Hi, On Tue, Aug 11, 2015 at 01:28:02AM +0200, Samuel Thibault wrote: > Looking at the source code in openvpn_plugin_open_v2, I see: > > context->acctsocketbackgr.send ( ADD_USER ); > ... > context->acctsocketbackgr.send ( newuser->getVsaBuf(), > newuser->getVsaBufLen() ); > //get the response > const int status = context->acctsocketbackgr.recvInt(); > > This is again synchronous code, and this time I don't see any option > to make it asynchronous...
I'm not proposing anything right now (this stuff is not exactly my field
of expertise with OpenVPN code), but maybe a quick hack...
> I can see that when accounting fails, an
> exception is thrown, to return an error to openvpn and thus prevent
> the connection. I guess this is an important part that shouldn't be
> dropped, but I don't see a way to make it asynchronous without modifying
> the openvpn core.
>
> In our case we don't actually make use of radius accounting...
... you could modify the radiusplugin to just "do not do accounting" -
just return "success!" right away, and quickly so...
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany g...@greenie.muc.de
fax: +49-89-35655025 g...@net.informatik.tu-muenchen.de
pgpYwqbFp_VRb.pgp
Description: PGP signature
