18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS client 3203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt * Copyright (c) 2002-2015, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h" 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h" 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "radius.h" 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "radius_client.h" 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eloop.h" 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* Defaults for RADIUS retransmit values (exponential backoff) */ 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_FIRST_WAIT - RADIUS client timeout for first retry in seconds 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_FIRST_WAIT 3 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_MAX_WAIT - RADIUS client maximum retry timeout in seconds 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_MAX_WAIT 120 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_MAX_RETRIES - RADIUS client maximum retries 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Maximum number of retransmit attempts before the entry is removed from 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * retransmit list. 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_MAX_RETRIES 10 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_MAX_ENTRIES - RADIUS client maximum pending messages 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Maximum number of entries in retransmit list (oldest entries will be 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * removed, if this limit is exceeded). 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_MAX_ENTRIES 30 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS_CLIENT_NUM_FAILOVER - RADIUS client failover point 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The number of failed retry attempts after which the RADIUS server will be 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * changed (if one of more backup servers are configured). 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_CLIENT_NUM_FAILOVER 4 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * struct radius_rx_handler - RADIUS client RX handler 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This data structure is used internally inside the RADIUS client module to 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * store registered RX handlers. These handlers are registered by calls to 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_register() and unregistered when the RADIUS client is 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * deinitialized with a call to radius_client_deinit(). 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_rx_handler { 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * handler - Received RADIUS message handler 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusRxResult (*handler)(struct radius_msg *msg, 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *req, 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret, 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len, 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *data); 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * data - Context data for the handler 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *data; 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * struct radius_msg_list - RADIUS client message retransmit list 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This data structure is used internally inside the RADIUS client module to 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * store pending RADIUS requests that may still need to be retransmitted. 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_msg_list { 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * addr - STA/client address 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This is used to find RADIUS messages for the same STA. 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 addr[ETH_ALEN]; 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * msg - RADIUS message 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *msg; 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * msg_type - Message type 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type; 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * first_try - Time of the first transmission attempt 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t first_try; 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * next_try - Time for the next transmission attempt 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t next_try; 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * attempts - Number of transmission attempts 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int attempts; 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * next_wait - Next retransmission wait time in seconds 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int next_wait; 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * last_attempt - Time of the last transmission attempt 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 125fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt struct os_reltime last_attempt; 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * shared_secret - Shared secret with the target RADIUS server 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret; 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * shared_secret_len - shared_secret length in octets 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len; 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: server config with failover to backup server(s) */ 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * next - Next message in the list 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *next; 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * struct radius_client_data - Internal RADIUS client data 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This data structure is used internally inside the RADIUS client module. 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * External users allocate this by calling radius_client_init() and free it by 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * calling radius_client_deinit(). The pointer to this opaque data is used in 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * calls to other functions as an identifier for the RADIUS client instance. 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_client_data { 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * ctx - Context pointer for hostapd_logger() callbacks 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *ctx; 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * conf - RADIUS client configuration (list of RADIUS servers to use) 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf; 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * auth_serv_sock - IPv4 socket for RADIUS authentication messages 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int auth_serv_sock; 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * acct_serv_sock - IPv4 socket for RADIUS accounting messages 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int acct_serv_sock; 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * auth_serv_sock6 - IPv6 socket for RADIUS authentication messages 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int auth_serv_sock6; 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * acct_serv_sock6 - IPv6 socket for RADIUS accounting messages 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int acct_serv_sock6; 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * auth_sock - Currently used socket for RADIUS authentication server 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int auth_sock; 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * acct_sock - Currently used socket for RADIUS accounting server 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int acct_sock; 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * auth_handlers - Authentication message handlers 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_rx_handler *auth_handlers; 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * num_auth_handlers - Number of handlers in auth_handlers 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t num_auth_handlers; 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * acct_handlers - Accounting message handlers 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_rx_handler *acct_handlers; 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * num_acct_handlers - Number of handlers in acct_handlers 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t num_acct_handlers; 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * msgs - Pending outgoing RADIUS messages 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *msgs; 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * num_msgs - Number of pending messages in the msgs list 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t num_msgs; 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * next_radius_identifier - Next RADIUS message identifier to use 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 next_radius_identifier; 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtradius_change_server(struct radius_client_data *radius, 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *nserv, 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *oserv, 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int sock, int sock6, int auth); 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_init_acct(struct radius_client_data *radius); 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_init_auth(struct radius_client_data *radius); 239203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidtstatic void radius_client_auth_failover(struct radius_client_data *radius); 240203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidtstatic void radius_client_acct_failover(struct radius_client_data *radius); 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_msg_free(struct radius_msg_list *req) 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(req->msg); 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(req); 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_register - Register a RADIUS client RX handler 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @msg_type: RADIUS client type (RADIUS_AUTH or RADIUS_ACCT) 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @handler: Handler for received RADIUS messages 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @data: Context pointer for handler callbacks 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is used to register a handler for processing received RADIUS 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * authentication and accounting messages. The handler() callback function will 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * be called whenever a RADIUS message is received from the active server. 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * There can be multiple registered RADIUS message handlers. The handlers will 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * be called in order until one of them indicates that it has processed or 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * queued the message. 