(tools/naptr-eduroam.sh): Use /bin/sh rather than bash.
[libradsec.git] / radsecproxy.c
index b875585..02e4b70 100644 (file)
@@ -1,5 +1,6 @@
 /*
  * Copyright (C) 2006-2009 Stig Venaas <venaas@uninett.no>
+ * Copyright (C) 2010, 2011 NORDUnet A/S
  *
  * Permission to use, copy, modify, and distribute this software for any
  * purpose with or without fee is hereby granted, provided that the above
@@ -77,6 +78,7 @@
 #include "tcp.h"
 #include "tls.h"
 #include "dtls.h"
+#include "fticks.h"
 
 static struct options options;
 static struct list *clconfs, *srvconfs;
@@ -1634,26 +1636,40 @@ void replyh(struct server *server, unsigned char *buf) {
            replymsg = radattr2ascii(radmsg_gettype(msg, RAD_Attr_Reply_Message));
            if (stationid) {
                if (replymsg) {
-                   debug(DBG_WARN, "%s for user %s stationid %s from %s (%s) to %s (%s)",
-                         radmsgtype2string(msg->code), username, stationid, server->conf->name, replymsg, from->conf->name, addr2string(from->addr));
+                   debug(DBG_NOTICE,
+                         "%s for user %s stationid %s from %s (%s) to %s (%s)",
+                         radmsgtype2string(msg->code), username, stationid,
+                         server->conf->name, replymsg, from->conf->name,
+                         addr2string(from->addr));
                    free(replymsg);
                } else
-                   debug(DBG_WARN, "%s for user %s stationid %s from %s to %s (%s)",
-                         radmsgtype2string(msg->code), username, stationid, server->conf->name, from->conf->name, addr2string(from->addr));
+                   debug(DBG_NOTICE,
+                         "%s for user %s stationid %s from %s to %s (%s)",
+                         radmsgtype2string(msg->code), username, stationid,
+                         server->conf->name, from->conf->name,
+                         addr2string(from->addr));
                free(stationid);
            } else {
                if (replymsg) {
-                   debug(DBG_WARN, "%s for user %s from %s (%s) to %s (%s)",
-                         radmsgtype2string(msg->code), username, server->conf->name, replymsg, from->conf->name, addr2string(from->addr));
+                   debug(DBG_NOTICE, "%s for user %s from %s (%s) to %s (%s)",
+                         radmsgtype2string(msg->code), username,
+                         server->conf->name, replymsg, from->conf->name,
+                         addr2string(from->addr));
                    free(replymsg);
                } else
-                   debug(DBG_WARN, "%s for user %s from %s to %s (%s)",
-                         radmsgtype2string(msg->code), username, server->conf->name, from->conf->name, addr2string(from->addr));
+                   debug(DBG_NOTICE, "%s for user %s from %s to %s (%s)",
+                         radmsgtype2string(msg->code), username,
+                         server->conf->name, from->conf->name,
+                         addr2string(from->addr));
            }
            free(username);
        }
     }
 
+    if (msg->code == RAD_Access_Accept || msg->code == RAD_Access_Reject)
+       if (options.fticks_reporting && from->conf->fticks_viscountry != NULL)
+           fticks_log(&options, from, msg, rqout);
+
     msg->id = (char)rqout->rq->rqid;
     memcpy(msg->auth, rqout->rq->rqauth, 16);
 
@@ -2407,10 +2423,12 @@ struct modattr *extractmodattr(char *nameval) {
 struct rewrite *getrewrite(char *alt1, char *alt2) {
     struct rewrite *r;
 
-    if ((r = hash_read(rewriteconfs,  alt1, strlen(alt1))))
-       return r;
-    if ((r = hash_read(rewriteconfs,  alt2, strlen(alt2))))
-       return r;
+    if (alt1)
+       if ((r = hash_read(rewriteconfs,  alt1, strlen(alt1))))
+           return r;
+    if (alt2)
+       if ((r = hash_read(rewriteconfs,  alt2, strlen(alt2))))
+           return r;
     return NULL;
 }
 
