freeDiameter: extensions/app_radgw/rgw

annotate extensions/app_radgw/rgw_clients.c @ 539:6994e9a3c528

The previous commit provoked an Accounting-Response with empty authenticator... Should be fixed now.

author	Sebastien Decugis <sdecugis@nict.go.jp>
date	Sat, 11 Sep 2010 08:52:36 +0900
parents	deb901984ce3
children	a0e3af6f94fb

rev	line source
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	1 /*********************************************************************************************************
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	2 * Software License Agreement (BSD License) *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	3 * Author: Sebastien Decugis <sdecugis@nict.go.jp> *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	4 * *
258 5df55136361b Updated copyright information Sebastien Decugis <sdecugis@nict.go.jp> parents: 254 diff changeset	5 * Copyright (c) 2010, WIDE Project and NICT *
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	6 * All rights reserved. *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	7 * *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	8 * Redistribution and use of this software in source and binary forms, with or without modification, are *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	9 * permitted provided that the following conditions are met: *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	10 * *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	11 * * Redistributions of source code must retain the above *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	12 * copyright notice, this list of conditions and the *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	13 * following disclaimer. *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	14 * *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	15 * * Redistributions in binary form must reproduce the above *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	16 * copyright notice, this list of conditions and the *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	17 * following disclaimer in the documentation and/or other *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	18 * materials provided with the distribution. *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	19 * *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	20 * * Neither the name of the WIDE Project or NICT nor the *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	21 * names of its contributors may be used to endorse or *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	22 * promote products derived from this software without *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	23 * specific prior written permission of WIDE Project and *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	24 * NICT. *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	25 * *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	26 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	27 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	28 * PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	29 * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	30 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	31 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	32 * TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	33 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. *
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	34 *********************************************************************************************************/
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	35
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	36 /* Manage the list of RADIUS clients, along with their shared secrets. */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	37
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	38 /* Probably some changes are needed to support RADIUS Proxies */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	39
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	40 #include "rgw.h"
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	41
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	42 #define REVERSE_DNS_SIZE_MAX 512 /* length of our buffer for reverse DNS */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	43
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	44 /* Ordered lists of clients. The order relationship is a memcmp on the address zone.
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	45 For same addresses, the port is compared.
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	46 The same address cannot be added twice, once with a 0-port and once with another port value.
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	47 */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	48 static struct fd_list cli_ip = FD_LIST_INITIALIZER(cli_ip);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	49 static struct fd_list cli_ip6 = FD_LIST_INITIALIZER(cli_ip6);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	50
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	51 /* Mutex to protect the previous lists */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	52 static pthread_mutex_t cli_mtx = PTHREAD_MUTEX_INITIALIZER;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	53
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	54 /* Structure describing one client */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	55 struct rgw_client {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	56 /* Link information in global list */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	57 struct fd_list chain;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	58
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	59 /* Reference count */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	60 int refcount;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	61
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	62 /* The address and optional port (alloc'd during configuration file parsing). */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	63 union {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	64 struct sockaddr sa; / generic pointer */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	65 struct sockaddr_in *sin;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	66 struct sockaddr_in6 *sin6;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	67 };
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	68
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	69 /* The FQDN, realm, and optional aliases */
500 d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	70 int is_local; /* true if the RADIUS client runs on the same host -- we use Diameter Identity in that case */
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	71 enum rgw_cli_type type; /* is it a proxy ? */
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	72 char *fqdn;
442 02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	73 size_t fqdn_len;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	74 char *realm;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	75 char **aliases;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	76 size_t aliases_nb;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	77
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	78 /* The secret key data. */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	79 struct {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	80 unsigned char * data;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	81 size_t len;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	82 } key;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	83
530 825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	84 /* information of previous msg received, for duplicate checks -- we keep the last DUPLICATE_MESSAGES_BUFFER messages on each port. */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	85 #define DUPLICATE_MESSAGES_BUFFER 200 /* This should actually be replaced with a time-based dynamic list! TODO... */
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	86 struct {
530 825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	87 int cnt; /* Counts the number of (different) requests we received */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	88 struct {
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	89 uint16_t port; /* The source UDP port of the request */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	90 uint8_t id; /* The identifier in the request */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	91 uint8_t auth[16]; /* The request authenticator, because some NAS are not using identifier properly. */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	92 struct radius_msg * ans; /* When the answer has been sent already, keep it so we can send it back */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	93 int nbdup; /* count the number of duplicate RADIUS requests we received on this message */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	94 } msg_info[DUPLICATE_MESSAGES_BUFFER];
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	95 } duplicates_info[2]; /[0] for auth, [1] for acct. /
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	96 };
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	97
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	98
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	99
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	100 /* create a new rgw_client. the arguments are moved into the structure (to limit malloc & free calls). */
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	101 static int client_create(struct rgw_client res, struct sockaddr ip_port, unsigned char ** key, size_t keylen, enum rgw_cli_type type )
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	102 {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	103 struct rgw_client *tmp = NULL;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	104 char buf[255];
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	105 int ret;
500 d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	106 int loc = 0;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	107
500 d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	108 /* Check if the IP address is local */
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	109 if ( ( ((ip_port)->sa_family == AF_INET ) && ( IN_IS_ADDR_LOOPBACK( &((struct sockaddr_in )(*ip_port))->sin_addr ) ) )
