lucaspalomodevelop/core
1
0
Fork 0
mirror of https://github.com/lucaspalomodevelop/core.git synced 2026-03-18 10:35:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

ipsec: align with OpenVPN in group enforcement #1748

Browse Source
This commit is contained in:
Franco Fichtner 2017-07-30 17:53:24 +02:00
parent 76bdebe293
commit 535cb2cfbc
2 changed files with 0 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/etc/inc/plugins.inc.d/ipsec/auth-user.php
View File

@ -59,7 +59,6 @@ if (empty($config['ipsec']['client']['enable'])) {
}
$authenticated = false;
$priv_fallback = true;
if (!empty($config['ipsec']['client']['local_group'])) {
if (!in_array($config['ipsec']['client']['local_group'], getUserGroups($username))) {
@ -67,8 +66,6 @@ if (!empty($config['ipsec']['client']['local_group'])) {
closelog();
exit(1);
}
$priv_fallback = false;
}
$user_source = '';
@ -86,14 +83,6 @@ foreach (explode(',', $user_source) as $authmode) {
$authenticated = authenticate_user($username, $password, $authcfg);
if ($authenticated == true) {
if ($priv_fallback && stristr($authmode, "local")) {
$user = getUserEntry($username);
if (!is_array($user) || !userHasPrivilege($user, "user-ipsec-xauth-dialin")) {
$authenticated = false;
syslog(LOG_WARNING, "User '{$username}' cannot authenticate through IPsec since the required privileges are missing.\n");
continue;
}
}
break;
}
}

3
src/opnsense/mvc/app/models/OPNsense/Core/ACL/ACL.xml
View File

@ -5,9 +5,6 @@
<user-shell-access>
<name>System: Shell account access</name>
</user-shell-access>
<user-ipsec-xauth-dialin>
<name>VPN: IPsec XAUTH dialin</name>
</user-ipsec-xauth-dialin>
<user-proxy-auth>
<name>Proxy: Login</name>
</user-proxy-auth>