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint radius_client_register(struct radius_client_data *radius, 2678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type, 2688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusRxResult (*handler)(struct radius_msg *msg, 2698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *req, 2708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret, 2718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len, 2728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *data), 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *data) 2748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_rx_handler **handlers, *newh; 2768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t *num; 2778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg_type == RADIUS_ACCT) { 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers = &radius->acct_handlers; 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt num = &radius->num_acct_handlers; 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers = &radius->auth_handlers; 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt num = &radius->num_auth_handlers; 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 28661d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt newh = os_realloc_array(*handlers, *num + 1, 28761d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt sizeof(struct radius_rx_handler)); 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (newh == NULL) 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt newh[*num].handler = handler; 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt newh[*num].data = data; 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (*num)++; 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *handlers = newh; 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 300717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt/* 301717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt * Returns >0 if message queue was flushed (i.e., the message that triggered 302717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt * the error is not available anymore) 303717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt */ 304717574375e969e8272c6d1a26137286eac158abbDmitry Shmidtstatic int radius_client_handle_send_error(struct radius_client_data *radius, 305717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt int s, RadiusType msg_type) 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NATIVE_WINDOWS 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int _errno = errno; 309203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt wpa_printf(MSG_INFO, "send[RADIUS,s=%d]: %s", s, strerror(errno)); 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (_errno == ENOTCONN || _errno == EDESTADDRREQ || _errno == EINVAL || 311717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt _errno == EBADF || _errno == ENETUNREACH) { 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_INFO, 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Send failed - maybe interface status changed -" 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " try to connect again"); 316717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (msg_type == RADIUS_ACCT || 317717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt msg_type == RADIUS_ACCT_INTERIM) { 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_init_acct(radius); 319717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt return 0; 320717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } else { 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_init_auth(radius); 322717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt return 1; 323717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NATIVE_WINDOWS */ 326717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 327717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt return 0; 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_retransmit(struct radius_client_data *radius, 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t now) 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int s; 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *buf; 338203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt size_t prev_num_msgs; 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_ACCT || 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->msg_type == RADIUS_ACCT_INTERIM) { 342203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (radius->acct_sock < 0) 343203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius_client_init_acct(radius); 344203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (radius->acct_sock < 0 && conf->num_acct_servers > 1) { 345203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt prev_num_msgs = radius->num_msgs; 346203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius_client_acct_failover(radius); 347203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (prev_num_msgs != radius->num_msgs) 348203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt return 0; 349203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt } 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt s = radius->acct_sock; 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->attempts == 0) 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server->requests++; 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server->timeouts++; 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server->retransmissions++; 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 358203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (radius->auth_sock < 0) 359203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius_client_init_auth(radius); 360203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (radius->auth_sock < 0 && conf->num_auth_servers > 1) { 361203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt prev_num_msgs = radius->num_msgs; 362203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius_client_auth_failover(radius); 363203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (prev_num_msgs != radius->num_msgs) 364203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt return 0; 365203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt } 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt s = radius->auth_sock; 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->attempts == 0) 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server->requests++; 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server->timeouts++; 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server->retransmissions++; 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 374203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (s < 0) { 375203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt wpa_printf(MSG_INFO, 376203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt "RADIUS: No valid socket for retransmission"); 377203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt return 1; 378203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt } 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* retransmit; remove entry if too many attempts */ 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->attempts++; 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, entry->addr, HOSTAPD_MODULE_RADIUS, 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Resending RADIUS message (id=%d)", 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_get_hdr(entry->msg)->identifier); 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 386fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&entry->last_attempt); 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = radius_msg_get_buf(entry->msg); 388717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (send(s, wpabuf_head(buf), wpabuf_len(buf), 0) < 0) { 389717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (radius_client_handle_send_error(radius, s, entry->msg_type) 390717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt > 0) 391717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt return 0; 392717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_try = now + entry->next_wait; 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_wait *= 2; 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->next_wait > RADIUS_CLIENT_MAX_WAIT) 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_wait = RADIUS_CLIENT_MAX_WAIT; 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->attempts >= RADIUS_CLIENT_MAX_RETRIES) { 399cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Removing un-ACKed message due to too many failed retransmit attempts"); 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 1; 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_timer(void *eloop_ctx, void *timeout_ctx) 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *radius = eloop_ctx; 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 411fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt struct os_reltime now; 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t first; 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *tmp; 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int auth_failover = 0, acct_failover = 0; 415717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt size_t prev_num_msgs; 416717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt int s; 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!entry) 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 422fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&now); 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = 0; 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 4268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 427717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt prev_num_msgs = radius->num_msgs; 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (now.sec >= entry->next_try && 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_retransmit(radius, entry, now.sec)) { 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = entry; 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(tmp); 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 442717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (prev_num_msgs != radius->num_msgs) { 443717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt wpa_printf(MSG_DEBUG, 444717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt "RADIUS: Message removed from queue - restart from beginning"); 445717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt entry = radius->msgs; 446717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt prev = NULL; 447717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt continue; 448717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 449717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 450717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt s = entry->msg_type == RADIUS_AUTH ? radius->auth_sock : 451717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius->acct_sock; 452717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (entry->attempts > RADIUS_CLIENT_NUM_FAILOVER || 453717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt (s < 0 && entry->attempts > 0)) { 4548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_ACCT || 4558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->msg_type == RADIUS_ACCT_INTERIM) 4568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt acct_failover++; 4578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 4588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt auth_failover++; 4598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (first == 0 || entry->next_try < first) 4628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = entry->next_try; 4638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 4658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 4668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->msgs) { 4698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (first < now.sec) 4708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = now.sec; 4718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(first - now.sec, 0, 4728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_timer, radius, NULL); 4738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 4748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Next RADIUS client " 4758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "retransmit in %ld seconds", 4768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (long int) (first - now.sec)); 4778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 479203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (auth_failover && conf->num_auth_servers > 1) 480203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius_client_auth_failover(radius); 481203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt 482203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (acct_failover && conf->num_acct_servers > 1) 483203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius_client_acct_failover(radius); 484203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt} 485203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt 486203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt 487203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidtstatic void radius_client_auth_failover(struct radius_client_data *radius) 488203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt{ 489203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 490203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt struct hostapd_radius_server *next, *old; 491203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt struct radius_msg_list *entry; 492203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt char abuf[50]; 493203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt 494203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt old = conf->auth_server; 495203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 496203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt