1 /*- 2 * Copyright (c) 1996 - 2001 Brian Somers <brian@Awfulhak.org> 3 * based on work by Toshiharu OHNO <tony-o@iij.ad.jp> 4 * Internet Initiative Japan, Inc (IIJ) 5 * All rights reserved. 6 * 7 * Redistribution and use in source and binary forms, with or without 8 * modification, are permitted provided that the following conditions 9 * are met: 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 2. Redistributions in binary form must reproduce the above copyright 13 * notice, this list of conditions and the following disclaimer in the 14 * documentation and/or other materials provided with the distribution. 15 * 16 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 17 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 18 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 19 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 20 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 21 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 22 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 23 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 24 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 25 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 26 * SUCH DAMAGE. 27 * 28 * $FreeBSD$ 29 */ 30 31 #include <sys/param.h> 32 #include <netinet/in.h> 33 #include <netinet/in_systm.h> 34 #include <netinet/ip.h> 35 #include <sys/socket.h> 36 #include <sys/un.h> 37 38 #include <stdlib.h> 39 #include <string.h> /* strlen/memcpy */ 40 #include <termios.h> 41 42 #include "layer.h" 43 #include "mbuf.h" 44 #include "log.h" 45 #include "defs.h" 46 #include "timer.h" 47 #include "fsm.h" 48 #include "auth.h" 49 #include "pap.h" 50 #include "lqr.h" 51 #include "hdlc.h" 52 #include "lcp.h" 53 #include "proto.h" 54 #include "async.h" 55 #include "throughput.h" 56 #include "ccp.h" 57 #include "link.h" 58 #include "descriptor.h" 59 #include "physical.h" 60 #include "iplist.h" 61 #include "slcompress.h" 62 #include "ncpaddr.h" 63 #include "ip.h" 64 #include "ipcp.h" 65 #include "filter.h" 66 #include "mp.h" 67 #ifndef NORADIUS 68 #include "radius.h" 69 #endif 70 #include "ipv6cp.h" 71 #include "ncp.h" 72 #include "bundle.h" 73 #include "chat.h" 74 #include "chap.h" 75 #include "cbcp.h" 76 #include "datalink.h" 77 78 static const char * const papcodes[] = { 79 "???", "REQUEST", "SUCCESS", "FAILURE" 80 }; 81 #define MAXPAPCODE (sizeof papcodes / sizeof papcodes[0] - 1) 82 83 static void 84 pap_Req(struct authinfo *authp) 85 { 86 struct bundle *bundle = authp->physical->dl->bundle; 87 struct fsmheader lh; 88 struct mbuf *bp; 89 u_char *cp; 90 int namelen, keylen, plen; 91 92 namelen = strlen(bundle->cfg.auth.name); 93 keylen = strlen(bundle->cfg.auth.key); 94 plen = namelen + keylen + 2; 95 log_Printf(LogDEBUG, "pap_Req: namelen = %d, keylen = %d\n", namelen, keylen); 96 log_Printf(LogPHASE, "Pap Output: %s ********\n", bundle->cfg.auth.name); 97 if (*bundle->cfg.auth.name == '\0') 98 log_Printf(LogWARN, "Sending empty PAP authname!\n"); 99 lh.code = PAP_REQUEST; 100 lh.id = authp->id; 101 lh.length = htons(plen + sizeof(struct fsmheader)); 102 bp = m_get(plen + sizeof(struct fsmheader), MB_PAPOUT); 103 memcpy(MBUF_CTOP(bp), &lh, sizeof(struct fsmheader)); 104 cp = MBUF_CTOP(bp) + sizeof(struct fsmheader); 105 *cp++ = namelen; 106 memcpy(cp, bundle->cfg.auth.name, namelen); 107 cp += namelen; 108 *cp++ = keylen; 109 memcpy(cp, bundle->cfg.auth.key, keylen); 110 link_PushPacket(&authp->physical->link, bp, bundle, 111 LINK_QUEUES(&authp->physical->link) - 1, PROTO_PAP); 112 } 113 114 static void 115 SendPapCode(struct authinfo *authp, int code, const char *message) 116 { 117 struct fsmheader lh; 118 struct mbuf *bp; 119 u_char *cp; 120 int plen, mlen; 121 122 lh.code = code; 123 lh.id = authp->id; 124 mlen = strlen(message); 125 plen = mlen + 1; 126 lh.length = htons(plen + sizeof(struct fsmheader)); 127 bp = m_get(plen + sizeof(struct fsmheader), MB_PAPOUT); 128 memcpy(MBUF_CTOP(bp), &lh, sizeof(struct fsmheader)); 129 cp = MBUF_CTOP(bp) + sizeof(struct fsmheader); 130 /* 131 * If our message is longer than 255 bytes, truncate the length to 132 * 255 and send the entire message anyway. Maybe the other end will 133 * display it... (see pap_Input() !) 134 */ 135 *cp++ = mlen > 255 ? 