18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS client 38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2002-2009, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h" 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h" 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "radius.h" 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "radius_client.h" 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eloop.h" 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* Defaults for RADIUS retransmit values (exponential backoff) */ 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_FIRST_WAIT - RADIUS client timeout for first retry in seconds 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_FIRST_WAIT 3 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_MAX_WAIT - RADIUS client maximum retry timeout in seconds 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_MAX_WAIT 120 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_MAX_RETRIES - RADIUS client maximum retries 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Maximum number of retransmit attempts before the entry is removed from 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * retransmit list. 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_MAX_RETRIES 10 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_MAX_ENTRIES - RADIUS client maximum pending messages 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Maximum number of entries in retransmit list (oldest entries will be 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * removed, if this limit is exceeded). 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_MAX_ENTRIES 30 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_NUM_FAILOVER - RADIUS client failover point 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The number of failed retry attempts after which the RADIUS server will be 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * changed (if one of more backup servers are configured). 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_NUM_FAILOVER 4 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * struct radius_rx_handler - RADIUS client RX handler 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This data structure is used internally inside the RADIUS client module to 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * store registered RX handlers. These handlers are registered by calls to 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_register() and unregistered when the RADIUS client is 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * deinitialized with a call to radius_client_deinit(). 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_rx_handler { 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * handler - Received RADIUS message handler 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusRxResult (*handler)(struct radius_msg *msg, 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *req, 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret, 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len, 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *data); 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * data - Context data for the handler 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *data; 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * struct radius_msg_list - RADIUS client message retransmit list 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This data structure is used internally inside the RADIUS client module to 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * store pending RADIUS requests that may still need to be retransmitted. 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_msg_list { 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * addr - STA/client address 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This is used to find RADIUS messages for the same STA. 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 addr[ETH_ALEN]; 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * msg - RADIUS message 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *msg; 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * msg_type - Message type 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type; 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * first_try - Time of the first transmission attempt 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t first_try; 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * next_try - Time for the next transmission attempt 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t next_try; 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * attempts - Number of transmission attempts 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int attempts; 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * next_wait - Next retransmission wait time in seconds 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int next_wait; 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * last_attempt - Time of the last transmission attempt 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct os_time last_attempt; 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * shared_secret - Shared secret with the target RADIUS server 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret; 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * shared_secret_len - shared_secret length in octets 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len; 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: server config with failover to backup server(s) */ 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * next - Next message in the list 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *next; 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * struct radius_client_data - Internal RADIUS client data 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This data structure is used internally inside the RADIUS client module. 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * External users allocate this by calling radius_client_init() and free it by 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * calling radius_client_deinit(). The pointer to this opaque data is used in 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * calls to other functions as an identifier for the RADIUS client instance. 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_client_data { 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * ctx - Context pointer for hostapd_logger() callbacks 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *ctx; 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * conf - RADIUS client configuration (list of RADIUS servers to use) 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf; 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * auth_serv_sock - IPv4 socket for RADIUS authentication messages 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int auth_serv_sock; 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * acct_serv_sock - IPv4 socket for RADIUS accounting messages 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int acct_serv_sock; 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * auth_serv_sock6 - IPv6 socket for RADIUS authentication messages 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int auth_serv_sock6; 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * acct_serv_sock6 - IPv6 socket for RADIUS accounting messages 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int acct_serv_sock6; 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * auth_sock - Currently used socket for RADIUS authentication server 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int auth_sock; 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * acct_sock - Currently used socket for RADIUS accounting server 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int acct_sock; 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * auth_handlers - Authentication message handlers 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_rx_handler *auth_handlers; 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * num_auth_handlers - Number of handlers in auth_handlers 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t num_auth_handlers; 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * acct_handlers - Accounting message handlers 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_rx_handler *acct_handlers; 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * num_acct_handlers - Number of handlers in acct_handlers 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t num_acct_handlers; 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * msgs - Pending outgoing RADIUS messages 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *msgs; 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * num_msgs - Number of pending messages in the msgs list 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t num_msgs; 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * next_radius_identifier - Next RADIUS message identifier to use 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 next_radius_identifier; 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtradius_change_server(struct radius_client_data *radius, 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *nserv, 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *oserv, 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int sock, int sock6, int auth); 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_init_acct(struct radius_client_data *radius); 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_init_auth(struct radius_client_data *radius); 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_msg_free(struct radius_msg_list *req) 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(req->msg); 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(req); 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_register - Register a RADIUS client RX handler 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @msg_type: RADIUS client type (RADIUS_AUTH or RADIUS_ACCT) 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @handler: Handler for received RADIUS messages 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @data: Context pointer for handler callbacks 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is used to register a handler for processing received RADIUS 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * authentication and accounting messages. The handler() callback function will 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * be called whenever a RADIUS message is received from the active server. 