HOSTAPD_LEVEL_NOTICE, 497203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt "No response from Authentication server %s:%d - failover", 498203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt hostapd_ip_txt(&old->addr, abuf, sizeof(abuf)), 499203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt old->port); 5008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 501203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt for (entry = radius->msgs; entry; entry = entry->next) { 502203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (entry->msg_type == RADIUS_AUTH) 503203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt old->timeouts++; 5048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 506203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt next = old + 1; 507203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (next > &(conf->auth_servers[conf->num_auth_servers - 1])) 508203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt next = conf->auth_servers; 509203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt conf->auth_server = next; 510203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius_change_server(radius, next, old, 511203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius->auth_serv_sock, 512203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius->auth_serv_sock6, 1); 513203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt} 5148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 516203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidtstatic void radius_client_acct_failover(struct radius_client_data *radius) 517203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt{ 518203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 519203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt struct hostapd_radius_server *next, *old; 520203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt struct radius_msg_list *entry; 521203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt char abuf[50]; 522203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt 523203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt old = conf->acct_server; 524203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 525203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt HOSTAPD_LEVEL_NOTICE, 526203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt "No response from Accounting server %s:%d - failover", 527203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt hostapd_ip_txt(&old->addr, abuf, sizeof(abuf)), 528203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt old->port); 529203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt 530203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt for (entry = radius->msgs; entry; entry = entry->next) { 531203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (entry->msg_type == RADIUS_ACCT || 532203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt entry->msg_type == RADIUS_ACCT_INTERIM) 533203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt old->timeouts++; 5348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 535203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt 536203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt next = old + 1; 537203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (next > &conf->acct_servers[conf->num_acct_servers - 1]) 538203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt next = conf->acct_servers; 539203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt conf->acct_server = next; 540203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius_change_server(radius, next, old, 541203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius->acct_serv_sock, 542203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius->acct_serv_sock6, 0); 5438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_update_timeout(struct radius_client_data *radius) 5478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 548fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt struct os_reltime now; 5498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_time_t first; 5508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry; 5518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(radius_client_timer, radius, NULL); 5538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->msgs == NULL) { 5558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 5568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = 0; 5598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (entry = radius->msgs; entry; entry = entry->next) { 5608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (first == 0 || entry->next_try < first) 5618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = entry->next_try; 5628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 564fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&now); 5658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (first < now.sec) 5668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt first = now.sec; 5678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(first - now.sec, 0, radius_client_timer, radius, 5688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL); 5698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 5708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Next RADIUS client retransmit in" 57104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt " %ld seconds", (long int) (first - now.sec)); 5728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_list_add(struct radius_client_data *radius, 5768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *msg, 5778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type, 5788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret, 5798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len, const u8 *addr) 5808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev; 5828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eloop_terminated()) { 5848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* No point in adding entries to retransmit queue since event 5858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * loop has already been terminated. */ 5868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(msg); 5878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 5888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = os_zalloc(sizeof(*entry)); 5918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry == NULL) { 592cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Failed to add packet into retransmit list"); 5938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(msg); 5948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 5958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (addr) 5988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->addr, addr, ETH_ALEN); 5998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->msg = msg; 6008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->msg_type = msg_type; 6018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->shared_secret = shared_secret; 6028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->shared_secret_len = shared_secret_len; 603fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&entry->last_attempt); 6048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->first_try = entry->last_attempt.sec; 6058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_try = entry->first_try + RADIUS_CLIENT_FIRST_WAIT; 6068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->attempts = 1; 6078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_wait = RADIUS_CLIENT_FIRST_WAIT * 2; 6088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next = radius->msgs; 6098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry; 6108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_update_timeout(radius); 6118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->num_msgs >= RADIUS_CLIENT_MAX_ENTRIES) { 613cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Removing the oldest un-ACKed packet due to retransmit list limits"); 6148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 6158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry->next) { 6168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 6178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 6188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) { 6208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = NULL; 6218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(entry); 6228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else 6248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs++; 6258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_list_del(struct radius_client_data *radius, 6298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type, const u8 *addr) 6308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *tmp; 6328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (addr == NULL) 6348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 6358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 6378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 6388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 6398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == msg_type && 6408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(entry->addr, addr, ETH_ALEN) == 0) { 6418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 6428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 6438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 6448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 6458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = entry; 6468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 6478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, addr, 6488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 6498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 6508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Removing matching RADIUS message"); 6518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(tmp); 6528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 6538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 6548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 6568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 6578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 6598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 6628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_send - Send a RADIUS request 6638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 6648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @msg: RADIUS message to be sent 6658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @msg_type: Message type (RADIUS_AUTH, RADIUS_ACCT, RADIUS_ACCT_INTERIM) 6668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @addr: MAC address of the device related to this message or %NULL 6678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 6688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 6698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is used to transmit a RADIUS authentication (RADIUS_AUTH) or 6708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * accounting request (RADIUS_ACCT or RADIUS_ACCT_INTERIM). The only difference 6718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * between accounting and interim accounting messages is that the interim 6728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * message will override any pending interim accounting updates while a new 6738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * accounting message does not remove any pending messages. 6748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 6758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The message is added on the retransmission queue and will be retransmitted 6768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * automatically until a response is received or maximum number of retries 6778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (RADIUS_CLIENT_MAX_RETRIES) is reached. 6788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 6798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The related device MAC address can be used to identify pending messages that 6808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * can be removed with radius_client_flush_auth() or with interim accounting 6818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * updates. 