18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS client 38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2002-2009, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h" 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h" 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "radius.h" 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "radius_client.h" 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eloop.h" 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* Defaults for RADIUS retransmit values (exponential backoff) */ 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_FIRST_WAIT - RADIUS client timeout for first retry in seconds 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_FIRST_WAIT 3 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_MAX_WAIT - RADIUS client maximum retry timeout in seconds 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_MAX_WAIT 120 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_MAX_RETRIES - RADIUS client maximum retries 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Maximum number of retransmit attempts before the entry is removed from 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * retransmit list. 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_MAX_RETRIES 10 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_MAX_ENTRIES - RADIUS client maximum pending messages 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Maximum number of entries in retransmit list (oldest entries will be 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * removed, if this limit is exceeded). 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_MAX_ENTRIES 30 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_NUM_FAILOVER - RADIUS client failover point 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The number of failed retry attempts after which the RADIUS server will be 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * changed (if one of more backup servers are configured). 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_NUM_FAILOVER 4 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * struct radius_rx_handler - RADIUS client RX handler 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This data structure is used internally inside the RADIUS client module to 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * store registered RX handlers. These handlers are registered by calls to 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_register() and unregistered when the RADIUS client is 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * deinitialized with a call to radius_client_deinit(). 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_rx_handler { 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * handler - Received RADIUS message handler 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusRxResult (*handler)(struct radius_msg *msg, 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *req, 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret, 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len, 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *data); 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * data - Context data for the handler 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *data; 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * struct radius_msg_list - RADIUS client message retransmit list 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This data structure is used internally inside the RADIUS client module to 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * store pending RADIUS requests that may still need to be retransmitted. 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_msg_list { 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * addr - STA/client address 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This is used to find RADIUS messages for the same STA. 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 addr[ETH_ALEN]; 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * msg - RADIUS message 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *msg; 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * msg_type - Message type 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type; 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * first_try - Time of the first transmission attempt 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t first_try; 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * next_try - Time for the next transmission attempt 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t next_try; 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * attempts - Number of transmission attempts 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int attempts; 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * next_wait - Next retransmission wait time in seconds 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int next_wait; 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * last_attempt - Time of the last transmission attempt 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 125fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt struct os_reltime last_attempt; 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * shared_secret - Shared secret with the target RADIUS server 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret; 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * shared_secret_len - shared_secret length in octets 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len; 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: server config with failover to backup server(s) */ 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * next - Next message in the list 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *next; 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * struct radius_client_data - Internal RADIUS client data 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This data structure is used internally inside the RADIUS client module. 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * External users allocate this by calling radius_client_init() and free it by 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * calling radius_client_deinit(). The pointer to this opaque data is used in 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * calls to other functions as an identifier for the RADIUS client instance. 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_client_data { 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * ctx - Context pointer for hostapd_logger() callbacks 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *ctx; 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * conf - RADIUS client configuration (list of RADIUS servers to use) 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf; 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * auth_serv_sock - IPv4 socket for RADIUS authentication messages 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int auth_serv_sock; 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * acct_serv_sock - IPv4 socket for RADIUS accounting messages 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int acct_serv_sock; 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * auth_serv_sock6 - IPv6 socket for RADIUS authentication messages 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int auth_serv_sock6; 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * acct_serv_sock6 - IPv6 socket for RADIUS accounting messages 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int acct_serv_sock6; 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * auth_sock - Currently used socket for RADIUS authentication server 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int auth_sock; 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * acct_sock - Currently used socket for RADIUS accounting server 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int acct_sock; 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * auth_handlers - Authentication message handlers 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_rx_handler *auth_handlers; 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * num_auth_handlers - Number of handlers in auth_handlers 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t num_auth_handlers; 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * acct_handlers - Accounting message handlers 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_rx_handler *acct_handlers; 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * num_acct_handlers - Number of handlers in acct_handlers 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t num_acct_handlers; 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * msgs - Pending outgoing RADIUS messages 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *msgs; 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * num_msgs - Number of pending messages in the msgs list 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t num_msgs; 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * next_radius_identifier - Next RADIUS message identifier to use 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 next_radius_identifier; 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtradius_change_server(struct radius_client_data *radius, 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *nserv, 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *oserv, 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int sock, int sock6, int auth); 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_init_acct(struct radius_client_data *radius); 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_init_auth(struct radius_client_data *radius); 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_msg_free(struct radius_msg_list *req) 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(req->msg); 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(req); 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_register - Register a RADIUS client RX handler 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @msg_type: RADIUS client type (RADIUS_AUTH or RADIUS_ACCT) 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @handler: Handler for received RADIUS messages 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @data: Context pointer for handler callbacks 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is used to register a handler for processing received RADIUS 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * authentication and accounting messages. The handler() callback function will 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * be called whenever a RADIUS message is received from the active server. 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * There can be multiple registered RADIUS message handlers. The handlers will 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * be called in order until one of them indicates that it has processed or 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * queued the message. 