Hi, On Tue, Aug 11, 2015 at 01:28:02AM +0200, Samuel Thibault wrote: > Looking at the source code in openvpn_plugin_open_v2, I see: > > context->acctsocketbackgr.send ( ADD_USER ); > ... > context->acctsocketbackgr.send ( newuser->getVsaBuf(), > newuser->getVsaBufLen() ); > //get the response > const int status = context->acctsocketbackgr.recvInt(); > > This is again synchronous code, and this time I don't see any option > to make it asynchronous...
I'm not proposing anything right now (this stuff is not exactly my field of expertise with OpenVPN code), but maybe a quick hack... > I can see that when accounting fails, an > exception is thrown, to return an error to openvpn and thus prevent > the connection. I guess this is an important part that shouldn't be > dropped, but I don't see a way to make it asynchronous without modifying > the openvpn core. > > In our case we don't actually make use of radius accounting... ... you could modify the radiusplugin to just "do not do accounting" - just return "success!" right away, and quickly so... gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025 g...@net.informatik.tu-muenchen.de
pgpYwqbFp_VRb.pgp
Description: PGP signature