Home | History | Annotate | Line # | Download | only in radius 
      1 /*
      2  * RADIUS authentication server
      3  * Copyright (c) 2005-2009, 2011, Jouni Malinen <j (at) w1.fi>
      4  *
      5  * This software may be distributed under the terms of the BSD license.
      6  * See README for more details.
      7  */
      8 
      9 #ifndef RADIUS_SERVER_H
     10 #define RADIUS_SERVER_H
     11 
     12 struct radius_server_data;
     13 struct eap_user;
     14 
     15 /**
     16  * struct radius_server_conf - RADIUS server configuration
     17  */
     18 struct radius_server_conf {
     19 	/**
     20 	 * auth_port - UDP port to listen to as an authentication server
     21 	 */
     22 	int auth_port;
     23 
     24 	/**
     25 	 * acct_port - UDP port to listen to as an accounting server
     26 	 */
     27 	int acct_port;
     28 
     29 	/**
     30 	 * client_file - RADIUS client configuration file
     31 	 *
     32 	 * This file contains the RADIUS clients and the shared secret to be
     33 	 * used with them in a format where each client is on its own line. The
     34 	 * first item on the line is the IPv4 or IPv6 address of the client
     35 	 * with an optional address mask to allow full network to be specified
     36 	 * (e.g., 192.168.1.2 or 192.168.1.0/24). This is followed by white
     37 	 * space (space or tabulator) and the shared secret. Lines starting
     38 	 * with '#' are skipped and can be used as comments.
     39 	 */
     40 	char *client_file;
     41 
     42 	/**
     43 	 * sqlite_file - SQLite database for storing debug log information
     44 	 */
     45 	const char *sqlite_file;
     46 
     47 	/**
     48 	 * conf_ctx - Context pointer for callbacks
     49 	 *
     50 	 * This is used as the ctx argument in get_eap_user() calls.
     51 	 */
     52 	void *conf_ctx;
     53 
     54 	const char *erp_domain;
     55 
     56 	/**
     57 	 * ipv6 - Whether to enable IPv6 support in the RADIUS server
     58 	 */
     59 	int ipv6;
     60 
     61 	/**
     62 	 * get_eap_user - Callback for fetching EAP user information
     63 	 * @ctx: Context data from conf_ctx
     64 	 * @identity: User identity
     65 	 * @identity_len: identity buffer length in octets
     66 	 * @phase2: Whether this is for Phase 2 identity
     67 	 * @user: Data structure for filling in the user information
     68 	 * Returns: 0 on success, -1 on failure
     69 	 *
     70 	 * This is used to fetch information from user database. The callback
     71 	 * will fill in information about allowed EAP methods and the user
     72 	 * password. The password field will be an allocated copy of the
     73 	 * password data and RADIUS server will free it after use.
     74 	 */
     75 	int (*get_eap_user)(void *ctx, const u8 *identity, size_t identity_len,
     76 			    int phase2, struct eap_user *user);
     77 
     78 	/**
     79 	 * eap_req_id_text - Optional data for EAP-Request/Identity
     80 	 *
     81 	 * This can be used to configure an optional, displayable message that
     82 	 * will be sent in EAP-Request/Identity. This string can contain an
     83 	 * ASCII-0 character (nul) to separate network infromation per RFC
     84 	 * 4284. The actual string length is explicit provided in
     85 	 * eap_req_id_text_len since nul character will not be used as a string
     86 	 * terminator.
     87 	 */
     88 	const char *eap_req_id_text;
     89 
     90 	/**
     91 	 * eap_req_id_text_len - Length of eap_req_id_text buffer in octets
     92 	 */
     93 	size_t eap_req_id_text_len;
     94 
     95 #ifdef CONFIG_RADIUS_TEST
     96 	const char *dump_msk_file;
     97 #endif /* CONFIG_RADIUS_TEST */
     98 
     99 	char *subscr_remediation_url;
    100 	u8 subscr_remediation_method;
    101 	char *hs20_sim_provisioning_url;
    102 
    103 	char *t_c_server_url;
    104 
    105 	struct eap_config *eap_cfg;
    106 };
    107 
    108 
    109 struct radius_server_data *
    110 radius_server_init(struct radius_server_conf *conf);
    111 
    112 void radius_server_erp_flush(struct radius_server_data *data);
    113 void radius_server_deinit(struct radius_server_data *data);
    114 
    115 int radius_server_get_mib(struct radius_server_data *data, char *buf,
    116 			  size_t buflen);
    117 
    118 void radius_server_eap_pending_cb(struct radius_server_data *data, void *ctx);
    119 int radius_server_dac_request(struct radius_server_data *data, const char *req);
    120 
    121 #endif /* RADIUS_SERVER_H */
    122