255 : mlen; 136 memcpy(cp, message, mlen); 137 log_Printf(LogPHASE, "Pap Output: %s\n", papcodes[code]); 138 139 link_PushPacket(&authp->physical->link, bp, authp->physical->dl->bundle, 140 LINK_QUEUES(&authp->physical->link) - 1, PROTO_PAP); 141 } 142 143 static void 144 pap_Success(struct authinfo *authp) 145 { 146 datalink_GotAuthname(authp->physical->dl, authp->in.name); 147 SendPapCode(authp, PAP_ACK, "Greetings!!"); 148 authp->physical->link.lcp.auth_ineed = 0; 149 if (Enabled(authp->physical->dl->bundle, OPT_UTMP)) 150 physical_Login(authp->physical, authp->in.name); 151 152 if (authp->physical->link.lcp.auth_iwait == 0) 153 /* 154 * Either I didn't need to authenticate, or I've already been 155 * told that I got the answer right. 156 */ 157 datalink_AuthOk(authp->physical->dl); 158 } 159 160 static void 161 pap_Failure(struct authinfo *authp) 162 { 163 SendPapCode(authp, PAP_NAK, "Login incorrect"); 164 datalink_AuthNotOk(authp->physical->dl); 165 } 166 167 void 168 pap_Init(struct authinfo *pap, struct physical *p) 169 { 170 auth_Init(pap, p, pap_Req, pap_Success, pap_Failure); 171 } 172 173 struct mbuf * 174 pap_Input(struct bundle *bundle, struct link *l, struct mbuf *bp) 175 { 176 struct physical *p = link2physical(l); 177 struct authinfo *authp = &p->dl->pap; 178 u_char nlen, klen, *key; 179 const char *txt; 180 int txtlen; 181 182 if (p == NULL) { 183 log_Printf(LogERROR, "pap_Input: Not a physical link - dropped\n"); 184 m_freem(bp); 185 return NULL; 186 } 187 188 if (bundle_Phase(bundle) != PHASE_NETWORK && 189 bundle_Phase(bundle) != PHASE_AUTHENTICATE) { 190 log_Printf(LogPHASE, "Unexpected pap input - dropped !\n"); 191 m_freem(bp); 192 return NULL; 193 } 194 195 if ((bp = auth_ReadHeader(authp, bp)) == NULL && 196 ntohs(authp->in.hdr.length) == 0) { 197 log_Printf(LogWARN, "Pap Input: Truncated header !\n"); 198 return NULL; 199 } 200 201 if (authp->in.hdr.code == 0 || authp->in.hdr.code > MAXPAPCODE) { 202 log_Printf(LogPHASE, "Pap Input: %d: Bad PAP code !\n", authp->in.hdr.code); 203 m_freem(bp); 204 return NULL; 205 } 206 207 if (authp->in.hdr.code != PAP_REQUEST && authp->id != authp->in.hdr.id && 208 Enabled(bundle, OPT_IDCHECK)) { 209 /* Wrong conversation dude ! */ 210 log_Printf(LogPHASE, "Pap Input: %s dropped (got id %d, not %d)\n", 211 papcodes[authp->in.hdr.code], authp->in.hdr.id, authp->id); 212 m_freem(bp); 213 return NULL; 214 } 215 m_settype(bp, MB_PAPIN); 216 authp->id = authp->in.hdr.id; /* We respond with this id */ 217 218 if (bp) { 219 bp = mbuf_Read(bp, &nlen, 1); 220 if (authp->in.hdr.code == PAP_ACK) { 221 /* 222 * Don't restrict the length of our acknowledgement freetext to 223 * nlen (a one-byte length). Show the rest of the ack packet 224 * instead. This isn't really part of the protocol..... 225 */ 226 bp = m_pullup(bp); 227 txt = MBUF_CTOP(bp); 228 txtlen = m_length(bp); 229 } else { 230 bp = auth_ReadName(authp, bp, nlen); 231 txt = authp->in.name; 232 txtlen = strlen(authp->in.name); 233 } 234 } else { 235 txt = ""; 236 txtlen = 0; 237 } 238 239 log_Printf(LogPHASE, "Pap Input: %s (%.*s)\n", 240 papcodes[authp->in.hdr.code], txtlen, txt); 241 242 switch (authp->in.hdr.code) { 243 case PAP_REQUEST: 244 if (bp == NULL) { 245 log_Printf(LogPHASE, "Pap Input: No key given !\n"); 246 break; 247 } 248 bp = mbuf_Read(bp, &klen, 1); 249 if (m_length(bp) < klen) { 250 log_Printf(LogERROR, "Pap Input: Truncated key !\n"); 251 break; 252 } 253 if ((key = malloc(klen+1)) == NULL) { 254 log_Printf(LogERROR, "Pap Input: Out of memory !\n"); 255 break; 256 } 257 bp = mbuf_Read(bp, key, klen); 258 key[klen] = '\0'; 259 260 #ifndef NORADIUS 261 if (*bundle->radius.cfg.file) 262 radius_Authenticate(&bundle->radius, authp, authp->in.name, 263 key, strlen(key), NULL, 0); 264 else 265 #endif 266 if (auth_Validate(bundle, authp->in.name, key, p)) 267 pap_Success(authp); 268 else 269 pap_Failure(authp); 270 271 free(key); 272 break; 273 274 case PAP_ACK: 275 auth_StopTimer(authp); 276 if (p->link.lcp.auth_iwait == PROTO_PAP) { 277 p->link.lcp.auth_iwait = 0; 278 if (p->link.lcp.auth_ineed == 0) 279 /* 280 * We've succeeded in our ``login'' 281 * If we're not expecting the peer to authenticate (or he already 282 * has), proceed to network phase. 283 */ 284 datalink_AuthOk(p->dl); 285 } 286 break; 287 288 case PAP_NAK: 289 auth_StopTimer(authp); 290 datalink_AuthNotOk(p->dl); 291 break; 292 } 293 294 m_freem(bp); 295 return NULL; 296 } 297