1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
|
/* $OpenBSD: radiusd_local.h,v 1.3 2015/08/21 06:16:13 deraadt Exp $ */
/*
* Copyright (c) 2013 Internet Initiative Japan Inc.
*
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies.
*
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
*/
#include <sys/socket.h> /* for struct sockaddr_storage */
#include <sys/queue.h> /* for TAILQ_* */
#include <netinet/in.h> /* for struct sockaddr_in* */
#include <event.h> /* for struct event */
#include <imsg.h> /* for struct imsgbuf */
#include <stdarg.h> /* for va_list */
#include <stdbool.h> /* for bool */
#include <radius.h> /* for RADIUS_PACKET */
#define MODULE_IO_TIMEOUT 2000
#define CONFFILE "/etc/radiusd.conf"
struct radius_query; /* XXX */
struct radiusd_addr {
union {
struct in_addr ipv4;
struct in6_addr ipv6;
uint32_t addr32[4];
} addr;
};
struct radiusd_listen {
struct radiusd *radiusd;
struct event ev;
int sock;
union {
struct sockaddr_in ipv4;
struct sockaddr_in6 ipv6;
} addr;
int stype;
int sproto;
TAILQ_ENTRY(radiusd_listen) next;
};
TAILQ_HEAD(radiusd_listen_head, radiusd_listen);
struct radiusd_client {
char secret[RADIUSD_SECRET_MAX];
bool msgauth_required;
int af;
struct radiusd_addr addr;
struct radiusd_addr mask;
TAILQ_ENTRY(radiusd_client) next;
};
struct radiusd_module {
char name[RADIUSD_MODULE_NAME_LEN];
struct radiusd *radiusd;
pid_t pid;
int fd;
struct imsgbuf ibuf;
struct event ev;
bool writeready;
bool stopped;
uint32_t capabilities;
u_char *radpkt;
int radpktsiz;
int radpktoff;
char *secret;
TAILQ_ENTRY(radiusd_module) next;
int (*request_decoration)(void *, struct radius_query *);
int (*response_decoration)(void *, struct radius_query *);
};
struct radiusd_module_ref {
struct radiusd_module *module;
TAILQ_ENTRY(radiusd_module_ref) next;
};
struct radiusd_authentication {
char **username;
char *secret;
struct radiusd_module_ref *auth;
TAILQ_HEAD(,radiusd_module_ref) deco;
TAILQ_ENTRY(radiusd_authentication) next;
};
struct radiusd {
struct radiusd_listen_head listen;
struct event ev_sigterm;
struct event ev_sighup;
struct event ev_sigint;
struct event ev_sigchld;
TAILQ_HEAD(,radiusd_module) module;
TAILQ_HEAD(,radiusd_authentication) authen;
TAILQ_HEAD(,radiusd_client) client;
TAILQ_HEAD(,radius_query) query;
};
struct radius_query {
u_int id;
struct sockaddr_storage clientaddr;
int clientaddrlen;
int req_id;
u_char req_auth[16];
struct radiusd_listen *listen;
struct radiusd_client *client;
struct radiusd_authentication *authen;
RADIUS_PACKET *req;
RADIUS_PACKET *res;
int req_modified;
int res_modified;
char username[256]; /* original username */
TAILQ_ENTRY(radius_query) next;
};
#ifndef nitems
#define nitems(_x) (sizeof((_x)) / sizeof((_x)[0]))
#endif
#ifdef RADIUSD_DEBUG
#define RADIUSD_DBG(x) log_debug x
#else
#define RADIUSD_DBG(x)
#endif
#define RADIUSD_ASSERT(_cond) \
do { \
if (!(_cond)) { \
log_warnx( \
"ASSERT(%s) failed in %s() at %s:%d",\
#_cond, __func__, __FILE__, __LINE__);\
if (debug) abort(); \
} \
} while (0/* CONSTCOND */)
#define MODULE_DO_USERPASS(_m) \
((_m)->fd >= 0 && \
((_m)->capabilities & RADIUSD_MODULE_CAP_USERPASS) != 0)
#define MODULE_DO_ACCSREQ(_m) \
((_m)->fd >= 0 && \
((_m)->capabilities & RADIUSD_MODULE_CAP_ACCSREQ) != 0)
extern struct radiusd_module mod_standard;
extern struct radiusd_module mod_radius;
int parse_config(const char *, struct radiusd *);
void radiusd_conf_init(struct radiusd *);
struct radiusd_module *radiusd_module_load(struct radiusd *, const char *,
const char *);
void radiusd_module_unload(struct radiusd_module *);
void radiusd_access_request_answer(struct radius_query *);
int radiusd_access_request_fixup(struct radius_query *);
void radiusd_access_request_aborted(struct radius_query *);
void radius_attr_hide(const char *, const char *, const u_char *,
u_char *, int);
void radius_attr_unhide(const char *, const char *, const u_char *,
u_char *, int);
int radiusd_module_set(struct radiusd_module *, const char *, int, char * const *);
|
