matt335672
34fe9b60eb
Merge pull request #1983 from matt335672/pam_group_fix
...
Moved g_initgroups() call to before auth_start_session()
2022-05-04 09:29:15 +01:00
matt335672
0a54106866
Added g_umask_hex() call
2022-04-15 11:12:01 +01:00
matt335672
4183d8ddbf
Moved initgroups call to before auth_start_session()
...
This is required for PAM systems that depend on group membership being
available during PAM processing. This is used by pam_group on FreeBSD
and pam_group on Linux-PAM, although the functionality of both is
different.
2022-04-05 16:07:26 +01:00
matt335672
6cf053c9df
Add libipm test suite
2022-03-15 10:23:27 +00:00
zbstao
1309ea405e
Fixed g_waitpid function
...
Fixed g_waitpid function
2022-02-15 22:32:46 +08:00
matt335672
ce23c824ea
Merge pull request #1976 from matt335672/fail2ban_support
...
Fail2ban support (#1076 )
2021-11-18 10:11:12 +00:00
matt335672
50e37bf673
Add more file info functions
...
- g_file_get_device_number()
- g_file_get_inode_num()
2021-10-25 15:24:27 +01:00
matt335672
5fb621ca53
Logged IP address for fail2ban on login failure
2021-10-25 11:35:35 +01:00
matt335672
60016c1f75
Rename client_ip to connection_description
2021-10-25 11:35:35 +01:00
Alexandre Quesnel
f5e4b53b11
Add logging to g_exec*() functions
2021-04-14 04:41:53 +00:00
Alexandre Quesnel
2ab3b97ba0
Migrating logging to LOG() and LOG_DEVEL() in common/*
2021-03-14 23:33:31 +00:00
Alexandre Quesnel
bb9d3079c0
Fixing formatting with astyle in common/*
2021-03-14 23:33:31 +00:00
matt335672
0a1a8f40e5
Moved a lot of string funcs to string_calls module
2020-12-22 11:57:24 +00:00
matt335672
5523847540
Allow FuseMountName for chansrv to be absolute path
2020-12-21 12:36:31 +00:00
Bolke de Bruin
a6a0e5e004
Allow domain name to be concatenated to username
...
If a server is multihomed (i.e. mutiple domains) the
users are identified by their domain name. This change
allows to concat the domain name to the username with
a specific separator.
2020-08-30 21:56:16 +02:00
matt335672
27653f97f2
Code changes for cppcheck 2.1 warnings
2020-06-19 11:07:23 +01:00
Koichiro IWAO
e8c845e78b
common: switch _exit to exit
...
mentioned in #1472 .
2020-01-08 09:21:39 +09:00
Koichiro IWAO
e928d8baf2
common: flush stream in g_deinit()
...
unless flushing stream before exitting, `xrdp --version | cat` will
show empty output.
Fixes #1471 .
2020-01-07 19:24:17 +09:00
Jay Sorg
ee65ccb31d
use address for tcp:// and tcp6:// and vsock://
2019-07-01 17:56:50 -07:00
Jay Sorg
0bc7803eaa
add TCP V4 and V6 only socket functions
2019-06-29 23:59:18 -07:00
Justin Terry (VM)
d7d14d7462
Implements the accept/close logic for vsock
2017-11-17 20:23:20 -08:00
Jay Sorg
285465a1f5
common, return -1 for bad socket
2017-11-07 18:20:45 -08:00
Jay Sorg
c6c513b23c
use g_memcpy, braces
2017-11-07 18:20:45 -08:00
Jay Sorg
26507644e3
vsock, move some defines
2017-11-07 18:20:45 -08:00
Justin Terry (VM)
50bd624cc4
Implements XRDP over vsock
...
1. Implements the ability to use AV_VSOCK for the transport rather than TCP.
2. Updates the ini file to be able to conditionally turn this feature on.
2017-11-07 18:20:45 -08:00
Koichiro IWAO
00bf62bd42
common: prevent raw use of snprintf
2017-10-03 21:55:08 +09:00
Koichiro IWAO
f9ab4df7f2
common: fix g_write_ip_address() didn't return correct IP address
...
Fixes : #878 .
2017-09-26 10:54:08 +09:00
Ian Geiser
324a334315
append a / to ensure the full path is created even when the config variable lacks a trailing /
2017-07-19 10:35:37 +09:00
Koichiro IWAO
aa0721a90e
common: fix more glitches in IPv4 initialization
2017-07-14 21:21:15 +09:00
Ian Geiser
4b87548b71
Use g_create_path instead of g_create_dir
...
