Ticket #465 (new Feature Request)

Opened 14 years ago

Last modified 13 years ago

PATCH: immediate disconnect feature

Reported by: wichert@… Owned by:
Priority: low Milestone: Gateway 1.1.5
Component: Gateway Version:
Keywords: Cc:

Description

As I mentioned on the list I have a need for immediate disconnect feature. There are some related features already present, but they do not fit my particular use case:

  • The standard logout option only logs out the requesting IP address
  • The auth server can already return a disconnect authcode when the gateway does its regular update process. This means there will be a, possibly signficant, delay between requesting a disconnect in the auth server and the gateway actually disconnecting someone. When dealing with abuse, spamruns, etc. this is undesirable.

I have implemented this in two patches:

0001-Add-a-basic-disconnect-command.patch
This implements a very basic disconnect command and hooks it into the http server.
0002-Refactor-logout-logic-so-we-can-share-code.patch
This refactors various bits of code so the logout logic is shared between the firewall update process, wdctl_reset and the disconnect handler

This feature requires the patches from #463 to secure the status page: the status page contains enough information to allow abusers to disconnect every user connected to a gateway/

Attachments

0001-Add-a-basic-disconnect-command.patch Download (2.9 KB) - added by wichert@… 14 years ago.
0002-Refactor-logout-logic-so-we-can-share-code.patch Download (6.4 KB) - added by wichert@… 14 years ago.
0005-Secure-the-callback-request.patch Download (1.1 KB) - added by wichert@… 14 years ago.

Change History

Changed 14 years ago by wichert@…

Changed 14 years ago by wichert@…

Changed 14 years ago by wichert@…

Changed 14 years ago by wichert@…

Based on discussions with Alex on the list I've added a third patch to this series which protects the disconnect method with HTTP authentication. As a result these patches now need the changes from #453 in order to compile.

Changed 13 years ago by dinesh_nadeera@…

This feature not include latest svn(Gateway) can you put it their?

Changed 13 years ago by benoitg

  • summary changed from immediate disconnect feature to PATCH: immediate disconnect feature
  • milestone changed from Not yet assigned to a Milestone to Gateway 1.1.5

Patches look fine

Note: See TracTickets for help on using tickets.