From bd55e739319266857e433d9715d4e5c370fcb562 Mon Sep 17 00:00:00 2001 From: linus Date: Wed, 31 Mar 2010 12:48:10 +0000 Subject: Add LoopPrevention per server (RADSECPROXY-1). TODO: Documentation and configuration example still missing. git-svn-id: https://svn.testnett.uninett.no/radsecproxy/trunk@544 e88ac4ed-0b26-0410-9574-a7f39faa03bf --- radsecproxy.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'radsecproxy.c') diff --git a/radsecproxy.c b/radsecproxy.c index 7a8b5e2..c058ac7 100644 --- a/radsecproxy.c +++ b/radsecproxy.c @@ -1492,7 +1492,9 @@ int radsrv(struct request *rq) { goto exit; } - if (options.loopprevention && !strcmp(from->conf->name, to->conf->name)) { + if ((to->conf->loopprevention == 1 + || (to->conf->loopprevention == UCHAR_MAX && options.loopprevention == 1)) + && !strcmp(from->conf->name, to->conf->name)) { debug(DBG_INFO, "radsrv: Loop prevented, not forwarding request from client %s (%s) to server %s, discarding", from->conf->name, addr2string(from->addr), to->conf->name); goto exit; @@ -2759,6 +2761,7 @@ int confserver_cb(struct gconffile **cf, void *arg, char *block, char *opt, char return 0; } memset(conf, 0, sizeof(struct clsrvconf)); + conf->loopprevention = UCHAR_MAX; /* Uninitialized. */ resconf = (struct clsrvconf *)arg; if (resconf) { conf->statusserver = resconf->statusserver; @@ -2784,6 +2787,7 @@ int confserver_cb(struct gconffile **cf, void *arg, char *block, char *opt, char "RetryInterval", CONF_LINT, &retryinterval, "RetryCount", CONF_LINT, &retrycount, "DynamicLookupCommand", CONF_STR, &conf->dynamiclookupcommand, + "LoopPrevention", CONF_BLN, &conf->loopprevention, NULL )) { debug(DBG_ERR, "configuration error"); -- cgit v1.2.3