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * There can be multiple registered RADIUS message handlers. The handlers will 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * be called in order until one of them indicates that it has processed or 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * queued the message. 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint radius_client_register(struct radius_client_data *radius, 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type, 2668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusRxResult (*handler)(struct radius_msg *msg, 2678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *req, 2688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret, 2698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len, 2708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *data), 2718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *data) 2728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_rx_handler **handlers, *newh; 2748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t *num; 2758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg_type == RADIUS_ACCT) { 2778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers = &radius->acct_handlers; 2788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt num = &radius->num_acct_handlers; 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers = &radius->auth_handlers; 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt num = &radius->num_auth_handlers; 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt newh = os_realloc(*handlers, 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (*num + 1) * sizeof(struct radius_rx_handler)); 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (newh == NULL) 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt newh[*num].handler = handler; 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt newh[*num].data = data; 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (*num)++; 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *handlers = newh; 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_handle_send_error(struct radius_client_data *radius, 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int s, RadiusType msg_type) 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NATIVE_WINDOWS 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int _errno = errno; 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt perror("send[RADIUS]"); 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (_errno == ENOTCONN || _errno == EDESTADDRREQ || _errno == EINVAL || 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _errno == EBADF) { 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_INFO, 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Send failed - maybe interface status changed -" 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " try to connect again"); 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_unregister_read_sock(s); 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt close(s); 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg_type == RADIUS_ACCT || msg_type == RADIUS_ACCT_INTERIM) 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_init_acct(radius); 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_init_auth(radius); 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NATIVE_WINDOWS */ 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_retransmit(struct radius_client_data *radius, 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t now) 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int s; 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *buf; 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_ACCT || 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->msg_type == RADIUS_ACCT_INTERIM) { 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt s = radius->acct_sock; 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->attempts == 0) 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server->requests++; 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server->timeouts++; 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server->retransmissions++; 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt s = radius->auth_sock; 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->attempts == 0) 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server->requests++; 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server->timeouts++; 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server->retransmissions++; 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* retransmit; remove entry if too many attempts */ 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->attempts++; 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, entry->addr, HOSTAPD_MODULE_RADIUS, 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Resending RADIUS message (id=%d)", 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_get_hdr(entry->msg)->identifier); 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_get_time(&entry->last_attempt); 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = radius_msg_get_buf(entry->msg); 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (send(s, wpabuf_head(buf), wpabuf_len(buf), 0) < 0) 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_handle_send_error(radius, s, entry->msg_type); 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_try = now + entry->next_wait; 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_wait *= 2; 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->next_wait > RADIUS_CLIENT_MAX_WAIT) 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_wait = RADIUS_CLIENT_MAX_WAIT; 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->attempts >= RADIUS_CLIENT_MAX_RETRIES) { 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt printf("Removing un-ACKed RADIUS message due to too many " 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "failed retransmit attempts\n"); 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 1; 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_timer(void *eloop_ctx, void *timeout_ctx) 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *radius = eloop_ctx; 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct os_time now; 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t first; 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *tmp; 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int auth_failover = 0, acct_failover = 0; 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char abuf[50]; 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!entry) 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_get_time(&now); 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = 0; 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 3928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (now.sec >= entry->next_try && 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_retransmit(radius, entry, now.sec)) { 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = entry; 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(tmp); 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->attempts > RADIUS_CLIENT_NUM_FAILOVER) { 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_ACCT || 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->msg_type == RADIUS_ACCT_INTERIM) 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt acct_failover++; 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt auth_failover++; 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (first == 0 || entry->next_try < first) 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = entry->next_try; 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->msgs) { 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (first < now.sec) 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = now.sec; 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(first - now.sec, 0, 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_timer, radius, NULL); 4268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 4278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Next RADIUS client " 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "retransmit in %ld seconds", 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (long int) (first - now.sec)); 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (auth_failover && conf->num_auth_servers > 1) { 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *next, *old; 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old = conf->auth_server; 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_NOTICE, 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "No response from Authentication server " 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%s:%d - failover", 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_ip_txt(&old->addr, abuf, sizeof(abuf)), 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old->port); 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (entry = radius->msgs; entry; entry = entry->next) { 4438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_AUTH) 4448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old->timeouts++; 4458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt next = old + 1; 4488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (next > &(conf->auth_servers[conf->num_auth_servers - 1])) 4498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt next = conf->auth_servers; 4508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server = next; 4518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_change_server(radius, next, old, 4528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock, 4538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock6, 1); 4548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (acct_failover && conf->num_acct_servers > 1) { 4578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *next, *old; 4588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old = conf->acct_server; 4598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 4608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_NOTICE, 4618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "No response from Accounting server " 4628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%s:%d - failover", 4638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_ip_txt(&old->addr, abuf, sizeof(abuf)), 4648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old->port); 4658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (entry = radius->msgs; entry; entry = entry->next) { 4678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_ACCT || 4688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->msg_type == RADIUS_ACCT_INTERIM) 4698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old->timeouts++; 4708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt next = old + 1; 4738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (next > &conf->acct_servers[conf->num_acct_servers - 1]) 4748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt next = conf->acct_servers; 4758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server = next; 4768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_change_server(radius, next, old, 4778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock, 4788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock6, 0); 4798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_update_timeout(struct radius_client_data *radius) 4848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct os_time now; 4868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t first; 4878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry; 4888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(radius_client_timer, radius, NULL); 4908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->msgs == NULL) { 4928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 4938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = 0; 4968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (entry = radius->msgs; entry; entry = entry->next) { 4978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (first == 0 || entry->next_try < first) 4988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = entry->next_try; 4998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_get_time(&now); 5028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (first < now.sec) 5038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = now.sec; 5048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(first - now.sec, 0, radius_client_timer, radius, 5058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL); 5068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 5078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Next RADIUS client retransmit in" 5088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " %ld seconds\n", (long int) (first - now.sec)); 5098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_list_add(struct radius_client_data *radius, 5138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *msg, 5148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type, 5158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret, 5168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len, const u8 *addr) 5178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev; 5198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eloop_terminated()) { 5218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* No point in adding entries to retransmit queue since event 5228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * loop has already been terminated. */ 5238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(msg); 5248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 5258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = os_zalloc(sizeof(*entry)); 5288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry == NULL) { 5298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt printf("Failed to add RADIUS packet into retransmit list\n"); 5308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(msg); 5318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 5328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (addr) 5358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->addr, addr, ETH_ALEN); 5368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->msg = msg; 5378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->msg_type = msg_type; 5388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->shared_secret = shared_secret; 5398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->shared_secret_len = shared_secret_len; 5408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_get_time(&entry->last_attempt); 5418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->first_try = entry->last_attempt.sec; 5428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_try = entry->first_try + RADIUS_CLIENT_FIRST_WAIT; 5438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->attempts = 1; 5448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_wait = RADIUS_CLIENT_FIRST_WAIT * 2; 5458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next = radius->msgs; 5468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry; 5478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_update_timeout(radius); 5488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->num_msgs >= RADIUS_CLIENT_MAX_ENTRIES) { 5508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt printf("Removing the oldest un-ACKed RADIUS packet due to " 5518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "retransmit list limits.\n"); 5528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 5538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry->next) { 5548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 5558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 5568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) { 5588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = NULL; 5598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(entry); 5608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 5628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs++; 5638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_list_del(struct radius_client_data *radius, 5678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type, const u8 *addr) 5688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *tmp; 5708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (addr == NULL) 5728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 5738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 5758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 5768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 5778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == msg_type && 5788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(entry->addr, addr, ETH_ALEN) == 0) { 5798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 5808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 5818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 5828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 5838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = entry; 5848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 5858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, addr, 5868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 5878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 5888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Removing matching RADIUS message"); 5898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(tmp); 5908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 5918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 5928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 5948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 5958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 6008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_send - Send a RADIUS request 6018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 6028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @msg: RADIUS message to be sent 6038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @msg_type: Message type (RADIUS_AUTH, RADIUS_ACCT, RADIUS_ACCT_INTERIM) 6048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @addr: MAC address of the device related to this message or %NULL 6058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 6068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 6078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is used to transmit a RADIUS authentication (RADIUS_AUTH) or 6088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * accounting request (RADIUS_ACCT or RADIUS_ACCT_INTERIM). The only difference 6098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * between accounting and interim accounting messages is that the interim 6108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * message will override any pending interim accounting updates while a new 6118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * accounting message does not remove any pending messages. 6128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 6138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The message is added on the retransmission queue and will be retransmitted 6148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * automatically until a response is received or maximum number of retries 6158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (RADIUS_CLIENT_MAX_RETRIES) is reached. 6168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 6178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The related device MAC address can be used to identify pending messages that 6188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * can be removed with radius_client_flush_auth() or with interim accounting 6198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * updates. 