src/modules/rlm_perl/rlm_perl.c

   1 /*
   2  *   This program is is free software; you can redistribute it and/or modify
   3  *   it under the terms of the GNU General Public License, version 2 if the
   4  *   License as published by the Free Software Foundation.
   5  *
   6  *   This program is distributed in the hope that it will be useful,
   7  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
   8  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   9  *   GNU General Public License for more details.
  10  *
  11  *   You should have received a copy of the GNU General Public License
  12  *   along with this program; if not, write to the Free Software
  13  *   Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
  14  */
  15
  16 /**
  17  * $Id$
  18  * @file rlm_perl.c
  19  * @brief Translates requests between the server an a perl interpreter.
  20  *
  21  * @copyright 2002,2006  The FreeRADIUS server project
  22  * @copyright 2002  Boian Jordanov <bjordanov@orbitel.bg>
  23  */
  24 RCSID("$Id$")
  25
  26 #include <freeradius-devel/radiusd.h>
  27 #include <freeradius-devel/modules.h>
  28 #include <freeradius-devel/rad_assert.h>
  29
  30 #ifdef INADDR_ANY
  31 #undef INADDR_ANY
  32 #endif
  33 #include <EXTERN.h>
  34 #include <perl.h>
  35 #include <XSUB.h>
  36 #include <dlfcn.h>
  37 #include <semaphore.h>
  38
  39 #ifdef __APPLE__
  40 extern char **environ;
  41 #endif
  42
  43 /*
  44  *      Define a structure for our module configuration.
  45  *
  46  *      These variables do not need to be in a structure, but it's
  47  *      a lot cleaner to do so, and a pointer to the structure can
  48  *      be used as the instance handle.
  49  */
  50 typedef struct rlm_perl_t {
  51         /* Name of the perl module */
  52         char    *module;
  53
  54         /* Name of the functions for each module method */
  55         char    *func_authorize;
  56         char    *func_authenticate;
  57         char    *func_accounting;
  58         char    *func_start_accounting;
  59         char    *func_stop_accounting;
  60         char    *func_preacct;
  61         char    *func_checksimul;
  62         char    *func_detach;
  63         char    *func_xlat;
  64 #ifdef WITH_PROXY
  65         char    *func_pre_proxy;
  66         char    *func_post_proxy;
  67 #endif
  68         char    *func_post_auth;
  69 #ifdef WITH_COA
  70         char    *func_recv_coa;
  71         char    *func_send_coa;
  72 #endif
  73         char    *xlat_name;
  74         char    *perl_flags;
  75         PerlInterpreter *perl;
  76         pthread_key_t   *thread_key;
  77
  78         pthread_mutex_t clone_mutex;
  79 } rlm_perl_t;
  80 /*
  81  *      A mapping of configuration file names to internal variables.
  82  */
  83 #define RLM_PERL_CONF(_x) { "func_" Stringify(_x), PW_TYPE_STRING_PTR, \
  84                         offsetof(rlm_perl_t,func_##_x), NULL, Stringify(_x)}
  85
  86 static const CONF_PARSER module_config[] = {
  87         { "module",  PW_TYPE_FILENAME,
  88           offsetof(rlm_perl_t,module), NULL,  "module"},
  89
  90         RLM_PERL_CONF(authorize),
  91         RLM_PERL_CONF(authenticate),
  92         RLM_PERL_CONF(post_auth),
  93         RLM_PERL_CONF(accounting),
  94         RLM_PERL_CONF(preacct),
  95         RLM_PERL_CONF(checksimul),
  96         RLM_PERL_CONF(detach),
  97         RLM_PERL_CONF(xlat),
  98
  99 #ifdef WITH_PROXY
 100         RLM_PERL_CONF(pre_proxy),
 101         RLM_PERL_CONF(post_proxy),
 102 #endif
 103 #ifdef WITH_COA
 104         RLM_PERL_CONF(recv_coa),
 105         RLM_PERL_CONF(send_coa),
 106 #endif
 107         { "perl_flags", PW_TYPE_STRING_PTR,
 108           offsetof(rlm_perl_t,perl_flags), NULL, NULL},
 109
