1998-01-29 00:44:16 +00:00
|
|
|
/*
|
|
|
|
* PPP Secret Key Module
|
|
|
|
*
|
|
|
|
* Written by Toshiharu OHNO (tony-o@iij.ad.jp)
|
|
|
|
*
|
|
|
|
* Copyright (C) 1994, Internet Initiative Japan, Inc. All rights reserverd.
|
|
|
|
*
|
|
|
|
* Redistribution and use in source and binary forms are permitted
|
|
|
|
* provided that the above copyright notice and this paragraph are
|
|
|
|
* duplicated in all such forms and that any documentation,
|
|
|
|
* advertising materials, and other materials related to such
|
|
|
|
* distribution and use acknowledge that the software was developed
|
|
|
|
* by the Internet Initiative Japan, Inc. The name of the
|
|
|
|
* IIJ may not be used to endorse or promote products derived
|
|
|
|
* from this software without specific prior written permission.
|
|
|
|
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
|
|
|
|
* IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
|
|
|
|
* WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
|
|
|
|
*
|
1998-03-13 00:44:26 +00:00
|
|
|
* $Id: auth.c,v 1.27.2.11 1998/03/09 19:25:33 brian Exp $
|
1998-01-29 00:44:16 +00:00
|
|
|
*
|
|
|
|
* TODO:
|
|
|
|
* o Implement check against with registered IP addresses.
|
|
|
|
*/
|
|
|
|
#include <sys/param.h>
|
|
|
|
#include <netinet/in.h>
|
|
|
|
|
1998-01-29 00:49:32 +00:00
|
|
|
#include <assert.h>
|
1998-03-09 19:25:35 +00:00
|
|
|
#include <pwd.h>
|
1998-01-29 00:44:16 +00:00
|
|
|
#include <stdio.h>
|
|
|
|
#include <string.h>
|
1998-02-02 19:33:40 +00:00
|
|
|
#include <termios.h>
|
1998-01-29 00:44:16 +00:00
|
|
|
#include <unistd.h>
|
|
|
|
|
|
|
|
#include "command.h"
|
|
|
|
#include "mbuf.h"
|
|
|
|
#include "defs.h"
|
|
|
|
#include "timer.h"
|
|
|
|
#include "fsm.h"
|
1998-01-29 23:11:44 +00:00
|
|
|
#include "iplist.h"
|
|
|
|
#include "throughput.h"
|
1998-01-29 00:44:16 +00:00
|
|
|
#include "ipcp.h"
|
|
|
|
#include "loadalias.h"
|
|
|
|
#include "vars.h"
|
|
|
|
#include "auth.h"
|
|
|
|
#include "systems.h"
|
1998-02-02 19:33:40 +00:00
|
|
|
#include "lcp.h"
|
1998-03-13 00:44:26 +00:00
|
|
|
#include "lqr.h"
|
1998-02-02 19:33:40 +00:00
|
|
|
#include "hdlc.h"
|
|
|
|
#include "async.h"
|
|
|
|
#include "link.h"
|
1998-02-09 19:21:11 +00:00
|
|
|
#include "descriptor.h"
|
1998-01-30 19:46:07 +00:00
|
|
|
#include "physical.h"
|
1998-02-13 05:10:26 +00:00
|
|
|
#include "chat.h"
|
1998-02-07 20:50:08 +00:00
|
|
|
#include "lcpproto.h"
|
|
|
|
|
|
|
|
const char *
|
|
|
|
Auth2Nam(u_short auth)
|
|
|
|
{
|
|
|
|
switch (auth) {
|
|
|
|
case PROTO_PAP:
|
|
|
|
return "PAP";
|
|
|
|
case PROTO_CHAP:
|
|
|
|
return "CHAP";
|
|
|
|
case 0:
|
|
|
|
return "none";
|
|
|
|
}
|
|
|
|
return "unknown";
|
|
|
|
}
|
1998-01-29 00:44:16 +00:00
|
|
|
|
|
|
|
void
|
|
|
|
LocalAuthInit()
|
|
|
|
{
|
|
|
|
if (!(mode&MODE_DAEMON))
|
|
|
|
