1/*
2 * hostapd / EAP user database
3 * Copyright (c) 2012, Jouni Malinen <j@w1.fi>
4 *
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
7 */
8
9#include "includes.h"
10#ifdef CONFIG_SQLITE
11#include <sqlite3.h>
12#endif /* CONFIG_SQLITE */
13
14#include "common.h"
15#include "eap_common/eap_wsc_common.h"
16#include "eap_server/eap_methods.h"
17#include "eap_server/eap.h"
18#include "ap_config.h"
19#include "hostapd.h"
20
21#ifdef CONFIG_SQLITE
22
23static void set_user_methods(struct hostapd_eap_user *user, const char *methods)
24{
25	char *buf, *start;
26	int num_methods;
27
28	buf = os_strdup(methods);
29	if (buf == NULL)
30		return;
31
32	os_memset(&user->methods, 0, sizeof(user->methods));
33	num_methods = 0;
34	start = buf;
35	while (*start) {
36		char *pos3 = os_strchr(start, ',');
37		if (pos3)
38			*pos3++ = '\0';
39		user->methods[num_methods].method =
40			eap_server_get_type(start,
41					    &user->methods[num_methods].vendor);
42		if (user->methods[num_methods].vendor == EAP_VENDOR_IETF &&
43		    user->methods[num_methods].method == EAP_TYPE_NONE) {
44			if (os_strcmp(start, "TTLS-PAP") == 0) {
45				user->ttls_auth |= EAP_TTLS_AUTH_PAP;
46				goto skip_eap;
47			}
48			if (os_strcmp(start, "TTLS-CHAP") == 0) {
49				user->ttls_auth |= EAP_TTLS_AUTH_CHAP;
50				goto skip_eap;
51			}
52			if (os_strcmp(start, "TTLS-MSCHAP") == 0) {
53				user->ttls_auth |= EAP_TTLS_AUTH_MSCHAP;
54				goto skip_eap;
55			}
56			if (os_strcmp(start, "TTLS-MSCHAPV2") == 0) {
57				user->ttls_auth |= EAP_TTLS_AUTH_MSCHAPV2;
58				goto skip_eap;
59			}
60			wpa_printf(MSG_INFO, "DB: Unsupported EAP type '%s'",
61				   start);
62			os_free(buf);
63			return;
64		}
65
66		num_methods++;
67		if (num_methods >= EAP_MAX_METHODS)
68			break;
69	skip_eap:
70		if (pos3 == NULL)
71			break;
72		start = pos3;
73	}
74
75	os_free(buf);
76}
77
78
79static int get_user_cb(void *ctx, int argc, char *argv[], char *col[])
80{
81	struct hostapd_eap_user *user = ctx;
82	int i;
83
84	for (i = 0; i < argc; i++) {
85		if (os_strcmp(col[i], "password") == 0 && argv[i]) {
86			bin_clear_free(user->password, user->password_len);
87			user->password_len = os_strlen(argv[i]);
88			user->password = (u8 *) os_strdup(argv[i]);
89			user->next = (void *) 1;
90		} else if (os_strcmp(col[i], "methods") == 0 && argv[i]) {
91			set_user_methods(user, argv[i]);
92		} else if (os_strcmp(col[i], "remediation") == 0 && argv[i]) {
93			user->remediation = strlen(argv[i]) > 0;
94		} else if (os_strcmp(col[i], "t_c_timestamp") == 0 && argv[i]) {
95			user->t_c_timestamp = strtol(argv[i], NULL, 10);
96		}
97	}
98
99	return 0;
100}
101
102
103static int get_wildcard_cb(void *ctx, int argc, char *argv[], char *col[])
104{
105	struct hostapd_eap_user *user = ctx;
106	int i, id = -1, methods = -1;
107	size_t len;
108
109	for (i = 0; i < argc; i++) {
110		if (os_strcmp(col[i], "identity") == 0 && argv[i])
111			id = i;