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint radius_client_register(struct radius_client_data *radius, 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type, 2668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusRxResult (*handler)(struct radius_msg *msg, 2678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *req, 2688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret, 2698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len, 2708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *data), 2718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *data) 2728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_rx_handler **handlers, *newh; 2748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t *num; 2758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg_type == RADIUS_ACCT) { 2778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers = &radius->acct_handlers; 2788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt num = &radius->num_acct_handlers; 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers = &radius->auth_handlers; 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt num = &radius->num_auth_handlers; 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28461d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt newh = os_realloc_array(*handlers, *num + 1, 28561d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt sizeof(struct radius_rx_handler)); 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (newh == NULL) 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt newh[*num].handler = handler; 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt newh[*num].data = data; 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (*num)++; 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *handlers = newh; 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 298717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt/* 299717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt * Returns >0 if message queue was flushed (i.e., the message that triggered 300717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt * the error is not available anymore) 301717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt */ 302717574375e969e8272c6d1a26137286eac158abbDmitry Shmidtstatic int radius_client_handle_send_error(struct radius_client_data *radius, 303717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt int s, RadiusType msg_type) 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NATIVE_WINDOWS 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int _errno = errno; 307cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "send[RADIUS]: %s", strerror(errno)); 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (_errno == ENOTCONN || _errno == EDESTADDRREQ || _errno == EINVAL || 309717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt _errno == EBADF || _errno == ENETUNREACH) { 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_INFO, 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Send failed - maybe interface status changed -" 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " try to connect again"); 314717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (msg_type == RADIUS_ACCT || 315717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt msg_type == RADIUS_ACCT_INTERIM) { 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_init_acct(radius); 317717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt return 0; 318717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } else { 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_init_auth(radius); 320717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt return 1; 321717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NATIVE_WINDOWS */ 324717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 325717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt return 0; 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_retransmit(struct radius_client_data *radius, 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t now) 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int s; 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *buf; 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_ACCT || 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->msg_type == RADIUS_ACCT_INTERIM) { 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt s = radius->acct_sock; 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->attempts == 0) 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server->requests++; 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server->timeouts++; 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server->retransmissions++; 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt s = radius->auth_sock; 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->attempts == 0) 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server->requests++; 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server->timeouts++; 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server->retransmissions++; 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* retransmit; remove entry if too many attempts */ 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->attempts++; 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, entry->addr, HOSTAPD_MODULE_RADIUS, 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Resending RADIUS message (id=%d)", 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_get_hdr(entry->msg)->identifier); 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 362fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&entry->last_attempt); 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = radius_msg_get_buf(entry->msg); 364717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (send(s, wpabuf_head(buf), wpabuf_len(buf), 0) < 0) { 365717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (radius_client_handle_send_error(radius, s, entry->msg_type) 366717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt > 0) 367717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt return 0; 368717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_try = now + entry->next_wait; 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_wait *= 2; 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->next_wait > RADIUS_CLIENT_MAX_WAIT) 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_wait = RADIUS_CLIENT_MAX_WAIT; 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->attempts >= RADIUS_CLIENT_MAX_RETRIES) { 375cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Removing un-ACKed message due to too many failed retransmit attempts"); 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 1; 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_timer(void *eloop_ctx, void *timeout_ctx) 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *radius = eloop_ctx; 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 387fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt struct os_reltime now; 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t first; 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *tmp; 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int auth_failover = 0, acct_failover = 0; 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char abuf[50]; 392717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt size_t prev_num_msgs; 393717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt int s; 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!entry) 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 399fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&now); 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = 0; 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 404717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt prev_num_msgs = radius->num_msgs; 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (now.sec >= entry->next_try && 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_retransmit(radius, entry, now.sec)) { 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = entry; 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(tmp); 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 419717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (prev_num_msgs != radius->num_msgs) { 420717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt wpa_printf(MSG_DEBUG, 421717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt "RADIUS: Message removed from queue - restart from beginning"); 422717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt entry = radius->msgs; 423717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt prev = NULL; 424717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt continue; 425717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 426717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 427717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt s = entry->msg_type == RADIUS_AUTH ? radius->auth_sock : 428717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius->acct_sock; 429717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (entry->attempts > RADIUS_CLIENT_NUM_FAILOVER || 430717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt (s < 0 && entry->attempts > 0)) { 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_ACCT || 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->msg_type == RADIUS_ACCT_INTERIM) 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt acct_failover++; 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt auth_failover++; 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (first == 0 || entry->next_try < first) 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = entry->next_try; 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 4428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 4438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->msgs) { 4468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (first < now.sec) 4478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = now.sec; 4488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(first - now.sec, 0, 4498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_timer, radius, NULL); 4508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 4518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Next RADIUS client " 4528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "retransmit in %ld seconds", 4538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (long int) (first - now.sec)); 4548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (auth_failover && conf->num_auth_servers > 1) { 4578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *next, *old; 4588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old = conf->auth_server; 4598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 4608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_NOTICE, 4618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "No response from Authentication server " 4628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%s:%d - failover", 4638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_ip_txt(&old->addr, abuf, sizeof(abuf)), 4648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old->port); 4658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (entry = radius->msgs; entry; entry = entry->next) { 4678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_AUTH) 4688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old->timeouts++; 4698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt next = old + 1; 4728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (next > &(conf->auth_servers[conf->num_auth_servers - 1])) 4738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt next = conf->auth_servers; 4748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server = next; 4758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_change_server(radius, next, old, 4768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock, 4778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock6, 1); 