+
+#ifdef WITH_DYNAMIC_CLIENTS
+/*
+ * We overload this structure a lot.
+ */
+static const CONF_PARSER dynamic_config[] = {
+ { "FreeRADIUS-Client-IP-Address", PW_TYPE_IPADDR,
+ offsetof(RADCLIENT, ipaddr), 0, NULL },
+ { "FreeRADIUS-Client-IPv6-Address", PW_TYPE_IPV6ADDR,
+ offsetof(RADCLIENT, ipaddr), 0, NULL },
+
+ { "FreeRADIUS-Client-Require-MA", PW_TYPE_BOOLEAN,
+ offsetof(RADCLIENT, message_authenticator), NULL, NULL },
+
+ { "FreeRADIUS-Client-Secret", PW_TYPE_STRING_PTR,
+ offsetof(RADCLIENT, secret), 0, "" },
+ { "FreeRADIUS-Client-Shortname", PW_TYPE_STRING_PTR,
+ offsetof(RADCLIENT, shortname), 0, "" },
+ { "FreeRADIUS-Client-NAS-Type", PW_TYPE_STRING_PTR,
+ offsetof(RADCLIENT, nastype), 0, NULL },
+ { "FreeRADIUS-Client-Virtual-Server", PW_TYPE_STRING_PTR,
+ offsetof(RADCLIENT, server), 0, NULL },
+
+ { NULL, -1, 0, NULL, NULL }
+};
+
+
+int client_validate(RADCLIENT_LIST *clients, RADCLIENT *master, RADCLIENT *c)
+{
+ char buffer[128];
+
+ /*
+ * No virtual server defined. Inherit the parent's
+ * definition.
+ */
+ if (master->server && !c->server) {
+ c->server = strdup(master->server);
+ }
+
+ /*
+ * If the client network isn't global (not tied to a
+ * virtual server), then ensure that this clients server
+ * is the same as the enclosing networks virtual server.
+ */
+ if (master->server &&
+ (strcmp(master->server, c->server) != 0)) {
+ DEBUG("- Cannot add client %s: Virtual server %s is not the same as the virtual server for the network.",
+ ip_ntoh(&c->ipaddr,
+ buffer, sizeof(buffer)),
+ c->server);
+
+ goto error;
+ }
+
+ if (!client_add(clients, c)) {
+ DEBUG("- Cannot add client %s: Internal error",
+ ip_ntoh(&c->ipaddr,
+ buffer, sizeof(buffer)));
+
+ goto error;
+ }
+
+ /*
+ * Initialize the remaining fields.
+ */
+ c->dynamic = TRUE;
+ c->lifetime = master->lifetime;
+ c->created = time(NULL);
+ c->longname = strdup(c->shortname);
+
+ DEBUG("- Added client %s with shared secret %s",
+ ip_ntoh(&c->ipaddr, buffer, sizeof(buffer)),
+ c->secret);
+
+ return 1;
+
+ error:
+ client_free(c);
+ return 0;
+}
+
+
+RADCLIENT *client_create(RADCLIENT_LIST *clients, REQUEST *request)
+{
+ int i, *pi;
+ char **p;
+ RADCLIENT *c;
+ char buffer[128];
+
+ if (!clients || !request) return NULL;
+
+ c = rad_malloc(sizeof(*c));
+ memset(c, 0, sizeof(*c));
+ c->cs = request->client->cs;
+ c->ipaddr.af = AF_UNSPEC;
+
+ for (i = 0; dynamic_config[i].name != NULL; i++) {
+ DICT_ATTR *da;
+ VALUE_PAIR *vp;
+
+ da = dict_attrbyname(dynamic_config[i].name);
+ if (!da) {
+ DEBUG("- Cannot add client %s: attribute \"%s\"is not in the dictionary",
+ ip_ntoh(&request->packet->src_ipaddr,
+ buffer, sizeof(buffer)),
+ dynamic_config[i].name);
+ error:
+ client_free(c);
+ return NULL;
+ }
+
+ vp = pairfind(request->config_items, da->attr, da->vendor);
+ if (!vp) {
+ /*
+ * Not required. Skip it.
+ */
+ if (!dynamic_config[i].dflt) continue;
+
+ DEBUG("- Cannot add client %s: Required attribute \"%s\" is missing.",
+ ip_ntoh(&request->packet->src_ipaddr,
+ buffer, sizeof(buffer)),
+ dynamic_config[i].name);
+ goto error;
+ }
+
+ switch (dynamic_config[i].type) {
+ case PW_TYPE_IPADDR:
+ c->ipaddr.af = AF_INET;
+ c->ipaddr.ipaddr.ip4addr.s_addr = vp->vp_ipaddr;
+ c->prefix = 32;
+ break;
+
+ case PW_TYPE_IPV6ADDR:
+ c->ipaddr.af = AF_INET6;
+ c->ipaddr.ipaddr.ip6addr = vp->vp_ipv6addr;
+ c->prefix = 128;
+ break;
+
+ case PW_TYPE_STRING_PTR:
+ p = (char **) ((char *) c + dynamic_config[i].offset);
+ if (*p) free(*p);
+ *p = strdup(vp->vp_strvalue);
+ break;
+
+ case PW_TYPE_BOOLEAN:
+ pi = (int *) ((char *) c + dynamic_config[i].offset);
+ *pi = vp->vp_integer;
+ break;
+
+ default:
+ goto error;
+ }
+ }
+
+ if (c->ipaddr.af == AF_UNSPEC) {
+ DEBUG("- Cannot add client %s: No IP address was specified.",
+ ip_ntoh(&request->packet->src_ipaddr,
+ buffer, sizeof(buffer)));
+
+ goto error;
+ }
+
+ if (fr_ipaddr_cmp(&request->packet->src_ipaddr, &c->ipaddr) != 0) {
+ char buf2[128];
+
+ DEBUG("- Cannot add client %s: IP address %s do not match",
+ ip_ntoh(&request->packet->src_ipaddr,
+ buffer, sizeof(buffer)),
+ ip_ntoh(&c->ipaddr,
+ buf2, sizeof(buf2)));
+ goto error;
+ }
+
+ if (!client_validate(clients, request->client, c)) {
+ return NULL;
+ }
+
+ return c;
+}
+
+/*
+ * Read a client definition from the given filename.
+ */
+RADCLIENT *client_read(const char *filename, int in_server, int flag)
+{
+ const char *p;
+ RADCLIENT *c;
+ CONF_SECTION *cs;
+ char buffer[256];
+
+ if (!filename) return NULL;
+
+ cs = cf_file_read(filename);
+ if (!cs) return NULL;
+
+ c = client_parse(cf_section_sub_find(cs, "client"), in_server);
+
+ p = strrchr(filename, FR_DIR_SEP);
+ if (p) {
+ p++;
+ } else {
+ p = filename;
+ }
+
+ if (!flag) return c;
+
+ /*
+ * Additional validations
+ */
+ ip_ntoh(&c->ipaddr, buffer, sizeof(buffer));
+ if (strcmp(p, buffer) != 0) {
+ DEBUG("Invalid client definition in %s: IP address %s does not match name %s", filename, buffer, p);
+ client_free(c);
+ return NULL;
+ }
+
+
+
+ return c;
+}
+#endif