@@ -2647,22 +2665,24 @@ int confclient_cb(struct gconffile **cf, void *arg, char *block, char *opt, char
     memset(conf, 0, sizeof(struct clsrvconf));
     conf->certnamecheck = 1;
 
-    if (!getgenericconfig(cf, block,
-                         "type", CONF_STR, &conftype,
-                         "host", CONF_MSTR, &conf->hostsrc,
-                         "secret", CONF_STR, &conf->secret,
+    if (!getgenericconfig(
+           cf, block,
+           "type", CONF_STR, &conftype,
+           "host", CONF_MSTR, &conf->hostsrc,
+           "secret", CONF_STR, &conf->secret,
 #if defined(RADPROT_TLS) || defined(RADPROT_DTLS)
-                         "tls", CONF_STR, &conf->tls,
-                         "matchcertificateattribute", CONF_STR, &conf->matchcertattr,
-                         "CertificateNameCheck", CONF_BLN, &conf->certnamecheck,
+           "tls", CONF_STR, &conf->tls,
+           "matchcertificateattribute", CONF_STR, &conf->matchcertattr,
+           "CertificateNameCheck", CONF_BLN, &conf->certnamecheck,
 #endif
-                         "DuplicateInterval", CONF_LINT, &dupinterval,
-                         "addTTL", CONF_LINT, &addttl,
-                         "rewrite", CONF_STR, &rewriteinalias,
-                         "rewriteIn", CONF_STR, &conf->confrewritein,
-                         "rewriteOut", CONF_STR, &conf->confrewriteout,
-                         "rewriteattribute", CONF_STR, &conf->confrewriteusername,
-                         NULL
+           "DuplicateInterval", CONF_LINT, &dupinterval,
+           "addTTL", CONF_LINT, &addttl,
+           "rewrite", CONF_STR, &rewriteinalias,
+           "rewriteIn", CONF_STR, &conf->confrewritein,
+           "rewriteOut", CONF_STR, &conf->confrewriteout,
+           "rewriteattribute", CONF_STR, &conf->confrewriteusername,
+           "fticksVISCOUNTRY", CONF_STR, &conf->fticks_viscountry,
+           NULL
            ))
        debugx(1, DBG_ERR, "configuration error");
 
@@ -2994,6 +3014,9 @@ void getmainconfig(const char *configfile) {
     struct gconffile *cfs;
     char **listenargs[RAD_PROTOCOUNT];
     char *sourcearg[RAD_PROTOCOUNT];
+    uint8_t *fticks_reporting_str = NULL;
+    uint8_t *fticks_mac_str = NULL;
+    uint8_t *fticks_key_str = NULL;
     int i;
 
     cfs = openconfigfile(configfile);
@@ -3017,42 +3040,46 @@ void getmainconfig(const char *configfile) {
     if (!rewriteconfs)
        debugx(1, DBG_ERR, "malloc failed");
 