112		else if (os_strcmp(col[i], "methods") == 0 && argv[i])
113			methods = i;
114	}
115
116	if (id < 0 || methods < 0)
117		return 0;
118
119	len = os_strlen(argv[id]);
120	if (len <= user->identity_len &&
121	    os_memcmp(argv[id], user->identity, len) == 0 &&
122	    (user->password == NULL || len > user->password_len)) {
123		bin_clear_free(user->password, user->password_len);
124		user->password_len = os_strlen(argv[id]);
125		user->password = (u8 *) os_strdup(argv[id]);
126		user->next = (void *) 1;
127		set_user_methods(user, argv[methods]);
128	}
129
130	return 0;
131}
132
133
134static const struct hostapd_eap_user *
135eap_user_sqlite_get(struct hostapd_data *hapd, const u8 *identity,
136		    size_t identity_len, int phase2)
137{
138	sqlite3 *db;
139	struct hostapd_eap_user *user = NULL;
140	char id_str[256], cmd[300];
141	size_t i;
142	int res;
143
144	if (identity_len >= sizeof(id_str)) {
145		wpa_printf(MSG_DEBUG, "%s: identity len too big: %d >= %d",
146			   __func__, (int) identity_len,
147			   (int) (sizeof(id_str)));
148		return NULL;
149	}
150	os_memcpy(id_str, identity, identity_len);
151	id_str[identity_len] = '\0';
152	for (i = 0; i < identity_len; i++) {
153		if (id_str[i] >= 'a' && id_str[i] <= 'z')
154			continue;
155		if (id_str[i] >= 'A' && id_str[i] <= 'Z')
156			continue;
157		if (id_str[i] >= '0' && id_str[i] <= '9')
158			continue;
159		if (id_str[i] == '-' || id_str[i] == '_' || id_str[i] == '.' ||
160		    id_str[i] == ',' || id_str[i] == '@' || id_str[i] == '\\' ||
161		    id_str[i] == '!' || id_str[i] == '#' || id_str[i] == '%' ||
162		    id_str[i] == '=' || id_str[i] == ' ')
163			continue;
164		wpa_printf(MSG_INFO, "DB: Unsupported character in identity");
165		return NULL;
166	}
167
168	bin_clear_free(hapd->tmp_eap_user.identity,
169		       hapd->tmp_eap_user.identity_len);
170	bin_clear_free(hapd->tmp_eap_user.password,
171		       hapd->tmp_eap_user.password_len);
172	os_memset(&hapd->tmp_eap_user, 0, sizeof(hapd->tmp_eap_user));
173	hapd->tmp_eap_user.phase2 = phase2;
174	hapd->tmp_eap_user.identity = os_zalloc(identity_len + 1);
175	if (hapd->tmp_eap_user.identity == NULL)
176		return NULL;
177	os_memcpy(hapd->tmp_eap_user.identity, identity, identity_len);
178	hapd->tmp_eap_user.identity_len = identity_len;
179
180	if (sqlite3_open(hapd->conf->eap_user_sqlite, &db)) {
181		wpa_printf(MSG_INFO, "DB: Failed to open database %s: %s",
182			   hapd->conf->eap_user_sqlite, sqlite3_errmsg(db));
183		sqlite3_close(db);
184		return NULL;
185	}
186
187	res = os_snprintf(cmd, sizeof(cmd),
188			  "SELECT * FROM users WHERE identity='%s' AND phase2=%d;",
189			  id_str, phase2);
190	if (os_snprintf_error(sizeof(cmd), res))
191		goto fail;
192
193	wpa_printf(MSG_DEBUG, "DB: %s", cmd);
194	if (sqlite3_exec(db, cmd, get_user_cb, &hapd->tmp_eap_user, NULL) !=
195	    SQLITE_OK) {
196		wpa_printf(MSG_DEBUG,
197			   "DB: Failed to complete SQL operation: %s  db: %s",