4788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (acct_failover && conf->num_acct_servers > 1) { 4818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *next, *old; 4828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old = conf->acct_server; 4838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 4848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_NOTICE, 4858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "No response from Accounting server " 4868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%s:%d - failover", 4878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_ip_txt(&old->addr, abuf, sizeof(abuf)), 4888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old->port); 4898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (entry = radius->msgs; entry; entry = entry->next) { 4918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_ACCT || 4928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->msg_type == RADIUS_ACCT_INTERIM) 4938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old->timeouts++; 4948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt next = old + 1; 4978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (next > &conf->acct_servers[conf->num_acct_servers - 1]) 4988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt next = conf->acct_servers; 4998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server = next; 5008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_change_server(radius, next, old, 5018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock, 5028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock6, 0); 5038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_update_timeout(struct radius_client_data *radius) 5088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 509fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt struct os_reltime now; 5108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t first; 5118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry; 5128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(radius_client_timer, radius, NULL); 5148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->msgs == NULL) { 5168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 5178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = 0; 5208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (entry = radius->msgs; entry; entry = entry->next) { 5218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (first == 0 || entry->next_try < first) 5228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = entry->next_try; 5238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 525fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&now); 5268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (first < now.sec) 5278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = now.sec; 5288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(first - now.sec, 0, radius_client_timer, radius, 5298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL); 5308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 5318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Next RADIUS client retransmit in" 53204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt " %ld seconds", (long int) (first - now.sec)); 5338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_list_add(struct radius_client_data *radius, 5378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *msg, 5388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type, 5398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret, 5408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len, const u8 *addr) 5418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev; 5438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eloop_terminated()) { 5458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* No point in adding entries to retransmit queue since event 5468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * loop has already been terminated. */ 5478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(msg); 5488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 5498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = os_zalloc(sizeof(*entry)); 5528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry == NULL) { 553cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Failed to add packet into retransmit list"); 5548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(msg); 5558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 5568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (addr) 5598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->addr, addr, ETH_ALEN); 5608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->msg = msg; 5618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->msg_type = msg_type; 5628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->shared_secret = shared_secret; 5638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->shared_secret_len = shared_secret_len; 564fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&entry->last_attempt); 5658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->first_try = entry->last_attempt.sec; 5668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_try = entry->first_try + RADIUS_CLIENT_FIRST_WAIT; 5678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->attempts = 1; 5688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_wait = RADIUS_CLIENT_FIRST_WAIT * 2; 5698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next = radius->msgs; 5708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry; 5718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_update_timeout(radius); 5728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->num_msgs >= RADIUS_CLIENT_MAX_ENTRIES) { 574cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Removing the oldest un-ACKed packet due to retransmit list limits"); 5758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 5768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry->next) { 5778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 5788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 5798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) { 5818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = NULL; 5828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(entry); 5838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 5858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs++; 5868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_list_del(struct radius_client_data *radius, 5908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type, const u8 *addr) 5918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *tmp; 5938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (addr == NULL) 5958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 5968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 5988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 5998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 6008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == msg_type && 6018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(entry->addr, addr, ETH_ALEN) == 0) { 6028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 6038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 6048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 6058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 6068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = entry; 6078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 6088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, addr, 6098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 6108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 6118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Removing matching RADIUS message"); 6128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(tmp); 6138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 6148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 6158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 6178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 6188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 6238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_send - Send a RADIUS request 6248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 6258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @msg: RADIUS message to be sent 6268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @msg_type: Message type (RADIUS_AUTH, RADIUS_ACCT, RADIUS_ACCT_INTERIM) 6278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @addr: MAC address of the device related to this message or %NULL 6288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 6298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 6308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is used to transmit a RADIUS authentication (RADIUS_AUTH) or 6318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * accounting request (RADIUS_ACCT or RADIUS_ACCT_INTERIM). The only difference 6328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * between accounting and interim accounting messages is that the interim 6338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * message will override any pending interim accounting updates while a new 6348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * accounting message does not remove any pending messages. 6358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 6368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The message is added on the retransmission queue and will be retransmitted 6378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * automatically until a response is received or maximum number of retries 6388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (RADIUS_CLIENT_MAX_RETRIES) is reached. 6398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 6408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The related device MAC address can be used to identify pending messages that 6418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * can be removed with radius_client_flush_auth() or with interim accounting 6428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * updates. 