-    if (!getgenericconfig(&cfs, NULL,
+    if (!getgenericconfig(
+           &cfs, NULL,
 #ifdef RADPROT_UDP
-                         "ListenUDP", CONF_MSTR, &listenargs[RAD_UDP],
-                         "SourceUDP", CONF_STR, &sourcearg[RAD_UDP],
+           "ListenUDP", CONF_MSTR, &listenargs[RAD_UDP],
+           "SourceUDP", CONF_STR, &sourcearg[RAD_UDP],
 #endif
 #ifdef RADPROT_TCP
-                         "ListenTCP", CONF_MSTR, &listenargs[RAD_TCP],
-                         "SourceTCP", CONF_STR, &sourcearg[RAD_TCP],
+           "ListenTCP", CONF_MSTR, &listenargs[RAD_TCP],
+           "SourceTCP", CONF_STR, &sourcearg[RAD_TCP],
 #endif
 #ifdef RADPROT_TLS
-                         "ListenTLS", CONF_MSTR, &listenargs[RAD_TLS],
-                         "SourceTLS", CONF_STR, &sourcearg[RAD_TLS],
+           "ListenTLS", CONF_MSTR, &listenargs[RAD_TLS],
+           "SourceTLS", CONF_STR, &sourcearg[RAD_TLS],
 #endif
 #ifdef RADPROT_DTLS
-                         "ListenDTLS", CONF_MSTR, &listenargs[RAD_DTLS],
-                         "SourceDTLS", CONF_STR, &sourcearg[RAD_DTLS],
+           "ListenDTLS", CONF_MSTR, &listenargs[RAD_DTLS],
+           "SourceDTLS", CONF_STR, &sourcearg[RAD_DTLS],
 #endif
-                         "TTLAttribute", CONF_STR, &options.ttlattr,
-                         "addTTL", CONF_LINT, &addttl,
-                         "LogLevel", CONF_LINT, &loglevel,
-                         "LogDestination", CONF_STR, &options.logdestination,
-                         "LoopPrevention", CONF_BLN, &options.loopprevention,
-                         "Client", CONF_CBK, confclient_cb, NULL,
-                         "Server", CONF_CBK, confserver_cb, NULL,
-                         "Realm", CONF_CBK, confrealm_cb, NULL,
+           "TTLAttribute", CONF_STR, &options.ttlattr,
+           "addTTL", CONF_LINT, &addttl,
+           "LogLevel", CONF_LINT, &loglevel,
+           "LogDestination", CONF_STR, &options.logdestination,
+           "LoopPrevention", CONF_BLN, &options.loopprevention,
+           "Client", CONF_CBK, confclient_cb, NULL,
+           "Server", CONF_CBK, confserver_cb, NULL,
+           "Realm", CONF_CBK, confrealm_cb, NULL,
 #if defined(RADPROT_TLS) || defined(RADPROT_DTLS)
-                         "TLS", CONF_CBK, conftls_cb, NULL,
+           "TLS", CONF_CBK, conftls_cb, NULL,
 #endif
-                         "Rewrite", CONF_CBK, confrewrite_cb, NULL,
-                         NULL
+           "Rewrite", CONF_CBK, confrewrite_cb, NULL,
+           "FTicksReporting", CONF_STR, &fticks_reporting_str,
+           "FTicksMAC", CONF_STR, &fticks_mac_str,
+           "FTicksKey", CONF_STR, &fticks_key_str,
+           NULL
            ))
        debugx(1, DBG_ERR, "configuration error");
 
     if (loglevel != LONG_MIN) {
-       if (loglevel < 1 || loglevel > 4)
-           debugx(1, DBG_ERR, "error in %s, value of option LogLevel is %d, must be 1, 2, 3 or 4", configfile, loglevel);
+       if (loglevel < 1 || loglevel > 5)
+           debugx(1, DBG_ERR, "error in %s, value of option LogLevel is %d, must be 1, 2, 3, 4 or 5", configfile, loglevel);
        options.loglevel = (uint8_t)loglevel;
     }
     if (addttl != LONG_MIN) {
@@ -3063,6 +3090,9 @@ void getmainconfig(const char *configfile) {
     if (!setttlattr(&options, DEFAULT_TTL_ATTR))
        debugx(1, DBG_ERR, "Failed to set TTLAttribute, exiting");
 
+    fticks_configure(&options, &fticks_reporting_str, &fticks_mac_str,
+                    &fticks_key_str);
+
     for (i = 0; i < RAD_PROTOCOUNT; i++)
        if (listenargs[i] || sourcearg[i])
            setprotoopts(i, listenargs[i], sourcearg[i]);
@@ -3077,8 +3107,8 @@ void getargs(int argc, char **argv, uint8_t *foreground, uint8_t *pretend, uint8
            *configfile = optarg;
            break;
        case 'd':
-           if (strlen(optarg) != 1 || *optarg < '1' || *optarg > '4')
-               debugx(1, DBG_ERR, "Debug level must be 1, 2, 3 or 4, not %s", optarg);
+           if (strlen(optarg) != 1 || *optarg < '1' || *optarg > '5')
+               debugx(1, DBG_ERR, "Debug level must be 1, 2, 3, 4 or 5, not %s", optarg);
            *loglevel = *optarg - '0';
            break;
        case 'f':