]>
Commit | Line | Data |
---|---|---|
6fc6879b JM |
1 | /* |
2 | * Example application using RADIUS client as a library | |
3 | * Copyright (c) 2007, Jouni Malinen <j@w1.fi> | |
4 | * | |
0f3d578e JM |
5 | * This software may be distributed under the terms of the BSD license. |
6 | * See README for more details. | |
6fc6879b JM |
7 | */ |
8 | ||
9 | #include "includes.h" | |
10 | ||
11 | #include "common.h" | |
12 | #include "eloop.h" | |
13 | #include "radius/radius.h" | |
14 | #include "radius/radius_client.h" | |
15 | ||
6fc6879b JM |
16 | struct radius_ctx { |
17 | struct radius_client_data *radius; | |
18 | struct hostapd_radius_servers conf; | |
19 | u8 radius_identifier; | |
20 | struct in_addr own_ip_addr; | |
21 | }; | |
22 | ||
23 | ||
24 | static void hostapd_logger_cb(void *ctx, const u8 *addr, unsigned int module, | |
25 | int level, const char *txt, size_t len) | |
26 | { | |
27 | printf("%s\n", txt); | |
28 | } | |
29 | ||
30 | ||
31 | /* Process the RADIUS frames from Authentication Server */ | |
32 | static RadiusRxResult receive_auth(struct radius_msg *msg, | |
33 | struct radius_msg *req, | |
174e899f JM |
34 | const u8 *shared_secret, |
35 | size_t shared_secret_len, | |
6fc6879b JM |
36 | void *data) |
37 | { | |
38 | /* struct radius_ctx *ctx = data; */ | |
39 | printf("Received RADIUS Authentication message; code=%d\n", | |
019c8c66 | 40 | radius_msg_get_hdr(msg)->code); |
6fc6879b JM |
41 | |
42 | /* We're done for this example, so request eloop to terminate. */ | |
43 | eloop_terminate(); | |
44 | ||
45 | return RADIUS_RX_PROCESSED; | |
46 | } | |
47 | ||
48 | ||
49 | static void start_example(void *eloop_ctx, void *timeout_ctx) | |
50 | { | |
51 | struct radius_ctx *ctx = eloop_ctx; | |
52 | struct radius_msg *msg; | |
53 | ||
54 | printf("Sending a RADIUS authentication message\n"); | |
55 | ||
56 | ctx->radius_identifier = radius_client_get_id(ctx->radius); | |
57 | msg = radius_msg_new(RADIUS_CODE_ACCESS_REQUEST, | |
58 | ctx->radius_identifier); | |
59 | if (msg == NULL) { | |
60 | printf("Could not create net RADIUS packet\n"); | |
61 | return; | |
62 | } | |
63 | ||
2cbc6ffb | 64 | radius_msg_make_authenticator(msg); |
6fc6879b JM |
65 | |
66 | if (!radius_msg_add_attr(msg, RADIUS_ATTR_USER_NAME, | |
67 | (u8 *) "user", 4)) { | |
68 | printf("Could not add User-Name\n"); | |
69 | radius_msg_free(msg); | |
6fc6879b JM |
70 | return; |
71 | } | |
72 | ||
73 | if (!radius_msg_add_attr_user_password( | |
74 | msg, (u8 *) "password", 8, | |
75 | ctx->conf.auth_server->shared_secret, | |
76 | ctx->conf.auth_server->shared_secret_len)) { | |
77 | printf("Could not add User-Password\n"); | |
78 | radius_msg_free(msg); | |
6fc6879b JM |
79 | return; |
80 | } | |
81 | ||
82 | if (!radius_msg_add_attr(msg, RADIUS_ATTR_NAS_IP_ADDRESS, | |
83 | (u8 *) &ctx->own_ip_addr, 4)) { | |
84 | printf("Could not add NAS-IP-Address\n"); | |
85 | radius_msg_free(msg); | |
6fc6879b JM |
86 | return; |
87 | } | |
88 | ||
ca8e039f JM |
89 | if (radius_client_send(ctx->radius, msg, RADIUS_AUTH, NULL) < 0) |
90 | radius_msg_free(msg); | |
6fc6879b JM |
91 | } |
92 | ||
93 | ||
94 | int main(int argc, char *argv[]) | |
95 | { | |
96 | struct radius_ctx ctx; | |
97 | struct hostapd_radius_server *srv; | |
98 | ||
99 | if (os_program_init()) | |
100 | return -1; | |
101 | ||
102 | hostapd_logger_register_cb(hostapd_logger_cb); | |
103 | ||
104 | os_memset(&ctx, 0, sizeof(ctx)); | |
105 | inet_aton("127.0.0.1", &ctx.own_ip_addr); | |
106 | ||
0456ea16 | 107 | if (eloop_init()) { |
6fc6879b JM |
108 | printf("Failed to initialize event loop\n"); |
109 | return -1; | |
110 | } | |
111 | ||
112 | srv = os_zalloc(sizeof(*srv)); | |
113 | if (srv == NULL) | |
114 | return -1; | |
115 | ||
116 | srv->addr.af = AF_INET; | |
117 | srv->port = 1812; | |
118 | if (hostapd_parse_ip_addr("127.0.0.1", &srv->addr) < 0) { | |
119 | printf("Failed to parse IP address\n"); | |
120 | return -1; | |
121 | } | |
122 | srv->shared_secret = (u8 *) os_strdup("radius"); | |
123 | srv->shared_secret_len = 6; | |
124 | ||
125 | ctx.conf.auth_server = ctx.conf.auth_servers = srv; | |
126 | ctx.conf.num_auth_servers = 1; | |
127 | ctx.conf.msg_dumps = 1; | |
128 | ||
129 | ctx.radius = radius_client_init(&ctx, &ctx.conf); | |
130 | if (ctx.radius == NULL) { | |
131 | printf("Failed to initialize RADIUS client\n"); | |
132 | return -1; | |
133 | } | |
134 | ||
135 | if (radius_client_register(ctx.radius, RADIUS_AUTH, receive_auth, | |
136 | &ctx) < 0) { | |
137 | printf("Failed to register RADIUS authentication handler\n"); | |
138 | return -1; | |
139 | } | |
140 | ||
141 | eloop_register_timeout(0, 0, start_example, &ctx, NULL); | |
142 | ||
143 | eloop_run(); | |
144 | ||
145 | radius_client_deinit(ctx.radius); | |
146 | os_free(srv->shared_secret); | |
f42cdcc8 | 147 | os_free(srv); |
6fc6879b JM |
148 | |
149 | eloop_destroy(); | |
150 | os_program_deinit(); | |
151 | ||
152 | return 0; | |
153 | } |