6828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 6838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint radius_client_send(struct radius_client_data *radius, 6848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *msg, RadiusType msg_type, 6858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr) 6868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 6888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret; 6898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len; 6908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char *name; 6918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int s, res; 6928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *buf; 6938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg_type == RADIUS_ACCT_INTERIM) { 6958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Remove any pending interim acct update for the same STA. */ 6968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_list_del(radius, msg_type, addr); 6978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 6988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 6998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg_type == RADIUS_ACCT || msg_type == RADIUS_ACCT_INTERIM) { 700203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (conf->acct_server && radius->acct_sock < 0) 701203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius_client_init_acct(radius); 702203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt 7032f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt if (conf->acct_server == NULL || radius->acct_sock < 0 || 7042f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt conf->acct_server->shared_secret == NULL) { 7058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, 7068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 7078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_INFO, 7088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "No accounting server configured"); 7098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret = conf->acct_server->shared_secret; 7128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret_len = conf->acct_server->shared_secret_len; 7138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_finish_acct(msg, shared_secret, shared_secret_len); 7148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt name = "accounting"; 7158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt s = radius->acct_sock; 7168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server->requests++; 7178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 718203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (conf->auth_server && radius->auth_sock < 0) 719203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius_client_init_auth(radius); 720203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt 7212f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt if (conf->auth_server == NULL || radius->auth_sock < 0 || 7222f74e36e84064ffa32f82f3decf36b653c7e4fadDmitry Shmidt conf->auth_server->shared_secret == NULL) { 7238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, 7248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 7258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_INFO, 7268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "No authentication server configured"); 7278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 7288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret = conf->auth_server->shared_secret; 7308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret_len = conf->auth_server->shared_secret_len; 7318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_finish(msg, shared_secret, shared_secret_len); 7328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt name = "authentication"; 7338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt s = radius->auth_sock; 7348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server->requests++; 7358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 7388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Sending RADIUS message to %s " 7398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "server", name); 7408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->msg_dumps) 7418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_dump(msg); 7428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf = radius_msg_get_buf(msg); 7448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = send(s, wpabuf_head(buf), wpabuf_len(buf), 0); 7458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (res < 0) 7468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_handle_send_error(radius, s, msg_type); 7478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_list_add(radius, msg, msg_type, shared_secret, 7498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret_len, addr); 7508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 75104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt return 0; 7528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 7538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_receive(int sock, void *eloop_ctx, void *sock_ctx) 7568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 7578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *radius = eloop_ctx; 7588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 7598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusType msg_type = (RadiusType) sock_ctx; 7608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int len, roundtrip; 7618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt unsigned char buf[3000]; 7628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg *msg; 7638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_hdr *hdr; 7648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_rx_handler *handlers; 7658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t num_handlers, i; 7668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *req, *prev_req; 767fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt struct os_reltime now; 7688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *rconf; 7698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int invalid_authenticator = 0; 7708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg_type == RADIUS_ACCT) { 7728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers = radius->acct_handlers; 7738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt num_handlers = radius->num_acct_handlers; 7748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf = conf->acct_server; 7758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 7768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers = radius->auth_handlers; 7778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt num_handlers = radius->num_auth_handlers; 7788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf = conf->auth_server; 7798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt len = recv(sock, buf, sizeof(buf), MSG_DONTWAIT); 7828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len < 0) { 783cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "recv[RADIUS]: %s", strerror(errno)); 7848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 7858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 7878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Received %d bytes from RADIUS " 7888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "server", len); 7898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len == sizeof(buf)) { 790cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Possibly too long UDP frame for our buffer - dropping it"); 7918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 7928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 7938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 7948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg = radius_msg_parse(buf, len); 7958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg == NULL) { 796cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Parsing incoming frame failed"); 7978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->malformed_responses++; 7988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 7998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr = radius_msg_get_hdr(msg); 8018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 8038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "Received RADIUS message"); 8048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->msg_dumps) 8058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_dump(msg); 8068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (hdr->code) { 8088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_CODE_ACCESS_ACCEPT: 8098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->access_accepts++; 8108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_CODE_ACCESS_REJECT: 8128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->access_rejects++; 8138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_CODE_ACCESS_CHALLENGE: 8158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->access_challenges++; 8168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_CODE_ACCOUNTING_RESPONSE: 8188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->responses++; 8198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev_req = NULL; 8238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt req = radius->msgs; 8248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (req) { 8258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: also match by src addr:port of the packet when using 8268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * alternative RADIUS servers (?) */ 8278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((req->msg_type == msg_type || 8288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (req->msg_type == RADIUS_ACCT_INTERIM && 8298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg_type == RADIUS_ACCT)) && 8308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_get_hdr(req->msg)->identifier == 8318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr->identifier) 8328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev_req = req; 8358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt req = req->next; 8368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (req == NULL) { 8398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 8408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 8418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "No matching RADIUS request found (type=%d " 8428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "id=%d) - dropping packet", 8438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg_type, hdr->identifier); 8448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt goto fail; 8458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 847fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&now); 8488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt roundtrip = (now.sec - req->last_attempt.sec) * 100 + 8498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (now.usec - req->last_attempt.usec) / 10000; 8508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, req->addr, HOSTAPD_MODULE_RADIUS, 8518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 8528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Received RADIUS packet matched with a pending " 8538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "request, round trip time %d.