336 lines
15 KiB
Erlang
336 lines
15 KiB
Erlang
-module(server_cb).
|
|
|
|
|
|
-include_lib("diameter/include/diameter.hrl").
|
|
-include_lib("diameter/include/diameter_gen_base_rfc6733.hrl").
|
|
-include_lib("diameter_3gpp_ts29_272.hrl").
|
|
-include_lib("osmo_gsup/include/gsup_protocol.hrl").
|
|
|
|
-define(DIA_VENDOR_3GPP, 10415).
|
|
|
|
%% diameter callbacks
|
|
-export([peer_up/3, peer_down/3, pick_peer/4, prepare_request/3, prepare_retransmit/3,
|
|
handle_answer/4, handle_error/4, handle_request/3]).
|
|
|
|
-define(UNEXPECTED, erlang:error({unexpected, ?MODULE, ?LINE})).
|
|
|
|
peer_up(_SvcName, {PeerRef, Caps}, State) ->
|
|
lager:info("Peer up ~p - ~p~n", [PeerRef, lager:pr(Caps, ?MODULE)]),
|
|
State.
|
|
|
|
peer_down(_SvcName, {PeerRef, Caps}, State) ->
|
|
lager:info("Peer down ~p - ~p~n", [PeerRef, lager:pr(Caps, ?MODULE)]),
|
|
State.
|
|
|
|
pick_peer(_, _, _SvcName, _State) ->
|
|
?UNEXPECTED.
|
|
|
|
prepare_request(_, _SvcName, _Peer) ->
|
|
?UNEXPECTED.
|
|
|
|
prepare_retransmit(_Packet, _SvcName, _Peer) ->
|
|
?UNEXPECTED.
|
|
|
|
handle_answer(_Packet, _Request, _SvcName, _Peer) ->
|
|
?UNEXPECTED.
|
|
|
|
handle_error(_Reason, _Request, _SvcName, _Peer) ->
|
|
lager:error("Request error: ~p~n", [_Reason]),
|
|
?UNEXPECTED.
|
|
|
|
% generate Diameter E-UTRAN / UTRAN / GERAN Vectors from GSUP tuple input
|
|
-spec gsup_tuple2dia_eutran('GSUPAuthTuple'(), binary(), integer()) -> #'E-UTRAN-Vector'{}.
|
|
gsup_tuple2dia_eutran(#{autn:=Autn, ck:=Ck, ik:=Ik, rand:=Rand, res:=Res}, Vplmn, Idx) ->
|
|
#'E-UTRAN-Vector'{'Item-Number'=Idx, 'RAND'=Rand, 'XRES'=Res , 'AUTN'=Autn,
|
|
'KASME'=compute_kasme(Ck, Ik, Vplmn, Autn)}.
|
|
|
|
-spec gsup_tuple2dia_utran('GSUPAuthTuple'()) -> #'UTRAN-Vector'{}.
|
|
gsup_tuple2dia_utran(#{autn:=Autn, ck:=Ck, ik:=Ik, rand:=Rand, res:=Res}) ->
|
|
#'UTRAN-Vector'{'RAND'=Rand, 'XRES'=Res, 'AUTN'=Autn, 'Confidentiality-Key'=Ck, 'Integrity-Key'=Ik}.
|
|
|
|
-spec gsup_tuple2dia_geran('GSUPAuthTuple'()) -> #'GERAN-Vector'{}.
|
|
gsup_tuple2dia_geran(#{rand:=Rand, sres:=Sres, kc:=Kc}) ->
|
|
#'GERAN-Vector'{'RAND'=Rand, 'SRES'=Sres, 'Kc'=Kc}.
|
|
|
|
-spec gsup_tuples2dia_eutran(['GSUPAuthTuple'()], binary()) -> [#'E-UTRAN-Vector'{}].
|
|
gsup_tuples2dia_eutran(List, Vplmn) -> gsup_tuples2dia_eutran(List, Vplmn, [], 1).
|
|
gsup_tuples2dia_eutran([], _Vplmn, Out, _Idx) -> Out;
|
|
gsup_tuples2dia_eutran([Head|Tail], Vplmn, Out, Ctr) ->
|
|
Dia = gsup_tuple2dia_eutran(Head, Vplmn, Ctr),
|
|
gsup_tuples2dia_eutran(Tail, Vplmn, [Dia|Out], Ctr+1).
