3 * Copyright (c) 2002-2009, Jouni Malinen <j@w1.fi>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
9 * Alternatively, this software may be distributed under the terms of BSD
12 * See README and COPYING for more details.
15 #ifndef RADIUS_CLIENT_H
16 #define RADIUS_CLIENT_H
23 * struct hostapd_radius_server - RADIUS server information for RADIUS client
25 * This structure contains information about a RADIUS server. The values are
26 * mainly for MIB information. The MIB variable prefix (radiusAuth or
27 * radiusAcc) depends on whether this is an authentication or accounting
30 * radiusAuthClientPendingRequests (or radiusAccClientPendingRequests) is the
31 * length of hapd->radius->msgs for matching msg_type.
33 struct hostapd_radius_server {
35 * addr - radiusAuthServerAddress or radiusAccServerAddress
37 struct hostapd_ip_addr addr;
40 * port - radiusAuthClientServerPortNumber or radiusAccClientServerPortNumber
45 * shared_secret - Shared secret for authenticating RADIUS messages
50 * shared_secret_len - Length of shared_secret in octets
52 size_t shared_secret_len;
54 /* Dynamic (not from configuration file) MIB data */
57 * index - radiusAuthServerIndex or radiusAccServerIndex
62 * round_trip_time - radiusAuthClientRoundTripTime or radiusAccClientRoundTripTime
63 * Round-trip time in hundredths of a second.
68 * requests - radiusAuthClientAccessRequests or radiusAccClientRequests
73 * retransmissions - radiusAuthClientAccessRetransmissions or radiusAccClientRetransmissions
78 * access_accepts - radiusAuthClientAccessAccepts
83 * access_rejects - radiusAuthClientAccessRejects
88 * access_challenges - radiusAuthClientAccessChallenges
90 u32 access_challenges;
93 * responses - radiusAccClientResponses
98 * malformed_responses - radiusAuthClientMalformedAccessResponses or radiusAccClientMalformedResponses
100 u32 malformed_responses;
103 * bad_authenticators - radiusAuthClientBadAuthenticators or radiusAccClientBadAuthenticators
105 u32 bad_authenticators;
108 * timeouts - radiusAuthClientTimeouts or radiusAccClientTimeouts
113 * unknown_types - radiusAuthClientUnknownTypes or radiusAccClientUnknownTypes
118 * packets_dropped - radiusAuthClientPacketsDropped or radiusAccClientPacketsDropped
124 * struct hostapd_radius_servers - RADIUS servers for RADIUS client
126 struct hostapd_radius_servers {
128 * auth_servers - RADIUS Authentication servers in priority order
130 struct hostapd_radius_server *auth_servers;
133 * num_auth_servers - Number of auth_servers entries
135 int num_auth_servers;
138 * auth_server - The current Authentication server
140 struct hostapd_radius_server *auth_server;
143 * acct_servers - RADIUS Accounting servers in priority order
145 struct hostapd_radius_server *acct_servers;
148 * num_acct_servers - Number of acct_servers entries
150 int num_acct_servers;
153 * acct_server - The current Accounting server
155 struct hostapd_radius_server *acct_server;
158 * retry_primary_interval - Retry interval for trying primary server
160 * This specifies a retry interval in sexconds for trying to return to
161 * the primary RADIUS server. RADIUS client code will automatically try
162 * to use the next server when the current server is not replying to
163 * requests. If this interval is set (non-zero), the primary server
164 * will be retried after the specified number of seconds has passed
165 * even if the current used secondary server is still working.
167 int retry_primary_interval;
170 * msg_dumps - Whether RADIUS message details are shown in stdout
175 * client_addr - Client (local) address to use if force_client_addr
177 struct hostapd_ip_addr client_addr;
180 * force_client_addr - Whether to force client (local) address
182 int force_client_addr;
187 * RadiusType - RADIUS server type for RADIUS client
191 * RADIUS authentication
196 * RADIUS_ACCT - RADIUS accounting
201 * RADIUS_ACCT_INTERIM - RADIUS interim accounting message
203 * Used only with radius_client_send(). This behaves just like
204 * RADIUS_ACCT, but removes any pending interim RADIUS Accounting
205 * messages for the same STA before sending the new interim update.
211 * RadiusRxResult - RADIUS client RX handler result
217 RADIUS_RX_INVALID_AUTHENTICATOR
220 struct radius_client_data;
222 int radius_client_register(struct radius_client_data *radius,
224 RadiusRxResult (*handler)
225 (struct radius_msg *msg, struct radius_msg *req,
226 const u8 *shared_secret, size_t shared_secret_len,
229 int radius_client_send(struct radius_client_data *radius,
230 struct radius_msg *msg,
231 RadiusType msg_type, const u8 *addr);
232 u8 radius_client_get_id(struct radius_client_data *radius);
234 #ifdef CONFIG_NO_RADIUS
235 static inline void radius_client_flush(struct radius_client_data *radius,
240 static inline struct radius_client_data *
241 radius_client_init(void *ctx, struct hostapd_radius_servers *conf)
246 static inline void radius_client_deinit(struct radius_client_data *radius)
250 static inline void radius_client_flush_auth(struct radius_client_data *radius,
255 static inline int radius_client_get_mib(struct radius_client_data *radius,
256 char *buf, size_t buflen)
260 #else /* CONFIG_NO_RADIUS */
261 void radius_client_flush(struct radius_client_data *radius, int only_auth);
262 struct radius_client_data *
263 radius_client_init(void *ctx, struct hostapd_radius_servers *conf);
264 void radius_client_deinit(struct radius_client_data *radius);
265 void radius_client_flush_auth(struct radius_client_data *radius,
267 int radius_client_get_mib(struct radius_client_data *radius, char *buf,
269 #endif /* CONFIG_NO_RADIUS */
270 struct radius_client_data *
271 radius_client_reconfig(struct radius_client_data *old, void *ctx,
272 struct hostapd_radius_servers *oldconf,
273 struct hostapd_radius_servers *newconf);
275 #endif /* RADIUS_CLIENT_H */