6438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 6448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint radius_client_send(struct radius_client_data *radius, 6458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *msg, RadiusType msg_type, 6468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr) 6478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 6498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret; 6508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len; 6518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char *name; 6528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int s, res; 6538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *buf; 6548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg_type == RADIUS_ACCT_INTERIM) { 6568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Remove any pending interim acct update for the same STA. */ 6578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_list_del(radius, msg_type, addr); 6588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg_type == RADIUS_ACCT || msg_type == RADIUS_ACCT_INTERIM) { 661717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (conf->acct_server == NULL || radius->acct_sock < 0) { 6628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, 6638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 6648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_INFO, 6658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "No accounting server configured"); 6668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret = conf->acct_server->shared_secret; 6698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret_len = conf->acct_server->shared_secret_len; 6708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_finish_acct(msg, shared_secret, shared_secret_len); 6718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt name = "accounting"; 6728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt s = radius->acct_sock; 6738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server->requests++; 6748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 675717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (conf->auth_server == NULL || radius->auth_sock < 0) { 6768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, 6778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 6788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_INFO, 6798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "No authentication server configured"); 6808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 6818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret = conf->auth_server->shared_secret; 6838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret_len = conf->auth_server->shared_secret_len; 6848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_finish(msg, shared_secret, shared_secret_len); 6858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt name = "authentication"; 6868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt s = radius->auth_sock; 6878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server->requests++; 6888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 6918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Sending RADIUS message to %s " 6928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "server", name); 6938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->msg_dumps) 6948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_dump(msg); 6958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = radius_msg_get_buf(msg); 6978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = send(s, wpabuf_head(buf), wpabuf_len(buf), 0); 6988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (res < 0) 6998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_handle_send_error(radius, s, msg_type); 7008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_list_add(radius, msg, msg_type, shared_secret, 7028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret_len, addr); 7038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 70404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt return 0; 7058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 7068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_receive(int sock, void *eloop_ctx, void *sock_ctx) 7098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 7108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *radius = eloop_ctx; 7118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 7128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type = (RadiusType) sock_ctx; 7138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int len, roundtrip; 7148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char buf[3000]; 7158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *msg; 7168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_hdr *hdr; 7178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_rx_handler *handlers; 7188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t num_handlers, i; 7198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *req, *prev_req; 720fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt struct os_reltime now; 7218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *rconf; 7228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int invalid_authenticator = 0; 7238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg_type == RADIUS_ACCT) { 7258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers = radius->acct_handlers; 7268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt num_handlers = radius->num_acct_handlers; 7278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf = conf->acct_server; 7288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 7298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers = radius->auth_handlers; 7308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt num_handlers = radius->num_auth_handlers; 7318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf = conf->auth_server; 7328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = recv(sock, buf, sizeof(buf), MSG_DONTWAIT); 7358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len < 0) { 736cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "recv[RADIUS]: %s", strerror(errno)); 7378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 7388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 7408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Received %d bytes from RADIUS " 7418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "server", len); 7428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len == sizeof(buf)) { 743cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Possibly too long UDP frame for our buffer - dropping it"); 7448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 7458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg = radius_msg_parse(buf, len); 7488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL) { 749cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Parsing incoming frame failed"); 7508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->malformed_responses++; 7518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 7528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr = radius_msg_get_hdr(msg); 7548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 7568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Received RADIUS message"); 7578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->msg_dumps) 7588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_dump(msg); 7598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (hdr->code) { 7618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_CODE_ACCESS_ACCEPT: 7628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->access_accepts++; 7638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_CODE_ACCESS_REJECT: 7658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->access_rejects++; 7668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_CODE_ACCESS_CHALLENGE: 7688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->access_challenges++; 7698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_CODE_ACCOUNTING_RESPONSE: 7718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->responses++; 7728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev_req = NULL; 7768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt req = radius->msgs; 7778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (req) { 7788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: also match by src addr:port of the packet when using 7798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * alternative RADIUS servers (?) */ 7808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((req->msg_type == msg_type || 7818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (req->msg_type == RADIUS_ACCT_INTERIM && 7828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg_type == RADIUS_ACCT)) && 7838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_get_hdr(req->msg)->identifier == 7848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr->identifier) 7858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 7868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev_req = req; 7888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt req = req->next; 7898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (req == NULL) { 7928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 7938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 7948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "No matching RADIUS request found (type=%d " 7958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "id=%d) - dropping packet", 7968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg_type, hdr->identifier); 7978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto fail; 7988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 800fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&now); 8018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt roundtrip = (now.sec - req->last_attempt.sec) * 100 + 8028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (now.usec - req->last_attempt.usec) / 10000; 8038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, req->addr, HOSTAPD_MODULE_RADIUS, 8048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 8058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Received RADIUS packet matched with a pending " 8068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "request, round trip time %d.%02d sec", 8078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt roundtrip / 100, roundtrip % 100); 8088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->round_trip_time = roundtrip; 8098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Remove ACKed RADIUS packet from retransmit list */ 8118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev_req) 8128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev_req->next = req->next; 8138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 8148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = req->next; 8158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 8168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < num_handlers; i++) { 8188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusRxResult res; 8198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = handlers[i].handler(msg, req->msg, req->shared_secret, 8208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt req->shared_secret_len, 8218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers[i].data); 8228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (res) { 8238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_RX_PROCESSED: 8248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(msg); 8258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* continue */ 8268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_RX_QUEUED: 8278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(req); 8288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 8298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_RX_INVALID_AUTHENTICATOR: 8308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt invalid_authenticator++; 8318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* continue */ 8328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_RX_UNKNOWN: 8338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* continue with next handler */ 8348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (invalid_authenticator) 8398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->bad_authenticators++; 8408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 8418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->unknown_types++; 8428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, req->addr, HOSTAPD_MODULE_RADIUS, 8438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "No RADIUS RX handler found " 8448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(type=%d code=%d id=%d)%s - dropping packet", 8458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg_type, hdr->code, hdr->identifier, 8468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt invalid_authenticator ? " [INVALID AUTHENTICATOR]" : 8478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ""); 8488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(req); 8498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt fail: 8518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(msg); 8528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 8538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 8568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_get_id - Get an identifier for a new RADIUS message 8578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 8588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Allocated identifier 8598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 8608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is used to fetch a unique (among pending requests) identifier 8618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * for a new RADIUS message. 