18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * RADIUS authentication server 31f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt * Copyright (c) 2005-2009, 2011, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef RADIUS_SERVER_H 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define RADIUS_SERVER_H 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_server_data; 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct eap_user; 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * struct radius_server_conf - RADIUS server configuration 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_server_conf { 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * auth_port - UDP port to listen to as an authentication server 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int auth_port; 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 25bd14a57187b024f49f5b9ace55ef457d8d04650aDmitry Shmidt * acct_port - UDP port to listen to as an accounting server 26bd14a57187b024f49f5b9ace55ef457d8d04650aDmitry Shmidt */ 27bd14a57187b024f49f5b9ace55ef457d8d04650aDmitry Shmidt int acct_port; 28bd14a57187b024f49f5b9ace55ef457d8d04650aDmitry Shmidt 29bd14a57187b024f49f5b9ace55ef457d8d04650aDmitry Shmidt /** 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * client_file - RADIUS client configuration file 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This file contains the RADIUS clients and the shared secret to be 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * used with them in a format where each client is on its own line. The 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * first item on the line is the IPv4 or IPv6 address of the client 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * with an optional address mask to allow full network to be specified 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (e.g., 192.168.1.2 or 192.168.1.0/24). This is followed by white 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * space (space or tabulator) and the shared secret. Lines starting 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * with '#' are skipped and can be used as comments. 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char *client_file; 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 43818ea489ef32dcdc7c098d8a336d6e1dd8996112Dmitry Shmidt * sqlite_file - SQLite database for storing debug log information 44818ea489ef32dcdc7c098d8a336d6e1dd8996112Dmitry Shmidt */ 45818ea489ef32dcdc7c098d8a336d6e1dd8996112Dmitry Shmidt const char *sqlite_file; 46818ea489ef32dcdc7c098d8a336d6e1dd8996112Dmitry Shmidt 47818ea489ef32dcdc7c098d8a336d6e1dd8996112Dmitry Shmidt /** 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * conf_ctx - Context pointer for callbacks 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This is used as the ctx argument in get_eap_user() calls. 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *conf_ctx; 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * eap_sim_db_priv - EAP-SIM/AKA database context 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This is passed to the EAP-SIM/AKA server implementation as a 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * callback context. 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *eap_sim_db_priv; 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * ssl_ctx - TLS context 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This is passed to the EAP server implementation as a callback 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * context for TLS operations. 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *ssl_ctx; 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pac_opaque_encr_key - PAC-Opaque encryption key for EAP-FAST 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This parameter is used to set a key for EAP-FAST to encrypt the 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * PAC-Opaque data. It can be set to %NULL if EAP-FAST is not used. If 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * set, must point to a 16-octet key. 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *pac_opaque_encr_key; 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * eap_fast_a_id - EAP-FAST authority identity (A-ID) 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * If EAP-FAST is not used, this can be set to %NULL. In theory, this 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * is a variable length field, but due to some existing implementations 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * requiring A-ID to be 16 octets in length, it is recommended to use 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * that length for the field to provide interoperability with deployed 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * peer implementations. 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *eap_fast_a_id; 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * eap_fast_a_id_len - Length of eap_fast_a_id buffer in octets 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t eap_fast_a_id_len; 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * eap_fast_a_id_info - EAP-FAST authority identifier information 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This A-ID-Info contains a user-friendly name for the A-ID. For 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * example, this could be the enterprise and server names in 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * human-readable format. This field is encoded as UTF-8. If EAP-FAST 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * is not used, this can be set to %NULL. 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt char *eap_fast_a_id_info; 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * eap_fast_prov - EAP-FAST provisioning modes 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 0 = provisioning disabled, 1 = only anonymous provisioning allowed, 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2 = only authenticated provisioning allowed, 3 = both provisioning 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * modes allowed. 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int eap_fast_prov; 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pac_key_lifetime - EAP-FAST PAC-Key lifetime in seconds 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This is the hard limit on how long a provisioned PAC-Key can be 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * used. 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pac_key_lifetime; 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pac_key_refresh_time - EAP-FAST PAC-Key refresh time in seconds 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This is a soft limit on the PAC-Key. The server will automatically 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * generate a new PAC-Key when this number of seconds (or fewer) of the 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * lifetime remains. 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pac_key_refresh_time; 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * eap_sim_aka_result_ind - EAP-SIM/AKA protected success indication 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This controls whether the protected success/failure indication 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (AT_RESULT_IND) is used with EAP-SIM and EAP-AKA. 