2009-03-24 10:24:58 +00:00
|
|
|
/*
|
|
|
|
* Copyright (C) 2009 Martin Willi
|
|
|
|
* Hochschule fuer Technik Rapperswil
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
|
|
* under the terms of the GNU General Public License as published by the
|
|
|
|
* Free Software Foundation; either version 2 of the License, or (at your
|
|
|
|
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful, but
|
|
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
|
|
* for more details.
|
|
|
|
*/
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2009-03-24 10:24:58 +00:00
|
|
|
#include "eap_radius.h"
|
2012-02-27 14:18:58 +00:00
|
|
|
#include "eap_radius_plugin.h"
|
2012-02-24 15:41:10 +00:00
|
|
|
#include "eap_radius_forward.h"
|
2009-03-24 10:24:58 +00:00
|
|
|
|
2012-02-27 14:18:58 +00:00
|
|
|
#include <radius_message.h>
|
|
|
|
#include <radius_client.h>
|
2009-03-24 10:24:58 +00:00
|
|
|
|
|
|
|
#include <daemon.h>
|
|
|
|
|
2010-10-05 05:58:07 +00:00
|
|
|
#define TUNNEL_TYPE_ESP 9
|
|
|
|
|
2009-03-24 10:24:58 +00:00
|
|
|
typedef struct private_eap_radius_t private_eap_radius_t;
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Private data of an eap_radius_t object.
|
|
|
|
*/
|
|
|
|
struct private_eap_radius_t {
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2009-03-24 10:24:58 +00:00
|
|
|
/**
|
|
|
|
* Public authenticator_t interface.
|
|
|
|
*/
|
|
|
|
eap_radius_t public;
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2009-03-24 10:24:58 +00:00
|
|
|
/**
|
|
|
|
* ID of the server
|
|
|
|
*/
|
|
|
|
identification_t *server;
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2009-03-24 10:24:58 +00:00
|
|
|
/**
|
|
|
|
* ID of the peer
|
|
|
|
*/
|
|
|
|
identification_t *peer;
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2009-03-24 10:24:58 +00:00
|
|
|
/**
|
|
|
|
* EAP method type we are proxying
|
|
|
|
*/
|
|
|
|
eap_type_t type;
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2009-03-24 10:24:58 +00:00
|
|
|
/**
|
|
|
|
* EAP vendor, if any
|
|
|
|
*/
|
|
|
|
u_int32_t vendor;
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2011-04-05 13:57:00 +00:00
|
|
|
/**
|
|
|
|
* EAP message identifier
|
|
|
|
*/
|
|
|
|
u_int8_t identifier;
|
|
|
|
|
2009-03-24 10:24:58 +00:00
|
|
|
/**
|
|
|
|
* RADIUS client instance
|
|
|
|
*/
|
|
|
|
radius_client_t *client;
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2009-05-14 12:11:40 +00:00
|
|
|
/**
|
|
|
|
* TRUE to use EAP-Start, FALSE to send EAP-Identity Response directly
|
|
|
|
*/
|
|
|
|
bool eap_start;
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2009-07-07 13:47:09 +00:00
|
|
|
/**
|
|
|
|
* Prefix to prepend to EAP identity
|
|
|
|
*/
|
|
|
|
char *id_prefix;
|
2010-06-28 14:12:06 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Handle the Class attribute as group membership information?
|
|
|
|
*/
|
|
|
|
bool class_group;
|
2010-10-05 05:58:07 +00:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Handle the Filter-Id attribute as IPsec CHILD_SA name?