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	110 \|\|( ((ip_port)->sa_family == AF_INET6) && ( IN6_IS_ADDR_LOOPBACK( &((struct sockaddr_in6 )(*ip_port))->sin6_addr) ) )) {
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	111 /* The client is local */
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	112 loc = 1;
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	113 } else {
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	114
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	115 /* Search FQDN for the client */
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	116 ret = getnameinfo( *ip_port, sizeof(struct sockaddr_storage), &buf[0], sizeof(buf), NULL, 0, 0 );
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	117 if (ret) {
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	118 TRACE_DEBUG(INFO, "Unable to resolve peer name: %s", gai_strerror(ret));
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	119 return EINVAL;
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	120 }
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	121 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	122
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	123 /* Create the new object */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	124 CHECK_MALLOC( tmp = malloc(sizeof (struct rgw_client)) );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	125 memset(tmp, 0, sizeof(struct rgw_client));
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	126 fd_list_init(&tmp->chain, NULL);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	127
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	128 tmp->type = type;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	129
500 d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	130 if (loc) {
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	131 tmp->is_local = 1;
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	132 } else {
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	133 /* Copy the fqdn */
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	134 CHECK_MALLOC( tmp->fqdn = strdup(buf) );
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	135 tmp->fqdn_len = strlen(tmp->fqdn);
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	136 /* Find an appropriate realm */
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	137 tmp->realm = strchr(tmp->fqdn, '.');
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	138 if (tmp->realm)
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	139 tmp->realm += 1;
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	140 if ((!tmp->realm) \|\| (tmp->realm == '\0')) / in case the fqdn was "localhost." for example, if it is possible... */
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	141 tmp->realm = fd_g_config->cnf_diamrlm;
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	142 }
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	143
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	144 /* move the sa info reference */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	145 tmp->sa = *ip_port;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	146 *ip_port = NULL;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	147
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	148 /* move the key material */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	149 tmp->key.data = *key;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	150 tmp->key.len = keylen;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	151 *key = NULL;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	152
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	153 /* Done! */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	154 *res = tmp;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	155 return 0;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	156 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	157
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	158
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	159 /* Decrease refcount on a client; the lock must be held when this function is called. */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	160 static void client_unlink(struct rgw_client * client)
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	161 {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	162 client->refcount -= 1;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	163
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	164 if (client->refcount <= 0) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	165 int idx;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	166 /* to be sure: the refcount should be 0 only when client_fini is called */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	167 ASSERT( FD_IS_LIST_EMPTY(&client->chain) );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	168
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	169 /* Free the data */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	170 for (idx = 0; idx < client->aliases_nb; idx++)
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	171 free(client->aliases[idx]);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	172 free(client->aliases);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	173 free(client->fqdn);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	174 free(client->sa);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	175 free(client->key.data);
530 825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	176
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	177 /* Free the duplicate info */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	178 for (idx=0; idx <= 1; idx++){
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	179 int i = 0;
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	180 for (i = 0; i < DUPLICATE_MESSAGES_BUFFER; i++) {
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	181 if (client->duplicates_info[idx].msg_info[i].ans) {
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	182 /* Free this RADIUS message */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	183 radius_msg_free(client->duplicates_info[idx].msg_info[i].ans);
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	184 free(client->duplicates_info[idx].msg_info[i].ans);
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	185 }
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	186 }
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	187 }
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	188
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	189 free(client);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	190 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	191 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	192
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	193
500 d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	194 /* Macro to avoid duplicating the code in the next function */
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	195 #define client_search_family( _family_ ) \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	196 case AF_INET##_family_: { \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	197 struct sockaddr_in##_family_ * sin##_family_ = (struct sockaddr_in##_family_ *)ip_port; \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	198 for (ref = cli_ip##_family_.next; ref != &cli_ip##_family_; ref = ref->next) { \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	199 cmp = memcmp(&sin##_family_->sin##_family_##_addr, \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	200 &((struct rgw_client *)ref)->sin##_family_->sin##_family_##_addr, \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	201 sizeof(struct in##_family_##_addr)); \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	202 if (cmp > 0) continue; /* search further in the list */ \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	203 if (cmp < 0) break; /* this IP is not in the list */ \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	204 /* Now compare the ports as follow: */ \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	205 /* If the ip_port we are searching does not contain a port, just return the first match result */ \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	206 if ( (sin##_family_->sin##_family_##_port == 0) \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	207 /* If the entry in the list does not contain a port, return it as a match */ \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	208 \|\| (((struct rgw_client *)ref)->sin##_family_->sin##_family_##_port == 0) \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	209 /* If both ports are equal, it is a match */ \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	210 \|\| (sin##_family_->sin##_family_##_port == \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	211 ((struct rgw_client *)ref)->sin##_family_->sin##_family_##_port)) { \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	212 res = (struct rgw_client )ref; \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	213 return EEXIST; \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	214 } \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	215 /* Otherwise, the list is ordered by port value (byte order does not matter */ \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	216 if (sin##_family_->sin##_family_##_port \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	217 > ((struct rgw_client *)ref)->sin##_family_->sin##_family_##_port) continue; \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	218 else break; \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	219 } \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	220 res = (struct rgw_client )(ref->prev); \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	221 return ENOENT; \
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	222 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	223 /* Function to look for an existing rgw_client, or the previous element.
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	224 The cli_mtx must be held when calling this function.
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	225 Returns ENOENT if the matching client does not exist, and res points to the previous element in the list.
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	226 Returns EEXIST if the matching client is found, and res points to this element.