Rename g_mk_temp_dir to g_mk_socket_path
2017-07-14 20:52:38 +09:00
Koichiro IWAO
8d5010a202
common: use log_message
2017-07-13 13:41:26 +09:00
Koichiro IWAO
8c74fcb80c
common: fix a glitch with IPv4 struct initialization
...
Pointed out by: andrecbarros
Closes : #803
2017-07-10 11:58:10 +09:00
Koichiro IWAO
088bd2d811
common: implement g_file_readable for WIN32
2017-06-12 16:57:04 +09:00
Koichiro IWAO
65c1fe87d7
Log user-friendly message when certificate/privkey is inaccessible
...
We shouldn't assume that xrdp daemon is running under root privilege.
In many cases, root privilege is not really needed for xrdp daemon.
xrdp may fail to load certificate/privkey due to lack of permissions
when running under user privilege. Checking existence of files is not
enough and xrdp should output user-friendly log in such case.
Reported by Debian user in bug 856436 [1].
[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856436
2017-06-12 16:57:04 +09:00
MichaelSweden
5c668dc420
Removed error message while falling back to IPv4 (issue #714 )
2017-04-25 09:31:22 +09:00
MichaelSweden
106ae2cd43
Fix to handle OS disabled IPv6, issue #714 .
...
- Changes made only in the os_calls.c file.
- Exported functions changed: g_tcp_bind g_tcp_bind_address g_tcp_connect
- Support three network configurations:
1) Normal network, with IPv6
2) Partly disabled IPv6 via sysctl.conf
3) Total disabled IPv6 via grub
2017-04-25 09:31:22 +09:00
Pavel Roskin
95506a169f
Log socket fd in g_sck_accept(), fix AF_UNIX logging
2017-03-21 21:59:50 -07:00
Pavel Roskin
58c9cb43e9
Make socket directory configurable, don't hardcode /tmp/.xrdp
...
Use XRDP_SOCKET_PATH in file_loc.h
Don't define any non-socket paths in file_loc.h, they should come from
the makefiles.
Define all paths unconditionally, they should not be defined elsewhere.
Pass XRDP_SOCKET_PATH as environment variable to the backends.
2017-03-17 22:25:05 -07:00
Pavel Roskin
6ed4c969f4
Eliminate APP_CC and DEFAULT_CC
2017-03-14 00:21:48 -07:00
mirabilos
6257bae23f
Add GNU/kFreeBSD support ( #645 )
...
* GNU/kFreeBSD is a FreeBSD variant, for code purposes.
* GNU/kFreeBSD uses GNU/Linux-ish init scripts, however.
2017-01-26 23:02:41 -02:00
Pavel Roskin
d97155e2f6
Don't use colon to separate IPv6 address from the port
...
IPv6 addresses can have colons in their names, so the final colon can be
confusing.
2016-12-09 08:42:56 -08:00
Jay Sorg
9a517b34f0
vnc: code cleanup
2016-12-04 15:39:10 -08:00
Koichiro IWAO
849a8075c5
common: If IPv6 not supported, fall back to IPv4
...
The system to run xrdp does not necessarily support IPv6 even though
it is compiled with IPv6.
Fixes #432 .
2016-11-22 16:40:54 +09:00
Itamar Reis Peixoto
7cc1dd2ba8
Merge pull request #460 from metalefty/ipv6/logs
...
common: Fix client IP address logging when IPv6 is enabled
2016-11-20 16:00:26 -02:00
Pavel Roskin
2dcc69b752
Use g_get_strerror() instead of strerror(errno) for portability
2016-11-08 14:08:51 -08:00
Koichiro IWAO
dcf36b592b
common: Address family it not always AF_INET6
...
even if XRDP_ENABLE_IPV6 defined.
2016-11-04 17:31:36 +09:00
Koichiro IWAO
b2118450f4
common: Fix client IP address logging when IPv6 is enabled
...
g_tcp_accept() and g_sck_accept() should use sockadd_in6 when IPv6 is
enabled. The former code logs client IP address always "0.0.0.0" in such
case.
Fixes #412 .
2016-11-04 17:31:36 +09:00
Pavel Roskin
6fef1e4eb5
Use const pointers in function arguments when possible
2016-10-17 08:54:07 -07:00
Pavel Roskin
a618d4f757
Don't use final newline in log calls, it's already appended
2016-10-17 08:54:07 -07:00
Pavel Roskin
7d03d1a3e9
Fix outgoing connections on Mac OSX
...
connect() on an already established connection returns error with errno
set to EISCONN. Treat it as success.
2016-09-08 22:28:38 -07:00