%02d sec", 8548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt roundtrip / 100, roundtrip % 100); 8558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->round_trip_time = roundtrip; 8568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Remove ACKed RADIUS packet from retransmit list */ 8588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev_req) 8598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev_req->next = req->next; 8608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 8618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = req->next; 8628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 8638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < num_handlers; i++) { 8658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt RadiusRxResult res; 8668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt res = handlers[i].handler(msg, req->msg, req->shared_secret, 8678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt req->shared_secret_len, 8688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt handlers[i].data); 8698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (res) { 8708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_RX_PROCESSED: 8718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(msg); 8728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* continue */ 8738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_RX_QUEUED: 8748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(req); 8758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 8768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_RX_INVALID_AUTHENTICATOR: 8778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt invalid_authenticator++; 8788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* continue */ 8798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case RADIUS_RX_UNKNOWN: 8808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* continue with next handler */ 8818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 8828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 8848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (invalid_authenticator) 8868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->bad_authenticators++; 8878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 8888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rconf->unknown_types++; 8898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, req->addr, HOSTAPD_MODULE_RADIUS, 8908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, "No RADIUS RX handler found " 8918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "(type=%d code=%d id=%d)%s - dropping packet", 8928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg_type, hdr->code, hdr->identifier, 8938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt invalid_authenticator ? " [INVALID AUTHENTICATOR]" : 8948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ""); 8958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(req); 8968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 8978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt fail: 8988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_free(msg); 8998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 9038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_get_id - Get an identifier for a new RADIUS message 9048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 9058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Allocated identifier 9068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 9078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is used to fetch a unique (among pending requests) identifier 9088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * for a new RADIUS message. 9098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 9108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtu8 radius_client_get_id(struct radius_client_data *radius) 9118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *_remove; 9138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 id = radius->next_radius_identifier++; 9148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* remove entries with matching id from retransmit list to avoid 9168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * using new reply from the RADIUS server with an old request */ 9178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 9188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 9198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 9208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius_msg_get_hdr(entry->msg)->identifier == id) { 9218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, entry->addr, 9228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 9238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 9248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Removing pending RADIUS message, " 9258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "since its id (%d) is reused", id); 9268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 9278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 9288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 9298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 9308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _remove = entry; 9318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 9328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _remove = NULL; 9338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 9348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 9368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (_remove) 9388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(_remove); 9398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return id; 9428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 9468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_flush - Flush all pending RADIUS client messages 9478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 9488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @only_auth: Whether only authentication messages are removed 9498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 9508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid radius_client_flush(struct radius_client_data *radius, int only_auth) 9518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *tmp; 9538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!radius) 9558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 9568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 9588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 9598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 9618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!only_auth || entry->msg_type == RADIUS_AUTH) { 9628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 9638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 9648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 9658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 9668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = entry; 9688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 9698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(tmp); 9708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 9718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 9728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 9738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 9748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->msgs == NULL) 9788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(radius_client_timer, radius, NULL); 9798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 9808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_client_update_acct_msgs(struct radius_client_data *radius, 9838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *shared_secret, 9848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t shared_secret_len) 9858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 9868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry; 9878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!radius) 9898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 9908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 9918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (entry = radius->msgs; entry; entry = entry->next) { 9928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_ACCT) { 9938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->shared_secret = shared_secret; 9948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->shared_secret_len = shared_secret_len; 9958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_msg_finish_acct(entry->msg, shared_secret, 9968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt shared_secret_len); 9978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 9998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 10008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int 10038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtradius_change_server(struct radius_client_data *radius, 10048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *nserv, 10058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *oserv, 10068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int sock, int sock6, int auth) 10078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 10088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct sockaddr_in serv, claddr; 10098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 10108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct sockaddr_in6 serv6, claddr6; 10118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 10128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct sockaddr *addr, *cl_addr; 10138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt socklen_t addrlen, claddrlen; 10148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char abuf[50]; 10158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int sel_sock; 10168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry; 10178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 10188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, NULL, HOSTAPD_MODULE_RADIUS, 10208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_INFO, 10218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "%s server %s:%d", 10228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt auth ? "Authentication" : "Accounting", 10238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_ip_txt(&nserv->addr, abuf, sizeof(abuf)), 10248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt nserv->port); 10258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1026717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (oserv && oserv != nserv && 1027717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt (nserv->shared_secret_len != oserv->shared_secret_len || 1028717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt os_memcmp(nserv->shared_secret, oserv->shared_secret, 1029717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt nserv->shared_secret_len) != 0)) { 10308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Pending RADIUS packets used different shared secret, so 10318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * they need to be modified. Update accounting message 10328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * authenticators here. Authentication messages are removed 10338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * since they would require more changes and the new RADIUS 10348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * server may not be prepared to receive them anyway due to 10358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * missing state information. Client will likely retry 10368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * authentication, so this should not be an issue. */ 10378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (auth) 10388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_flush(radius, 1); 10398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 10408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_update_acct_msgs( 10418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius, nserv->shared_secret, 10428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt nserv->shared_secret_len); 10438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Reset retry counters for the new server */ 1047717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt for (entry = radius->msgs; oserv && oserv != nserv && entry; 1048717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt entry = entry->next) { 10498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((auth && entry->msg_type != RADIUS_AUTH) || 10508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (!auth && entry->msg_type != RADIUS_ACCT)) 10518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 10528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_try = entry->first_try + RADIUS_CLIENT_FIRST_WAIT; 10538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->attempts = 0; 10548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next_wait = RADIUS_CLIENT_FIRST_WAIT * 2; 10558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->msgs) { 10588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(radius_client_timer, radius, NULL); 10598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(RADIUS_CLIENT_FIRST_WAIT, 0, 10608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_timer, radius, NULL); 10618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (nserv->addr.af) { 10648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET: 10658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&serv, 0, sizeof(serv)); 10668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv.sin_family = AF_INET; 10678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv.sin_addr.s_addr = nserv->addr.u.v4.s_addr; 10688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv.sin_port = htons(nserv->port); 10698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr = (struct sockaddr *) &serv; 10708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addrlen = sizeof(serv); 10718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sel_sock = sock; 10728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 10738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 10748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET6: 