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	227 Returns other error code on other error. */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	228 static int client_search(struct rgw_client ** res, struct sockaddr * ip_port )
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	229 {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	230 int cmp;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	231 struct fd_list *ref = NULL;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	232
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	233 CHECK_PARAMS(res && ip_port);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	234
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	235 switch (ip_port->sa_family) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	236 client_search_family()
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	237 break;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	238
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	239 client_search_family( 6 )
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	240 break;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	241 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	242
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	243 /* We're never supposed to reach this point */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	244 ASSERT(0);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	245 return EINVAL;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	246 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	247
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	248 int rgw_clients_getkey(struct rgw_client * cli, unsigned char *key, size_t key_len)
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	249 {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	250 CHECK_PARAMS( cli && key && key_len );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	251 *key = cli->key.data;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	252 *key_len = cli->key.len;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	253 return 0;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	254 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	255
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	256 int rgw_clients_gettype(struct rgw_client * cli, enum rgw_cli_type *type)
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	257 {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	258 CHECK_PARAMS( cli && type );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	259 *type = cli->type;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	260 return 0;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	261 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	262
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	263
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	264 int rgw_clients_search(struct sockaddr * ip_port, struct rgw_client ** ref)
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	265 {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	266 int ret = 0;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	267
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	268 TRACE_ENTRY("%p %p", ip_port, ref);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	269
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	270 CHECK_PARAMS(ip_port && ref);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	271
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	272 CHECK_POSIX( pthread_mutex_lock(&cli_mtx) );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	273
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	274 ret = client_search(ref, ip_port);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	275 if (ret == EEXIST) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	276 (*ref)->refcount ++;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	277 ret = 0;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	278 } else {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	279 *ref = NULL;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	280 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	281
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	282 CHECK_POSIX( pthread_mutex_unlock(&cli_mtx) );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	283
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	284 return ret;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	285 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	286
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	287 int rgw_clients_check_dup(struct rgw_radius_msg_meta *msg, struct rgw_client cli)
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	288 {
530 825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	289 int p, i, dup = 0;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	290
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	291 TRACE_ENTRY("%p %p", msg, cli);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	292
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	293 CHECK_PARAMS( msg && cli );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	294
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	295 if ((*msg)->serv_type == RGW_PLG_TYPE_AUTH)
530 825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	296 p = 0;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	297 else
530 825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	298 p = 1;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	299
530 825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	300 /* Check in the previous DUPLICATE_MESSAGES_BUFFER messages if we have received the same identifier / authenticator / port combination */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	301 for (i = cli->duplicates_info[p].cnt - 1; i >= cli->duplicates_info[p].cnt - DUPLICATE_MESSAGES_BUFFER; i--) {
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	302 if ( (cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].id == (*msg)->radius.hdr->identifier)
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	303 && (cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].port == (*msg)->port)
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	304 && !memcmp(&cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].auth[0], &(*msg)->radius.hdr->authenticator[0], 16)) {
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	305 /* We already received this request */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	306 cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].nbdup++;
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	307 dup = 1;
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	308 TRACE_DEBUG(INFO, "Received duplicated RADIUS message (id: %02hhx, port: %hu, dup #%d).",
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	309 (*msg)->radius.hdr->identifier,
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	310 ntohs((*msg)->port),
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	311 cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].nbdup);
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	312 if (cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].ans) {
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	313 /* Resend the answer */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	314 CHECK_FCT_DO( rgw_servers_send((*msg)->serv_type,
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	315 cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].ans->buf,
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	316 cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].ans->buf_used,
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	317 cli->sa,
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	318 (*msg)->port), );
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	319 }
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	320 rgw_msg_free(msg);
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	321 break;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	322 }
530 825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	323 }
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	324
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	325 /* If we did no already receive this request, save it for later */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	326 if (!dup) {
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	327 /* It's a new request, save its data */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	328 int i = cli->duplicates_info[p].cnt % DUPLICATE_MESSAGES_BUFFER;
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	329
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	330 cli->duplicates_info[p].msg_info[i].port = (*msg)->port;
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	331 cli->duplicates_info[p].msg_info[i].id = (*msg)->radius.hdr->identifier;
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	332 memcpy(&cli->duplicates_info[p].msg_info[i].auth[0], &(*msg)->radius.hdr->authenticator[0], 16);
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	333 if (cli->duplicates_info[p].msg_info[i].ans) {
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	334 /* Free the old answer */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	335 radius_msg_free(cli->duplicates_info[p].msg_info[i].ans);
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	336 free(cli->duplicates_info[p].msg_info[i].ans);
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	337 cli->duplicates_info[p].msg_info[i].ans = NULL;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	338 }
530 825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	339 cli->duplicates_info[p].msg_info[i].nbdup = 0;
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	340
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	341 cli->duplicates_info[p].cnt += 1;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	342 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	343
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	344 return 0;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	345 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	346
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	347 /* Check that the NAS-IP-Adress or NAS-Identifier is coherent with the IP the packet was received from */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	348 /* Also update the client list of aliases if needed */
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	349 /* NOTE: This function does nothing if the client is a RADIUS Proxy... */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	350 /* Check if the message has a valid authenticator, and update the meta-data accordingly */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	351 int rgw_clients_auth_check(struct rgw_radius_msg_meta * msg, struct rgw_client * cli, uint8_t * req_auth)
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	352 {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	353 unsigned char * key;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	354 size_t keylen;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	355 int count;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	356
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	357 TRACE_ENTRY("%p %p %p", msg, cli, req_auth);
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	358
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	359 CHECK_PARAMS(msg && cli);
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	360
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	361 CHECK_FCT(rgw_clients_getkey(cli, &key, &keylen));