|
|
|
|
-type int_or_false() :: false | integer().
|
|
-spec gsup_tuples2dia(['GSUPAuthTuple'()], binary(), int_or_false(), int_or_false(), int_or_false()) -> #'Authentication-Info'{}.
|
|
gsup_tuples2dia(Tuples, Vplmn, NumEutran, NumUtran, NumGeran) ->
|
|
case NumEutran of
|
|
false -> EutranVecs = [];
|
|
0 -> EutranVecs = [];
|
|
_ -> EutranVecs = gsup_tuples2dia_eutran(lists:sublist(Tuples,NumEutran), Vplmn)
|
|
end,
|
|
case NumUtran of
|
|
false -> UtranVecs = [];
|
|
0 -> UtranVecs = [];
|
|
_ -> UtranVecs = lists:map(fun gsup_tuple2dia_utran/1, lists:sublist(Tuples,NumUtran))
|
|
end,
|
|
case NumGeran of
|
|
false -> GeranVecs = [];
|
|
0 -> GeranVecs = [];
|
|
_ -> GeranVecs = lists:map(fun gsup_tuple2dia_geran/1, lists:sublist(Tuples,NumGeran))
|
|
end,
|
|
#'Authentication-Info'{'E-UTRAN-Vector'=EutranVecs, 'UTRAN-Vector'=UtranVecs,
|
|
'GERAN-Vector'=GeranVecs}.
|
|
|
|
|
|
-spec compute_kasme(<<_:16>>, <<_:16>>, <<_:3>>, <<_:16>>) -> <<_:32>>.
|
|
compute_kasme(Ck, Ik, VplmnId, Autn) ->
|
|
Autn6 = binary_part(Autn, 0, 6),
|
|
K = <<Ck:16/binary, Ik:16/binary>>,
|
|
S = <<16, VplmnId:3/binary, 0, 3, Autn6:6/binary, 0, 6>>,
|
|
Release = erlang:system_info(otp_release),
|
|
if
|
|
Release >= "24" ->
|
|
crypto:macN(hmac, sha256, K, S, 32);
|
|
true ->
|
|
crypto:hmac(sha256, K, S, 32)
|
|
end.
|
|
|
|
-spec req_num_of_vec([tuple()]) -> int_or_false().
|
|
req_num_of_vec([#'Requested-EUTRAN-Authentication-Info'{'Number-Of-Requested-Vectors'=[]}]) -> false;
|
|
req_num_of_vec([#'Requested-EUTRAN-Authentication-Info'{'Number-Of-Requested-Vectors'=[Num]}]) -> Num;
|
|
req_num_of_vec([#'Requested-UTRAN-GERAN-Authentication-Info'{'Number-Of-Requested-Vectors'=[]}]) -> false;
|
|
req_num_of_vec([#'Requested-UTRAN-GERAN-Authentication-Info'{'Number-Of-Requested-Vectors'=[Num]}]) -> Num;
|
|
req_num_of_vec(_) -> false.
|
|
|
|
|
|
-type binary_or_false() :: false | binary().
|
|
-spec req_resynchronization_info([tuple()]) -> binary_or_false().
|
|
req_resynchronization_info([#'Requested-EUTRAN-Authentication-Info'{'Re-Synchronization-Info'=[]}]) ->
|
|
false;
|
|
req_resynchronization_info([#'Requested-EUTRAN-Authentication-Info'{'Re-Synchronization-Info'=[Info]}]) ->
|
|
list_to_binary(Info);
|
|
|
|
req_resynchronization_info([#'Requested-UTRAN-GERAN-Authentication-Info'{'Re-Synchronization-Info'=[]}]) ->
|
|
false;
|
|
req_resynchronization_info([#'Requested-UTRAN-GERAN-Authentication-Info'{'Re-Synchronization-Info'=[Info]}]) ->
|
|
list_to_binary(Info);
|
|
|
|
req_resynchronization_info(_) ->
|
|
false.
|
|
|
|
-define(PDP_TYPE_DEFAULT, <<0,0,0,16#21>>). % IPv4
|
|
-define(PDP_QOS_DEFAULT, <<0,0,0,0,0,0,0,0,0,0,0,0,0,0>>). % fixme
|
|
|
|
-spec gsup_pdp2dia('GSUPPdpInfo'()) -> #'PDP-Context'{}.