|
|
|
|
*/
|
|
|
|
bool filter_id;
|
2009-03-24 10:24:58 +00:00
|
|
|
};
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Add EAP-Identity to RADIUS message
|
|
|
|
*/
|
|
|
|
static void add_eap_identity(private_eap_radius_t *this,
|
|
|
|
radius_message_t *request)
|
|
|
|
{
|
|
|
|
struct {
|
|
|
|
/** EAP code (REQUEST/RESPONSE) */
|
|
|
|
u_int8_t code;
|
|
|
|
/** unique message identifier */
|
|
|
|
u_int8_t identifier;
|
|
|
|
/** length of whole message */
|
|
|
|
u_int16_t length;
|
|
|
|
/** EAP type */
|
|
|
|
u_int8_t type;
|
|
|
|
/** identity data */
|
|
|
|
u_int8_t data[];
|
|
|
|
} __attribute__((__packed__)) *hdr;
|
2009-07-07 13:47:09 +00:00
|
|
|
chunk_t id, prefix;
|
2009-03-24 10:24:58 +00:00
|
|
|
size_t len;
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2009-03-24 10:24:58 +00:00
|
|
|
id = this->peer->get_encoding(this->peer);
|
2009-07-07 13:47:09 +00:00
|
|
|
prefix = chunk_create(this->id_prefix, strlen(this->id_prefix));
|
|
|
|
len = sizeof(*hdr) + prefix.len + id.len;
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2009-03-24 10:24:58 +00:00
|
|
|
hdr = alloca(len);
|
|
|
|
hdr->code = EAP_RESPONSE;
|
2011-04-05 13:57:00 +00:00
|
|
|
hdr->identifier = this->identifier;
|
2009-03-24 10:24:58 +00:00
|
|
|
hdr->length = htons(len);
|
|
|
|
hdr->type = EAP_IDENTITY;
|
2009-07-07 13:47:09 +00:00
|
|
|
memcpy(hdr->data, prefix.ptr, prefix.len);
|
|
|
|
memcpy(hdr->data + prefix.len, id.ptr, id.len);
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2009-03-24 10:24:58 +00:00
|
|
|
request->add(request, RAT_EAP_MESSAGE, chunk_create((u_char*)hdr, len));
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Copy EAP-Message attribute from RADIUS message to an new EAP payload
|
|
|
|
*/
|
|
|
|
static bool radius2ike(private_eap_radius_t *this,
|
|
|
|
radius_message_t *msg, eap_payload_t **out)
|
|
|
|
{
|
|
|
|
enumerator_t *enumerator;
|
|
|
|
eap_payload_t *payload;
|
2010-01-19 15:47:21 +00:00
|
|
|
chunk_t data, message = chunk_empty;
|
2009-03-24 10:24:58 +00:00
|
|
|
int type;
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2009-03-24 10:24:58 +00:00
|
|
|
enumerator = msg->create_enumerator(msg);
|
|
|
|
while (enumerator->enumerate(enumerator, &type, &data))
|
|
|
|
{
|
2010-01-19 15:47:21 +00:00
|
|
|
if (type == RAT_EAP_MESSAGE && data.len)
|
2009-03-24 10:24:58 +00:00
|
|
|
{
|
2010-01-19 15:47:21 +00:00
|
|
|
message = chunk_cat("mc", message, data);
|
2009-03-24 10:24:58 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
enumerator->destroy(enumerator);
|
2010-01-19 15:47:21 +00:00
|
|
|
if (message.len)
|
|
|
|
{
|
|
|
|
*out = payload = eap_payload_create_data(message);
|
2011-04-21 11:24:26 +00:00
|
|
|
|
2010-01-19 15:47:21 +00:00
|
|
|
/* apply EAP method selected by RADIUS server */
|
|
|
|
this->type = payload->get_type(payload, &this->vendor);
|
2011-04-21 11:24:26 +00:00
|
|
|
|
|
|
|
DBG3(DBG_IKE, "%N payload %B", eap_type_names, this->type, &message);
|
|
|
|
free(message.ptr);