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int eap_sim_aka_result_ind; 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * tnc - Trusted Network Connect (TNC) 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This controls whether TNC is enabled and will be required before the 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * peer is allowed to connect. Note: This is only used with EAP-TTLS 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * and EAP-FAST. If any other EAP method is enabled, the peer will be 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * allowed to connect without TNC. 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int tnc; 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pwd_group - EAP-pwd D-H group 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This is used to select which D-H group to use with EAP-pwd. 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 pwd_group; 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 15734af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt * server_id - Server identity 15834af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt */ 15934af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt const char *server_id; 16034af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt 16134af306c42b7ccf956508e7cd23f0ba90606e360Dmitry Shmidt /** 162fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt * erp - Whether EAP Re-authentication Protocol (ERP) is enabled 163fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt * 164fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt * This controls whether the authentication server derives ERP key 165fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt * hierarchy (rRK and rIK) from full EAP authentication and allows 166fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt * these keys to be used to perform ERP to derive rMSK instead of full 167fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt * EAP authentication to derive MSK. 168fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt */ 169fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt int erp; 170fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt 171fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt const char *erp_domain; 172fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt 173d80a401aed31d06f261efd19223cf55d1a2a8228Dmitry Shmidt unsigned int tls_session_lifetime; 174d80a401aed31d06f261efd19223cf55d1a2a8228Dmitry Shmidt 175fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt /** 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wps - Wi-Fi Protected Setup context 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * If WPS is used with an external RADIUS server (which is quite 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * unlikely configuration), this is used to provide a pointer to WPS 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * context data. Normally, this can be set to %NULL. 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wps_context *wps; 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * ipv6 - Whether to enable IPv6 support in the RADIUS server 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int ipv6; 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * get_eap_user - Callback for fetching EAP user information 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Context data from conf_ctx 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @identity: User identity 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @identity_len: identity buffer length in octets 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @phase2: Whether this is for Phase 2 identity 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @user: Data structure for filling in the user information 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This is used to fetch information from user database. The callback 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * will fill in information about allowed EAP methods and the user 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * password. The password field will be an allocated copy of the 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * password data and RADIUS server will free it after use. 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int (*get_eap_user)(void *ctx, const u8 *identity, size_t identity_len, 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int phase2, struct eap_user *user); 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * eap_req_id_text - Optional data for EAP-Request/Identity 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This can be used to configure an optional, displayable message that 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * will be sent in EAP-Request/Identity. This string can contain an 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * ASCII-0 character (nul) to separate network infromation per RFC 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 4284. The actual string length is explicit provided in 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * eap_req_id_text_len since nul character will not be used as a string 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * terminator. 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *eap_req_id_text; 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /** 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * eap_req_id_text_len - Length of eap_req_id_text buffer in octets 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t eap_req_id_text_len; 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * msg_ctx - Context data for wpa_msg() calls 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *msg_ctx; 2271f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt 2281f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#ifdef CONFIG_RADIUS_TEST 2291f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt const char *dump_msk_file; 2301f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt#endif /* CONFIG_RADIUS_TEST */ 231f21452aea786ac056eb01f1cbba4f553bd502747Dmitry Shmidt 232f21452aea786ac056eb01f1cbba4f553bd502747Dmitry Shmidt char *subscr_remediation_url; 233f21452aea786ac056eb01f1cbba4f553bd502747Dmitry Shmidt u8 subscr_remediation_method; 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct radius_server_data * 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtradius_server_init(struct radius_server_conf *conf); 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 240fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidtvoid radius_server_erp_flush(struct radius_server_data *data); 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid radius_server_deinit(struct radius_server_data *data); 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint radius_server_get_mib(struct radius_server_data *data, char *buf, 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t buflen); 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid radius_server_eap_pending_cb(struct radius_server_data *data, void *ctx); 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* RADIUS_SERVER_H */ 249