10758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&serv6, 0, sizeof(serv6)); 10768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv6.sin6_family = AF_INET6; 10778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(&serv6.sin6_addr, &nserv->addr.u.v6, 10788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(struct in6_addr)); 10798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv6.sin6_port = htons(nserv->port); 10808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr = (struct sockaddr *) &serv6; 10818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addrlen = sizeof(serv6); 10828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sel_sock = sock6; 10838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 10848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 10858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 10868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 10878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 10888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 10896c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt if (sel_sock < 0) { 10906c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt wpa_printf(MSG_INFO, 10916c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt "RADIUS: No server socket available (af=%d sock=%d sock6=%d auth=%d", 10926c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt nserv->addr.af, sock, sock6, auth); 10936c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt return -1; 10946c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt } 10956c0da2bb83f6915d8260912362692d1a742e057bDmitry Shmidt 10968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->force_client_addr) { 10978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (conf->client_addr.af) { 10988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET: 10998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&claddr, 0, sizeof(claddr)); 11008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr.sin_family = AF_INET; 11018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr.sin_addr.s_addr = conf->client_addr.u.v4.s_addr; 11028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr.sin_port = htons(0); 11038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cl_addr = (struct sockaddr *) &claddr; 11048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddrlen = sizeof(claddr); 11058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 11068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 11078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET6: 11088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&claddr6, 0, sizeof(claddr6)); 11098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr6.sin6_family = AF_INET6; 11108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(&claddr6.sin6_addr, &conf->client_addr.u.v6, 11118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(struct in6_addr)); 11128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddr6.sin6_port = htons(0); 11138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cl_addr = (struct sockaddr *) &claddr6; 11148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddrlen = sizeof(claddr6); 11158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 11168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 11178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt default: 11188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (bind(sel_sock, cl_addr, claddrlen) < 0) { 1122cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "bind[radius]: %s", 1123cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt strerror(errno)); 11248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (connect(sel_sock, addr, addrlen) < 0) { 1129cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "connect[radius]: %s", strerror(errno)); 11308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 11318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NATIVE_WINDOWS 11348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt switch (nserv->addr.af) { 11358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET: 11368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddrlen = sizeof(claddr); 1137661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt if (getsockname(sel_sock, (struct sockaddr *) &claddr, 1138661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt &claddrlen) == 0) { 1139661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt wpa_printf(MSG_DEBUG, "RADIUS local address: %s:%u", 1140661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt inet_ntoa(claddr.sin_addr), 1141661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt ntohs(claddr.sin_port)); 1142661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt } 11438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 11448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 11458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt case AF_INET6: { 11468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt claddrlen = sizeof(claddr6); 1147661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt if (getsockname(sel_sock, (struct sockaddr *) &claddr6, 1148661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt &claddrlen) == 0) { 1149661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt wpa_printf(MSG_DEBUG, "RADIUS local address: %s:%u", 1150661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt inet_ntop(AF_INET6, &claddr6.sin6_addr, 1151661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt abuf, sizeof(abuf)), 1152661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt ntohs(claddr6.sin6_port)); 1153661b4f78e48c697429dc46154a4125892c001718Dmitry Shmidt } 11548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 11558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 11578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NATIVE_WINDOWS */ 11598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (auth) 11618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_sock = sel_sock; 11628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 11638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_sock = sel_sock; 11648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 11668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 11678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void radius_retry_primary_timer(void *eloop_ctx, void *timeout_ctx) 11708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 11718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *radius = eloop_ctx; 11728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 11738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *oserv; 11748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_sock >= 0 && conf->auth_servers && 11768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server != conf->auth_servers) { 11778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt oserv = conf->auth_server; 11788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->auth_server = conf->auth_servers; 1179203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (radius_change_server(radius, conf->auth_server, oserv, 1180203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius->auth_serv_sock, 1181203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius->auth_serv_sock6, 1) < 0) { 1182203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt conf->auth_server = oserv; 1183203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius_change_server(radius, oserv, conf->auth_server, 1184203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius->auth_serv_sock, 1185203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius->auth_serv_sock6, 1); 1186203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt } 11878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 11888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 11898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_sock >= 0 && conf->acct_servers && 11908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server != conf->acct_servers) { 11918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt oserv = conf->acct_server; 11928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf->acct_server = conf->acct_servers; 1193203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt if (radius_change_server(radius, conf->acct_server, oserv, 1194203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius->acct_serv_sock, 1195203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius->acct_serv_sock6, 0) < 0) { 1196203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt conf->acct_server = oserv; 1197203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius_change_server(radius, oserv, conf->acct_server, 1198203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius->acct_serv_sock, 1199203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt radius->acct_serv_sock6, 0); 1200203eadb9eda41a1dde4a583edb4684319e3f399eDmitry Shmidt } 12018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->retry_primary_interval) 12048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(conf->retry_primary_interval, 0, 12058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_retry_primary_timer, radius, 12068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL); 12078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 12088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_disable_pmtu_discovery(int s) 12118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 12128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int r = -1; 12138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#if defined(IP_MTU_DISCOVER) && defined(IP_PMTUDISC_DONT) 12148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Turn off Path MTU discovery on IPv4/UDP sockets. */ 12158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int action = IP_PMTUDISC_DONT; 12168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt r = setsockopt(s, IPPROTO_IP, IP_MTU_DISCOVER, &action, 12178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sizeof(action)); 12188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (r == -1) 1219cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_ERROR, "RADIUS: Failed to set IP_MTU_DISCOVER: %s", 1220cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt strerror(errno)); 12218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif 12228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return r; 12238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 12248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1226717574375e969e8272c6d1a26137286eac158abbDmitry Shmidtstatic void radius_close_auth_sockets(struct radius_client_data *radius) 1227717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt{ 1228717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius->auth_sock = -1; 1229717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 1230717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (radius->auth_serv_sock >= 0) { 1231717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt eloop_unregister_read_sock(radius->auth_serv_sock); 1232717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt close(radius->auth_serv_sock); 1233717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius->auth_serv_sock = -1; 1234717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 1235717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt#ifdef CONFIG_IPV6 1236717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (radius->auth_serv_sock6 >= 0) { 1237717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt eloop_unregister_read_sock(radius->auth_serv_sock6); 1238717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt close(radius->auth_serv_sock6); 1239717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius->auth_serv_sock6 = -1; 1240717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 1241717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt#endif /* CONFIG_IPV6 */ 1242717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt} 1243717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 1244717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 1245717574375e969e8272c6d1a26137286eac158abbDmitry Shmidtstatic void radius_close_acct_sockets(struct radius_client_data *radius) 1246717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt{ 1247717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius->acct_sock = -1; 1248717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 1249717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (radius->acct_serv_sock >= 0) { 1250717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt eloop_unregister_read_sock(radius->acct_serv_sock); 1251717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt