8f10029e95aecb0d39377ef06ea8b2a
treeece9c3805a46081171b7640d282eca26e5bcc5a5
parentcef57449b98c38deb35e885bd8958fe09f6a2b02
Avoid partial authentication state when using --disabled in CCD configs

If an openvpn server is configured with --client-config-dir and a client
configuration file contains 'disabled', it is supposed to tell the client
it is not authorized to use the service.

This patch will ensure that the internal state in this scenario is a
complete CAS_FAILED state, and not CAS_PARTIAL if other authorization
steps passed.

Trac: #521
Tested-by: Eric Crist <ecrist@secure-computing.net>
Signed-off-by: David Sommerseth <davids@redhat.com>
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <1447246899-22769-1-git-send-email-openvpn@sf.lists.topphemmelig.net>
URL: http://article.gmane.org/gmane.network.openvpn.devel/10486
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/multi.c