 110         { "func_start_accounting", PW_TYPE_STRING_PTR,
 111           offsetof(rlm_perl_t,func_start_accounting), NULL, NULL},
 112
 113         { "func_stop_accounting", PW_TYPE_STRING_PTR,
 114           offsetof(rlm_perl_t,func_stop_accounting), NULL, NULL},
 115
 116         { NULL, -1, 0, NULL, NULL }             /* end the list */
 117 };
 118
 119 /*
 120  * man perlembed
 121  */
 122 EXTERN_C void boot_DynaLoader(pTHX_ CV* cv);
 123
 124 #ifdef USE_ITHREADS
 125 #define dl_librefs "DynaLoader::dl_librefs"
 126 #define dl_modules "DynaLoader::dl_modules"
 127 static void rlm_perl_clear_handles(pTHX)
 128 {
 129         AV *librefs = get_av(dl_librefs, false);
 130         if (librefs) {
 131                 av_clear(librefs);
 132         }
 133 }
 134
 135 static void **rlm_perl_get_handles(pTHX)
 136 {
 137         I32 i;
 138         AV *librefs = get_av(dl_librefs, false);
 139         AV *modules = get_av(dl_modules, false);
 140         void **handles;
 141
 142         if (!librefs) return NULL;
 143
 144         if (!(AvFILL(librefs) >= 0)) {
 145                 return NULL;
 146         }
 147
 148         handles = (void **)rad_malloc(sizeof(void *) * (AvFILL(librefs)+2));
 149
 150         for (i=0; i<=AvFILL(librefs); i++) {
 151                 void *handle;
 152                 SV *handle_sv = *av_fetch(librefs, i, false);
 153
 154                 if(!handle_sv) {
 155                         ERROR("Could not fetch $%s[%d]!\n",
 156                                dl_librefs, (int)i);
 157                         continue;
 158                 }
 159                 handle = (void *)SvIV(handle_sv);
 160
 161                 if (handle) {
 162                         handles[i] = handle;
 163                 }
 164         }
 165
 166         av_clear(modules);
 167         av_clear(librefs);
 168
 169         handles[i] = (void *)0;
 170
 171         return handles;
 172 }
 173
 174 static void rlm_perl_close_handles(void **handles)
 175 {
 176         int i;
 177
 178         if (!handles) {
 179                 return;
 180         }
 181
 182         for (i=0; handles[i]; i++) {
 183                 DEBUG("close %p\n", handles[i]);
 184                 dlclose(handles[i]);
 185         }
 186
 187         free(handles);
 188 }
 189
 190 DIAG_OFF(shadow)
 191 static void rlm_perl_destruct(PerlInterpreter *perl)
 192 {
 193         dTHXa(perl);
 194
 195         PERL_SET_CONTEXT(perl);
 196
 197         PL_perl_destruct_level = 2;
 198
 199         PL_origenviron = environ;
 200
 201
 202         {
 203                 dTHXa(perl);
 204         }
 205         /*
 206          * FIXME: This shouldn't happen
 207          *
 208          */
 209         while (PL_scopestack_ix > 1 ){
 210                 LEAVE;
 211         }
 212
 213         perl_destruct(perl);
 214         perl_free(perl);
 215 }
 216 DIAG_ON(shadow)
 217
 218 static void rlm_destroy_perl(PerlInterpreter *perl)
 219 {
 220         void    **handles;
 221
 222         dTHXa(perl);
 223         PERL_SET_CONTEXT(perl);
 224
 225         handles = rlm_perl_get_handles(aTHX);
 226         if (handles) rlm_perl_close_handles(handles);
 227         rlm_perl_destruct(perl);
 228 }
 229
 230 /* Create Key */
 231 static void rlm_perl_make_key(pthread_key_t *key)
 232 {
 233         pthread_key_create(key, (void*)rlm_destroy_perl);
 234 }
 235
 236 static PerlInterpreter *rlm_perl_clone(PerlInterpreter *perl, pthread_key_t *key)
 237 {
 238         int ret;
 239
 240         PerlInterpreter *interp;
 241         UV clone_flags = 0;
 242
 243         PERL_SET_CONTEXT(perl);
 244
 245         interp = pthread_getspecific(*key);
 246         if (interp) return interp;
 247
 248         interp = perl_clone(perl, clone_flags);
 249         {