|
|
gsup_pdp2dia(GsupPdpInfo) ->
|
|
#'PDP-Context'{'PDP-Type' = maps:get(pdp_type, GsupPdpInfo, ?PDP_TYPE_DEFAULT),
|
|
'Context-Identifier' = maps:get(pdp_context_id, GsupPdpInfo),
|
|
'Service-Selection' = decode_apn:decode_apn(maps:get(access_point_name, GsupPdpInfo)),
|
|
'QoS-Subscribed' = maps:get(quality_of_service, GsupPdpInfo, ?PDP_QOS_DEFAULT)
|
|
}.
|
|
|
|
-define(PDN_TYPE_DEFAULT, 0). % IPv4
|
|
-define(EPS_QOS_DEFAULT,
|
|
#'EPS-Subscribed-QoS-Profile'{'QoS-Class-Identifier'=9,
|
|
'Allocation-Retention-Priority'=
|
|
#'Allocation-Retention-Priority'{'Priority-Level'=8,
|
|
'Pre-emption-Capability'=1,
|
|
'Pre-emption-Vulnerability'=1}
|
|
}).
|
|
|
|
-spec gsup_pdp2dia_apn('GSUPPdpInfo'()) -> #'APN-Configuration'{}.
|
|
gsup_pdp2dia_apn(GsupPdpInfo) ->
|
|
#'APN-Configuration'{'Context-Identifier' = maps:get(pdp_context_id, GsupPdpInfo),
|
|
'PDN-Type' = maps:get(pdp_type, GsupPdpInfo, ?PDN_TYPE_DEFAULT),
|
|
% The EPS-Subscribed-QoS-Profile AVP and the AMBR AVP shall be present in the
|
|
% APN-Configuration AVP when the APN-Configuration AVP is sent in the
|
|
% APN-Configuration-Profile AVP and when the APN-Configuration-Profile AVP is
|
|
% sent within a ULA (as part of the Subscription-Data AVP).
|
|
'EPS-Subscribed-QoS-Profile' = ?EPS_QOS_DEFAULT,
|
|
'AMBR' = #'AMBR'{'Max-Requested-Bandwidth-UL' = 100000000,
|
|
'Max-Requested-Bandwidth-DL' = 100000000},
|
|
% The default APN Configuration shall not contain the Wildcard APN (see 3GPP TS
|
|
% 23.003 [3], clause 9.2); the default APN shall always contain an explicit APN
|
|
'Service-Selection' = decode_apn:decode_apn(maps:get(access_point_name, GsupPdpInfo))
|
|
}.
|
|
|
|
% transient (only in Experimental-Result-Code)
|
|
-define(DIAMETER_AUTHENTICATION_DATA_UNAVAILABLE, 4181).
|
|
-define(DIAMETER_ERROR_CAMEL_SUBSCRIPTION_PRESENT, 4182).
|
|
% permanent (only in Experimental-Result-Code)
|
|
-define(DIAMETER_ERROR_USER_UNKNOWN, 5001).
|
|
-define(DIAMETER_AUTHORIZATION_REJECTED, 5003).
|
|
-define(DIAMETER_ERROR_ROAMING_NOT_ALLOWED, 5004).
|
|
-define(DIAMETER_MISSING_AVP, 5005).
|
|
-define(DIAMETER_UNABLE_TO_COMPLY, 5012).
|
|
-define(DIAMETER_ERROR_UNKNOWN_EPS_SUBSCRIPTION, 5420).
|
|
-define(DIAMETER_ERROR_RAT_NOT_ALLOWED, 5421).
|
|
-define(DIAMETER_ERROR_EQUIPMENT_UNKNOWN, 5422).
|
|
-define(DIAMETER_ERROR_UNKOWN_SERVING_NODE, 5423).
|
|
|
|
% 10.5.5.14
|
|
-define(GMM_CAUSE_IMSI_UNKNOWN, 16#02).
|
|
-define(GMM_CAUSE_ILLEGAL_MS, 16#03).
|
|
-define(GMM_CAUSE_GPRS_NOTALLOWED, 16#07).
|
|
-define(GMM_CAUSE_PLMN_NOTALLOWED, 16#0b).