8628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 8638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 radius_client_get_id(struct radius_client_data *radius) 8648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 8658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *_remove; 8668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 id = radius->next_radius_identifier++; 8678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* remove entries with matching id from retransmit list to avoid 8698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * using new reply from the RADIUS server with an old request */ 8708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 8718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 8728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 8738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius_msg_get_hdr(entry->msg)->identifier == id) { 8748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, entry->addr, 8758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 8768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 8778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Removing pending RADIUS message, " 8788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "since its id (%d) is reused", id); 8798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 8808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 8818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 8828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 8838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _remove = entry; 8848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 8858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _remove = NULL; 8868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 8878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 8898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (_remove) 8918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(_remove); 8928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return id; 8958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 8968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 8998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_flush - Flush all pending RADIUS client messages 9008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 9018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @only_auth: Whether only authentication messages are removed 9028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 9038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid radius_client_flush(struct radius_client_data *radius, int only_auth) 9048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *tmp; 9068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!radius) 9088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 9098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 9118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 9128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 9148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!only_auth || entry->msg_type == RADIUS_AUTH) { 9158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 9168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 9178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 9188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 9198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = entry; 9218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 9228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(tmp); 9238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 9248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 9258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 9268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 9278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->msgs == NULL) 9318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(radius_client_timer, radius, NULL); 9328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_update_acct_msgs(struct radius_client_data *radius, 9368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret, 9378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len) 9388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry; 9408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!radius) 9428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 9438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (entry = radius->msgs; entry; entry = entry->next) { 9458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_ACCT) { 9468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->shared_secret = shared_secret; 9478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->shared_secret_len = shared_secret_len; 9488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_finish_acct(entry->msg, shared_secret, 9498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret_len); 9508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int 9568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtradius_change_server(struct radius_client_data *radius, 9578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *nserv, 9588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *oserv, 9598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int sock, int sock6, int auth) 9608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct sockaddr_in serv, claddr; 9628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 9638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct sockaddr_in6 serv6, claddr6; 9648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 9658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct sockaddr *addr, *cl_addr; 9668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt socklen_t addrlen, claddrlen; 9678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char abuf[50]; 9688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int sel_sock; 9698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry; 9708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 9718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 9738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_INFO, 9748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%s server %s:%d", 9758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt auth ? "Authentication" : "Accounting", 9768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_ip_txt(&nserv->addr, abuf, sizeof(abuf)), 9778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt nserv->port); 9788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 979717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (oserv && oserv != nserv && 980717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt (nserv->shared_secret_len != oserv->shared_secret_len || 981717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt os_memcmp(nserv->shared_secret, oserv->shared_secret, 982717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt nserv->shared_secret_len) != 0)) { 9838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Pending RADIUS packets used different shared secret, so 9848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * they need to be modified. Update accounting message 9858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * authenticators here. Authentication messages are removed 9868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * since they would require more changes and the new RADIUS 9878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * server may not be prepared to receive them anyway due to 9888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * missing state information. Client will likely retry 9898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * authentication, so this should not be an issue. */ 9908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (auth) 9918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_flush(radius, 1); 9928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 9938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_update_acct_msgs( 9948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius, nserv->shared_secret, 9958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt nserv->shared_secret_len); 9968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Reset retry counters for the new server */ 1000717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt for (entry = radius->msgs; oserv && oserv != nserv && entry; 1001717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt entry = entry->next) { 10028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((auth && entry->msg_type != RADIUS_AUTH) || 10038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (!auth && entry->msg_type != RADIUS_ACCT)) 10048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 10058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_try = entry->first_try + RADIUS_CLIENT_FIRST_WAIT; 10068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->attempts = 0; 10078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_wait = RADIUS_CLIENT_FIRST_WAIT * 2; 10088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->msgs) { 10118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(radius_client_timer, radius, NULL); 10128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(RADIUS_CLIENT_FIRST_WAIT, 0, 10138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_timer, radius, NULL); 10148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (nserv->addr.af) { 10178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET: 10188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&serv, 0, sizeof(serv)); 10198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv.sin_family = AF_INET; 10208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv.sin_addr.s_addr = nserv->addr.u.v4.s_addr; 10218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv.sin_port = htons(nserv->port); 10228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr = (struct sockaddr *) &serv; 10238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addrlen = sizeof(serv); 10248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sel_sock = sock; 10258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 10268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 10278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET6: 10288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&serv6, 0, sizeof(serv6)); 10298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv6.sin6_family = AF_INET6; 