Project

General

Profile

Issue #3129

how catch all IKE AUTH req. in strongswan IKE Deamon charon of server side .

Added by Bhushan Patil about 1 month ago. Updated 13 days ago.

Status:
Feedback
Priority:
Normal
Category:
-
Affected version:
5.8.0
Resolution:

Description

Hello All,

we are using strongswan VPN lib ,Linux strongSwan U5.8.0/K4.4.0-154-generic , and
in that code we trying to catch all IKE AUTH request from client [charon-cmd ] and
forword to the External AAA server . So Where we can catch all IKE AUTH request
in code , and How and where can we put my own hook in the code for catch IKE AUTH.
request.

Is it possible to Add my own hook in strongswan code for catch all IKE AUTH request from client?.

Thanks

History

#1 Updated by Andreas Steffen 26 days ago

  • Status changed from New to Feedback
  • Assignee set to Andreas Steffen

Hi, you could model your plugin after the existing ext-auth plugin which creates a listener subscribing to the IKE_SA authorization hook:

https://wiki.strongswan.org/projects/strongswan/repository/revisions/master/show/src/libcharon/plugins/ext_auth

#2 Updated by Tobias Brunner 13 days ago

  • Description updated (diff)
  • Priority changed from Urgent to Normal

Also available in: Atom PDF