radius_client.h revision 189251 
1/*
2 * hostapd / RADIUS client
3 * Copyright (c) 2002-2005, Jouni Malinen <j@w1.fi>
4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
8 *
9 * Alternatively, this software may be distributed under the terms of BSD
10 * license.
11 *
12 * See README and COPYING for more details.
13 */
14
15#ifndef RADIUS_CLIENT_H
16#define RADIUS_CLIENT_H
17
18#include "ip_addr.h"
19
20struct radius_msg;
21
22struct hostapd_radius_server {
23	/* MIB prefix for shared variables:
24	 * @ = radiusAuth or radiusAcc depending on the type of the server */
25	struct hostapd_ip_addr addr; /* @ServerAddress */
26	int port; /* @ClientServerPortNumber */
27	u8 *shared_secret;
28	size_t shared_secret_len;
29
30	/* Dynamic (not from configuration file) MIB data */
31	int index; /* @ServerIndex */
32	int round_trip_time; /* @ClientRoundTripTime; in hundredths of a
33			      * second */
34	u32 requests; /* @Client{Access,}Requests */
35	u32 retransmissions; /* @Client{Access,}Retransmissions */
36	u32 access_accepts; /* radiusAuthClientAccessAccepts */
37	u32 access_rejects; /* radiusAuthClientAccessRejects */
38	u32 access_challenges; /* radiusAuthClientAccessChallenges */
39	u32 responses; /* radiusAccClientResponses */
40	u32 malformed_responses; /* @ClientMalformed{Access,}Responses */
41	u32 bad_authenticators; /* @ClientBadAuthenticators */
42	u32 timeouts; /* @ClientTimeouts */
43	u32 unknown_types; /* @ClientUnknownTypes */
44	u32 packets_dropped; /* @ClientPacketsDropped */
45	/* @ClientPendingRequests: length of hapd->radius->msgs for matching
46	 * msg_type */
47};
48
49struct hostapd_radius_servers {
50	/* RADIUS Authentication and Accounting servers in priority order */
51	struct hostapd_radius_server *auth_servers, *auth_server;
52	int num_auth_servers;
53	struct hostapd_radius_server *acct_servers, *acct_server;
54	int num_acct_servers;
55
56	int retry_primary_interval;
57	int acct_interim_interval;
58
59	int msg_dumps;
60
61	struct hostapd_ip_addr client_addr;
62	int force_client_addr;
63};
64
65
66typedef enum {
67	RADIUS_AUTH,
68	RADIUS_ACCT,
69	RADIUS_ACCT_INTERIM /* used only with radius_client_send(); just like
70			     * RADIUS_ACCT, but removes any pending interim
71			     * RADIUS Accounting packages for the same STA
72			     * before sending the new interim update */
73} RadiusType;
74
75typedef enum {
76	RADIUS_RX_PROCESSED,
77	RADIUS_RX_QUEUED,
78	RADIUS_RX_UNKNOWN,
79	RADIUS_RX_INVALID_AUTHENTICATOR
80} RadiusRxResult;
81
82struct radius_client_data;
83
84int radius_client_register(struct radius_client_data *radius,
85			   RadiusType msg_type,
86			   RadiusRxResult (*handler)
87			   (struct radius_msg *msg, struct radius_msg *req,
88			    const u8 *shared_secret, size_t shared_secret_len,
89			    void *data),
90			   void *data);
91int radius_client_send(struct radius_client_data *radius,
92		       struct radius_msg *msg,
93		       RadiusType msg_type, const u8 *addr);
94u8 radius_client_get_id(struct radius_client_data *radius);
95
96void radius_client_flush(struct radius_client_data *radius, int only_auth);
97struct radius_client_data *
98radius_client_init(void *ctx, struct hostapd_radius_servers *conf);
99void radius_client_deinit(struct radius_client_data *radius);
100void radius_client_flush_auth(struct radius_client_data *radius, u8 *addr);
101int radius_client_get_mib(struct radius_client_data *radius, char *buf,
102			  size_t buflen);
103struct radius_client_data *
104radius_client_reconfig(struct radius_client_data *old, void *ctx,
105		       struct hostapd_radius_servers *oldconf,
106		       struct hostapd_radius_servers *newconf);
107
108#endif /* RADIUS_CLIENT_H */
109