6208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 6218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint radius_client_send(struct radius_client_data *radius, 6228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *msg, RadiusType msg_type, 6238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr) 6248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 6268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret; 6278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len; 6288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char *name; 6298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int s, res; 6308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *buf; 6318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg_type == RADIUS_ACCT_INTERIM) { 6338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Remove any pending interim acct update for the same STA. */ 6348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_list_del(radius, msg_type, addr); 6358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg_type == RADIUS_ACCT || msg_type == RADIUS_ACCT_INTERIM) { 6388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->acct_server == NULL) { 6398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, 6408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 6418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_INFO, 6428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "No accounting server configured"); 6438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret = conf->acct_server->shared_secret; 6468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret_len = conf->acct_server->shared_secret_len; 6478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_finish_acct(msg, shared_secret, shared_secret_len); 6488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt name = "accounting"; 6498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt s = radius->acct_sock; 6508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server->requests++; 6518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 6528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->auth_server == NULL) { 6538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, 6548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 6558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_INFO, 6568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "No authentication server configured"); 6578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret = conf->auth_server->shared_secret; 6608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret_len = conf->auth_server->shared_secret_len; 6618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_finish(msg, shared_secret, shared_secret_len); 6628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt name = "authentication"; 6638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt s = radius->auth_sock; 6648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server->requests++; 6658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 6688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Sending RADIUS message to %s " 6698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "server", name); 6708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->msg_dumps) 6718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_dump(msg); 6728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = radius_msg_get_buf(msg); 6748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = send(s, wpabuf_head(buf), wpabuf_len(buf), 0); 6758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (res < 0) 6768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_handle_send_error(radius, s, msg_type); 6778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_list_add(radius, msg, msg_type, shared_secret, 6798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret_len, addr); 6808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return res; 6828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_receive(int sock, void *eloop_ctx, void *sock_ctx) 6868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *radius = eloop_ctx; 6888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 6898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type = (RadiusType) sock_ctx; 6908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int len, roundtrip; 6918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char buf[3000]; 6928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *msg; 6938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_hdr *hdr; 6948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_rx_handler *handlers; 6958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t num_handlers, i; 6968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *req, *prev_req; 6978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct os_time now; 6988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *rconf; 6998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int invalid_authenticator = 0; 7008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg_type == RADIUS_ACCT) { 7028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers = radius->acct_handlers; 7038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt num_handlers = radius->num_acct_handlers; 7048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf = conf->acct_server; 7058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 7068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers = radius->auth_handlers; 7078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt num_handlers = radius->num_auth_handlers; 7088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf = conf->auth_server; 7098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = recv(sock, buf, sizeof(buf), MSG_DONTWAIT); 7128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len < 0) { 7138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt perror("recv[RADIUS]"); 7148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 7158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 7178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Received %d bytes from RADIUS " 7188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "server", len); 7198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len == sizeof(buf)) { 7208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt printf("Possibly too long UDP frame for our buffer - " 7218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "dropping it\n"); 7228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 7238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg = radius_msg_parse(buf, len); 7268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL) { 7278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt printf("Parsing incoming RADIUS frame failed\n"); 7288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->malformed_responses++; 7298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 7308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr = radius_msg_get_hdr(msg); 7328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 7348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Received RADIUS message"); 7358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->msg_dumps) 7368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_dump(msg); 7378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (hdr->code) { 7398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_CODE_ACCESS_ACCEPT: 7408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->access_accepts++; 7418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_CODE_ACCESS_REJECT: 7438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->access_rejects++; 7448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_CODE_ACCESS_CHALLENGE: 7468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->access_challenges++; 7478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_CODE_ACCOUNTING_RESPONSE: 7498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->responses++; 7508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev_req = NULL; 7548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt req = radius->msgs; 7558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (req) { 7568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: also match by src addr:port of the packet when using 7578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * alternative RADIUS servers (?) */ 7588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((req->msg_type == msg_type || 7598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (req->msg_type == RADIUS_ACCT_INTERIM && 7608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg_type == RADIUS_ACCT)) && 7618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_get_hdr(req->msg)->identifier == 7628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr->identifier) 7638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev_req = req; 7668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt req = req->next; 7678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (req == NULL) { 7708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 7718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 7728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "No matching RADIUS request found (type=%d " 7738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "id=%d) - dropping packet", 7748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg_type, hdr->identifier); 7758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto fail; 7768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_get_time(&now); 7798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt roundtrip = (now.sec - req->last_attempt.sec) * 100 + 7808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (now.usec - req->last_attempt.usec) / 10000; 7818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, req->addr, HOSTAPD_MODULE_RADIUS, 7828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 7838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Received RADIUS packet matched with a pending " 7848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "request, round trip time %d.%02d sec", 7858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt roundtrip / 100, roundtrip % 100); 7868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->round_trip_time = roundtrip; 7878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Remove ACKed RADIUS packet from retransmit list */ 7898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev_req) 7908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev_req->next = req->next; 7918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 7928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = req->next; 7938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 7948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < num_handlers; i++) { 7968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusRxResult res; 7978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = handlers[i].handler(msg, req->msg, req->shared_secret, 7988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt req->shared_secret_len, 7998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers[i].data); 8008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (res) { 8018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_RX_PROCESSED: 8028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(msg); 8038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* continue */ 8048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_RX_QUEUED: 8058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(req); 8068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 8078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_RX_INVALID_AUTHENTICATOR: 8088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt invalid_authenticator++; 8098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* continue */ 8108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_RX_UNKNOWN: 