|
2010-01-19 15:47:21 +00:00
|
|
|
return TRUE;
|
|
|
|
}
|
2009-03-24 10:24:58 +00:00
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
|
2010-07-21 07:15:32 +00:00
|
|
|
METHOD(eap_method_t, initiate, status_t,
|
|
|
|
private_eap_radius_t *this, eap_payload_t **out)
|
2009-03-24 10:24:58 +00:00
|
|
|
{
|
|
|
|
radius_message_t *request, *response;
|
|
|
|
status_t status = FAILED;
|
2009-07-07 13:47:09 +00:00
|
|
|
chunk_t username;
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2012-02-22 11:39:50 +00:00
|
|
|
request = radius_message_create(RMC_ACCESS_REQUEST);
|
2009-07-07 13:47:09 +00:00
|
|
|
username = chunk_create(this->id_prefix, strlen(this->id_prefix));
|
|
|
|
username = chunk_cata("cc", username, this->peer->get_encoding(this->peer));
|
|
|
|
request->add(request, RAT_USER_NAME, username);
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2009-05-14 12:11:40 +00:00
|
|
|
if (this->eap_start)
|
|
|
|
{
|
|
|
|
request->add(request, RAT_EAP_MESSAGE, chunk_empty);
|
|
|
|
}
|
|
|
|
else
|
|
|
|
{
|
|
|
|
add_eap_identity(this, request);
|
|
|
|
}
|
2012-02-24 15:41:10 +00:00
|
|
|
eap_radius_forward_from_ike(request);
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2009-03-24 10:24:58 +00:00
|
|
|
response = this->client->request(this->client, request);
|
|
|
|
if (response)
|
|
|
|
{
|
2012-02-24 15:41:10 +00:00
|
|
|
eap_radius_forward_to_ike(response);
|
2009-03-24 10:24:58 +00:00
|
|
|
if (radius2ike(this, response, out))
|
|
|
|
{
|
|
|
|
status = NEED_MORE;
|
|
|
|
}
|
|
|
|
response->destroy(response);
|
|
|
|
}
|
2012-02-27 13:49:22 +00:00
|
|
|
else
|
|
|
|
{
|
|
|
|
charon->bus->alert(charon->bus, ALERT_RADIUS_NOT_RESPONDING);
|
|
|
|
}
|
2009-03-24 10:24:58 +00:00
|
|
|
request->destroy(request);
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
2010-06-28 14:12:06 +00:00
|
|
|
/**
|
|
|
|
* Handle the Class attribute as group membership information
|
|
|
|
*/
|
|
|
|
static void process_class(private_eap_radius_t *this, radius_message_t *msg)
|
|
|
|
{
|
|
|
|
enumerator_t *enumerator;
|
|
|
|
chunk_t data;
|
|
|
|
int type;
|
|
|
|
|
|
|
|
enumerator = msg->create_enumerator(msg);
|
|
|
|
while (enumerator->enumerate(enumerator, &type, &data))
|
|
|
|
{
|
|
|
|
if (type == RAT_CLASS)
|
|
|
|
{
|
2010-07-09 11:53:43 +00:00
|
|
|
identification_t *id;
|
2010-06-28 14:12:06 +00:00
|
|
|
ike_sa_t *ike_sa;
|
|
|
|
auth_cfg_t *auth;
|
|
|
|
|
2010-07-09 11:53:43 +00:00
|
|
|
if (data.len >= 44)
|
|
|
|
{ /* quirk: ignore long class attributes, these are used for
|
|
|
|
* other purposes by some RADIUS servers (such as NPS). */
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
|
2010-06-28 14:12:06 +00:00
|
|
|
ike_sa = charon->bus->get_sa(charon->bus);
|
|
|
|
if (ike_sa)
|
|
|
|
{
|
|
|
|
auth = ike_sa->get_auth_cfg(ike_sa, FALSE);
|
2010-07-09 11:53:43 +00:00
|
|
|
id = identification_create_from_data(data);
|
|
|
|
DBG1(DBG_CFG, "received group membership '%Y' from RADIUS", id);
|
|
|
|