10308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(&serv6.sin6_addr, &nserv->addr.u.v6, 10318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(struct in6_addr)); 10328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv6.sin6_port = htons(nserv->port); 10338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr = (struct sockaddr *) &serv6; 10348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addrlen = sizeof(serv6); 10358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sel_sock = sock6; 10368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 10378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 10388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 10398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 10408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->force_client_addr) { 10438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (conf->client_addr.af) { 10448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET: 10458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&claddr, 0, sizeof(claddr)); 10468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr.sin_family = AF_INET; 10478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr.sin_addr.s_addr = conf->client_addr.u.v4.s_addr; 10488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr.sin_port = htons(0); 10498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cl_addr = (struct sockaddr *) &claddr; 10508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddrlen = sizeof(claddr); 10518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 10528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 10538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET6: 10548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&claddr6, 0, sizeof(claddr6)); 10558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr6.sin6_family = AF_INET6; 10568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(&claddr6.sin6_addr, &conf->client_addr.u.v6, 10578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(struct in6_addr)); 10588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr6.sin6_port = htons(0); 10598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cl_addr = (struct sockaddr *) &claddr6; 10608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddrlen = sizeof(claddr6); 10618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 10628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 10638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 10648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 10658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (bind(sel_sock, cl_addr, claddrlen) < 0) { 1068cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "bind[radius]: %s", 1069cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt strerror(errno)); 10708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 10718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (connect(sel_sock, addr, addrlen) < 0) { 1075cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "connect[radius]: %s", strerror(errno)); 10768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 10778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NATIVE_WINDOWS 10808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (nserv->addr.af) { 10818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET: 10828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddrlen = sizeof(claddr); 1083661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt if (getsockname(sel_sock, (struct sockaddr *) &claddr, 1084661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt &claddrlen) == 0) { 1085661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt wpa_printf(MSG_DEBUG, "RADIUS local address: %s:%u", 1086661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt inet_ntoa(claddr.sin_addr), 1087661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt ntohs(claddr.sin_port)); 1088661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt } 10898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 10908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 10918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET6: { 10928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddrlen = sizeof(claddr6); 1093661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt if (getsockname(sel_sock, (struct sockaddr *) &claddr6, 1094661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt &claddrlen) == 0) { 1095661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt wpa_printf(MSG_DEBUG, "RADIUS local address: %s:%u", 1096661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt inet_ntop(AF_INET6, &claddr6.sin6_addr, 1097661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt abuf, sizeof(abuf)), 1098661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt ntohs(claddr6.sin6_port)); 1099661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt } 11008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 11018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 11038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NATIVE_WINDOWS */ 11058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (auth) 11078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_sock = sel_sock; 11088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 11098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_sock = sel_sock; 11108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 11128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_retry_primary_timer(void *eloop_ctx, void *timeout_ctx) 11168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *radius = eloop_ctx; 11188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 11198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *oserv; 11208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_sock >= 0 && conf->auth_servers && 11228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server != conf->auth_servers) { 11238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt oserv = conf->auth_server; 11248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server = conf->auth_servers; 11258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_change_server(radius, conf->auth_server, oserv, 11268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock, 11278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock6, 1); 11288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_sock >= 0 && conf->acct_servers && 11318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server != conf->acct_servers) { 11328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt oserv = conf->acct_server; 11338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server = conf->acct_servers; 11348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_change_server(radius, conf->acct_server, oserv, 11358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock, 11368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock6, 0); 11378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->retry_primary_interval) 11408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(conf->retry_primary_interval, 0, 11418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_retry_primary_timer, radius, 11428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL); 11438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_disable_pmtu_discovery(int s) 11478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int r = -1; 11498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if defined(IP_MTU_DISCOVER) && defined(IP_PMTUDISC_DONT) 11508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Turn off Path MTU discovery on IPv4/UDP sockets. */ 11518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int action = IP_PMTUDISC_DONT; 11528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt r = setsockopt(s, IPPROTO_IP, IP_MTU_DISCOVER, &action, 11538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(action)); 11548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (r == -1) 1155cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_ERROR, "RADIUS: Failed to set IP_MTU_DISCOVER: %s", 1156cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt strerror(errno)); 11578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif 11588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return r; 11598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1162717574375e969e8272c6d1a26137286eac158abbDmitry Shmidtstatic void radius_close_auth_sockets(struct radius_client_data *radius) 1163717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt{ 1164717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius->auth_sock = -1; 1165717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 1166717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (radius->auth_serv_sock >= 0) { 1167717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt eloop_unregister_read_sock(radius->auth_serv_sock); 1168717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt close(radius->auth_serv_sock); 1169717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius->auth_serv_sock = -1; 1170717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 1171717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt#ifdef CONFIG_IPV6 1172717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (radius->auth_serv_sock6 >= 0) { 1173717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt eloop_unregister_read_sock(radius->auth_serv_sock6); 1174717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt close(radius->auth_serv_sock6); 1175717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius->auth_serv_sock6 = -1; 1176717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 1177717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt#endif /* CONFIG_IPV6 */ 1178717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt} 1179717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 1180717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 1181717574375e969e8272c6d1a26137286eac158abbDmitry Shmidtstatic void radius_close_acct_sockets(struct radius_client_data *radius) 1182717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt{ 1183717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius->acct_sock = -1; 1184717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 1185717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (radius->acct_serv_sock >= 0) { 1186717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt eloop_unregister_read_sock(radius->acct_serv_sock); 1187717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt close(radius->acct_serv_sock); 1188717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius->acct_serv_sock = -1; 1189717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 1190717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt#ifdef CONFIG_IPV6 1191717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (radius->acct_serv_sock6 >= 0) { 1192717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt eloop_unregister_read_sock(radius->acct_serv_sock6); 1193717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt close(radius->acct_serv_sock6); 1194717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius->acct_serv_sock6 = -1; 1195717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 1196717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt#endif /* CONFIG_IPV6 */ 1197717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt} 1198717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 1199717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 12008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_init_auth(struct