8118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* continue with next handler */ 8128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (invalid_authenticator) 8178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->bad_authenticators++; 8188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 8198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->unknown_types++; 8208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, req->addr, HOSTAPD_MODULE_RADIUS, 8218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "No RADIUS RX handler found " 8228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(type=%d code=%d id=%d)%s - dropping packet", 8238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg_type, hdr->code, hdr->identifier, 8248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt invalid_authenticator ? " [INVALID AUTHENTICATOR]" : 8258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ""); 8268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(req); 8278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt fail: 8298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(msg); 8308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 8318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 8348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_get_id - Get an identifier for a new RADIUS message 8358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 8368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Allocated identifier 8378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 8388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is used to fetch a unique (among pending requests) identifier 8398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * for a new RADIUS message. 8408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 8418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 radius_client_get_id(struct radius_client_data *radius) 8428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 8438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *_remove; 8448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 id = radius->next_radius_identifier++; 8458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* remove entries with matching id from retransmit list to avoid 8478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * using new reply from the RADIUS server with an old request */ 8488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 8498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 8508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 8518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius_msg_get_hdr(entry->msg)->identifier == id) { 8528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, entry->addr, 8538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 8548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 8558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Removing pending RADIUS message, " 8568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "since its id (%d) is reused", id); 8578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 8588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 8598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 8608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 8618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _remove = entry; 8628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 8638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _remove = NULL; 8648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 8658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 8678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (_remove) 8698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(_remove); 8708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return id; 8738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 8748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 8778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_flush - Flush all pending RADIUS client messages 8788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 8798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @only_auth: Whether only authentication messages are removed 8808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 8818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid radius_client_flush(struct radius_client_data *radius, int only_auth) 8828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 8838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *tmp; 8848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!radius) 8868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 8878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 8898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 8908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 8928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!only_auth || entry->msg_type == RADIUS_AUTH) { 8938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 8948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 8958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 8968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 8978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = entry; 8998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 9008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(tmp); 9018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 9028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 9038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 9048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 9058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->msgs == NULL) 9098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(radius_client_timer, radius, NULL); 9108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_update_acct_msgs(struct radius_client_data *radius, 9148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret, 9158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len) 9168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry; 9188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!radius) 9208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 9218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (entry = radius->msgs; entry; entry = entry->next) { 9238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_ACCT) { 9248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->shared_secret = shared_secret; 9258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->shared_secret_len = shared_secret_len; 9268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_finish_acct(entry->msg, shared_secret, 9278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret_len); 9288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int 9348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtradius_change_server(struct radius_client_data *radius, 9358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *nserv, 9368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *oserv, 9378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int sock, int sock6, int auth) 9388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct sockaddr_in serv, claddr; 9408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 9418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct sockaddr_in6 serv6, claddr6; 9428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 9438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct sockaddr *addr, *cl_addr; 9448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt socklen_t addrlen, claddrlen; 9458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char abuf[50]; 9468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int sel_sock; 9478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry; 9488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 9498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 9518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_INFO, 9528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%s server %s:%d", 9538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt auth ? "Authentication" : "Accounting", 9548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_ip_txt(&nserv->addr, abuf, sizeof(abuf)), 9558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt nserv->port); 9568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!oserv || nserv->shared_secret_len != oserv->shared_secret_len || 9588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(nserv->shared_secret, oserv->shared_secret, 9598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt nserv->shared_secret_len) != 0) { 9608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Pending RADIUS packets used different shared secret, so 9618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * they need to be modified. Update accounting message 9628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * authenticators here. Authentication messages are removed 9638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * since they would require more changes and the new RADIUS 9648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * server may not be prepared to receive them anyway due to 9658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * missing state information. Client will likely retry 9668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * authentication, so this should not be an issue. */ 9678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (auth) 9688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_flush(radius, 1); 9698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 9708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_update_acct_msgs( 9718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius, nserv->shared_secret, 9728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt nserv->shared_secret_len); 9738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Reset retry counters for the new server */ 9778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (entry = radius->msgs; entry; entry = entry->next) { 9788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((auth && entry->msg_type != RADIUS_AUTH) || 9798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (!auth && entry->msg_type != RADIUS_ACCT)) 9808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 9818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_try = entry->first_try + RADIUS_CLIENT_FIRST_WAIT; 9828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->attempts = 0; 9838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_wait = RADIUS_CLIENT_FIRST_WAIT * 2; 9848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->msgs) { 9878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(radius_client_timer, radius, NULL); 