auth->add(auth, AUTH_RULE_GROUP, id);
|
2010-06-28 14:12:06 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
enumerator->destroy(enumerator);
|
|
|
|
}
|
|
|
|
|
2010-10-05 05:58:07 +00:00
|
|
|
/**
|
|
|
|
* Handle the Filter-Id attribute as IPsec CHILD_SA name
|
|
|
|
*/
|
2010-10-05 18:40:36 +00:00
|
|
|
static void process_filter_id(private_eap_radius_t *this, radius_message_t *msg)
|
2010-10-05 05:58:07 +00:00
|
|
|
{
|
|
|
|
enumerator_t *enumerator;
|
|
|
|
int type;
|
|
|
|
u_int8_t tunnel_tag;
|
|
|
|
u_int32_t tunnel_type;
|
2010-10-05 18:40:36 +00:00
|
|
|
chunk_t filter_id = chunk_empty, data;
|
2010-10-05 05:58:07 +00:00
|
|
|
bool is_esp_tunnel = FALSE;
|
|
|
|
|
|
|
|
enumerator = msg->create_enumerator(msg);
|
|
|
|
while (enumerator->enumerate(enumerator, &type, &data))
|
|
|
|
{
|
|
|
|
switch (type)
|
|
|
|
{
|
|
|
|
case RAT_TUNNEL_TYPE:
|
|
|
|
if (data.len != 4)
|
|
|
|
{
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
tunnel_tag = *data.ptr;
|
|
|
|
*data.ptr = 0x00;
|
|
|
|
tunnel_type = untoh32(data.ptr);
|
|
|
|
DBG1(DBG_IKE, "received RADIUS attribute Tunnel-Type: "
|
2010-10-07 09:13:48 +00:00
|
|
|
"tag = %u, value = %u", tunnel_tag, tunnel_type);
|
2010-10-05 05:58:07 +00:00
|
|
|
is_esp_tunnel = (tunnel_type == TUNNEL_TYPE_ESP);
|
|
|
|
break;
|
|
|
|
case RAT_FILTER_ID:
|
|
|
|
filter_id = data;
|
|
|
|
DBG1(DBG_IKE, "received RADIUS attribute Filter-Id: "
|
2010-10-07 09:13:48 +00:00
|
|
|
"'%.*s'", filter_id.len, filter_id.ptr);
|
2010-10-05 05:58:07 +00:00
|
|
|
break;
|
|
|
|
default:
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
enumerator->destroy(enumerator);
|
2010-10-05 06:02:07 +00:00
|
|
|
|
|
|
|
if (is_esp_tunnel && filter_id.len)
|
|
|
|
{
|
2010-10-05 18:40:36 +00:00
|
|
|
identification_t *id;
|
|
|
|
ike_sa_t *ike_sa;
|
|
|
|
auth_cfg_t *auth;
|
|
|
|
|
|
|
|
ike_sa = charon->bus->get_sa(charon->bus);
|
|
|
|
if (ike_sa)
|
|
|
|
{
|
|
|
|
auth = ike_sa->get_auth_cfg(ike_sa, FALSE);
|
|
|
|
id = identification_create_from_data(filter_id);
|
|
|
|
auth->add(auth, AUTH_RULE_GROUP, id);
|
|
|
|
}
|
2010-10-05 06:02:07 +00:00
|
|
|
}
|
2010-10-05 05:58:07 +00:00
|
|
|
}
|
|
|
|
|
2012-02-21 13:06:37 +00:00
|
|
|
/**
|
|
|
|
* Handle Session-Timeout attribte
|
|
|
|
*/
|
|
|
|
static void process_timeout(private_eap_radius_t *this, radius_message_t *msg)
|
|
|
|
{
|
|
|
|
enumerator_t *enumerator;
|
|
|
|
ike_sa_t *ike_sa;
|
|
|
|
chunk_t data;
|
|
|
|
int type;
|
|
|
|
|
|
|
|
enumerator = msg->create_enumerator(msg);
|
|
|
|
while (enumerator->enumerate(enumerator, &type, &data))
|
|
|
|
{
|
|
|
|
if (type == RAT_SESSION_TIMEOUT && data.len == 4)
|
|
|
|
{
|
|
|
|
ike_sa = charon->bus->get_sa(charon->bus);
|
|
|
|
if (ike_sa)
|
|
|
|
{
|
|
|
|
ike_sa->set_auth_lifetime(ike_sa, untoh32(data.ptr));
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
enumerator->destroy(enumerator);
|
|
|
|
}
|
|
|
|
|
2010-07-21 07:15:32 +00:00
|
|
|
METHOD(eap_method_t, process, status_t,
|
|
|
|
