/* * $Id: buildreq.c,v 1.17 2010/02/04 10:27:09 aland Exp $ * * Copyright (C) 1995,1997 Lars Fenneberg * * See the file COPYRIGHT for the respective terms and conditions. * If the file is missing contact me at lf@elemental.net * and I'll send you a copy. * */ #include #include #include #include "util.h" /** Build a skeleton RADIUS request using information from the config file * * @param rh a handle to parsed configuration. * @param data a pointer to a #SEND_DATA structure. * @param code one of standard RADIUS codes (e.g., %PW_ACCESS_REQUEST). * @param server the name of the server. * @param port the server's port number. * @param secret the secret used by the server. * @param timeout the timeout in seconds of a message. * @param retries the number of retries. */ void rc_buildreq(rc_handle const *rh, SEND_DATA *data, int code, char *server, unsigned short port, char *secret, int timeout, int retries) { data->server = server; data->secret = secret; data->svc_port = port; data->seq_nbr = rc_get_id(); data->timeout = timeout; data->retries = retries; data->code = code; } /** Generates a random ID * * @return the random ID. */ unsigned char rc_get_id() { return (unsigned char)(random() & UCHAR_MAX); } /** Builds an authentication/accounting request for port id client_port with the value_pairs send and submits it to a server * * @param rh a handle to parsed configuration. * @param client_port the client port number to use (may be zero to use any available). * @param send a #VALUE_PAIR array of values (e.g., %PW_USER_NAME). * @param received an allocated array of received values. * @param msg must be an array of %PW_MAX_MSG_SIZE or %NULL; will contain the concatenation of any * %PW_REPLY_MESSAGE received. * @param add_nas_port if non-zero it will include %PW_NAS_PORT in sent pairs. * @param request_type one of standard RADIUS codes (e.g., %PW_ACCESS_REQUEST). * @return received value_pairs in received, messages from the server in msg and %OK_RC (0) on success, negative * on failure as return value. */ int rc_aaa(rc_handle *rh, uint32_t client_port, VALUE_PAIR *send, VALUE_PAIR **received, char *msg, int add_nas_port, int request_type) { SEND_DATA data; VALUE_PAIR* myVp; SERVER *aaaserver; int timeout = rc_conf_int(rh, "radius_timeout"); int retries = rc_conf_int(rh, "radius_retries"); int radius_deadtime = rc_conf_int(rh, "radius_deadtime"); unsigned type; int result; SERVER myServer; myVp = rc_avpair_get(send, PW_USER_PASSWORD, 0); myServer.secret[0] = myVp->name; aaaserver = &myServer; type = AUTH; if (aaaserver == NULL) return ERROR_RC; data.send_pairs = send; data.receive_pairs = NULL; if (add_nas_port != 0) { // Fill in NAS-Port if (rc_avpair_add(rh, &(data.send_pairs), PW_NAS_PORT, &client_port, 0, 0) == NULL) return ERROR_RC; } if (data.receive_pairs != NULL) { rc_avpair_free(data.receive_pairs); data.receive_pairs = NULL; } rc_buildreq(rh, &data, request_type, aaaserver->name[0], aaaserver->port[0], aaaserver->secret[0], timeout, retries); // Делаем 3 попытки если есть какие-либо проблемы с обменом for (uint8_t i = 0; i < 3; i++) { //printf ("Radius trying\r\n"); result = rc_send_server(rh, &data, msg, type); if (result != NET_ERR_RC) break; } return result; } /** Builds an authentication request for port id client_port with the value_pairs send and submits it to a server * * @param rh a handle to parsed configuration. * @param client_port the client port number to use (may be zero to use any available). * @param send a #VALUE_PAIR array of values (e.g., %PW_USER_NAME). * @param received an allocated array of received values. * @param msg must be an array of %PW_MAX_MSG_SIZE or %NULL; will contain the concatenation of any * %PW_REPLY_MESSAGE received. * @return received value_pairs in @received, messages from the server in msg (if non-NULL), * and %OK_RC (0) on success, negative on failure as return value. */ int rc_auth(rc_handle *rh, uint32_t client_port, VALUE_PAIR *send, VALUE_PAIR **received, char *msg) { //return rc_aaa(rh, client_port, send, received, msg, 1, PW_ACCESS_REQUEST); return rc_aaa(rh, client_port, send, received, msg, 0, PW_ACCESS_REQUEST); } /** Builds an authentication request for proxying * * Builds an authentication request with the value_pairs send and submits it to a server. * Works for a proxy; does not add IP address, and does does not rely on config file. * * @param rh a handle to parsed configuration. * @param client_port the client port number to use (may be zero to use any available). * @param send a #VALUE_PAIR array of values (e.g., %PW_USER_NAME). * @param received an allocated array of received values. * @param msg must be an array of %PW_MAX_MSG_SIZE or %NULL; will contain the concatenation of * any %PW_REPLY_MESSAGE received. * @return received value_pairs in @received, messages from the server in msg (if non-NULL) * and %OK_RC (0) on success, negative on failure as return value. */ int rc_auth_proxy(rc_handle *rh, VALUE_PAIR *send, VALUE_PAIR **received, char *msg) { return rc_aaa(rh, 0, send, received, msg, 0, PW_ACCESS_REQUEST); } /** Builds an accounting request for port id client_port with the value_pairs at send * * @note NAS-IP-Address, NAS-Port and Acct-Delay-Time get filled in by this function, the rest has to be supplied. * * @param rh a handle to parsed configuration. * @param client_port the client port number to use (may be zero to use any available). * @param send a #VALUE_PAIR array of values (e.g., %PW_USER_NAME). * @return received value_pairs in @received, and %OK_RC (0) on success, negative on failure as return value. */ int rc_acct(rc_handle *rh, uint32_t client_port, VALUE_PAIR *send) { return rc_aaa(rh, client_port, send, NULL, NULL, 1, PW_ACCOUNTING_REQUEST); } /** Builds an accounting request with the value_pairs at send * * @param rh a handle to parsed configuration. * @param send a #VALUE_PAIR array of values (e.g., %PW_USER_NAME). * @return %OK_RC (0) on success, negative on failure as return value. */ int rc_acct_proxy(rc_handle *rh, VALUE_PAIR *send) { return rc_aaa(rh, 0, send, NULL, NULL, 0, PW_ACCOUNTING_REQUEST); }