9888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(RADIUS_CLIENT_FIRST_WAIT, 0, 9898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_timer, radius, NULL); 9908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (nserv->addr.af) { 9938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET: 9948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&serv, 0, sizeof(serv)); 9958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv.sin_family = AF_INET; 9968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv.sin_addr.s_addr = nserv->addr.u.v4.s_addr; 9978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv.sin_port = htons(nserv->port); 9988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr = (struct sockaddr *) &serv; 9998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addrlen = sizeof(serv); 10008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sel_sock = sock; 10018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 10028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 10038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET6: 10048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&serv6, 0, sizeof(serv6)); 10058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv6.sin6_family = AF_INET6; 10068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(&serv6.sin6_addr, &nserv->addr.u.v6, 10078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(struct in6_addr)); 10088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv6.sin6_port = htons(nserv->port); 10098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr = (struct sockaddr *) &serv6; 10108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addrlen = sizeof(serv6); 10118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sel_sock = sock6; 10128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 10138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 10148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 10158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 10168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->force_client_addr) { 10198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (conf->client_addr.af) { 10208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET: 10218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&claddr, 0, sizeof(claddr)); 10228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr.sin_family = AF_INET; 10238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr.sin_addr.s_addr = conf->client_addr.u.v4.s_addr; 10248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr.sin_port = htons(0); 10258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cl_addr = (struct sockaddr *) &claddr; 10268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddrlen = sizeof(claddr); 10278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 10288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 10298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET6: 10308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&claddr6, 0, sizeof(claddr6)); 10318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr6.sin6_family = AF_INET6; 10328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(&claddr6.sin6_addr, &conf->client_addr.u.v6, 10338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(struct in6_addr)); 10348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr6.sin6_port = htons(0); 10358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cl_addr = (struct sockaddr *) &claddr6; 10368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddrlen = sizeof(claddr6); 10378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 10388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 10398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 10408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 10418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (bind(sel_sock, cl_addr, claddrlen) < 0) { 10448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt perror("bind[radius]"); 10458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 10468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (connect(sel_sock, addr, addrlen) < 0) { 10508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt perror("connect[radius]"); 10518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 10528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NATIVE_WINDOWS 10558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (nserv->addr.af) { 10568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET: 10578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddrlen = sizeof(claddr); 10588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt getsockname(sel_sock, (struct sockaddr *) &claddr, &claddrlen); 10598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RADIUS local address: %s:%u", 10608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt inet_ntoa(claddr.sin_addr), ntohs(claddr.sin_port)); 10618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 10628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 10638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET6: { 10648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddrlen = sizeof(claddr6); 10658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt getsockname(sel_sock, (struct sockaddr *) &claddr6, 10668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt &claddrlen); 10678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RADIUS local address: %s:%u", 10688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt inet_ntop(AF_INET6, &claddr6.sin6_addr, 10698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt abuf, sizeof(abuf)), 10708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ntohs(claddr6.sin6_port)); 10718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 10728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 10748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NATIVE_WINDOWS */ 10768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (auth) 10788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_sock = sel_sock; 10798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 10808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_sock = sel_sock; 10818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 10838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 10848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_retry_primary_timer(void *eloop_ctx, void *timeout_ctx) 10878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *radius = eloop_ctx; 10898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 10908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *oserv; 10918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_sock >= 0 && conf->auth_servers && 10938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server != conf->auth_servers) { 10948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt oserv = conf->auth_server; 10958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server = conf->auth_servers; 10968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_change_server(radius, conf->auth_server, oserv, 10978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock, 10988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock6, 1); 10998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_sock >= 0 && conf->acct_servers && 11028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server != conf->acct_servers) { 11038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt oserv = conf->acct_server; 11048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server = conf->acct_servers; 11058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_change_server(radius, conf->acct_server, oserv, 11068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock, 11078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock6, 0); 11088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->retry_primary_interval) 11118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(conf->retry_primary_interval, 0, 11128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_retry_primary_timer, radius, 11138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL); 11148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_disable_pmtu_discovery(int s) 11188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int r = -1; 11208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if defined(IP_MTU_DISCOVER) && defined(IP_PMTUDISC_DONT) 11218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Turn off Path MTU discovery on IPv4/UDP sockets. */ 11228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int action = IP_PMTUDISC_DONT; 11238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt r = setsockopt(s, IPPROTO_IP, IP_MTU_DISCOVER, &action, 11248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(action)); 11258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (r == -1) 11268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "Failed to set IP_MTU_DISCOVER: " 11278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%s", strerror(errno)); 11288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif 11298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return r; 11308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_init_auth(struct radius_client_data *radius) 11348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 11368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ok = 0; 11378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock = socket(PF_INET, SOCK_DGRAM, 0); 11398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_serv_sock < 0) 11408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt perror("socket[PF_INET,SOCK_DGRAM]"); 11418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 11428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_disable_pmtu_discovery(radius->auth_serv_sock); 11438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok++; 11448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 11478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock6 = socket(PF_INET6, SOCK_DGRAM, 0); 11488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_serv_sock6 < 0) 11498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt perror("socket[PF_INET6,SOCK_DGRAM]"); 11508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 11518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok++; 11528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 11538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ok == 0) 11558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_change_server(radius, conf->auth_server, NULL, 