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	362
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	363 count = radius_msg_count_attr(&msg->radius, RADIUS_ATTR_MESSAGE_AUTHENTICATOR, 0);
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	364 if (count > 1) {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	365 TRACE_DEBUG(INFO, "Too many Message-Authenticator attributes (%d), discarding message.", count);
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	366 return EINVAL;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	367 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	368 if (count == 0) {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	369 TRACE_DEBUG(FULL, "Message does not contain a Message-Authenticator attributes.");
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	370 msg->valid_mac = 0;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	371 } else {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	372 if (radius_msg_verify_msg_auth( &msg->radius, key, keylen, req_auth )) {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	373 TRACE_DEBUG(INFO, "Invalid Message-Authenticator received, discarding message.");
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	374 return EINVAL;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	375 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	376 msg->valid_mac = 1;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	377 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	378
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	379 return 0;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	380 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	381
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	382 static struct dict_object * cache_orig_host = NULL;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	383 static struct dict_object * cache_orig_realm = NULL;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	384 static struct dict_object * cache_route_record = NULL;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	385
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	386 int rgw_clients_init(void)
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	387 {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	388 TRACE_ENTRY();
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	389 CHECK_FCT( fd_dict_search(fd_g_config->cnf_dict, DICT_AVP, AVP_BY_NAME, "Origin-Host", &cache_orig_host, ENOENT) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	390 CHECK_FCT( fd_dict_search(fd_g_config->cnf_dict, DICT_AVP, AVP_BY_NAME, "Origin-Realm", &cache_orig_realm, ENOENT) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	391 CHECK_FCT( fd_dict_search(fd_g_config->cnf_dict, DICT_AVP, AVP_BY_NAME, "Route-Record", &cache_route_record, ENOENT) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	392 return 0;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	393 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	394
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	395
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	396 /* The following function checks if a RADIUS message contains a valid NAS identifier, and initializes an empty Diameter
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	397 message with the appropriate routing information */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	398 int rgw_clients_create_origin(struct rgw_radius_msg_meta msg, struct rgw_client cli, struct msg ** diam)
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	399 {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	400 int idx;
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	401 int valid_nas_info = 0;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	402 struct radius_attr_hdr nas_ip = NULL, nas_ip6 = NULL, *nas_id = NULL;
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	403 char * oh_str = NULL;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	404 char * or_str = NULL;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	405 char * rr_str = NULL;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	406 char buf[REVERSE_DNS_SIZE_MAX]; /* to store DNS lookups results */
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	407
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	408 struct avp *avp = NULL;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	409 union avp_value avp_val;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	410
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	411 TRACE_ENTRY("%p %p %p", msg, cli, diam);
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	412 CHECK_PARAMS(msg && cli && diam && (*diam == NULL));
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	413
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	414 /* Find the relevant attributes, if any */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	415 for (idx = 0; idx < msg->radius.attr_used; idx++) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	416 struct radius_attr_hdr * attr = (struct radius_attr_hdr *)(msg->radius.buf + msg->radius.attr_pos[idx]);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	417 size_t attr_len = attr->length - sizeof(struct radius_attr_hdr);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	418
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	419 if ((attr->type == RADIUS_ATTR_NAS_IP_ADDRESS) && (attr_len = 4)) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	420 nas_ip = attr;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	421 continue;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	422 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	423
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	424 if ((attr->type == RADIUS_ATTR_NAS_IDENTIFIER) && (attr_len > 0)) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	425 nas_id = attr;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	426 continue;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	427 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	428
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	429 if ((attr->type == RADIUS_ATTR_NAS_IPV6_ADDRESS) && (attr_len = 16)) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	430 nas_ip6 = attr;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	431 continue;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	432 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	433 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	434
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	435 if (!nas_ip && !nas_ip6 && !nas_id) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	436 TRACE_DEBUG(FULL, "The message does not contain any NAS identification attribute.");
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	437
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	438 /* Get information on this peer */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	439 CHECK_FCT( rgw_clients_get_origin(cli, &oh_str, &or_str) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	440
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	441 goto diameter;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	442 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	443
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	444 /* Check if the message was received from the IP in NAS-IP-Address attribute */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	445 if (nas_ip && (cli->sa->sa_family == AF_INET) && !memcmp(nas_ip+1, &cli->sin->sin_addr, sizeof(struct in_addr))) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	446 TRACE_DEBUG(FULL, "NAS-IP-Address contains the same address as the message was received from.");
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	447 valid_nas_info \|= 1;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	448 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	449 if (nas_ip6 && (cli->sa->sa_family == AF_INET6) && !memcmp(nas_ip6+1, &cli->sin6->sin6_addr, sizeof(struct in6_addr))) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	450 TRACE_DEBUG(FULL, "NAS-IPv6-Address contains the same address as the message was received from.");
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	451 valid_nas_info \|= 2;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	452 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	453
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	454
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	455 /*
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	456 In RADIUS it would be possible for a rogue NAS to forge the NAS-IP-
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	457 Address attribute value. Diameter/RADIUS translation agents MUST
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	458 check a received NAS-IP-Address or NAS-IPv6-Address attribute against
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	459 the source address of the RADIUS packet. If they do not match and
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	460 the Diameter/RADIUS translation agent does not know whether the
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	461 packet was sent by a RADIUS proxy or NAS (e.g., no Proxy-State
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	462 attribute), then by default it is assumed that the source address
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	463 corresponds to a RADIUS proxy, and that the NAS Address is behind
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	464 that proxy, potentially with some additional RADIUS proxies in
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	465 between. The Diameter/RADIUS translation agent MUST insert entries
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	466 in the Route-Record AVP corresponding to the apparent route. This
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	467 implies doing a reverse lookup on the source address and NAS-IP-
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	468 Address or NAS-IPv6-Address attributes to determine the corresponding
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	469 FQDNs.
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	470
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	471 If the source address and the NAS-IP-Address or NAS-IPv6-Address do
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	472 not match, and the Diameter/RADIUS translation agent knows that it is
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	473 talking directly to the NAS (e.g., there are no RADIUS proxies
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	474 between it and the NAS), then the error should be logged, and the
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	475 packet MUST be discarded.
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	476
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	477 Diameter agents and servers MUST check whether the NAS-IP-Address AVP
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	478 corresponds to an entry in the Route-Record AVP. This is done by
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	479 doing a reverse lookup (PTR RR) for the NAS-IP-Address to retrieve
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	480 the corresponding FQDN, and by checking for a match with the Route-
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	481 Record AVP. If no match is found, then an error is logged, but no
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	482 other action is taken.
