summaryrefslogtreecommitdiff
path: root/accel-pptpd/radius/radius.c
diff options
context:
space:
mode:
Diffstat (limited to 'accel-pptpd/radius/radius.c')
-rw-r--r--accel-pptpd/radius/radius.c529
1 files changed, 0 insertions, 529 deletions
diff --git a/accel-pptpd/radius/radius.c b/accel-pptpd/radius/radius.c
deleted file mode 100644
index 8976a33..0000000
--- a/accel-pptpd/radius/radius.c
+++ /dev/null
@@ -1,529 +0,0 @@
-#include <stdlib.h>
-#include <stdarg.h>
-#include <stdio.h>
-#include <string.h>
-#include <unistd.h>
-#include <arpa/inet.h>
-
-#include "mempool.h"
-#include "events.h"
-#include "log.h"
-#include "ppp.h"
-#include "pwdb.h"
-#include "ipdb.h"
-#include "ppp_auth.h"
-#include "cli.h"
-
-#include "radius_p.h"
-#include "attr_defs.h"
-
-#include "memdebug.h"
-
-#define CHAP_MD5 5
-#define MSCHAP_V1 0x80
-#define MSCHAP_V2 0x81
-
-int conf_max_try = 3;
-int conf_timeout = 3;
-int conf_acct_timeout = 600;
-char *conf_nas_identifier;
-in_addr_t conf_nas_ip_address;
-in_addr_t conf_gw_ip_address;
-in_addr_t conf_bind;
-int conf_verbose;
-int conf_interim_verbose;
-
-in_addr_t conf_auth_server;
-int conf_auth_server_port = 1812;
-char *conf_auth_secret;
-
-in_addr_t conf_acct_server;
-int conf_acct_server_port = 1813;
-char *conf_acct_secret;
-
-in_addr_t conf_dm_coa_server;
-int conf_dm_coa_port = 3799;
-char *conf_dm_coa_secret;
-
-int conf_sid_in_auth;
-int conf_require_nas_ident;
-int conf_acct_interim_interval;
-
-unsigned long stat_auth_sent;
-unsigned long stat_auth_lost;
-unsigned long stat_acct_sent;
-unsigned long stat_acct_lost;
-unsigned long stat_interim_sent;
-unsigned long stat_interim_lost;
-
-static LIST_HEAD(sessions);
-static pthread_rwlock_t sessions_lock = PTHREAD_RWLOCK_INITIALIZER;
-
-static void *pd_key;
-static struct ipdb_t ipdb;
-
-static mempool_t rpd_pool;
-
-int rad_proc_attrs(struct rad_req_t *req)
-{
- struct rad_attr_t *attr;
- int res = 0;
-
- req->rpd->acct_interim_interval = conf_acct_interim_interval;
-
- list_for_each_entry(attr, &req->reply->attrs, entry) {
- if (attr->vendor)
- continue;
- switch(attr->attr->id) {
- case Framed_IP_Address:
- if (!conf_gw_ip_address)
- log_ppp_warn("radius: gw-ip-address not specified, cann't assign IP address...\n");
- else {
- req->rpd->ipaddr.owner = &ipdb;
- req->rpd->ipaddr.peer_addr = attr->val.ipaddr;
- req->rpd->ipaddr.addr = conf_gw_ip_address;
- }
- break;
- case Acct_Interim_Interval:
- req->rpd->acct_interim_interval = attr->val.integer;
- break;
- case Session_Timeout:
- req->rpd->session_timeout.period = attr->val.integer * 1000;
- break;
- case Class:
- if (!req->rpd->attr_class)
- req->rpd->attr_class = _malloc(attr->len);
- else if (req->rpd->attr_class_len != attr->len)
- req->rpd->attr_class = _realloc(req->rpd->attr_class, attr->len);
- memcpy(req->rpd->attr_class, attr->val.octets, attr->len);
- req->rpd->attr_class_len = attr->len;
- break;
- case State:
- if (!req->rpd->attr_state)
- req->rpd->attr_state = _malloc(attr->len);
- else if (req->rpd->attr_state_len != attr->len)
- req->rpd->attr_state = _realloc(req->rpd->attr_state, attr->len);
- memcpy(req->rpd->attr_state, attr->val.octets, attr->len);
- req->rpd->attr_state_len = attr->len;
- break;
- case Termination_Action:
- req->rpd->termination_action = attr->val.integer;
- break;
- }
- }
-
- return res;
-}
-