close(radius->acct_serv_sock); 1252717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius->acct_serv_sock = -1; 1253717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 1254717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt#ifdef CONFIG_IPV6 1255717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt if (radius->acct_serv_sock6 >= 0) { 1256717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt eloop_unregister_read_sock(radius->acct_serv_sock6); 1257717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt close(radius->acct_serv_sock6); 1258717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius->acct_serv_sock6 = -1; 1259717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt } 1260717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt#endif /* CONFIG_IPV6 */ 1261717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt} 1262717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 1263717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 12648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_init_auth(struct radius_client_data *radius) 12658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 12668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 12678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ok = 0; 12688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1269717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_auth_sockets(radius); 1270717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 12718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock = socket(PF_INET, SOCK_DGRAM, 0); 12728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_serv_sock < 0) 1273cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: socket[PF_INET,SOCK_DGRAM]: %s", 1274cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt strerror(errno)); 12758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 12768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_disable_pmtu_discovery(radius->auth_serv_sock); 12778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok++; 12788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 12798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 12818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock6 = socket(PF_INET6, SOCK_DGRAM, 0); 12828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_serv_sock6 < 0) 1283cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: socket[PF_INET6,SOCK_DGRAM]: %s", 1284cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt strerror(errno)); 12858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 12868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok++; 12878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 12888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ok == 0) 12908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 12918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_change_server(radius, conf->auth_server, NULL, 12938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock, radius->auth_serv_sock6, 12948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1); 12958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 12968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_serv_sock >= 0 && 12978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_read_sock(radius->auth_serv_sock, 12988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_receive, radius, 12998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (void *) RADIUS_AUTH)) { 1300cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Could not register read socket for authentication server"); 1301717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_auth_sockets(radius); 13028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 13038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 13048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 13068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->auth_serv_sock6 >= 0 && 13078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_read_sock(radius->auth_serv_sock6, 13088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_receive, radius, 13098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (void *) RADIUS_AUTH)) { 1310cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Could not register read socket for authentication server"); 1311717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_auth_sockets(radius); 13128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 13138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 13148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 13158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 13178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 13188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_init_acct(struct radius_client_data *radius) 13218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 13228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 13238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ok = 0; 13248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1325717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_acct_sockets(radius); 1326717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt 13278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock = socket(PF_INET, SOCK_DGRAM, 0); 13288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_serv_sock < 0) 1329cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: socket[PF_INET,SOCK_DGRAM]: %s", 1330cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt strerror(errno)); 13318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else { 13328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_disable_pmtu_discovery(radius->acct_serv_sock); 13338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok++; 13348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 13358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 13378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock6 = socket(PF_INET6, SOCK_DGRAM, 0); 13388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_serv_sock6 < 0) 1339cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: socket[PF_INET6,SOCK_DGRAM]: %s", 1340cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt strerror(errno)); 13418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 13428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ok++; 13438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 13448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ok == 0) 13468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 13478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_change_server(radius, conf->acct_server, NULL, 13498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->acct_serv_sock, radius->acct_serv_sock6, 13508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 0); 13518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_serv_sock >= 0 && 13538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_read_sock(radius->acct_serv_sock, 13548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_receive, radius, 13558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (void *) RADIUS_ACCT)) { 1356cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Could not register read socket for accounting server"); 1357717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_acct_sockets(radius); 13588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 13598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 13608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifdef CONFIG_IPV6 13628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius->acct_serv_sock6 >= 0 && 13638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_read_sock(radius->acct_serv_sock6, 13648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_receive, radius, 13658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (void *) RADIUS_ACCT)) { 1366cce06667447b5aec83452adb0c15100ada531095Dmitry Shmidt wpa_printf(MSG_INFO, "RADIUS: Could not register read socket for accounting server"); 1367717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_acct_sockets(radius); 13688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 13698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 13708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_IPV6 */ 13718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 13738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 13748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 13778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_init - Initialize RADIUS client 13788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Callback context to be used in hostapd_logger() calls 13798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @conf: RADIUS client configuration (RADIUS servers) 13808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to private RADIUS client context or %NULL on failure 13818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 13828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * The caller is responsible for keeping the configuration data available for 13838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * the lifetime of the RADIUS client, i.e., until radius_client_deinit() is 13848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * called for the returned context pointer. 13858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 13868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_client_data * 13878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtradius_client_init(void *ctx, struct hostapd_radius_servers *conf) 13888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 13898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *radius; 13908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius = os_zalloc(sizeof(struct radius_client_data)); 13928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius == NULL) 13938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 13948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 13958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->ctx = ctx; 13968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->conf = conf; 13978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock = radius->acct_serv_sock = 13988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_serv_sock6 = radius->acct_serv_sock6 = 13998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->auth_sock = radius->acct_sock = -1; 14008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->auth_server && radius_client_init_auth(radius)) { 14028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_deinit(radius); 14038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 14048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->acct_server && radius_client_init_acct(radius)) { 14078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_deinit(radius); 14088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 14098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->retry_primary_interval) 14128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(conf->retry_primary_interval, 0, 14138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_retry_primary_timer, radius, 14148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt NULL); 14158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return radius; 14178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 14188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 14218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_deinit - Deinitialize RADIUS client 14228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 14238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 14248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid radius_client_deinit(struct radius_client_data *radius) 14258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 14268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (!radius) 14278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 14288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1429717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_auth_sockets(radius); 1430717574375e969e8272c6d1a26137286eac158abbDmitry Shmidt radius_close_acct_sockets(radius); 14318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(radius_retry_primary_timer, radius, NULL); 14338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_flush(radius, 0); 14358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(radius->auth_handlers); 14368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(radius->acct_handlers); 14378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(radius); 14388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 14398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 14428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_flush_auth - Flush pending RADIUS messages for an address 14438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 14448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @addr: MAC address of the related device 14458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 14468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function can be used to remove pending RADIUS authentication messages 14478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * that are related to a specific device. The addr parameter is matched with 14488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * the one used in radius_client_send() call that was used to transmit the 14498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * authentication request. 