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	483 */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	484 if (nas_ip \|\| nas_ip6) {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	485 if (!valid_nas_info) {
520 9b5422e5385c Better handle localhost RADIUS clients Sebastien Decugis <sdecugis@nict.go.jp> parents: 519 diff changeset	486 if ((!cli->is_local) && (cli->type == RGW_CLI_NAS)) {
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	487 TRACE_DEBUG(INFO, "Message received with a NAS-IP-Address or NAS-IPv6-Address different \nfrom the sender's. Please configure as Proxy if this is expected.\n Message discarded.");
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	488 return EINVAL;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	489 } else {
520 9b5422e5385c Better handle localhost RADIUS clients Sebastien Decugis <sdecugis@nict.go.jp> parents: 519 diff changeset	490 /* the peer is configured as a proxy, or running on localhost, so accept the message */
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	491 sSS ss;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	492
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	493 /* In that case, the cli will be stored as Route-Record and the NAS-IP-Address as origin */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	494 if (!cli->is_local) {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	495 rr_str = cli->fqdn;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	496 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	497
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	498 /* We must DNS-reverse the NAS-IP-Address /
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	499 memset(&ss, 0 , sizeof(sSS));
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	500 if (nas_ip) {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	501 sSA4 * sin = (sSA4 *)&ss;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	502 sin->sin_family = AF_INET;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	503 memcpy(&sin->sin_addr, nas_ip + 1, sizeof(struct in_addr));
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	504 } else {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	505 sSA6 * sin6 = (sSA6 *)&ss;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	506 sin6->sin6_family = AF_INET6;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	507 memcpy(&sin6->sin6_addr, nas_ip6 + 1, sizeof(struct in6_addr));
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	508 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	509 CHECK_SYS_DO( getnameinfo( (sSA *)&ss, sSAlen(&ss), &buf[0], sizeof(buf), NULL, 0, NI_NAMEREQD),
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	510 {
520 9b5422e5385c Better handle localhost RADIUS clients Sebastien Decugis <sdecugis@nict.go.jp> parents: 519 diff changeset	511 if (cli->is_local) {
9b5422e5385c Better handle localhost RADIUS clients Sebastien Decugis <sdecugis@nict.go.jp> parents: 519 diff changeset	512 CHECK_FCT( rgw_clients_get_origin(cli, &oh_str, &or_str) );
9b5422e5385c Better handle localhost RADIUS clients Sebastien Decugis <sdecugis@nict.go.jp> parents: 519 diff changeset	513 goto diameter;
9b5422e5385c Better handle localhost RADIUS clients Sebastien Decugis <sdecugis@nict.go.jp> parents: 519 diff changeset	514 }
9b5422e5385c Better handle localhost RADIUS clients Sebastien Decugis <sdecugis@nict.go.jp> parents: 519 diff changeset	515
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	516 TRACE_DEBUG(INFO, "The NAS-IP*-Address cannot be DNS reversed in order to create the Origin-Host AVP; rejecting the message (translation is impossible).");
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	517 return EINVAL;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	518 } );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	519
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	520 oh_str = &buf[0];
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	521 or_str = strchr(oh_str, '.');
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	522 if (or_str) {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	523 or_str ++; /* move after the first dot */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	524 if (*or_str == '\0')
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	525 or_str = NULL; /* Discard this realm, we will use the local realm later */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	526 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	527 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	528 } else {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	529 /* The attribute matches the source address, just use this in origin-host */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	530 CHECK_FCT( rgw_clients_get_origin(cli, &oh_str, &or_str) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	531 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	532
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	533 goto diameter; /* we ignore the nas_id in that case */
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	534 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	535
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	536 /* We don't have a NAS-IP-Address attribute if we are here /
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	537 if (cli->is_local) {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	538 /* Simple: we use our own configuration */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	539 CHECK_FCT( rgw_clients_get_origin(cli, &oh_str, &or_str) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	540 goto diameter;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	541 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	542
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	543 /* At this point, we only have nas_id, and the client is not local */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	544 ASSERT(nas_id);
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	545
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	546 {
442 02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	547 int found, ret;
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	548 struct addrinfo hint, res, ptr;
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	549
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	550 /*
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	551 In RADIUS it would be possible for a rogue NAS to forge the NAS-
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	552 Identifier attribute. Diameter/RADIUS translation agents SHOULD
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	553 attempt to check a received NAS-Identifier attribute against the
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	554 source address of the RADIUS packet, by doing an A/AAAA RR query. If
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	555 the NAS-Identifier attribute contains an FQDN, then such a query
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	556 would resolve to an IP address matching the source address. However,
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	557 the NAS-Identifier attribute is not required to contain an FQDN, so
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	558 such a query could fail. If it fails, an error should be logged, but
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	559 no action should be taken, other than a reverse lookup on the source
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	560 address and insert the resulting FQDN into the Route-Record AVP.
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	561
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	562 Diameter agents and servers SHOULD check whether a NAS-Identifier AVP
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	563 corresponds to an entry in the Route-Record AVP. If no match is
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	564 found, then an error is logged, but no other action is taken.
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	565 */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	566
442 02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	567 /* first, check if the nas_id is the fqdn of the peer or a known alias */
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	568 if ((cli->fqdn_len == (nas_id->length - sizeof(struct radius_attr_hdr)))
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	569 && (!strncasecmp((char *)(nas_id + 1), cli->fqdn, nas_id->length - sizeof(struct radius_attr_hdr)))) {
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	570 TRACE_DEBUG(FULL, "NAS-Identifier contains the fqdn of the client");
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	571 found = 1;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	572 } else {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	573 for (idx = 0; idx < cli->aliases_nb; idx++) {
442 02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	574 if (((nas_id->length - sizeof(struct radius_attr_hdr)) == strlen(cli->aliases[idx]))
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	575 && (!strncasecmp((char *)(nas_id + 1), cli->aliases[idx], nas_id->length - sizeof(struct radius_attr_hdr)))) {
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	576 TRACE_DEBUG(FULL, "NAS-Identifier valid value found in the cache");
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	577 found = 1;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	578 break;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	579 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	580 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	581 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	582
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	583 if (found) {
