Hi,

On Tue, Aug 11, 2015 at 01:28:02AM +0200, Samuel Thibault wrote:
> Looking at the source code in openvpn_plugin_open_v2, I see:
> 
> context->acctsocketbackgr.send ( ADD_USER );
> ...
> context->acctsocketbackgr.send ( newuser->getVsaBuf(), 
> newuser->getVsaBufLen() );
> //get the response
> const int status = context->acctsocketbackgr.recvInt();
> 
> This is again synchronous code, and this time I don't see any option
> to make it asynchronous...  

I'm not proposing anything right now (this stuff is not exactly my field
of expertise with OpenVPN code), but maybe a quick hack...

> I can see that when accounting fails, an
> exception is thrown, to return an error to openvpn and thus prevent
> the connection.  I guess this is an important part that shouldn't be
> dropped, but I don't see a way to make it asynchronous without modifying
> the openvpn core.
> 
> In our case we don't actually make use of radius accounting...

... you could modify the radiusplugin to just "do not do accounting" -
just return "success!" right away, and quickly so...

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             g...@greenie.muc.de
fax: +49-89-35655025                        g...@net.informatik.tu-muenchen.de

Attachment: pgpYwqbFp_VRb.pgp
Description: PGP signature

Reply via email to