 250                 dTHXa(interp);
 251         }
 252 #if PERL_REVISION >= 5 && PERL_VERSION <8
 253         call_pv("CLONE",0);
 254 #endif
 255         ptr_table_free(PL_ptr_table);
 256         PL_ptr_table = NULL;
 257
 258         PERL_SET_CONTEXT(aTHX);
 259         rlm_perl_clear_handles(aTHX);
 260
 261         ret = pthread_setspecific(*key, interp);
 262         if (ret != 0) {
 263                 DEBUG("rlm_perl: Failed associating interpretor with thread %s", strerror(ret));
 264
 265                 rlm_perl_destruct(interp);
 266                 return NULL;
 267         }
 268
 269         return interp;
 270 }
 271 #endif
 272
 273 static void xs_init(pTHX)
 274 {
 275         char const *file = __FILE__;
 276
 277         /* DynaLoader is a special case */
 278         newXS("DynaLoader::boot_DynaLoader", boot_DynaLoader, file);
 279
 280 }
 281 /*
 282  *
 283  * This is wrapper for radlog
 284  * Now users can call radiusd::radlog(level,msg) wich is the same
 285  * calling radlog from C code.
 286  * Boyan
 287  */
 288 static XS(XS_radiusd_radlog)
 289 {
 290         dXSARGS;
 291         if (items !=2)
 292                 croak("Usage: radiusd::radlog(level, message)");
 293         {
 294                 int     level;
 295                 char    *msg;
 296
 297                 level = (int) SvIV(ST(0));
 298                 msg   = (char *) SvPV(ST(1), PL_na);
 299
 300                 /*
 301                  *      Because 'msg' is a 'char *', we don't want '%s', etc.
 302                  *      in it to give us printf-style vulnerabilities.
 303                  */
 304                 radlog(level, "rlm_perl: %s", msg);
 305         }
 306         XSRETURN_NO;
 307 }
 308
 309 /*
 310  * The xlat function
 311  */
 312 static size_t perl_xlat(void *instance, REQUEST *request, char const *fmt, char *out, size_t freespace)
 313 {
 314
 315         rlm_perl_t      *inst= (rlm_perl_t *) instance;
 316         PerlInterpreter *perl;
 317         char            *tmp;
 318         char const      *p, *q;
 319         int             count;
 320         size_t          ret = 0;
 321         STRLEN          n_a;
 322
 323 #ifndef WITH_ITHREADS
 324         perl = inst->perl;
 325 #else
 326         perl = rlm_perl_clone(inst->perl,inst->thread_key);
 327         {
 328                 dTHXa(perl);
 329         }
 330 #endif
 331         PERL_SET_CONTEXT(perl);
 332         {
 333                 dSP;
 334                 ENTER;SAVETMPS;
 335
 336                 PUSHMARK(SP);
 337
 338                 p = fmt;
 339                 while ((q = strchr(p, ' '))) {
 340                         XPUSHs(sv_2mortal(newSVpv(p, p - q)));
 341
 342                         p = q + 1;
 343                 }
 344
 345                 PUTBACK;
 346
 347                 count = call_pv(inst->func_xlat, G_SCALAR | G_EVAL);
 348
 349                 SPAGAIN;
 350                 if (SvTRUE(ERRSV)) {
 351                         REDEBUG("Exit %s", SvPV(ERRSV,n_a));
 352                         (void)POPs;
 353                 } else if (count > 0) {
 354                         tmp = POPp;
 355                         strlcpy(out, tmp, freespace);
 356                         ret = strlen(out);
 357
 358                         RDEBUG("Len is %zu , out is %s freespace is %zu", ret, out, freespace);
 359                 }
 360
 361                 PUTBACK ;
 362                 FREETMPS ;
 363                 LEAVE ;
 364
 365         }
 366
 367         return ret;
 368 }
 369 /*
 370  *      Do any per-module initialization that is separate to each
 371  *      configured instance of the module.  e.g. set up connections
 372  *      to external databases, read configuration files, set up
 373  *      dictionary entries, etc.
