[patch] Enforces authentication to CLI interface, even from localhost.

l2tpns-always-auth-cli.patch (text/plain), 1.07 KB, created by Kevin Cody Jr. on 2006-07-21 14:07:04 UTC

diff -ruN l2tpns-2.1.19-orig/cli.c l2tpns-2.1.19/cli.c
--- l2tpns-2.1.19-orig/cli.c	2006-07-21 13:48:33.000000000 -0400
+++ l2tpns-2.1.19/cli.c	2006-07-21 13:48:20.000000000 -0400
@@ -290,9 +290,13 @@
 {
 	int require_auth = 1;
 	struct sockaddr_in addr;
+#if 0  /* Disabled by patch. */
 	socklen_t l = sizeof(addr);
+#endif /* Disabled by patch. */
 
 	if (fork_and_close()) return;
+
+#if 0  /* Disabled by patch. */
 	if (getpeername(sockfd, (struct sockaddr *) &addr, &l) == 0)
 	{
 		require_auth = addr.sin_addr.s_addr != inet_addr("127.0.0.1");
@@ -304,18 +308,23 @@
 
 	if (require_auth)
 	{
-		LOG(3, 0, 0, "CLI is remote, requiring authentication\n");
+#endif /* Disabled by patch. */
+
+		LOG(3, 0, 0, "CLI always requires authentication due to patch.\n");
 		if (!cli->users) /* paranoia */
 		{
 			LOG(0, 0, 0, "No users for remote authentication!  Exiting CLI\n");
 			exit(0);
 		}
+
+#if 0  /* Disabled by patch. */
 	}
 	else
 	{
 		/* no username/pass required */
 		cli->users = 0;
 	}
+#endif /* Disabled by patch. */
 
 #ifdef RINGBUFFER
 	debug_rb_tail = ringbuffer->tail;