-static int check(struct pwdb_t *pwdb, struct ppp_t *ppp, const char *username, int type, va_list _args)
-{
- int r = PWDB_NO_IMPL;
- va_list args;
- int chap_type;
- struct radius_pd_t *rpd = find_pd(ppp);
-
- va_copy(args, _args);
-
- switch(type) {
- case PPP_PAP:
- r = rad_auth_pap(rpd, username, args);
- break;
- case PPP_CHAP:
- chap_type = va_arg(args, int);
- switch(chap_type) {
- case CHAP_MD5:
- r = rad_auth_chap_md5(rpd, username, args);
- break;
- case MSCHAP_V1:
- r = rad_auth_mschap_v1(rpd, username, args);
- break;
- case MSCHAP_V2:
- r = rad_auth_mschap_v2(rpd, username, args);
- break;
- }
- break;
- }
-
- va_end(args);
-
- return r;
-}
-
-static struct ipdb_item_t *get_ip(struct ppp_t *ppp)
-{
- struct radius_pd_t *rpd = find_pd(ppp);
-
- if (rpd->ipaddr.peer_addr)
- return &rpd->ipaddr;
- return NULL;
-}
-
-static void session_timeout(struct triton_timer_t *t)
-{
- struct radius_pd_t *rpd = container_of(t, typeof(*rpd), session_timeout);
- log_ppp_msg("radius: session timed out\n");
-
- if (rpd->ppp->stop_time)
- return;
-
- if (rpd->termination_action == Termination_Action_RADIUS_Request) {
- if (ppp_auth_restart(rpd->ppp))
- ppp_terminate(rpd->ppp, TERM_SESSION_TIMEOUT, 0);
- } else
- ppp_terminate(rpd->ppp, TERM_SESSION_TIMEOUT, 0);
-}
-
-static void ppp_starting(struct ppp_t *ppp)
-{
- struct radius_pd_t *rpd = mempool_alloc(rpd_pool);
-
- memset(rpd, 0, sizeof(*rpd));
- rpd->pd.key = &pd_key;
- rpd->ppp = ppp;
- pthread_mutex_init(&rpd->lock, NULL);
- INIT_LIST_HEAD(&rpd->plugin_list);
- list_add_tail(&rpd->pd.entry, &ppp->pd_list);
-
- pthread_rwlock_wrlock(&sessions_lock);
- list_add_tail(&rpd->entry, &sessions);
- pthread_rwlock_unlock(&sessions_lock);
-}
-
-static void ppp_acct_start(struct ppp_t *ppp)
-{
- struct radius_pd_t *rpd = find_pd(ppp);
-
- if (rad_acct_start(rpd)) {
- ppp_terminate(rpd->ppp, TERM_NAS_ERROR, 0);
- return;
- }
-
- if (rpd->session_timeout.period) {
- rpd->session_timeout.expire = session_timeout;
- triton_timer_add(ppp->ctrl->ctx, &rpd->session_timeout, 0);
- }
-}
-static void ppp_finishing(struct ppp_t *ppp)
-{
- struct radius_pd_t *rpd = find_pd(ppp);
-
- rad_acct_stop(rpd);
-}
-static void ppp_finished(struct ppp_t *ppp)
-{
- struct radius_pd_t *rpd = find_pd(ppp);
-
- pthread_rwlock_wrlock(&sessions_lock);
- pthread_mutex_lock(&rpd->lock);
- list_del(&rpd->entry);
- pthread_mutex_unlock(&rpd->lock);
- pthread_rwlock_unlock(&sessions_lock);
-
- if (rpd->auth_req)
- rad_req_free(rpd->auth_req);
-
- if (rpd->acct_req)
- rad_req_free(rpd->acct_req);
-
- if (rpd->dm_coa_req)
- dm_coa_cancel(rpd);
-
- if (rpd->session_timeout.tpd)
- triton_timer_del(&rpd->session_timeout);
-
- if (rpd->attr_class)
- _free(rpd->attr_class);
-
- if (rpd->attr_state)
- _free(rpd->attr_state);
-
- list_del(&rpd->pd.entry);
-
- mempool_free(rpd);
-}
-
-struct radius_pd_t *find_pd(struct ppp_t *ppp)
-{
- struct ppp_pd_t *pd;
- struct radius_pd_t *rpd;
-
- list_for_each_entry(pd, &ppp->pd_list, entry) {
- if (pd->key == &pd_key) {
- rpd = container_of(pd, typeof(*rpd), pd);
- return rpd;
- }
- }
- log_emerg("radius:BUG: rpd not found\n");
- abort();
-}
-
-
-struct radius_pd_t *rad_find_session(const char *sessionid, const char *username, int port_id, in_addr_t ipaddr, const char *csid)
-{
- struct radius_pd_t *rpd;
-
- pthread_rwlock_rdlock(&sessions_lock);
- list_for_each_entry(rpd, &sessions, entry) {