 374  *
 375  *      If configuration information is given in the config section
 376  *      that must be referenced in later calls, store a handle to it
 377  *      in *instance otherwise put a null pointer there.
 378  *
 379  *      Boyan:
 380  *      Setup a hashes wich we will use later
 381  *      parse a module and give him a chance to live
 382  *
 383  */
 384 static int mod_instantiate(CONF_SECTION *conf, void *instance)
 385 {
 386         rlm_perl_t       *inst = instance;
 387         AV              *end_AV;
 388
 389         char **embed;
 390         char **envp = NULL;
 391         char const *xlat_name;
 392         int exitstatus = 0, argc=0;
 393
 394         MEM(embed = talloc_zero_array(inst, char *, 4));
 395
 396         /*
 397          *      Create pthread key. This key will be stored in instance
 398          */
 399
 400 #ifdef USE_ITHREADS
 401         pthread_mutex_init(&inst->clone_mutex, NULL);
 402
 403         inst->thread_key = rad_malloc(sizeof(*inst->thread_key));
 404         memset(inst->thread_key,0,sizeof(*inst->thread_key));
 405
 406         rlm_perl_make_key(inst->thread_key);
 407 #endif
 408
 409         char arg[] = "0";
 410
 411         embed[0] = NULL;
 412         if (inst->perl_flags) {
 413                 embed[1] = inst->perl_flags;
 414                 embed[2] = inst->module;
 415                 embed[3] = arg;
 416                 argc = 4;
 417         } else {
 418                 embed[1] = inst->module;
 419                 embed[2] = arg;
 420                 argc = 3;
 421         }
 422
 423         PERL_SYS_INIT3(&argc, &embed, &envp);
 424
 425         if ((inst->perl = perl_alloc()) == NULL) {
 426                 ERROR("rlm_perl: No memory for allocating new perl !");
 427                 return (-1);
 428         }
 429
 430         perl_construct(inst->perl);
 431
 432 #ifdef USE_ITHREADS
 433         PL_perl_destruct_level = 2;
 434
 435         {
 436                 dTHXa(inst->perl);
 437         }
 438         PERL_SET_CONTEXT(inst->perl);
 439 #endif
 440
 441 #if PERL_REVISION >= 5 && PERL_VERSION >=8
 442         PL_exit_flags |= PERL_EXIT_DESTRUCT_END;
 443 #endif
 444
 445         exitstatus = perl_parse(inst->perl, xs_init, argc, embed, NULL);
 446
 447         end_AV = PL_endav;
 448         PL_endav = Nullav;
 449
 450         newXS("radiusd::radlog",XS_radiusd_radlog, "rlm_perl");
 451
 452         if(!exitstatus) {
 453                 exitstatus = perl_run(inst->perl);
 454         } else {
 455                 ERROR("rlm_perl: perl_parse failed: %s not found or has syntax errors. \n", inst->module);
 456                 return (-1);
 457         }
 458
 459         PL_endav = end_AV;
 460
 461         xlat_name = cf_section_name2(conf);
 462         if (!xlat_name)
 463                 xlat_name = cf_section_name1(conf);
 464         if (xlat_name) {
 465                 xlat_register(xlat_name, perl_xlat, NULL, inst);
 466         }
 467
 468         return 0;
 469 }
 470
 471 /*
 472  *      get the vps and put them in perl hash
 473  *      If one VP have multiple values it is added as array_ref
 474  *      Example for this is Cisco-AVPair that holds multiple values.
 475  *      Which will be available as array_ref in $RAD_REQUEST{'Cisco-AVPair'}
 476  */
 477 static void perl_store_vps(TALLOC_CTX *ctx, VALUE_PAIR *vps, HV *rad_hv)
 478 {
 479         VALUE_PAIR *head, *sublist;
 480         AV *av;
 481         char const *name;
 482         char namebuf[256];
 483         char buffer[1024];
 484         int len;
 485
 486         hv_undef(rad_hv);
 487
 488         /*
 489          *      Copy the valuepair list so we can remove attributes
 490          *      we've already processed.  This is a horrible hack to
 491          *      get around various other stupidity.
