Samuel Thibault, le Fri 31 Jul 2015 11:32:06 +0200, a écrit :
> # Allows the plugin to use auth control files if OpenVPN (>= 2.1 rc8)
> provides them.
> # default is false
> # useauthcontrolfile=false
>
> Why is the default false??
And still... The main loop uses
pthread_mutex_lock(context->getMutexSend());
context->addNewUser(newuser);
pthread_cond_signal( context->getCondSend( ));
pthread_mutex_unlock (context->getMutexSend());
return OPENVPN_PLUGIN_FUNC_DEFERRED;
to signal the auth thread that a new connection is being tried, and the
auth thread basically does
pthread_mutex_lock(context->getMutexSend());
while(1)
{
if (nobody_yet)
pthread_cond_wait(context->getCondSend(),context->getMutexSend());
...
Do auth
...
}
pthread_mutex_unlock(context->getMutexSend());
I.e. it keeps the MutexSend busy all along the authentication! So even
with deferred authentication, the main loop can not manage to grasp the
mutex until the auth thread has finished authenticating the previous
user...
Anyway, this is an issue in the plugin, I'll switch over to the plugin
mailing list.
Samuel