private_eap_radius_t *this, eap_payload_t *in, eap_payload_t **out)
|
2009-03-24 10:24:58 +00:00
|
|
|
{
|
|
|
|
radius_message_t *request, *response;
|
|
|
|
status_t status = FAILED;
|
2010-01-19 15:47:21 +00:00
|
|
|
chunk_t data;
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2012-02-22 11:39:50 +00:00
|
|
|
request = radius_message_create(RMC_ACCESS_REQUEST);
|
2009-03-24 10:24:58 +00:00
|
|
|
request->add(request, RAT_USER_NAME, this->peer->get_encoding(this->peer));
|
2010-01-19 15:47:21 +00:00
|
|
|
data = in->get_data(in);
|
2011-04-21 11:24:26 +00:00
|
|
|
DBG3(DBG_IKE, "%N payload %B", eap_type_names, this->type, &data);
|
2012-01-30 18:11:08 +00:00
|
|
|
|
2010-01-19 15:47:21 +00:00
|
|
|
/* fragment data suitable for RADIUS (not more than 253 bytes) */
|
|
|
|
while (data.len > 253)
|
|
|
|
{
|
|
|
|
request->add(request, RAT_EAP_MESSAGE, chunk_create(data.ptr, 253));
|
|
|
|
data = chunk_skip(data, 253);
|
|
|
|
}
|
|
|
|
request->add(request, RAT_EAP_MESSAGE, data);
|
2009-09-04 11:46:09 +00:00
|
|
|
|
2012-02-24 15:41:10 +00:00
|
|
|
eap_radius_forward_from_ike(request);
|
2009-03-24 10:24:58 +00:00
|
|
|
response = this->client->request(this->client, request);
|
|
|
|
if (response)
|
|
|
|
{
|
2012-02-24 15:41:10 +00:00
|
|
|
eap_radius_forward_to_ike(response);
|
2009-03-24 10:24:58 +00:00
|
|
|
switch (response->get_code(response))
|
|
|
|
{
|
|
|
|
case RMC_ACCESS_CHALLENGE:
|
|
|
|
if (radius2ike(this, response, out))
|
|
|
|
{
|
|
|
|
status = NEED_MORE;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
status = FAILED;
|
|
|
|
break;
|
|
|
|
case RMC_ACCESS_ACCEPT:
|
2010-06-28 14:12:06 +00:00
|
|
|
if (this->class_group)
|
|
|
|
{
|
|
|
|
process_class(this, response);
|
|
|
|
}
|
2010-10-05 05:58:07 +00:00
|
|
|
if (this->filter_id)
|
|
|
|
{
|
2010-10-05 18:40:36 +00:00
|
|
|
process_filter_id(this, response);
|
2010-10-05 05:58:07 +00:00
|
|
|
}
|
2012-02-21 13:06:37 +00:00
|
|
|
process_timeout(this, response);
|
2010-10-07 09:13:48 +00:00
|
|
|
DBG1(DBG_IKE, "RADIUS authentication of '%Y' successful",
|
|
|
|
this->peer);
|
2009-03-24 10:24:58 +00:00
|
|
|
status = SUCCESS;
|
|
|
|
break;
|
|
|
|
case RMC_ACCESS_REJECT:
|
|
|
|
default:
|
2010-10-07 09:13:48 +00:00
|
|
|
DBG1(DBG_IKE, "RADIUS authentication of '%Y' failed", this->peer);
|
2009-03-24 10:24:58 +00:00
|
|
|
status = FAILED;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
response->destroy(response);
|
|
|
|
}
|
|
|
|
request->destroy(request);
|
|
|
|
return status;
|
|
|
|
}
|
|
|
|
|
2010-07-21 07:15:32 +00:00
|
|
|
METHOD(eap_method_t, get_type, eap_type_t,
|
|
|
|
private_eap_radius_t *this, u_int32_t *vendor)
|
2009-03-24 10:24:58 +00:00
|
|
|
{
|
|
|
|
*vendor = this->vendor;
|
|
|
|
return this->type;
|
|
|
|
}
|
|
|
|
|
2010-07-21 07:15:32 +00:00
|
|
|
METHOD(eap_method_t, get_msk, status_t,
|
2010-07-21 15:06:00 +00:00
|
|
|
private_eap_radius_t *this, chunk_t *out)
|
2009-03-24 10:24:58 +00:00
|
|
|
{
|
2010-07-21 15:06:00 +00:00
|
|
|
chunk_t msk;
|
|
|
|
