Project

General

Profile

Issue #3129

how catch all IKE AUTH req. in strongswan IKE Deamon charon of server side .

Added by Bhushan Patil 6 months ago. Updated 4 months ago.

Status:
Closed
Priority:
Normal
Category:
libcharon
Affected version:
5.8.0
Resolution:
No feedback

Description

Hello All,

we are using strongswan VPN lib ,Linux strongSwan U5.8.0/K4.4.0-154-generic , and
in that code we trying to catch all IKE AUTH request from client [charon-cmd ] and
forword to the External AAA server . So Where we can catch all IKE AUTH request
in code , and How and where can we put my own hook in the code for catch IKE AUTH.
request.

Is it possible to Add my own hook in strongswan code for catch all IKE AUTH request from client?.

Thanks

History

#1 Updated by Andreas Steffen 6 months ago

  • Status changed from New to Feedback
  • Assignee set to Andreas Steffen

Hi, you could model your plugin after the existing ext-auth plugin which creates a listener subscribing to the IKE_SA authorization hook:

https://wiki.strongswan.org/projects/strongswan/repository/revisions/master/show/src/libcharon/plugins/ext_auth

#2 Updated by Tobias Brunner 6 months ago

  • Description updated (diff)
  • Priority changed from Urgent to Normal

#3 Updated by Tobias Brunner 4 months ago

  • Category set to libcharon
  • Status changed from Feedback to Closed
  • Resolution set to No feedback

Also available in: Atom PDF