11588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock, radius->auth_serv_sock6, 11598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1); 11608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_serv_sock >= 0 && 11628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_read_sock(radius->auth_serv_sock, 11638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_receive, radius, 11648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (void *) RADIUS_AUTH)) { 11658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt printf("Could not register read socket for authentication " 11668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "server\n"); 11678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 11718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_serv_sock6 >= 0 && 11728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_read_sock(radius->auth_serv_sock6, 11738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_receive, radius, 11748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (void *) RADIUS_AUTH)) { 11758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt printf("Could not register read socket for authentication " 11768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "server\n"); 11778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 11808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 11828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_init_acct(struct radius_client_data *radius) 11868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 11888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ok = 0; 11898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock = socket(PF_INET, SOCK_DGRAM, 0); 11918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_serv_sock < 0) 11928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt perror("socket[PF_INET,SOCK_DGRAM]"); 11938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 11948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_disable_pmtu_discovery(radius->acct_serv_sock); 11958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok++; 11968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 11998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock6 = socket(PF_INET6, SOCK_DGRAM, 0); 12008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_serv_sock6 < 0) 12018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt perror("socket[PF_INET6,SOCK_DGRAM]"); 12028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 12038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok++; 12048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 12058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ok == 0) 12078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 12088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_change_server(radius, conf->acct_server, NULL, 12108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock, radius->acct_serv_sock6, 12118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 0); 12128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_serv_sock >= 0 && 12148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_read_sock(radius->acct_serv_sock, 12158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_receive, radius, 12168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (void *) RADIUS_ACCT)) { 12178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt printf("Could not register read socket for accounting " 12188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "server\n"); 12198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 12208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 12238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_serv_sock6 >= 0 && 12248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_read_sock(radius->acct_serv_sock6, 12258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_receive, radius, 12268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (void *) RADIUS_ACCT)) { 12278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt printf("Could not register read socket for accounting " 12288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "server\n"); 12298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 12308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 12328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 12348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 12358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 12388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_init - Initialize RADIUS client 12398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Callback context to be used in hostapd_logger() calls 12408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @conf: RADIUS client configuration (RADIUS servers) 12418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to private RADIUS client context or %NULL on failure 12428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 12438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The caller is responsible for keeping the configuration data available for 12448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * the lifetime of the RADIUS client, i.e., until radius_client_deinit() is 12458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * called for the returned context pointer. 12468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 12478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_client_data * 12488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtradius_client_init(void *ctx, struct hostapd_radius_servers *conf) 12498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 12508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *radius; 12518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius = os_zalloc(sizeof(struct radius_client_data)); 12538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius == NULL) 12548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 12558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->ctx = ctx; 12578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->conf = conf; 12588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock = radius->acct_serv_sock = 12598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock6 = radius->acct_serv_sock6 = 12608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_sock = radius->acct_sock = -1; 12618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->auth_server && radius_client_init_auth(radius)) { 12638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_deinit(radius); 12648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 12658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->acct_server && radius_client_init_acct(radius)) { 12688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_deinit(radius); 12698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 12708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->retry_primary_interval) 12738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(conf->retry_primary_interval, 0, 12748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_retry_primary_timer, radius, 12758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL); 12768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return radius; 12788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 12798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 12828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_deinit - Deinitialize RADIUS client 12838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 12848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 12858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid radius_client_deinit(struct radius_client_data *radius) 12868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 12878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!radius) 12888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 12898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_serv_sock >= 0) 12918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_unregister_read_sock(radius->auth_serv_sock); 12928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_serv_sock >= 0) 12938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_unregister_read_sock(radius->acct_serv_sock); 12948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 12958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_serv_sock6 >= 0) 12968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_unregister_read_sock(radius->auth_serv_sock6); 12978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_serv_sock6 >= 0) 12988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_unregister_read_sock(radius->acct_serv_sock6); 12998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 13008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(radius_retry_primary_timer, radius, NULL); 13028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_flush(radius, 0); 13048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(radius->auth_handlers); 13058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(radius->acct_handlers); 13068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(radius); 13078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 13088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 13118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_flush_auth - Flush pending RADIUS messages for an address 13128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 13138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @addr: MAC address of the related device 13148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 13158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function can be used to remove pending RADIUS authentication messages 13168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * that are related to a specific device. The addr parameter is matched with 13178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * the one used in radius_client_send() call that was used to transmit the 13188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * authentication request. 