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	584 /* The NAS-Identifier matches the source IP */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	585 CHECK_FCT( rgw_clients_get_origin(cli, &oh_str, &or_str) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	586
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	587 goto diameter;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	588 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	589
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	590 /* Attempt DNS resolution of the identifier */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	591 ASSERT( nas_id->length - sizeof(struct radius_attr_hdr) < sizeof(buf) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	592 memcpy(buf, nas_id + 1, nas_id->length - sizeof(struct radius_attr_hdr));
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	593 buf[nas_id->length - sizeof(struct radius_attr_hdr)] = '\0';
442 02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	594
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	595 /* Now check if this alias is valid for this peer */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	596 memset(&hint, 0, sizeof(hint));
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	597 hint.ai_flags = AI_CANONNAME;
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	598 ret = getaddrinfo(buf, NULL, &hint, &res);
442 02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	599 if (ret == 0) {
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	600 strncpy(buf, res->ai_canonname, sizeof(buf));
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	601 /* The name was resolved correctly, does it match the IP of the client? */
442 02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	602 for (ptr = res; ptr != NULL; ptr = ptr->ai_next) {
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	603 if (cli->sa->sa_family != ptr->ai_family)
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	604 continue;
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	605 if (memcmp(cli->sa, ptr->ai_addr, sSAlen(cli->sa)))
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	606 continue;
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	607
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	608 found = 1;
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	609 break;
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	610 }
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	611 freeaddrinfo(res);
442 02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	612
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	613 if (!found) {
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	614 if (cli->type == RGW_CLI_NAS) {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	615 TRACE_DEBUG(INFO, "The NAS-Identifier value '%.*s' resolves to a different IP than the client's, discarding the message. \nConfigure this client as a Proxy if this message should be valid.",
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	616 nas_id->length - sizeof(struct radius_attr_hdr), nas_id + 1);
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	617 return EINVAL;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	618 } else {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	619 /* This identifier matches a different IP, assume it is a proxied message */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	620 if (!cli->is_local) {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	621 rr_str = cli->fqdn;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	622 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	623 oh_str = &buf[0]; /* The canonname resolved */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	624 or_str = strchr(oh_str, '.');
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	625 if (or_str) {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	626 or_str ++; /* move after the first dot */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	627 if (*or_str == '\0')
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	628 or_str = NULL; /* Discard this realm, we will use the local realm later */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	629 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	630 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	631 } else {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	632 /* It is a valid alias, save it */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	633 CHECK_MALLOC( cli->aliases = realloc(cli->aliases, (cli->aliases_nb + 1) * sizeof(char *)) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	634 CHECK_MALLOC( cli->aliases[cli->aliases_nb + 1] = malloc( 1 + nas_id->length - sizeof(struct radius_attr_hdr) ));
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	635 memcpy( cli->aliases[cli->aliases_nb + 1], nas_id + 1, nas_id->length - sizeof(struct radius_attr_hdr));
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	636 *(cli->aliases[cli->aliases_nb + 1] + nas_id->length - sizeof(struct radius_attr_hdr)) = '\0';
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	637 cli->aliases_nb ++;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	638 TRACE_DEBUG(FULL, "Saved valid alias for client: '%s' -> '%s'", cli->aliases[cli->aliases_nb + 1], cli->fqdn);
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	639 CHECK_FCT( rgw_clients_get_origin(cli, &oh_str, &or_str) );
442 02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	640 }
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	641 } else {
02e3976b9163 Attempt at fixing a problem with NAS-Identifier RADIUS attribute handling Sebastien Decugis <sdecugis@nict.go.jp> parents: 403 diff changeset	642 /* Error resolving the name */
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	643 TRACE_DEBUG(INFO, "NAS-Identifier '%s' cannot be resolved: %s. Ignoring...", buf, gai_strerror(ret));
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	644 /* Assume this is a valid identifier for the client */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	645 CHECK_FCT( rgw_clients_get_origin(cli, &oh_str, &or_str) );
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	646 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	647 }
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	648
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	649 /* Now, let's create the empty Diameter message with Origin-Host, -Realm, and Route-Record if needed. */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	650 diameter:
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	651 ASSERT(oh_str); /* If it is not defined here, there is a bug... */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	652 if (!or_str)
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	653 or_str = fd_g_config->cnf_diamrlm; /* Use local realm in that case */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	654
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	655 /* Create an empty Diameter message so that extensions can store their AVPs */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	656 CHECK_FCT( fd_msg_new ( NULL, MSGFL_ALLOC_ETEID, diam ) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	657
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	658 /* Add the Origin-Host as next AVP */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	659 CHECK_FCT( fd_msg_avp_new ( cache_orig_host, 0, &avp ) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	660 memset(&avp_val, 0, sizeof(avp_val));
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	661 avp_val.os.data = (unsigned char *)oh_str;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	662 avp_val.os.len = strlen(oh_str);
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	663 CHECK_FCT( fd_msg_avp_setvalue ( avp, &avp_val ) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	664 CHECK_FCT( fd_msg_avp_add ( *diam, MSG_BRW_LAST_CHILD, avp) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	665
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	666 /* Add the Origin-Realm as next AVP */
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	667 CHECK_FCT( fd_msg_avp_new ( cache_orig_realm, 0, &avp ) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	668 memset(&avp_val, 0, sizeof(avp_val));
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	669 avp_val.os.data = (unsigned char *)or_str;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	670 avp_val.os.len = strlen(or_str);
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	671 CHECK_FCT( fd_msg_avp_setvalue ( avp, &avp_val ) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	672 CHECK_FCT( fd_msg_avp_add ( *diam, MSG_BRW_LAST_CHILD, avp) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	673
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	674 if (rr_str) {
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	675 CHECK_FCT( fd_msg_avp_new ( cache_route_record, 0, &avp ) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	676 memset(&avp_val, 0, sizeof(avp_val));
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	677 avp_val.os.data = (unsigned char *)rr_str;
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	678 avp_val.os.len = strlen(rr_str);
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	679 CHECK_FCT( fd_msg_avp_setvalue ( avp, &avp_val ) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	680 CHECK_FCT( fd_msg_avp_add ( *diam, MSG_BRW_LAST_CHILD, avp) );
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	681 }
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	682
1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	683 /* Done! */
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	684 return 0;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	685 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	686
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	687 int rgw_clients_get_origin(struct rgw_client cli, char fqdn, char *realm)