|
|
-define(GMM_CAUSE_LA_NOTALLOWED, 16#0c).
|
|
-define(GMM_CAUSE_ROAMING_NOTALLOWED, 16#0d).
|
|
-define(GMM_CAUSE_NO_SUIT_CELL_IN_LA, 16#0f).
|
|
-define(GMM_CAUSE_NET_FAIL, 16#11).
|
|
-define(GMM_CAUSE_CONGESTION, 16#16).
|
|
-define(GMM_CAUSE_GSM_AUTH_UNACCEPT, 16#17).
|
|
-define(GMM_CAUSE_INV_MAND_INFO, 16#60).
|
|
-define(GMM_CAUSE_PROTO_ERR_UNSPEC, 16#6f).
|
|
|
|
-define(EXP_RES(Exp), #'Experimental-Result'{'Vendor-Id'=?DIA_VENDOR_3GPP, 'Experimental-Result-Code'=Exp}).
|
|
|
|
%% see 29.272 Annex A/B
|
|
-type empty_or_intl() :: [] | [integer()].
|
|
-spec gsup_cause2dia(integer()) -> {empty_or_intl(), empty_or_intl()}.
|
|
gsup_cause2dia(?GMM_CAUSE_IMSI_UNKNOWN) -> {[], [?EXP_RES(?DIAMETER_ERROR_USER_UNKNOWN)]};
|
|
gsup_cause2dia(?GMM_CAUSE_ILLEGAL_MS) -> {[], [?EXP_RES(?DIAMETER_ERROR_USER_UNKNOWN)]};
|
|
gsup_cause2dia(?GMM_CAUSE_PLMN_NOTALLOWED) -> {[], [?EXP_RES(?DIAMETER_ERROR_ROAMING_NOT_ALLOWED)]};
|
|
gsup_cause2dia(?GMM_CAUSE_GPRS_NOTALLOWED) -> {[], [?EXP_RES(?DIAMETER_ERROR_UNKNOWN_EPS_SUBSCRIPTION)]};
|
|
|
|
gsup_cause2dia(?GMM_CAUSE_LA_NOTALLOWED) -> {[?DIAMETER_AUTHORIZATION_REJECTED], []};
|
|
gsup_cause2dia(?GMM_CAUSE_ROAMING_NOTALLOWED) -> {[], [?EXP_RES(?DIAMETER_ERROR_ROAMING_NOT_ALLOWED)]};
|
|
gsup_cause2dia(?GMM_CAUSE_NO_SUIT_CELL_IN_LA) -> {[], [?EXP_RES(?DIAMETER_ERROR_UNKNOWN_EPS_SUBSCRIPTION)]};
|
|
gsup_cause2dia(?GMM_CAUSE_NET_FAIL) -> {[?DIAMETER_UNABLE_TO_COMPLY], []};
|
|
gsup_cause2dia(?GMM_CAUSE_CONGESTION) -> {[?DIAMETER_UNABLE_TO_COMPLY], []};
|
|
gsup_cause2dia(?GMM_CAUSE_INV_MAND_INFO) -> {[?DIAMETER_MISSING_AVP], []};
|
|
gsup_cause2dia(?GMM_CAUSE_PROTO_ERR_UNSPEC) -> {[?DIAMETER_UNABLE_TO_COMPLY], []};
|
|
gsup_cause2dia(_) -> {[?DIAMETER_UNABLE_TO_COMPLY], []}.
|
|
|
|
% get the value for a tiven key in Map1. If not found, try same key in Map2. If not found, return Default
|
|
-spec twomap_get(atom(), map(), map(), any()) -> any().
|
|
twomap_get(Key, Map1, Map2, Default) ->
|
|
maps:get(Key, Map1, maps:get(Key, Map2, Default)).
