NuauthConf

Files
file	nuauthconf.c
	Contain functions used to regenerate configuration and reload.
Data Structures
struct	nuauth_params
struct	nuauth_datas
Enumerations
enum	policy_refused_reason_t { PER_IP_TOO_MANY_LOGINS = 1, PER_USER_TOO_MANY_LOGINS }
enum	policy_t { POLICY_MULTIPLE_LOGIN = 0, POLICY_ONE_LOGIN, POLICY_PER_IP_ONE_LOGIN }
Functions
int	build_prenuauthconf (struct nuauth_params *prenuauthconf, char *gwsrv_addr, policy_t connect_policy)
int	init_nuauthconf (struct nuauth_params **result)
void	free_nuauth_params (struct nuauth_params *conf)
void	apply_new_config (struct nuauth_params *conf)
static gboolean	compare_nuauthparams (struct nuauth_params *current, struct nuauth_params *new)
gboolean	nuauth_reload (int signum)
Variables
nuauth_params *	nuauthconf
nuauth_datas *	nuauthdatas

---

Enumeration Type Documentation

enum policy_refused_reason_t

Policy rule, see tls_sasl_connect_ok()

Enumerator:

PER_IP_TOO_MANY_LOGINS
PER_USER_TOO_MANY_LOGINS

Definition at line 30 of file nuauth_params.h.

enum policy_t

Warning:

Deprecated. Do not use it !

Enumerator:

POLICY_MULTIPLE_LOGIN	Allow multiple login per IP (accept any connection) (default rule)
POLICY_ONE_LOGIN	Allow an user can only be connected once (test based on username)
POLICY_PER_IP_ONE_LOGIN	Allow only an user session per IP (test based on IP)

Definition at line 36 of file nuauth_params.h.

---

Function Documentation

void apply_new_config

(

struct nuauth_params *

conf

)

Definition at line 173 of file nuauthconf.c.

References nuauth_datas::acl_checkers, nuauth_params::do_ip_authentication, nuauth_params::log_users_sync, nuauth_params::nb_session_loggers, nuauth_params::nbacl_check, nuauth_params::nbipauth_check, nuauth_params::nbloggers, nuauth_params::nbuser_check, nuauthdatas, nuauth_datas::user_checkers, and nuauth_datas::user_loggers.

Referenced by nuauth_reload().

int build_prenuauthconf	(	struct nuauth_params *	prenuauthconf,
		char *	gwsrv_addr,
		policy_t	connect_policy
	)

Definition at line 33 of file nuauthconf.c.

References nuauth_params::authorized_servers, DEBUG_AREA_MAIN, generate_inaddr_list(), nuauth_params::hello_authentication, log_message, nuauth_params::nufw_has_conntrack, nuauth_params::nufw_has_fixed_timeout, POLICY_MULTIPLE_LOGIN, POLICY_ONE_LOGIN, POLICY_PER_IP_ONE_LOGIN, nuauth_params::push, nuauth_params::single_ip_client_limit, and nuauth_params::single_user_client_limit.

Referenced by configure_app(), and init_nuauthconf().

Here is the call graph for this function:

static gboolean compare_nuauthparams	(	struct nuauth_params *	current,
		struct nuauth_params *	new
	)			[static]

Definition at line 271 of file nuauthconf.c.

References nuauth_params::acl_cache, nuauth_params::authreq_port, nuauth_params::client_srv, DEBUG_AREA_MAIN, decisions_queue_work(), nuauth_datas::decisions_workers, nuauth_params::do_ip_authentication, FALSE, nuauth_params::hello_authentication, log_message, nuauth_params::log_users_sync, nuauth_params::nbloggers, nuauthconf, nuauthdatas, nuauth_params::nufw_has_conntrack, nuauth_params::nufw_srv, POOL_TYPE, nuauth_params::push, stop_thread_pool(), TRUE, nuauth_params::user_cache, and nuauth_params::userpckt_port.

Referenced by nuauth_reload().

Here is the call graph for this function:

void free_nuauth_params

(

struct nuauth_params *

conf

)

Definition at line 164 of file nuauthconf.c.

References nuauth_params::authorized_servers, nuauth_params::authreq_port, nuauth_params::configfile, destroy_periods(), nuauthconf, nuauth_params::periods, and nuauth_params::userpckt_port.

Referenced by nuauth_deinit(), and nuauth_reload().

Here is the call graph for this function:

int init_nuauthconf

(

struct nuauth_params **

result

)

Definition at line 75 of file nuauthconf.c.