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	688 {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	689 TRACE_ENTRY("%p %p %p", cli, fqdn, realm);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	690 CHECK_PARAMS(cli && fqdn);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	691
500 d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	692 if (cli->is_local) {
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	693 *fqdn = fd_g_config->cnf_diamid;
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	694 if (realm)
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	695 *realm= fd_g_config->cnf_diamrlm;
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	696 } else {
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	697 *fqdn = cli->fqdn;
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	698 if (realm)
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	699 *realm= cli->realm;
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	700 }
d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	701
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	702 return 0;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	703 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	704
271 411314907b43 Added translation of Accounting messages Sebastien Decugis <sdecugis@nict.go.jp> parents: 261 diff changeset	705 char * rgw_clients_id(struct rgw_client *cli)
411314907b43 Added translation of Accounting messages Sebastien Decugis <sdecugis@nict.go.jp> parents: 261 diff changeset	706 {
500 d4fc98a3b79c Handle more nicely the local RADIUS clients in the gateway Sebastien Decugis <sdecugis@nict.go.jp> parents: 442 diff changeset	707 return cli->is_local ? "(local)" : cli->fqdn;
271 411314907b43 Added translation of Accounting messages Sebastien Decugis <sdecugis@nict.go.jp> parents: 261 diff changeset	708 }
411314907b43 Added translation of Accounting messages Sebastien Decugis <sdecugis@nict.go.jp> parents: 261 diff changeset	709
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	710
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	711 void rgw_clients_dispose(struct rgw_client ** ref)
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	712 {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	713 TRACE_ENTRY("%p", ref);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	714 CHECK_PARAMS_DO(ref, return);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	715
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	716 CHECK_POSIX_DO( pthread_mutex_lock(&cli_mtx), );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	717 client_unlink(*ref);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	718 *ref = NULL;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	719 CHECK_POSIX_DO( pthread_mutex_unlock(&cli_mtx), );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	720 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	721
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	722 int rgw_clients_add( struct sockaddr * ip_port, unsigned char ** key, size_t keylen, enum rgw_cli_type type )
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	723 {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	724 struct rgw_client * prev = NULL, *new = NULL;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	725 int ret;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	726
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	727 TRACE_ENTRY("%p %p %lu", ip_port, key, keylen);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	728
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	729 CHECK_PARAMS( ip_port && key && *key && keylen );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	730 CHECK_PARAMS( (ip_port->sa_family == AF_INET) \|\| (ip_port->sa_family == AF_INET6) );
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	731 CHECK_PARAMS( (type == RGW_CLI_NAS) \|\| (type == RGW_CLI_PXY) );
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	732
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	733 /* Dump the entry in debug mode */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	734 if (TRACE_BOOL(FULL + 1 )) {
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	735 TRACE_DEBUG(FULL, "Adding %s:", (type == RGW_CLI_NAS) ? "NAS" : "PROXY" );
260 4c2656ff3400 Cleanup newlines Sebastien Decugis <sdecugis@nict.go.jp> parents: 258 diff changeset	736 TRACE_DEBUG_sSA(FULL, "\tIP : ", ip_port, NI_NUMERICHOST \| NI_NUMERICSERV, "" );
4c2656ff3400 Cleanup newlines Sebastien Decugis <sdecugis@nict.go.jp> parents: 258 diff changeset	737 TRACE_DEBUG_BUFFER(FULL, "\tKey: [", *key, keylen, "]" );
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	738 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	739
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	740 /* Lock the lists */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	741 CHECK_POSIX( pthread_mutex_lock(&cli_mtx) );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	742
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	743 /* Check if the same entry does not already exist */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	744 ret = client_search(&prev, ip_port );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	745 if (ret == ENOENT) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	746 /* No duplicate found, Ok to add */
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	747 CHECK_FCT_DO( ret = client_create( &new, &ip_port, key, keylen, type ), goto end );
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	748 fd_list_insert_after(&prev->chain, &new->chain);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	749 new->refcount++;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	750 ret = 0;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	751 goto end;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	752 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	753
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	754 if (ret == EEXIST) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	755 /* Check if the key is the same, then skip or return an error */
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	756 if ((keylen == prev->key.len ) && ( ! memcmp(*key, prev->key.data, keylen) ) && (type == prev->type)) {
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	757 TRACE_DEBUG(INFO, "Skipping duplicate client description");
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	758 ret = 0;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	759 goto end;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	760 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	761
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	762 fd_log_debug("ERROR: Conflicting RADIUS clients descriptions!\n");
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	763 TRACE_DEBUG(NONE, "Previous entry: %s", (prev->type == RGW_CLI_NAS) ? "NAS" : "PROXY");
260 4c2656ff3400 Cleanup newlines Sebastien Decugis <sdecugis@nict.go.jp> parents: 258 diff changeset	764 TRACE_DEBUG_sSA(NONE, "\tIP : ", prev->sa, NI_NUMERICHOST \| NI_NUMERICSERV, "" );
4c2656ff3400 Cleanup newlines Sebastien Decugis <sdecugis@nict.go.jp> parents: 258 diff changeset	765 TRACE_DEBUG_BUFFER(NONE, "\tKey: [", prev->key.data, prev->key.len, "]" );
516 1c2f5ee38039 Allow RADIUS Proxies with the app_radgw extension Sebastien Decugis <sdecugis@nict.go.jp> parents: 500 diff changeset	766 TRACE_DEBUG(NONE, "Conflicting entry: %s", (type == RGW_CLI_NAS) ? "NAS" : "PROXY");
260 4c2656ff3400 Cleanup newlines Sebastien Decugis <sdecugis@nict.go.jp> parents: 258 diff changeset	767 TRACE_DEBUG_sSA(NONE, "\tIP : ", ip_port, NI_NUMERICHOST \| NI_NUMERICSERV, "" );
4c2656ff3400 Cleanup newlines Sebastien Decugis <sdecugis@nict.go.jp> parents: 258 diff changeset	768 TRACE_DEBUG_BUFFER(NONE, "\tKey: [", *key, keylen, "]" );
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	769 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	770 end:
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	771 /* release the lists */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	772 CHECK_POSIX( pthread_mutex_unlock(&cli_mtx) );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	773
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	774 return ret;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	775 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	776
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	777 static void dump_cli_list(struct fd_list *senti)
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	778 {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	779 struct rgw_client * client = NULL;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	780 struct fd_list *ref = NULL;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	781
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	782 for (ref = senti->next; ref != senti; ref = ref->next) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	783 client = (struct rgw_client *)ref;
521 b793d43e4686 Fix compilation problem Sebastien Decugis <sdecugis@nict.go.jp> parents: 520 diff changeset	784 TRACE_DEBUG_sSA(NONE, " - ", client->sa, NI_NUMERICHOST \| NI_NUMERICSERV, (client->type == RGW_CLI_NAS) ? "" : " [PROXY]" );
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	785 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	786 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	787
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	788 void rgw_clients_dump(void)
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	789 {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	790 if ( ! TRACE_BOOL(FULL) )
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	791 return;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	792
