summaryrefslogtreecommitdiffstats
path: root/etc/inc
diff options
context:
space:
mode:
authorjim-p <jim@pingle.org>2009-05-12 16:29:10 -0400
committerjim-p <jim@pingle.org>2009-05-12 16:29:10 -0400
commit71569a7e8498439750fa5b2fc33001de712b3805 (patch)
tree3d7aeb29e035494739eb59f476faa255fe025794 /etc/inc
parent673e587db9f14bcd8e7ffd5e772db5bc72b0e0e7 (diff)
downloadpfsense-71569a7e8498439750fa5b2fc33001de712b3805.zip
pfsense-71569a7e8498439750fa5b2fc33001de712b3805.tar.gz
Fix PPTP+RADIUS. See ticket #1926.
Diffstat (limited to 'etc/inc')
-rw-r--r--etc/inc/vpn.inc17
1 files changed, 13 insertions, 4 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index 5f4cad2..365d376 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -968,7 +968,7 @@ EOD;
$clientip = long2ip(ip2long($pptpdcfg['remoteip']) + $i);
- if(isset($pptpdcfg['radius']['radiusissueips']) && isset($pptpdcfg['radius']['enable'])) {
+ if(isset($pptpdcfg['radius']['radiusissueips']) && isset($pptpdcfg['radius']['server']['enable'])) {
$isssue_ip_type = "set ipcp ranges {$pptpdcfg['localip']}/32 0.0.0.0/0";
} else {
$isssue_ip_type = "set ipcp ranges {$pptpdcfg['localip']}/32 {$clientip}/32";
@@ -1031,11 +1031,20 @@ EOD;
$mpdconf .= " set ipcp dns " . join(" ", $syscfg['dnsserver']) . "\n";
}
- if (isset ($pptpdcfg['radius']['enable'])) {
- $authport = isset($pptpdcfg['radius']['port']) ? $pptpdcfg['radius']['port'] : 1812;
+ if (isset ($pptpdcfg['radius']['server']['enable'])) {
+ $authport = (isset($pptpdcfg['radius']['server']['port']) && strlen($pptpdcfg['radius']['server']['port']) > 1) ? $pptpdcfg['radius']['server']['port'] : 1812;
$acctport = $authport + 1;
$mpdconf .=<<<EOD
- set radius server {$pptpdcfg['radius']['server']} "{$pptpdcfg['radius']['secret']}" {$authport} {$acctport}
+ set radius server {$pptpdcfg['radius']['server']['ip']} "{$pptpdcfg['radius']['server']['secret']}" {$authport} {$acctport}
+EOD;
+ if (isset ($pptpdcfg['radius']['server2']['enable'])) {
+ $authport = (isset($pptpdcfg['radius']['server2']['port']) && strlen($pptpdcfg['radius']['server2']['port']) > 1) ? $pptpdcfg['radius']['server2']['port'] : 1812;
+ $acctport = $authport + 1;
+ $mpdconf .=<<<EOD
+ set radius server {$pptpdcfg['radius']['server2']['ip']} "{$pptpdcfg['radius']['server2']['secret']}" {$authport} {$acctport}
+EOD;
+ }
+ $mpdconf .=<<<EOD
set radius retries 3
set radius timeout 10
set auth enable radius-auth
OpenPOWER on IntegriCloud