- if (!rpd->ppp->username)
- continue;
- if (sessionid && strcmp(sessionid, rpd->ppp->sessionid))
- continue;
- if (username && strcmp(username, rpd->ppp->username))
- continue;
- if (port_id >= 0 && port_id != rpd->ppp->unit_idx)
- continue;
- if (ipaddr && ipaddr != rpd->ppp->peer_ipaddr)
- continue;
- if (csid && rpd->ppp->ctrl->calling_station_id && strcmp(csid, rpd->ppp->ctrl->calling_station_id))
- continue;
- pthread_mutex_lock(&rpd->lock);
- pthread_rwlock_unlock(&sessions_lock);
- return rpd;
- }
- pthread_rwlock_unlock(&sessions_lock);
- return NULL;
-}
-
-struct radius_pd_t *rad_find_session_pack(struct rad_packet_t *pack)
-{
- struct rad_attr_t *attr;
- const char *sessionid = NULL;
- const char *username = NULL;
- const char *csid = NULL;
- int port_id = -1;
- in_addr_t ipaddr = 0;
-
- list_for_each_entry(attr, &pack->attrs, entry) {
- switch(attr->attr->id) {
- case Acct_Session_Id:
- sessionid = attr->val.string;
- break;
- case User_Name:
- username = attr->val.string;
- break;
- case NAS_Port:
- port_id = attr->val.integer;
- break;
- case Framed_IP_Address:
- ipaddr = attr->val.ipaddr;
- break;
- case Calling_Station_Id:
- csid = attr->val.string;
- break;
- }
- }
-
- if (!sessionid && !username && port_id == -1 && ipaddr == 0 && !csid)
- return NULL;
-
- if (username && !sessionid && port_id == -1 && ipaddr == 0)
- return NULL;
-
- return rad_find_session(sessionid, username, port_id, ipaddr, csid);
-}
-
-int rad_check_nas_pack(struct rad_packet_t *pack)
-{
- struct rad_attr_t *attr;
- const char *ident = NULL;
- in_addr_t ipaddr = 0;
-
- list_for_each_entry(attr, &pack->attrs, entry) {
- if (!strcmp(attr->attr->name, "NAS-Identifier"))
- ident = attr->val.string;
- else if (!strcmp(attr->attr->name, "NAS-IP-Address"))
- ipaddr = attr->val.ipaddr;
- }
-
- if (conf_require_nas_ident && !ident && !ipaddr)
- return -1;
-
- if (conf_nas_identifier && ident && strcmp(conf_nas_identifier, ident))
- return -1;
-
- if (conf_nas_ip_address && ipaddr && conf_nas_ip_address != ipaddr)
- return -1;
-
- return 0;
-}
-
-static int show_stat_exec(const char *cmd, char * const *fields, int fields_cnt, void *client)
-{
- cli_send(client, "radius:\r\n");
- cli_sendv(client, " auth sent: %lu\r\n", stat_auth_sent);
- cli_sendv(client, " auth lost: %lu\r\n", stat_auth_lost);
- cli_sendv(client, " acct sent: %lu\r\n", stat_acct_sent);
- cli_sendv(client, " acct lost: %lu\r\n", stat_acct_lost);
- cli_sendv(client, " interim sent: %lu\r\n", stat_interim_sent);
- cli_sendv(client, " interim lost: %lu\r\n", stat_interim_lost);
- return CLI_CMD_OK;
-}
-
-void __export rad_register_plugin(struct ppp_t *ppp, struct rad_plugin_t *plugin)
-{
- struct radius_pd_t *rpd = find_pd(ppp);
-
- if (!rpd)
- return;
-
- list_add_tail(&plugin->entry, &rpd->plugin_list);
-}
-
-static struct ipdb_t ipdb = {
- .get = get_ip,
-};
-
-static struct pwdb_t pwdb = {
- .check = check,
-};
-
-static int parse_server(const char *opt, in_addr_t *addr, int *port, char **secret)
-{
- char *str = _strdup(opt);
- char *p1, *p2;
-
- p1 = strstr(str, ":");
- p2 = strstr(str, ",");
-
- if (p1)
- *p1 = 0;
- if (p2)
- *p2 = 0;
- else
- return -1;
-
- *addr = inet_addr(str);
-
- if (p1) {
- *port = atoi(p1 + 1);
- if (*port <=0 )
- return -1;
- }
-
- p1 = _strdup(p2 + 1);
- p2 = *secret;
- *secret = p1;
- if (p2)