|
|
|
|
handle_request(#diameter_packet{msg = Req, errors = []}, _SvcName, {_, Caps}) when is_record(Req, 'AIR') ->
|
|
lager:info("AIR: ~p~n", [Req]),
|
|
% extract relevant fields from DIAMETER AIR
|
|
#diameter_caps{origin_host = {OH,_}, origin_realm = {OR,_}} = Caps,
|
|
#'AIR'{'Session-Id' = SessionId,
|
|
'User-Name' = UserName,
|
|
'Visited-PLMN-Id' = VplmnId,
|
|
'Requested-EUTRAN-Authentication-Info' = ReqEU,
|
|
'Requested-UTRAN-GERAN-Authentication-Info' = ReqUG} = Req,
|
|
VplmnIdBin = list_to_binary(VplmnId),
|
|
NumEutran = req_num_of_vec(ReqEU),
|
|
NumUgran = req_num_of_vec(ReqUG),
|
|
lager:info("Num EUTRAN=~p, UTRAN=~p~n", [NumEutran, NumUgran]),
|
|
% construct GSUP request to HLR and transceive it
|
|
GsupTx1 = #{message_type => send_auth_info_req, imsi => list_to_binary(UserName),
|
|
supported_rat_types => [rat_eutran_sgs], current_rat_type => rat_eutran_sgs},
|
|
ResyncInfo = req_resynchronization_info(ReqEU),
|
|
case ResyncInfo of
|
|
false ->
|
|
GsupTx2 = #{};
|
|
ValidResyncInfo ->
|
|
lager:info("ResyncInfo is valid ~p", [ResyncInfo]),
|
|
GsupTx2 = #{rand => binary:part(ValidResyncInfo, 0, 16),
|
|
auts => binary:part(ValidResyncInfo, 16, 14)}
|
|
end,
|
|
GsupTx = maps:merge(GsupTx1, GsupTx2),
|
|
GsupRx = gen_server:call(gsup_client, {transceive_gsup, GsupTx, send_auth_info_res, send_auth_info_err}),
|
|
lager:info("GsupRx: ~p~n", [GsupRx]),
|
|
% construct DIAMETER AIA response
|
|
case GsupRx of
|
|
#{message_type:=send_auth_info_res, auth_tuples:=GsupAuthTuples} ->
|
|
AuthInfo = gsup_tuples2dia(GsupAuthTuples, VplmnIdBin, NumEutran, NumUgran, NumUgran),
|
|
Resp = #'AIA'{'Session-Id'=SessionId, 'Origin-Host'=OH, 'Origin-Realm'=OR,
|
|
'Result-Code'=2001, 'Auth-Session-State'=1,
|
|
'Authentication-Info'=AuthInfo};
|
|
#{message_type := send_auth_info_err, cause:=Cause} ->
|
|
{Res, ExpRes} = gsup_cause2dia(Cause),
|
|
Resp = #'AIA'{'Session-Id'=SessionId, 'Origin-Host'=OH, 'Origin-Realm'=OR,
|
|
'Result-Code'=Res,
|
|
'Experimental-Result'=ExpRes,
|
|
'Auth-Session-State'=1};
|
|
timeout ->
|
|
Resp = #'AIA'{'Session-Id'=SessionId, 'Origin-Host'=OH, 'Origin-Realm'=OR,
|
|
'Result-Code'=4181, 'Auth-Session-State'=1}
|
|
end,
|
|
lager:info("Resp: ~p~n", [Resp]),
|
|
{reply, Resp};
|
|
|
|
handle_request(#diameter_packet{msg = Req, errors = []}, _SvcName, {_, Caps}) when is_record(Req, 'ULR') ->
|
|
% extract relevant fields from DIAMETER ULR
|
|
#diameter_caps{origin_host = {OH,_}, origin_realm = {OR,_}} = Caps,
|
|
#'ULR'{'Session-Id' = SessionId,
|
|
'RAT-Type' = RatType,
|
|
'ULR-Flags' = UlrFlags,
|
|
'User-Name' = UserName} = Req,
|
|
|
|
% construct GSUP UpdateLocation request to HLR and transceive it; expect InsertSubscrDataReq
|
|
GsupTxUlReq = #{message_type => location_upd_req, imsi => list_to_binary(UserName),
|
|
cn_domain => 1},
|
|
GsupRxIsdReq = gen_server:call(gsup_client,
|
|
{transceive_gsup, GsupTxUlReq, insert_sub_data_req, location_upd_err}),
|
|
