[Radiusplugin-users] bug in Radiusplugin.so 2.0c beta

[vasiliy taranov]

Hey there, guys,

we've discovered a strange bug with 2.0c that leads to accounting module crash when used with the OpenVPN server

The openvpn is configured for username/password based authentication (i.e. no local user certs). The tls certificate (tls-auth) is used to encrypt the username/password combination.

When a user enters Domain\username  in the username field on OpenVPN client, the accounting module in Radiusplugin.so crashes, which suspends OpenVPN server and no one can establish VPN connections. It also knocks off anyone who was currently connected to the OpenVpn server.

It looks as if the \ character causes the crash.

Did anyone observe such a behavior?

regards,
Vasiliy