radius_client_data *radius) 12018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 12028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 12038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ok = 0; 12048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1205717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_auth_sockets(radius); 1206717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 12078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock = socket(PF_INET, SOCK_DGRAM, 0); 12088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_serv_sock < 0) 1209cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: socket[PF_INET,SOCK_DGRAM]: %s", 1210cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt strerror(errno)); 12118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 12128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_disable_pmtu_discovery(radius->auth_serv_sock); 12138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok++; 12148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 12178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock6 = socket(PF_INET6, SOCK_DGRAM, 0); 12188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_serv_sock6 < 0) 1219cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: socket[PF_INET6,SOCK_DGRAM]: %s", 1220cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt strerror(errno)); 12218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 12228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok++; 12238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 12248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ok == 0) 12268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 12278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_change_server(radius, conf->auth_server, NULL, 12298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock, radius->auth_serv_sock6, 12308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1); 12318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_serv_sock >= 0 && 12338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_read_sock(radius->auth_serv_sock, 12348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_receive, radius, 12358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (void *) RADIUS_AUTH)) { 1236cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Could not register read socket for authentication server"); 1237717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_auth_sockets(radius); 12388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 12398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 12428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_serv_sock6 >= 0 && 12438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_read_sock(radius->auth_serv_sock6, 12448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_receive, radius, 12458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (void *) RADIUS_AUTH)) { 1246cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Could not register read socket for authentication server"); 1247717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_auth_sockets(radius); 12488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 12498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 12518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 12538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 12548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_init_acct(struct radius_client_data *radius) 12578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 12588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 12598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ok = 0; 12608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1261717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_acct_sockets(radius); 1262717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 12638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock = socket(PF_INET, SOCK_DGRAM, 0); 12648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_serv_sock < 0) 1265cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: socket[PF_INET,SOCK_DGRAM]: %s", 1266cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt strerror(errno)); 12678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 12688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_disable_pmtu_discovery(radius->acct_serv_sock); 12698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok++; 12708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 12738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock6 = socket(PF_INET6, SOCK_DGRAM, 0); 12748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_serv_sock6 < 0) 1275cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: socket[PF_INET6,SOCK_DGRAM]: %s", 1276cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt strerror(errno)); 12778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 12788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok++; 12798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 12808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ok == 0) 12828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 12838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_change_server(radius, conf->acct_server, NULL, 12858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock, radius->acct_serv_sock6, 12868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 0); 12878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_serv_sock >= 0 && 12898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_read_sock(radius->acct_serv_sock, 12908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_receive, radius, 12918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (void *) RADIUS_ACCT)) { 1292cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Could not register read socket for accounting server"); 1293717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_acct_sockets(radius); 12948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 12958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 12988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_serv_sock6 >= 0 && 12998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_read_sock(radius->acct_serv_sock6, 13008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_receive, radius, 13018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (void *) RADIUS_ACCT)) { 1302cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Could not register read socket for accounting server"); 1303717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_acct_sockets(radius); 13048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 13058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 13068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 13078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 13098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 13108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 13138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_init - Initialize RADIUS client 13148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Callback context to be used in hostapd_logger() calls 13158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @conf: RADIUS client configuration (RADIUS servers) 13168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to private RADIUS client context or %NULL on failure 13178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 13188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The caller is responsible for keeping the configuration data available for 13198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * the lifetime of the RADIUS client, i.e., until radius_client_deinit() is 13208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * called for the returned context pointer. 13218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 13228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_client_data * 13238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtradius_client_init(void *ctx, struct hostapd_radius_servers *conf) 13248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 13258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *radius; 13268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius = os_zalloc(sizeof(struct radius_client_data)); 13288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius == NULL) 13298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 13308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->ctx = ctx; 13328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->conf = conf; 13338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock = radius->acct_serv_sock = 13348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock6 = radius->acct_serv_sock6 = 13358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_sock = radius->acct_sock = -1; 13368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->auth_server && radius_client_init_auth(radius)) { 13388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_deinit(radius); 13398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 13408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 13418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->acct_server && radius_client_init_acct(radius)) { 13438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_deinit(radius); 13448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 13458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 13468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->retry_primary_interval) 13488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(conf->retry_primary_interval, 0, 13498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_retry_primary_timer, radius, 13508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL); 13518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return radius; 13538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 13548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 13578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_deinit - Deinitialize RADIUS client 13588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 13598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 13608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid radius_client_deinit(struct radius_client_data *radius) 13618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 13628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!radius) 13638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 13648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1365717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_auth_sockets(radius); 1366717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_acct_sockets(radius); 13678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(radius_retry_primary_timer, radius, NULL); 13698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_flush(radius, 0); 13718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(radius->auth_handlers); 13728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(radius->acct_handlers); 13738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(radius); 13748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 13758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 13788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_flush_auth - Flush pending RADIUS messages for an address 13798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 13808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @addr: MAC address of the related device 13818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 13828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function can be used to remove pending RADIUS authentication messages 13838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * that are related to a specific device. The addr parameter is matched with 13848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * the one used in radius_client_send() call that was used to transmit the 13858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * authentication request. 