1 /*
2  * RADIUS authentication server
3  * Copyright (c) 2005-2009, 2011, Jouni Malinen <j@w1.fi>
4  *
5  * This software may be distributed under the terms of the BSD license.
6  * See README for more details.
7  */
8 
9 #ifndef RADIUS_SERVER_H
10 #define RADIUS_SERVER_H
11 
12 struct radius_server_data;
13 struct eap_user;
14 
15 /**
16  * struct radius_server_conf - RADIUS server configuration
17  */
18 struct radius_server_conf {
19 	/**
20 	 * auth_port - UDP port to listen to as an authentication server
21 	 */
22 	int auth_port;
23 
24 	/**
25 	 * acct_port - UDP port to listen to as an accounting server
26 	 */
27 	int acct_port;
28 
29 	/**
30 	 * client_file - RADIUS client configuration file
31 	 *
32 	 * This file contains the RADIUS clients and the shared secret to be
33 	 * used with them in a format where each client is on its own line. The
34 	 * first item on the line is the IPv4 or IPv6 address of the client
35 	 * with an optional address mask to allow full network to be specified
36 	 * (e.g., 192.168.1.2 or 192.168.1.0/24). This is followed by white
37 	 * space (space or tabulator) and the shared secret. Lines starting
38 	 * with '#' are skipped and can be used as comments.
39 	 */
40 	char *client_file;
41 
42 	/**
43 	 * sqlite_file - SQLite database for storing debug log information
44 	 */
45 	const char *sqlite_file;
46 
47 	/**
48 	 * conf_ctx - Context pointer for callbacks
49 	 *
50 	 * This is used as the ctx argument in get_eap_user() calls.
51 	 */
52 	void *conf_ctx;
53 
54 	const char *erp_domain;
55 
56 	/**
57 	 * ipv6 - Whether to enable IPv6 support in the RADIUS server
58 	 */
59 	int ipv6;
60 
61 	/**
62 	 * get_eap_user - Callback for fetching EAP user information
63 	 * @ctx: Context data from conf_ctx
64 	 * @identity: User identity
65 	 * @identity_len: identity buffer length in octets
66 	 * @phase2: Whether this is for Phase 2 identity
67 	 * @user: Data structure for filling in the user information
68 	 * Returns: 0 on success, -1 on failure
69 	 *
70 	 * This is used to fetch information from user database. The callback
71 	 * will fill in information about allowed EAP methods and the user
72 	 * password. The password field will be an allocated copy of the
73 	 * password data and RADIUS server will free it after use.
74 	 */
75 	int (*get_eap_user)(void *ctx, const u8 *identity, size_t identity_len,
76 			    int phase2, struct eap_user *user);
77 
78 	/**
79 	 * eap_req_id_text - Optional data for EAP-Request/Identity
80 	 *
81 	 * This can be used to configure an optional, displayable message that
82 	 * will be sent in EAP-Request/Identity. This string can contain an
83 	 * ASCII-0 character (nul) to separate network infromation per RFC
84 	 * 4284. The actual string length is explicit provided in
85 	 * eap_req_id_text_len since nul character will not be used as a string
86 	 * terminator.
87 	 */
88 	const char *eap_req_id_text;
89 
90 	/**
91 	 * eap_req_id_text_len - Length of eap_req_id_text buffer in octets
92 	 */
93 	size_t eap_req_id_text_len;
94 
95 #ifdef CONFIG_RADIUS_TEST
96 	const char *dump_msk_file;
97 #endif /* CONFIG_RADIUS_TEST */
98 
99 	char *subscr_remediation_url;
100 	u8 subscr_remediation_method;
101 	char *hs20_sim_provisioning_url;
102 
103 	char *t_c_server_url;
104 
105 	struct eap_config *eap_cfg;
106 };
107 
108 
109 struct radius_server_data *
110 radius_server_init(struct radius_server_conf *conf);
111 
112 void radius_server_erp_flush(struct radius_server_data *data);
113 void radius_server_deinit(struct radius_server_data *data);
114 
115 int radius_server_get_mib(struct radius_server_data *data, char *buf,
116 			  size_t buflen);
117 
118 void radius_server_eap_pending_cb(struct radius_server_data *data, void *ctx);
119 int radius_server_dac_request(struct radius_server_data *data, const char *req);
120 
121 #endif /* RADIUS_SERVER_H */
122