lager:info("GsupRxIsdReq: ~p~n", [GsupRxIsdReq]),
|
|
case GsupRxIsdReq of
|
|
#{message_type:=location_upd_err, cause:=Cause} ->
|
|
{Res, ExpRes} = gsup_cause2dia(Cause),
|
|
Resp = #'ULA'{'Session-Id'= SessionId, 'Auth-Session-State'=1,
|
|
'Origin-Host'=OH, 'Origin-Realm'=OR,
|
|
'Result-Code'=Res, 'Experimental-Result'=ExpRes};
|
|
#{message_type:=insert_sub_data_req} ->
|
|
% construct GSUP InsertSubscrData response to HLR and transceive it; expect
|
|
% UpdateLocationRes
|
|
GsupTxIsdRes = #{message_type => insert_sub_data_res,
|
|
imsi => list_to_binary(UserName)},
|
|
GsupRxUlRes = gen_server:call(gsup_client,
|
|
{transceive_gsup, GsupTxIsdRes, location_upd_res, location_upd_err}),
|
|
lager:info("GsupRxUlRes: ~p~n", [GsupRxUlRes]),
|
|
|
|
case GsupRxUlRes of
|
|
#{message_type:=location_upd_res} ->
|
|
Msisdn = twomap_get(msisdn, GsupRxIsdReq, GsupRxUlRes, []),
|
|
Compl = twomap_get(pdp_info_complete, GsupRxIsdReq, GsupRxUlRes, 0),
|
|
|
|
% build the GPRS Subscription Data
|
|
PdpInfoList = twomap_get(pdp_info_list, GsupRxIsdReq, GsupRxUlRes, []),
|
|
PdpContexts = lists:map(fun gsup_pdp2dia/1, PdpInfoList),
|
|
GSubD = #'GPRS-Subscription-Data'{'Complete-Data-List-Included-Indicator'=Compl,
|
|
'PDP-Context'=PdpContexts},
|
|
|
|
% build the APN-Configuration-Profile
|
|
ApnCfgList = lists:map(fun gsup_pdp2dia_apn/1, PdpInfoList),
|
|
FirstApn = lists:nth(1, ApnCfgList),
|
|
DefaultCtxId = FirstApn#'APN-Configuration'.'Context-Identifier',
|
|
ApnCfgProf = #'APN-Configuration-Profile'{'Context-Identifier' = DefaultCtxId,
|
|
'All-APN-Configurations-Included-Indicator'=Compl,
|
|
'APN-Configuration' = ApnCfgList},
|
|
|
|
% put together the Subscription-Data and finally the ULA response
|
|
SubscrData = #'Subscription-Data'{'MSISDN' = Msisdn,
|
|
|
|
'Network-Access-Mode' = 0, % PACKET_AND_CIRCUIT
|
|
'GPRS-Subscription-Data' = GSubD,
|
|
% Subscriber-Status must be present in ULA
|
|
'Subscriber-Status' = 0,
|
|
% AMBR must be present if this is an ULA; let's permit 100MBps UL + DL
|
|
'AMBR' = #'AMBR'{'Max-Requested-Bandwidth-UL' = 100000000,
|
|
'Max-Requested-Bandwidth-DL' = 100000000},
|
|
'APN-Configuration-Profile' = ApnCfgProf},
|
|
Resp = #'ULA'{'Session-Id' = SessionId, 'Auth-Session-State' = 1,
|
|
'Origin-Host' = OH, 'Origin-Realm' = OR,
|
|
'Result-Code' = 2001,
|
|
'Subscription-Data' = SubscrData, 'ULA-Flags' = 0};
|
|
#{message_type:=location_upd_err, cause:=Cause} ->
|
|
{Res, ExpRes} = gsup_cause2dia(Cause),
|
|
Resp = #'ULA'{'Session-Id'= SessionId, 'Auth-Session-State'=1,
|
|
'Origin-Host'=OH, 'Origin-Realm'=OR,
|
|
'Result-Code'=Res, 'Experimental-Result'=ExpRes};
|
|
_ ->
|
|
Resp = #'ULA'{'Session-Id'= SessionId, 'Auth-Session-State'=1,
|
|
'Origin-Host'=OH, 'Origin-Realm'=OR,
|
|
'Result-Code'=fixme}
|
|
end
|
|
end,
|
|
lager:info("ULR Resp: ~p~n", [Resp]),
|
|
{reply, Resp};
|
|
|
|
handle_request(Packet, _SvcName, {_,_}) ->
|
|
lager:error("Unsuppoerted message: ~p~n", [Packet]),
|
|
discard.
|