198			   sqlite3_errmsg(db), hapd->conf->eap_user_sqlite);
199	} else if (hapd->tmp_eap_user.next)
200		user = &hapd->tmp_eap_user;
201
202	if (user == NULL && !phase2) {
203		os_snprintf(cmd, sizeof(cmd),
204			    "SELECT identity,methods FROM wildcards;");
205		wpa_printf(MSG_DEBUG, "DB: %s", cmd);
206		if (sqlite3_exec(db, cmd, get_wildcard_cb, &hapd->tmp_eap_user,
207				 NULL) != SQLITE_OK) {
208			wpa_printf(MSG_DEBUG,
209				   "DB: Failed to complete SQL operation: %s  db: %s",
210				   sqlite3_errmsg(db),
211				   hapd->conf->eap_user_sqlite);
212		} else if (hapd->tmp_eap_user.next) {
213			user = &hapd->tmp_eap_user;
214			os_free(user->identity);
215			user->identity = user->password;
216			user->identity_len = user->password_len;
217			user->password = NULL;
218			user->password_len = 0;
219		}
220	}
221
222fail:
223	sqlite3_close(db);
224
225	return user;
226}
227
228#endif /* CONFIG_SQLITE */
229
230
231const struct hostapd_eap_user *
232hostapd_get_eap_user(struct hostapd_data *hapd, const u8 *identity,
233		     size_t identity_len, int phase2)
234{
235	const struct hostapd_bss_config *conf = hapd->conf;
236	struct hostapd_eap_user *user = conf->eap_user;
237
238#ifdef CONFIG_WPS
239	if (conf->wps_state && identity_len == WSC_ID_ENROLLEE_LEN &&
240	    os_memcmp(identity, WSC_ID_ENROLLEE, WSC_ID_ENROLLEE_LEN) == 0) {
241		static struct hostapd_eap_user wsc_enrollee;
242		os_memset(&wsc_enrollee, 0, sizeof(wsc_enrollee));
243		wsc_enrollee.methods[0].method = eap_server_get_type(
244			"WSC", &wsc_enrollee.methods[0].vendor);
245		return &wsc_enrollee;
246	}
247
248	if (conf->wps_state && identity_len == WSC_ID_REGISTRAR_LEN &&
249	    os_memcmp(identity, WSC_ID_REGISTRAR, WSC_ID_REGISTRAR_LEN) == 0) {
250		static struct hostapd_eap_user wsc_registrar;
251		os_memset(&wsc_registrar, 0, sizeof(wsc_registrar));
252		wsc_registrar.methods[0].method = eap_server_get_type(
253			"WSC", &wsc_registrar.methods[0].vendor);
254		wsc_registrar.password = (u8 *) conf->ap_pin;
255		wsc_registrar.password_len = conf->ap_pin ?
256			os_strlen(conf->ap_pin) : 0;
257		return &wsc_registrar;
258	}
259#endif /* CONFIG_WPS */
260
261	while (user) {
262		if (!phase2 && user->identity == NULL) {
263			/* Wildcard match */
264			break;
265		}
266
267		if (user->phase2 == !!phase2 && user->wildcard_prefix &&
268		    identity_len >= user->identity_len &&
269		    os_memcmp(user->identity, identity, user->identity_len) ==
270		    0) {
271			/* Wildcard prefix match */
272			break;
273		}
274
275		if (user->phase2 == !!phase2 &&
276		    user->identity_len == identity_len &&
277		    os_memcmp(user->identity, identity, identity_len) == 0)
278			break;
279		user = user->next;
280	}
281
282#ifdef CONFIG_SQLITE
283	if (user == NULL && conf->eap_user_sqlite) {
284		return eap_user_sqlite_get(hapd, identity, identity_len,
285					   phase2);
286	}
287#endif /* CONFIG_SQLITE */
288
289	return user;
290}
291