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	793 CHECK_POSIX_DO( pthread_mutex_lock(&cli_mtx), /* ignore error */ );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	794
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	795 if (!FD_IS_LIST_EMPTY(&cli_ip))
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	796 fd_log_debug(" RADIUS IP clients list:\n");
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	797 dump_cli_list(&cli_ip);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	798
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	799 if (!FD_IS_LIST_EMPTY(&cli_ip6))
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	800 fd_log_debug(" RADIUS IPv6 clients list:\n");
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	801 dump_cli_list(&cli_ip6);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	802
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	803 CHECK_POSIX_DO( pthread_mutex_unlock(&cli_mtx), /* ignore error */ );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	804 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	805
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	806 void rgw_clients_fini(void)
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	807 {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	808 struct fd_list * client;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	809
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	810 TRACE_ENTRY();
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	811
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	812 CHECK_POSIX_DO( pthread_mutex_lock(&cli_mtx), /* ignore error */ );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	813
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	814 /* empty the lists */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	815 while ( ! FD_IS_LIST_EMPTY(&cli_ip) ) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	816 client = cli_ip.next;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	817 fd_list_unlink(client);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	818 client_unlink((struct rgw_client *)client);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	819 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	820 while (! FD_IS_LIST_EMPTY(&cli_ip6)) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	821 client = cli_ip6.next;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	822 fd_list_unlink(client);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	823 client_unlink((struct rgw_client *)client);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	824 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	825
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	826 CHECK_POSIX_DO( pthread_mutex_unlock(&cli_mtx), /* ignore error */ );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	827
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	828 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	829
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	830 int rgw_client_finish_send(struct radius_msg ** msg, struct rgw_radius_msg_meta * req, struct rgw_client * cli)
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	831 {
530 825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	832 int p,i;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	833
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	834 TRACE_ENTRY("%p %p %p", msg, req, cli);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	835 CHECK_PARAMS( msg && *msg && cli );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	836
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	837 if (!req) {
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	838 /* We don't support this case yet */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	839 ASSERT(0);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	840 return ENOTSUP;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	841 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	842
539 6994e9a3c528 The previous commit provoked an Accounting-Response with empty authenticator... Should be fixed now. Sebastien Decugis <sdecugis@nict.go.jp> parents: 538 diff changeset	843 if (radius_msg_finish_srv(*msg, cli->key.data, cli->key.len, req->radius.hdr->authenticator)) {
6994e9a3c528 The previous commit provoked an Accounting-Response with empty authenticator... Should be fixed now. Sebastien Decugis <sdecugis@nict.go.jp> parents: 538 diff changeset	844 TRACE_DEBUG(INFO, "An error occurred while preparing the RADIUS answer");
6994e9a3c528 The previous commit provoked an Accounting-Response with empty authenticator... Should be fixed now. Sebastien Decugis <sdecugis@nict.go.jp> parents: 538 diff changeset	845 radius_msg_free(*msg);
6994e9a3c528 The previous commit provoked an Accounting-Response with empty authenticator... Should be fixed now. Sebastien Decugis <sdecugis@nict.go.jp> parents: 538 diff changeset	846 free(*msg);
6994e9a3c528 The previous commit provoked an Accounting-Response with empty authenticator... Should be fixed now. Sebastien Decugis <sdecugis@nict.go.jp> parents: 538 diff changeset	847 *msg = NULL;
6994e9a3c528 The previous commit provoked an Accounting-Response with empty authenticator... Should be fixed now. Sebastien Decugis <sdecugis@nict.go.jp> parents: 538 diff changeset	848 return EINVAL;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	849 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	850
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	851 /* Debug */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	852 TRACE_DEBUG(FULL, "RADIUS message ready for sending:");
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	853 rgw_msg_dump((struct rgw_radius_msg_meta )msg);
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	854
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	855 /* Send the message */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	856 CHECK_FCT( rgw_servers_send(req->serv_type, (msg)->buf, (msg)->buf_used, cli->sa, req->port) );
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	857
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	858 /* update the duplicate cache in rgw_clients */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	859 if (req->serv_type == RGW_PLG_TYPE_AUTH)
530 825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	860 p = 0;
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	861 else
530 825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	862 p = 1;
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	863 for (i = cli->duplicates_info[p].cnt - 1; i >= cli->duplicates_info[p].cnt - DUPLICATE_MESSAGES_BUFFER; i--) {
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	864 /* Search the entry corresponding to the request */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	865 if ( (cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].id == req->radius.hdr->identifier)
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	866 && (cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].port == req->port)
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	867 && !memcmp(&cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].auth[0], &req->radius.hdr->authenticator[0], 16)) {
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	868 /* This should not happen, but just in case */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	869 if (cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].ans) {
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	870 radius_msg_free(cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].ans);
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	871 free(cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].ans);
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	872 }
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	873 /* Now save the answer message */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	874 cli->duplicates_info[p].msg_info[i % DUPLICATE_MESSAGES_BUFFER].ans = *msg;
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	875 *msg = NULL;
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	876 break;
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	877 }
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	878 }
530 825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	879
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	880 /* If we have not found the request in our circular buffer, it is probably too small */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	881 if (*msg) {
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	882 TODO("Implement a dynamic list for RADIUS duplicates detection based on expiry time instead of number of messages");
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	883 TRACE_DEBUG(INFO, "The circular buffer has circled before the Diameter answer was received, you should definitely increase DUPLICATE_MESSAGES_BUFFER value.");
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	884 /* We don't re-save the value */
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	885 radius_msg_free(*msg);
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	886 free(*msg);
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	887 *msg = NULL;
825a2992e3b9 Improved duplicate detection in RADIUS/Diameter gw. It will be changed again soon Sebastien Decugis <sdecugis@nict.go.jp> parents: 521 diff changeset	888 }
254 a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	889
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	890 /* Finished */
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	891 return 0;
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	892 }
a857024cb48b Ported the RADIUS/Diameter translation code from waaad project. Not tested yet. Gateway plugins to come later. Sebastien Decugis <sdecugis@nict.go.jp> parents: diff changeset	893

Mercurial > hg > freeDiameter

annotate extensions/app_radgw/rgw_clients.c @ 539:6994e9a3c528