13198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 13208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid radius_client_flush_auth(struct radius_client_data *radius, 13218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr) 13228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 13238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *tmp; 13248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 13268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 13278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 13288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_AUTH && 13298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(entry->addr, addr, ETH_ALEN) == 0) { 13308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, addr, 13318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 13328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 13338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Removing pending RADIUS authentication" 13348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " message for removed client"); 13358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 13378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 13388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 13398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 13408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = entry; 13428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 13438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(tmp); 13448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 13458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 13468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 13478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 13498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 13508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 13518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 13528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_dump_auth_server(char *buf, size_t buflen, 13558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *serv, 13568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *cli) 13578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 13588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pending = 0; 13598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *msg; 13608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char abuf[50]; 13618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cli) { 13638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (msg = cli->msgs; msg; msg = msg->next) { 13648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg->msg_type == RADIUS_AUTH) 13658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pending++; 13668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 13678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 13688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return os_snprintf(buf, buflen, 13708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthServerIndex=%d\n" 13718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthServerAddress=%s\n" 13728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientServerPortNumber=%d\n" 13738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientRoundTripTime=%d\n" 13748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessRequests=%u\n" 13758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessRetransmissions=%u\n" 13768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessAccepts=%u\n" 13778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessRejects=%u\n" 13788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessChallenges=%u\n" 13798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientMalformedAccessResponses=%u\n" 13808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientBadAuthenticators=%u\n" 13818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientPendingRequests=%u\n" 13828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientTimeouts=%u\n" 13838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientUnknownTypes=%u\n" 13848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientPacketsDropped=%u\n", 13858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->index, 13868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_ip_txt(&serv->addr, abuf, sizeof(abuf)), 13878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->port, 13888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->round_trip_time, 13898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->requests, 13908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->retransmissions, 13918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->access_accepts, 13928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->access_rejects, 13938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->access_challenges, 13948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->malformed_responses, 13958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->bad_authenticators, 13968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pending, 13978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->timeouts, 13988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->unknown_types, 13998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->packets_dropped); 14008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 14018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_dump_acct_server(char *buf, size_t buflen, 14048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *serv, 14058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *cli) 14068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 14078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pending = 0; 14088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *msg; 14098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char abuf[50]; 14108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cli) { 14128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (msg = cli->msgs; msg; msg = msg->next) { 14138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg->msg_type == RADIUS_ACCT || 14148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->msg_type == RADIUS_ACCT_INTERIM) 14158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pending++; 14168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return os_snprintf(buf, buflen, 14208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccServerIndex=%d\n" 14218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccServerAddress=%s\n" 14228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientServerPortNumber=%d\n" 14238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientRoundTripTime=%d\n" 14248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientRequests=%u\n" 14258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientRetransmissions=%u\n" 14268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientResponses=%u\n" 14278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientMalformedResponses=%u\n" 14288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientBadAuthenticators=%u\n" 14298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientPendingRequests=%u\n" 14308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientTimeouts=%u\n" 14318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientUnknownTypes=%u\n" 14328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientPacketsDropped=%u\n", 14338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->index, 14348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_ip_txt(&serv->addr, abuf, sizeof(abuf)), 14358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->port, 14368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->round_trip_time, 14378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->requests, 14388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->retransmissions, 14398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->responses, 14408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->malformed_responses, 14418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->bad_authenticators, 14428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pending, 14438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->timeouts, 14448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->unknown_types, 14458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->packets_dropped); 14468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 14478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 14508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_get_mib - Get RADIUS client MIB information 14518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 14528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @buf: Buffer for returning MIB data in text format 14538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @buflen: Maximum buf length in octets 14548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Number of octets written into the buffer 14558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 14568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint radius_client_get_mib(struct radius_client_data *radius, char *buf, 14578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t buflen) 14588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 14598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 14608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int i; 14618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *serv; 14628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int count = 0; 14638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->auth_servers) { 14658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < conf->num_auth_servers; i++) { 14668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv = &conf->auth_servers[i]; 14678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt count += radius_client_dump_auth_server( 14688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf + count, buflen - count, serv, 14698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv == conf->auth_server ? 14708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius : NULL); 14718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->acct_servers) { 14758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < conf->num_acct_servers; i++) { 14768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv = &conf->acct_servers[i]; 14778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt count += radius_client_dump_acct_server( 14788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf + count, buflen - count, serv, 14798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv == conf->acct_server ? 14808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius : NULL); 14818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return count; 14858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 14868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid radius_client_reconfig(struct radius_client_data *radius, 14898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf) 14908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 14918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius) 14928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->conf = conf; 14938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1494