14508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 14518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid radius_client_flush_auth(struct radius_client_data *radius, 14528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr) 14538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 14548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *entry, *prev, *tmp; 14558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 14578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = radius->msgs; 14588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 14598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->msg_type == RADIUS_AUTH && 14608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(entry->addr, addr, ETH_ALEN) == 0) { 14618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_logger(radius->ctx, addr, 14628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_MODULE_RADIUS, 14638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt HOSTAPD_LEVEL_DEBUG, 14648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Removing pending RADIUS authentication" 14658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " message for removed client"); 14668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev) 14688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry->next; 14698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 14708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->msgs = entry->next; 14718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = entry; 14738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 14748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_client_msg_free(tmp); 14758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->num_msgs--; 14768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 14778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 14808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 14818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 14838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_dump_auth_server(char *buf, size_t buflen, 14868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *serv, 14878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *cli) 14888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 14898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pending = 0; 14908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *msg; 14918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char abuf[50]; 14928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cli) { 14948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (msg = cli->msgs; msg; msg = msg->next) { 14958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg->msg_type == RADIUS_AUTH) 14968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pending++; 14978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 14998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return os_snprintf(buf, buflen, 15018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthServerIndex=%d\n" 15028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthServerAddress=%s\n" 15038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientServerPortNumber=%d\n" 15048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientRoundTripTime=%d\n" 15058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessRequests=%u\n" 15068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessRetransmissions=%u\n" 15078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessAccepts=%u\n" 15088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessRejects=%u\n" 15098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientAccessChallenges=%u\n" 15108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientMalformedAccessResponses=%u\n" 15118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientBadAuthenticators=%u\n" 15128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientPendingRequests=%u\n" 15138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientTimeouts=%u\n" 15148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientUnknownTypes=%u\n" 15158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAuthClientPacketsDropped=%u\n", 15168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->index, 15178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_ip_txt(&serv->addr, abuf, sizeof(abuf)), 15188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->port, 15198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->round_trip_time, 15208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->requests, 15218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->retransmissions, 15228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->access_accepts, 15238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->access_rejects, 15248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->access_challenges, 15258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->malformed_responses, 15268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->bad_authenticators, 15278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pending, 15288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->timeouts, 15298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->unknown_types, 15308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->packets_dropped); 15318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 15328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int radius_client_dump_acct_server(char *buf, size_t buflen, 15358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *serv, 15368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_client_data *cli) 15378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 15388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pending = 0; 15398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct radius_msg_list *msg; 15408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char abuf[50]; 15418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (cli) { 15438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (msg = cli->msgs; msg; msg = msg->next) { 15448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (msg->msg_type == RADIUS_ACCT || 15458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt msg->msg_type == RADIUS_ACCT_INTERIM) 15468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pending++; 15478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 15498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return os_snprintf(buf, buflen, 15518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccServerIndex=%d\n" 15528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccServerAddress=%s\n" 15538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientServerPortNumber=%d\n" 15548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientRoundTripTime=%d\n" 15558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientRequests=%u\n" 15568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientRetransmissions=%u\n" 15578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientResponses=%u\n" 15588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientMalformedResponses=%u\n" 15598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientBadAuthenticators=%u\n" 15608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientPendingRequests=%u\n" 15618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientTimeouts=%u\n" 15628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientUnknownTypes=%u\n" 15638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "radiusAccClientPacketsDropped=%u\n", 15648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->index, 15658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hostapd_ip_txt(&serv->addr, abuf, sizeof(abuf)), 15668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->port, 15678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->round_trip_time, 15688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->requests, 15698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->retransmissions, 15708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->responses, 15718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->malformed_responses, 15728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->bad_authenticators, 15738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pending, 15748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->timeouts, 15758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->unknown_types, 15768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv->packets_dropped); 15778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 15788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 15818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * radius_client_get_mib - Get RADIUS client MIB information 15828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @radius: RADIUS client context from radius_client_init() 15838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @buf: Buffer for returning MIB data in text format 15848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @buflen: Maximum buf length in octets 15858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Number of octets written into the buffer 15868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 15878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint radius_client_get_mib(struct radius_client_data *radius, char *buf, 15888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t buflen) 15898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 15908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf = radius->conf; 15918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int i; 15928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_server *serv; 15938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int count = 0; 15948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 15958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->auth_servers) { 15968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < conf->num_auth_servers; i++) { 15978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv = &conf->auth_servers[i]; 15988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt count += radius_client_dump_auth_server( 15998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf + count, buflen - count, serv, 16008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv == conf->auth_server ? 16018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius : NULL); 16028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 16038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 16048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (conf->acct_servers) { 16068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < conf->num_acct_servers; i++) { 16078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv = &conf->acct_servers[i]; 16088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt count += radius_client_dump_acct_server( 16098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf + count, buflen - count, serv, 16108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt serv == conf->acct_server ? 16118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius : NULL); 16128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 16138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 16148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return count; 16168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 16178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 16198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid radius_client_reconfig(struct radius_client_data *radius, 16208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct hostapd_radius_servers *conf) 16218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 16228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (radius) 16238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius->conf = conf; 16248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1625