 492          */
 493         head = paircopy(ctx, vps);
 494
 495         while (head) {
 496                 /*
 497                  *      Tagged attributes are added to the hash with name
 498                  *      <attribute>:<tag>, others just use the normal attribute
 499                  *      name as the key.
 500                  */
 501                 if (head->da->flags.has_tag && (head->tag != 0)) {
 502                         snprintf(namebuf, sizeof(namebuf), "%s:%d",
 503                                  head->da->name, head->tag);
 504                         name = namebuf;
 505                 } else {
 506                         name = head->da->name;
 507                 }
 508
 509                 /*
 510                  *      Create a new list with all the attributes like this one
 511                  *      which are in the same tag group.
 512                  */
 513                 sublist = NULL;
 514                 pairfilter(ctx, &sublist, &head, head->da->attr, head->da->vendor, head->tag);
 515
 516                 /*
 517                  *      Attribute has multiple values
 518                  */
 519                 if (sublist->next) {
 520                         VALUE_PAIR *vp;
 521
 522                         av = newAV();
 523                         for (vp = sublist; vp; vp = vp->next) {
 524                                 len = vp_prints_value(buffer, sizeof(buffer), vp, false);
 525                                 av_push(av, newSVpv(buffer, len));
 526                         }
 527                         (void)hv_store(rad_hv, name, strlen(name), newRV_noinc((SV *)av), 0);
 528
 529                         /*
 530                          *      Attribute has a single value, so its value just gets
 531                          *      added to the hash.
 532                          */
 533                 } else {
 534                         len = vp_prints_value(buffer, sizeof(buffer), sublist, false);
 535                         (void)hv_store(rad_hv, name, strlen(name), newSVpv(buffer, len), 0);
 536                 }
 537
 538                 pairfree(&sublist);
 539         }
 540
 541         rad_assert(!head);
 542 }
 543
 544 /*
 545  *
 546  *     Verify that a Perl SV is a string and save it in FreeRadius
 547  *     Value Pair Format
 548  *
 549  */
 550 static int pairadd_sv(TALLOC_CTX *ctx, VALUE_PAIR **vps, char *key, SV *sv, FR_TOKEN op)
 551 {
 552         char        *val;
 553         VALUE_PAIR      *vp;
 554
 555         if (SvOK(sv)) {
 556                 val = SvPV_nolen(sv);
 557                 vp = pairmake(ctx, vps, key, val, op);
 558                 if (vp != NULL) {
 559                         DEBUG("rlm_perl: Added pair %s = %s", key, val);
 560                         return 1;
 561                 } else {
 562                         DEBUG("rlm_perl: ERROR: Failed to create pair %s = %s", key, val);
 563                 }
 564         }
 565         return 0;
 566 }
 567
 568 /*
 569  *     Boyan :
 570  *     Gets the content from hashes
 571  */
 572 static int get_hv_content(TALLOC_CTX *ctx, HV *my_hv, VALUE_PAIR **vps)
 573 {
 574         SV              *res_sv, **av_sv;
 575         AV              *av;
 576         char            *key;
 577         I32             key_len, len, i, j;
 578         int             ret=0;
 579
 580         *vps = NULL;
 581         for (i = hv_iterinit(my_hv); i > 0; i--) {
 582                 res_sv = hv_iternextsv(my_hv,&key,&key_len);
 583                 if (SvROK(res_sv) && (SvTYPE(SvRV(res_sv)) == SVt_PVAV)) {
 584                         av = (AV*)SvRV(res_sv);
 585                         len = av_len(av);
 586                         for (j = 0; j <= len; j++) {
 587                                 av_sv = av_fetch(av, j, 0);
 588                                 ret = pairadd_sv(ctx, vps, key, *av_sv, T_OP_ADD) + ret;
 589                         }
 590                 } else ret = pairadd_sv(ctx, vps, key, res_sv, T_OP_EQ) + ret;
 591         }
 592
 593         return ret;
 594 }
 595
 596 /*
 597  *      Call the function_name inside the module
 598  *      Store all vps in hashes %RAD_CHECK %RAD_REPLY %RAD_REQUEST
 599  *
 600  */
 601 static int do_perl(void *instance, REQUEST *request, char *function_name)
 602 {
 603
 604         rlm_perl_t      *inst = instance;
 605         VALUE_PAIR      *vp;
 606         int             exitstatus=0, count;
 607         STRLEN          n_a;
 608
 609         HV              *rad_reply_hv;
 610         HV              *rad_check_hv;
 611         HV              *rad_config_hv;
 612         HV              *rad_request_hv;
 613 #ifdef WITH_PROXY
 614         HV              *rad_request_proxy_hv;
 615         HV              *rad_request_proxy_reply_hv;
 616 #endif
 617
 618         /*
 619          *      Radius has told us to call this function, but none
 620          *      is defined.
