Re: [Openvpn-devel] [PATCH v3] Add deferred authentication support to plugin-auth-pam

2020-07-15 Thread Selva Nair
Hi, Thanks for v3. All good except Changes.rst has diverged, so the patch doesn't apply as is. Can be fixed at merge time. The code is unchanged from the last version and the added text in README is clear and detailed. A minor grammar thingy: "all forwarding for all other client" -- > "all forwa

[Openvpn-devel] [PATCH v3] Add deferred authentication support to plugin-auth-pam

2020-07-15 Thread Gert Doering
If OpenVPN signals deferred authentication support (by setting the internal environment variables "auth_control_file" and "deferred_auth_pam"), do not wait for PAM stack to finish. Instead, the privileged PAM process returns RESPONSE_DEFER via the control socket, which gets turned into OPENVPN_PLU