- _free(p2);
-
- _free(str);
-
- return 0;
-}
-
-static int load_config(void)
-{
- char *opt;
-
- opt = conf_get_opt("radius", "max-try");
- if (opt && atoi(opt) > 0)
- conf_max_try = atoi(opt);
-
- opt = conf_get_opt("radius", "timeout");
- if (opt && atoi(opt) > 0)
- conf_timeout = atoi(opt);
-
- opt = conf_get_opt("radius", "acct-timeout");
- if (opt && atoi(opt) > 0)
- conf_acct_timeout = atoi(opt);
-
- opt = conf_get_opt("radius", "verbose");
- if (opt && atoi(opt) > 0)
- conf_verbose = 1;
-
- opt = conf_get_opt("radius", "interim-verbose");
- if (opt && atoi(opt) > 0)
- conf_interim_verbose = 1;
-
- opt = conf_get_opt("radius", "nas-ip-address");
- if (opt)
- conf_nas_ip_address = inet_addr(opt);
-
- if (conf_nas_identifier)
- _free(conf_nas_identifier);
- opt = conf_get_opt("radius", "nas-identifier");
- if (opt)
- conf_nas_identifier = _strdup(opt);
- else
- conf_nas_identifier = NULL;
-
- opt = conf_get_opt("radius", "gw-ip-address");
- if (opt)
- conf_gw_ip_address = inet_addr(opt);
-
- opt = conf_get_opt("radius", "bind");
- if (opt)
- conf_bind = inet_addr(opt);
- else if (conf_nas_ip_address)
- conf_bind = conf_nas_ip_address;
-
- opt = conf_get_opt("radius", "auth-server");
- if (!opt)
- opt = conf_get_opt("radius", "auth_server");
- if (!opt) {
- log_emerg("radius: auth-server not specified\n");
- return -1;
- } else if (parse_server(opt, &conf_auth_server, &conf_auth_server_port, &conf_auth_secret)) {
- log_emerg("radius: failed to parse auth_server\n");
- return -1;
- }
-
- opt = conf_get_opt("radius", "acct-server");
- if (!opt)
- opt = conf_get_opt("radius", "acct_server");
- if (!opt)
- log_emerg("radius: acct-server not specified\n");
- if (opt && parse_server(opt, &conf_acct_server, &conf_acct_server_port, &conf_acct_secret)) {
- log_emerg("radius: failed to parse acct_server\n");
- return -1;
- }
-
- opt = conf_get_opt("radius", "dae-server");
- if (opt && parse_server(opt, &conf_dm_coa_server, &conf_dm_coa_port, &conf_dm_coa_secret)) {
- log_emerg("radius: failed to parse dae-server\n");
- return -1;
- }
-
- opt = conf_get_opt("radius", "sid_in_auth");
- if (opt && atoi(opt) > 0)
- conf_sid_in_auth = 1;
-
- opt = conf_get_opt("radius", "require-nas-identification");
- if (opt && atoi(opt) > 0)
- conf_require_nas_ident = 1;
-
- opt = conf_get_opt("radius", "acct-interim-interval");
- if (opt && atoi(opt) > 0)
- conf_acct_interim_interval = atoi(opt);
-
- return 0;
-}
-
-static void __init radius_init(void)
-{
- char *opt;
- char *dict = DICTIONARY;
-
- rpd_pool = mempool_create(sizeof(struct radius_pd_t));
-
- if (load_config())
- _exit(EXIT_FAILURE);
-
- opt = conf_get_opt("radius", "dictionary");
- if (opt)
- dict = opt;
-
- if (rad_dict_load(dict))
- _exit(EXIT_FAILURE);
-
- pwdb_register(&pwdb);
- ipdb_register(&ipdb);
-
- triton_event_register_handler(EV_PPP_STARTING, (triton_event_func)ppp_starting);
- triton_event_register_handler(EV_PPP_ACCT_START, (triton_event_func)ppp_acct_start);
- triton_event_register_handler(EV_PPP_FINISHING, (triton_event_func)ppp_finishing);
- triton_event_register_handler(EV_PPP_FINISHED, (triton_event_func)ppp_finished);
- triton_event_register_handler(EV_CONFIG_RELOAD, (triton_event_func)load_config);
-
- cli_register_simple_cmd2(show_stat_exec, NULL, 2, "show", "stat");
-}
generated by cgit v1.2.3 (git 2.39.1) at 2024-10-20 19:25:20 +0000