 621          */
 622         if (!function_name) return RLM_MODULE_FAIL;
 623
 624 #ifdef USE_ITHREADS
 625         pthread_mutex_lock(&inst->clone_mutex);
 626
 627         PerlInterpreter *interp;
 628
 629         interp = rlm_perl_clone(inst->perl,inst->thread_key);
 630         {
 631                 dTHXa(interp);
 632                 PERL_SET_CONTEXT(interp);
 633         }
 634
 635         pthread_mutex_unlock(&inst->clone_mutex);
 636 #else
 637         PERL_SET_CONTEXT(inst->perl);
 638 #endif
 639
 640         {
 641                 dSP;
 642
 643                 ENTER;
 644                 SAVETMPS;
 645
 646                 rad_reply_hv = get_hv("RAD_REPLY",1);
 647                 rad_check_hv = get_hv("RAD_CHECK",1);
 648                 rad_config_hv = get_hv("RAD_CONFIG",1);
 649                 rad_request_hv = get_hv("RAD_REQUEST",1);
 650
 651                 perl_store_vps(request->reply, request->reply->vps, rad_reply_hv);
 652                 perl_store_vps(request, request->config_items, rad_check_hv);
 653                 perl_store_vps(request->packet, request->packet->vps, rad_request_hv);
 654                 perl_store_vps(request, request->config_items, rad_config_hv);
 655
 656 #ifdef WITH_PROXY
 657                 rad_request_proxy_hv = get_hv("RAD_REQUEST_PROXY",1);
 658                 rad_request_proxy_reply_hv = get_hv("RAD_REQUEST_PROXY_REPLY",1);
 659
 660                 if (request->proxy != NULL) {
 661                         perl_store_vps(request->proxy, request->proxy->vps, rad_request_proxy_hv);
 662                 } else {
 663                         hv_undef(rad_request_proxy_hv);
 664                 }
 665
 666                 if (request->proxy_reply !=NULL) {
 667                         perl_store_vps(request->proxy_reply, request->proxy_reply->vps, rad_request_proxy_reply_hv);
 668                 } else {
 669                         hv_undef(rad_request_proxy_reply_hv);
 670                 }
 671 #endif
 672
 673                 PUSHMARK(SP);
 674                 /*
 675                  * This way %RAD_xx can be pushed onto stack as sub parameters.