13868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 13878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid radius_client_flush_auth(struct radius_client_data *radius, 13888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr) 13898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 13908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *tmp; 13918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 13938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 13948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 13958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_AUTH && 13968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(entry->addr, addr, ETH_ALEN) == 0) { 13978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, addr, 13988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 13998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 14008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Removing pending RADIUS authentication" 14018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " message for removed client"); 14028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 14048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 14058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 14068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 14078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = entry; 14098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 14108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(tmp); 14118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 14128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 14138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 14168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 14178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 14198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_dump_auth_server(char *buf, size_t buflen, 14228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *serv, 14238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *cli) 14248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 14258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pending = 0; 14268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *msg; 14278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char abuf[50]; 14288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cli) { 14308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (msg = cli->msgs; msg; msg = msg->next) { 14318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg->msg_type == RADIUS_AUTH) 14328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pending++; 14338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return os_snprintf(buf, buflen, 14378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthServerIndex=%d\n" 14388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthServerAddress=%s\n" 14398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientServerPortNumber=%d\n" 14408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientRoundTripTime=%d\n" 14418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessRequests=%u\n" 14428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessRetransmissions=%u\n" 14438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessAccepts=%u\n" 14448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessRejects=%u\n" 14458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessChallenges=%u\n" 14468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientMalformedAccessResponses=%u\n" 14478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientBadAuthenticators=%u\n" 14488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientPendingRequests=%u\n" 14498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientTimeouts=%u\n" 14508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientUnknownTypes=%u\n" 14518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientPacketsDropped=%u\n", 14528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->index, 14538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_ip_txt(&serv->addr, abuf, sizeof(abuf)), 14548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->port, 14558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->round_trip_time, 14568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->requests, 14578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->retransmissions, 14588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->access_accepts, 14598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->access_rejects, 14608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->access_challenges, 14618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->malformed_responses, 14628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->bad_authenticators, 14638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pending, 14648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->timeouts, 14658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->unknown_types, 14668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->packets_dropped); 14678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 14688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_dump_acct_server(char *buf, size_t buflen, 14718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *serv, 14728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *cli) 14738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 14748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pending = 0; 14758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *msg; 14768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char abuf[50]; 14778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cli) { 14798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (msg = cli->msgs; msg; msg = msg->next) { 14808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg->msg_type == RADIUS_ACCT || 14818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->msg_type == RADIUS_ACCT_INTERIM) 14828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pending++; 14838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return os_snprintf(buf, buflen, 14878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccServerIndex=%d\n" 14888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccServerAddress=%s\n" 14898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientServerPortNumber=%d\n" 14908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientRoundTripTime=%d\n" 14918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientRequests=%u\n" 14928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientRetransmissions=%u\n" 14938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientResponses=%u\n" 14948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientMalformedResponses=%u\n" 14958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientBadAuthenticators=%u\n" 14968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientPendingRequests=%u\n" 14978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientTimeouts=%u\n" 14988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientUnknownTypes=%u\n" 14998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientPacketsDropped=%u\n", 15008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->index, 15018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_ip_txt(&serv->addr, abuf, sizeof(abuf)), 15028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->port, 15038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->round_trip_time, 15048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->requests, 15058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->retransmissions, 15068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->responses, 15078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->malformed_responses, 15088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->bad_authenticators, 15098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pending, 15108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->timeouts, 15118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->unknown_types, 15128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->packets_dropped); 15138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 15148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 15178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_get_mib - Get RADIUS client MIB information 15188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 15198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @buf: Buffer for returning MIB data in text format 15208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @buflen: Maximum buf length in octets 15218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Number of octets written into the buffer 15228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 15238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint radius_client_get_mib(struct radius_client_data *radius, char *buf, 15248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t buflen) 15258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 15268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 15278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int i; 15288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *serv; 15298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int count = 0; 15308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->auth_servers) { 15328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < conf->num_auth_servers; i++) { 15338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv = &conf->auth_servers[i]; 15348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt count += radius_client_dump_auth_server( 15358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf + count, buflen - count, serv, 15368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv == conf->auth_server ? 15378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius : NULL); 15388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->acct_servers) { 15428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < conf->num_acct_servers; i++) { 15438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv = &conf->acct_servers[i]; 15448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt count += radius_client_dump_acct_server( 15458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf + count, buflen - count, serv, 15468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv == conf->acct_server ? 15478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius : NULL); 15488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return count; 15528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 15538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid radius_client_reconfig(struct radius_client_data *radius, 15568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf) 15578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 15588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius) 15598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->conf = conf; 15608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1561