|
|
|
|
msk = this->client->get_msk(this->client);
|
|
|
|
if (msk.len)
|
2009-03-24 10:24:58 +00:00
|
|
|
{
|
2010-07-21 15:06:00 +00:00
|
|
|
*out = msk;
|
2009-03-24 10:24:58 +00:00
|
|
|
return SUCCESS;
|
|
|
|
}
|
|
|
|
return FAILED;
|
|
|
|
}
|
|
|
|
|
2011-04-05 13:57:00 +00:00
|
|
|
METHOD(eap_method_t, get_identifier, u_int8_t,
|
|
|
|
private_eap_radius_t *this)
|
|
|
|
{
|
|
|
|
return this->identifier;
|
|
|
|
}
|
|
|
|
|
|
|
|
METHOD(eap_method_t, set_identifier, void,
|
|
|
|
private_eap_radius_t *this, u_int8_t identifier)
|
|
|
|
{
|
|
|
|
this->identifier = identifier;
|
|
|
|
}
|
|
|
|
|
2010-07-21 07:15:32 +00:00
|
|
|
METHOD(eap_method_t, is_mutual, bool,
|
|
|
|
private_eap_radius_t *this)
|
2009-03-24 10:24:58 +00:00
|
|
|
{
|
|
|
|
switch (this->type)
|
|
|
|
{
|
|
|
|
case EAP_AKA:
|
|
|
|
case EAP_SIM:
|
|
|
|
return TRUE;
|
|
|
|
default:
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2010-07-21 07:15:32 +00:00
|
|
|
METHOD(eap_method_t, destroy, void,
|
|
|
|
private_eap_radius_t *this)
|
2009-03-24 10:24:58 +00:00
|
|
|
{
|
|
|
|
this->peer->destroy(this->peer);
|
|
|
|
this->server->destroy(this->server);
|
|
|
|
this->client->destroy(this->client);
|
|
|
|
free(this);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Generic constructor
|
|
|
|
*/
|
|
|
|
eap_radius_t *eap_radius_create(identification_t *server, identification_t *peer)
|
|
|
|
{
|
2010-07-21 07:15:32 +00:00
|
|
|
private_eap_radius_t *this;
|
|
|
|
|
|
|
|
INIT(this,
|
2010-08-18 10:15:03 +00:00
|
|
|
.public = {
|
|
|
|
.eap_method = {
|
|
|
|
.initiate = _initiate,
|
|
|
|
.process = _process,
|
|
|
|
.get_type = _get_type,
|
|
|
|
.is_mutual = _is_mutual,
|
|
|
|
.get_msk = _get_msk,
|
2011-04-05 13:57:00 +00:00
|
|
|
.get_identifier = _get_identifier,
|
|
|
|
.set_identifier = _set_identifier,
|
2010-08-18 10:15:03 +00:00
|
|
|
.destroy = _destroy,
|
|
|
|
},
|
2010-07-21 07:15:32 +00:00
|
|
|
},
|
|
|
|
/* initially EAP_RADIUS, but is set to the method selected by RADIUS */
|
|
|
|
.type = EAP_RADIUS,
|
|
|
|
.eap_start = lib->settings->get_bool(lib->settings,
|
|
|
|
"charon.plugins.eap-radius.eap_start", FALSE),
|
2011-04-21 11:21:26 +00:00
|
|
|
.id_prefix = lib->settings->get_str(lib->settings,
|
2010-07-21 07:15:32 +00:00
|
|
|
"charon.plugins.eap-radius.id_prefix", ""),
|
|
|
|
.class_group = lib->settings->get_bool(lib->settings,
|
|
|
|
"charon.plugins.eap-radius.class_group", FALSE),
|
2010-10-05 05:58:07 +00:00
|
|
|
.filter_id = lib->settings->get_bool(lib->settings,
|
|
|
|
"charon.plugins.eap-radius.filter_id", FALSE),
|
2010-10-07 09:13:48 +00:00
|
|
|
|
2010-07-21 07:15:32 +00:00
|
|
|
);
|
2012-02-27 14:18:58 +00:00
|
|
|
this->client = eap_radius_create_client();
|
2009-03-24 10:24:58 +00:00
|
|
|
if (!this->client)
|
|
|
|
{
|
|
|
|
free(this);
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
this->peer = peer->clone(peer);
|
|
|
|
this->server = server->clone(server);
|
|
|
|
return &this->public;
|
|
|
|
}
|
|
|
|
|