 676                  * XPUSHs( newRV_noinc((SV *)rad_request_hv) );
 677                  * XPUSHs( newRV_noinc((SV *)rad_reply_hv) );
 678                  * XPUSHs( newRV_noinc((SV *)rad_check_hv) );
 679                  * PUTBACK;
 680                  */
 681
 682                 count = call_pv(function_name, G_SCALAR | G_EVAL | G_NOARGS);
 683
 684                 SPAGAIN;
 685
 686                 if (SvTRUE(ERRSV)) {
 687                         ERROR("rlm_perl: perl_embed:: module = %s , func = %s exit status= %s\n",
 688                                inst->module,
 689                                function_name, SvPV(ERRSV,n_a));
 690                         (void)POPs;
 691                 }
 692
 693                 if (count == 1) {
 694                         exitstatus = POPi;
 695                         if (exitstatus >= 100 || exitstatus < 0) {
 696                                 exitstatus = RLM_MODULE_FAIL;
 697                         }
 698                 }
 699
 700
 701                 PUTBACK;
 702                 FREETMPS;
 703                 LEAVE;
 704
 705                 vp = NULL;
 706                 if ((get_hv_content(request->packet, rad_request_hv, &vp)) > 0 ) {
 707                         pairfree(&request->packet->vps);
 708                         request->packet->vps = vp;
 709                         vp = NULL;
 710
 711                         /*
 712                          *      Update cached copies
 713                          */
 714                         request->username = pairfind(request->packet->vps, PW_USER_NAME, 0, TAG_ANY);
 715                         request->password = pairfind(request->packet->vps, PW_USER_PASSWORD, 0, TAG_ANY);
 716                         if (!request->password)
 717                                 request->password = pairfind(request->packet->vps, PW_CHAP_PASSWORD, 0, TAG_ANY);
 718                 }
 719
 720                 if ((get_hv_content(request->reply, rad_reply_hv, &vp)) > 0 ) {
 721                         pairfree(&request->reply->vps);
 722                         request->reply->vps = vp;
 723                         vp = NULL;
 724                 }
 725
 726                 if ((get_hv_content(request, rad_check_hv, &vp)) > 0 ) {
 727                         pairfree(&request->config_items);
 728                         request->config_items = vp;
 729                         vp = NULL;
 730                 }
 731
 732 #ifdef WITH_PROXY
 733                 if (request->proxy &&
 734                     (get_hv_content(request->proxy, rad_request_proxy_hv, &vp) > 0)) {
 735                         pairfree(&request->proxy->vps);
 736                         request->proxy->vps = vp;
 737                         vp = NULL;
 738                 }
 739
 740                 if (request->proxy_reply &&
 741                     (get_hv_content(request->proxy_reply, rad_request_proxy_reply_hv, &vp) > 0)) {
 742                         pairfree(&request->proxy_reply->vps);
 743                         request->proxy_reply->vps = vp;
 744                         vp = NULL;
 745                 }
 746 #endif
 747
 748         }
 749         return exitstatus;
 750 }
 751
 752 #define RLM_PERL_FUNC(_x) static rlm_rcode_t mod_##_x(void *instance, REQUEST *request) \
 753         {                                                               \
 754                 return do_perl(instance, request,                       \
 755                                ((rlm_perl_t *)instance)->func_##_x); \
 756         }
 757
 758 RLM_PERL_FUNC(authorize)
 759 RLM_PERL_FUNC(authenticate)
 760 RLM_PERL_FUNC(post_auth)
 761
 762 RLM_PERL_FUNC(checksimul)
 763
 764 #ifdef WITH_PROXY
 765 RLM_PERL_FUNC(pre_proxy)
 766 RLM_PERL_FUNC(post_proxy)
 767 #endif
 768
 769 #ifdef WITH_COA
 770 RLM_PERL_FUNC(recv_coa)
 771 RLM_PERL_FUNC(send_coa)
 772 #endif
 773
 774 RLM_PERL_FUNC(preacct)
 775
 776 /*
 777  *      Write accounting information to this modules database.
 778  */
 779 static rlm_rcode_t mod_accounting(void *instance, REQUEST *request)
 780 {
 781         VALUE_PAIR      *pair;
 782         int             acctstatustype=0;
 783
 784         if ((pair = pairfind(request->packet->vps, PW_ACCT_STATUS_TYPE, 0, TAG_ANY)) != NULL) {
 785                 acctstatustype = pair->vp_integer;
 786         } else {
 787                 ERROR("Invalid Accounting Packet");
 788                 return RLM_MODULE_INVALID;
 789         }
 790
 791         switch (acctstatustype) {
 792
 793         case PW_STATUS_START:
 794
 795                 if (((rlm_perl_t *)instance)->func_start_accounting) {
 796                         return do_perl(instance, request,
 797                                        ((rlm_perl_t *)instance)->func_start_accounting);
 798                 } else {
 799                         return do_perl(instance, request,
 800                                        ((rlm_perl_t *)instance)->func_accounting);
 801                 }
 802                 break;
 803
 804         case PW_STATUS_STOP:
 805
 806                 if (((rlm_perl_t *)instance)->func_stop_accounting) {
 807                         return do_perl(instance, request,
 808                                        ((rlm_perl_t *)instance)->func_stop_accounting);
 809                 } else {
 810                         return do_perl(instance, request,
 811                                        ((rlm_perl_t *)instance)->func_accounting);
 812                 }
 813                 break;
 814         default:
 815                 return do_perl(instance, request,
 816                                ((rlm_perl_t *)instance)->func_accounting);
 817
 818         }
 819 }
 820
 821
 822 /*
 823  * Detach a instance give a chance to a module to make some internal setup ...