References nuauth_params::acl_cache, AUTHREQ_CLIENT_LISTEN_ADDR, AUTHREQ_NUFW_LISTEN_ADDR, nuauth_params::authreq_port, AUTHREQ_PORT, build_prenuauthconf(), nuauth_params::client_srv, nuauth_params::datas_persistance, nuauth_params::debug_areas, debug_areas, nuauth_params::debug_level, debug_level, DEFAULT_DEBUG_AREAS, DEFAULT_DEBUG_LEVEL, DEFAULT_KRB5_SERVICE, DEFAULT_PROTO_WAIT_DELAY, nuauth_params::do_ip_authentication, nuauth_params::drop_if_no_logging, FALSE, GWSRV_ADDR, nuauth_params::hello_authentication, nuauth_params::krb5_hostname, nuauth_params::krb5_realm, nuauth_params::krb5_service, nuauth_params::log_users, nuauth_params::log_users_strict, nuauth_params::log_users_sync, nuauth_params::log_users_without_realm, nuauth_params::max_unassigned_messages, MAX_UNASSIGNED_MESSAGES, NB_ACLCHECK, nuauth_params::nb_auth_checkers, NB_AUTHCHECK, NB_LOGGERS, nuauth_params::nb_session_loggers, NB_USERCHECK, nuauth_params::nbacl_check, nuauth_params::nbipauth_check, nuauth_params::nbloggers, nuauth_params::nbuser_check, nuauth_params::nuauth_uses_fake_sasl, nubase_config_table_get(), nubase_config_table_get_or_default(), nubase_config_table_get_or_default_int(), nuauth_params::nufw_has_conntrack, nuauth_params::nufw_has_fixed_timeout, nuauth_params::nufw_srv, nuauth_params::packet_timeout, PACKET_TIMEOUT, POLICY_MULTIPLE_LOGIN, nuauth_params::prio_to_nok, nuauth_params::proto_wait_delay, nuauth_params::push, nuauth_params::push_delay, PUSH_DELAY, nuauth_params::reject_after_timeout, nuauth_params::reject_authenticated_drop, nuauth_params::session_duration, SESSION_DURATION, nuauth_params::single_ip_client_limit, nuauth_params::single_user_client_limit, str_itoa(), nuauth_params::user_cache, nuauth_params::userpckt_port, USERPCKT_PORT, and nuauth_params::uses_utf8.

Referenced by configure_app(), and nuauth_reload().

Here is the call graph for this function:

gboolean nuauth_reload

(

int

signum

)

exit function if a signal is received in daemon mode.

Argument: signal number Return: None

Definition at line 210 of file nuauthconf.c.

References nuauth_params::acl_cache, nuauth_datas::acl_cache, apply_new_config(), block_thread_pools(), cache_reset(), compare_nuauthparams(), nuauth_params::configfile, nuauth_params::debug_level, FALSE, free_nuauth_params(), init_nuauthconf(), init_periods(), load_modules(), nuauth_install_signals(), nuauthconf, nuauthdatas, nubase_config_table_destroy(), parse_configuration(), nuauth_params::periods, release_thread_pools(), TRUE, unload_modules(), and wait_all_thread_pools().

Referenced by nuauth_install_signals().

Here is the call graph for this function:

---

Variable Documentation

struct nuauth_params* nuauthconf

Definition at line 220 of file nuauth_params.h.

Referenced by acl_check(), acl_check_and_decide(), act_on_loggers_processing(), apply_decision(), authpckt_new_connection(), authpckt_new_connection_v3(), cache_insert(), cache_refresh(), clean_connections_list(), compare_nuauthparams(), configure_app(), create_message_packet(), feed_target_nuauth(), free_connection(), free_nuauth_params(), free_threads(), get_end_of_period_for_time_t(), get_old_conn(), get_proto_info(), getugroups(), init_audit(), init_module_from_conf(), init_nuauthdata(), limited_connection_handler(), load_modules(), log_state_open(), log_user_packet(), log_user_session(), main_cleanup(), modules_user_logs(), nuauth_deinit(), nuauth_process_poll(), nuauth_process_usr1(), nuauth_process_usr2(), nuauth_reload(), nuauthconf_from_cmdline(), parse_dgram(), parse_options(), push_worker(), sasl_user_check(), search_and_fill(), start_all_thread_pools(), stop_all_thread_pools(), stop_threads(), string_escape(), take_decision(), tls_nufw_init(), tls_nufw_start_servers(), tls_sasl_connect(), tls_sasl_connect_ok(), tls_user_check_activity(), tls_user_servers_init(), tls_user_start_servers(), treat_nufw_request(), update_decision(), user_check(), user_packet_logs(), user_request(), user_session_modify(), userdb_checkpass(), verify_user_password(), wait_all_thread_pools(), and warn_clients().

struct nuauth_datas* nuauthdatas

Definition at line 221 of file nuauth_params.h.

Referenced by acl_check_and_decide(), act_on_loggers_processing(), apply_new_config(), authpckt_conntrack(), authpckt_conntrack_v3(), block_on_conf_reload(), block_thread_pools(), clear_push_queue(), compare_nuauthparams(), configure_app(), external_ip_auth(), feed_target_nuauth(), free_connection(), free_threads(), g_module_check_init(), get_acls_from_cache(), get_users_from_cache(), init_acl_cache(), init_audit(), init_nuauthdata(), init_user_cache(), limited_connection_handler(), load_modules_from(), localid_auth(), localid_insert_message(), log_user_packet(), log_user_packet_from_accounted_connection(), log_user_session(), main_cleanup(), nuauth_deinit(), nuauth_install_signals(), nuauth_is_reloading(), nuauth_reload(), push_worker(), refresh_crl_file(), release_thread_pools(), search_and_fill(), search_and_fill_complete_of_authreq(), search_and_fill_complete_of_userpckt(), search_and_push(), start_all_thread_pools(), stop_all_thread_pools(), stop_threads(), take_decision(), tls_nufw_start_servers(), tls_sasl_connect_ok(), tls_user_accept(), tls_user_check_activity(), tls_user_remove_client(), tls_user_servers_init(), tls_user_start_servers(), treat_nufw_request(), unload_modules(), user_check_and_decide(), and wait_all_thread_pools().

---