 824  */
 825 static int mod_detach(void *instance)
 826 {
 827         rlm_perl_t      *inst = (rlm_perl_t *) instance;
 828         int             exitstatus = 0, count = 0;
 829
 830 #if 0
 831         /*
 832          *      FIXME: Call this in the destruct function?
 833          */
 834         {
 835                 dTHXa(handle->clone);
 836                 PERL_SET_CONTEXT(handle->clone);
 837                 {
 838                         dSP; ENTER; SAVETMPS; PUSHMARK(SP);
 839                         count = call_pv(inst->func_detach, G_SCALAR | G_EVAL );
 840                         SPAGAIN;
 841
 842                         if (count == 1) {
 843                                 exitstatus = POPi;
 844                                 /*
 845                                  * FIXME: bug in perl
 846                                  *
 847                                  */
 848                                 if (exitstatus >= 100 || exitstatus < 0) {
 849                                         exitstatus = RLM_MODULE_FAIL;
 850                                 }
 851                         }
 852                         PUTBACK;
 853                         FREETMPS;
 854                         LEAVE;
 855                 }
 856         }
 857 #endif
 858
 859         if (inst->func_detach) {
 860                 dTHXa(inst->perl);
 861                 PERL_SET_CONTEXT(inst->perl);
 862                 {
 863                         dSP; ENTER; SAVETMPS;
 864                         PUSHMARK(SP);
 865
 866                         count = call_pv(inst->func_detach, G_SCALAR | G_EVAL );
 867                         SPAGAIN;
 868
 869                         if (count == 1) {
 870                                 exitstatus = POPi;
 871                                 if (exitstatus >= 100 || exitstatus < 0) {
 872                                         exitstatus = RLM_MODULE_FAIL;
 873                                 }
 874                         }
 875                         PUTBACK;
 876                         FREETMPS;
 877                         LEAVE;
 878                 }
 879         }
 880
 881 #ifdef USE_ITHREADS
 882         rlm_perl_destruct(inst->perl);
 883         pthread_mutex_destroy(&inst->clone_mutex);
 884 #else
 885         perl_destruct(inst->perl);
 886         perl_free(inst->perl);
 887 #endif
 888
 889         PERL_SYS_TERM();
 890         return exitstatus;
 891 }
 892
 893
 894 /*
 895  *      The module name should be the only globally exported symbol.
 896  *      That is, everything else should be 'static'.
 897  *
 898  *      If the module needs to temporarily modify it's instantiation
 899  *      data, the type should be changed to RLM_TYPE_THREAD_UNSAFE.
 900  *      The server will then take care of ensuring that the module
 901  *      is single-threaded.
 902  */
 903 module_t rlm_perl = {
 904         RLM_MODULE_INIT,
 905         "perl",                         /* Name */
 906 #ifdef USE_ITHREADS
 907         RLM_TYPE_THREAD_SAFE,           /* type */
 908 #else
 909         RLM_TYPE_THREAD_UNSAFE,
 910 #endif
 911         sizeof(rlm_perl_t),
 912         module_config,
 913         mod_instantiate,                /* instantiation */
 914         mod_detach,                     /* detach */
 915         {
 916                 mod_authenticate,       /* authenticate */
 917                 mod_authorize,          /* authorize */
 918                 mod_preacct,            /* preacct */
 919                 mod_accounting, /* accounting */
 920                 mod_checksimul,         /* check simul */
 921 #ifdef WITH_PROXY
 922                 mod_pre_proxy,          /* pre-proxy */
 923                 mod_post_proxy, /* post-proxy */
 924 #else
 925                 NULL, NULL,
 926 #endif
 927                 mod_post_auth           /* post-auth */
 928 #ifdef WITH_COA
 929                 , mod_recv_coa,
 930                 mod_send_coa
 931 #endif
 932         },
 933 };