/* We're allowed in interactive mode */
|
|
|
|
VarLocalAuth = LOCAL_AUTH;
|
|
|
|
else if (VarHaveLocalAuthKey)
|
|
|
|
VarLocalAuth = *VarLocalAuthKey == '\0' ? LOCAL_AUTH : LOCAL_NO_AUTH;
|
|
|
|
else
|
|
|
|
switch (LocalAuthValidate(SECRETFILE, VarShortHost, "")) {
|
|
|
|
case NOT_FOUND:
|
|
|
|
VarLocalAuth = LOCAL_DENY;
|
|
|
|
break;
|
|
|
|
case VALID:
|
|
|
|
VarLocalAuth = LOCAL_AUTH;
|
|
|
|
break;
|
|
|
|
case INVALID:
|
|
|
|
VarLocalAuth = LOCAL_NO_AUTH;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
LOCAL_AUTH_VALID
|
|
|
|
LocalAuthValidate(const char *fname, const char *system, const char *key)
|
|
|
|
{
|
|
|
|
FILE *fp;
|
|
|
|
int n;
|
|
|
|
char *vector[3];
|
|
|
|
char buff[LINE_LEN];
|
|
|
|
LOCAL_AUTH_VALID rc;
|
|
|
|
|
|
|
|
rc = NOT_FOUND; /* No system entry */
|
|
|
|
fp = OpenSecret(fname);
|
|
|
|
if (fp == NULL)
|
|
|
|
return (rc);
|
|
|
|
while (fgets(buff, sizeof buff, fp)) {
|
|
|
|
if (buff[0] == '#')
|
|
|
|
continue;
|
|
|
|
buff[strlen(buff) - 1] = 0;
|
|
|
|
memset(vector, '\0', sizeof vector);
|
|
|
|
n = MakeArgs(buff, vector, VECSIZE(vector));
|
|
|
|
if (n < 1)
|
|
|
|
continue;
|
|
|
|
if (strcmp(vector[0], system) == 0) {
|
|
|
|
if ((vector[1] == (char *) NULL && (key == NULL || *key == '\0')) ||
|
|
|
|
(vector[1] != (char *) NULL && strcmp(vector[1], key) == 0)) {
|
|
|
|
rc = VALID; /* Valid */
|
|
|
|
} else {
|
|
|
|
rc = INVALID; /* Invalid */
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
CloseSecret(fp);
|
|
|
|
return (rc);
|
|
|
|
}
|
|
|
|
|
1998-03-09 19:25:35 +00:00
|
|
|
static int
|
|
|
|
auth_CheckPasswd(const char *name, const char *data, const char *key)
|
|
|
|
{
|
|
|
|
if (!strcmp(data, "*")) {
|
|
|
|
/* Then look up the real password database */
|
|
|
|
struct passwd *pw;
|
|
|
|
int result;
|
|
|
|
|
|
|
|
result = (pw = getpwnam(name)) &&
|
|
|
|
!strcmp(crypt(key, pw->pw_passwd), pw->pw_passwd);
|
|
|
|
endpwent();
|
|
|
|
return result;
|
|
|
|
}
|
|
|
|
|
|
|
|
return !strcmp(data, key);
|
|
|
|
}
|
|
|
|
|
1998-01-29 00:44:16 +00:00
|
|
|
int
|
1998-02-02 19:32:16 +00:00
|
|
|
AuthValidate(struct bundle *bundle, const char *fname, const char *system,
|
|
|
|
const char *key, struct physical *physical)
|
1998-01-29 00:44:16 +00:00
|
|
|
{
|
1998-03-09 19:25:35 +00:00
|
|
|
/* Used by PAP routines */
|
|
|
|
|
1998-01-29 00:44:16 +00:00
|
|
|
FILE *fp;
|
|
|
|
int n;
|
|
|
|
char *vector[5];
|
|
|
|
char buff[LINE_LEN];
|
|
|
|
|
|
|
|
fp = OpenSecret(fname);
|
1998-03-09 19:25:35 +00:00
|
|
|
if (fp != NULL) {
|
|
|
|
while (fgets(buff, sizeof buff, fp)) {
|
|
|
|
if (buff[0] == '#')
|
|
|
|
continue;
|
|
|
|
buff[strlen(buff) - 1] = 0;
|
|
|
|
memset(vector, '\0', sizeof vector);
|
|
|
|
n = MakeArgs(buff, vector, VECSIZE(vector));
|
|
|
|
if (n < 2)
|
|
|
|
continue;
|
|
|
|
if (strcmp(vector[0], system) == 0)
|
|
|
|
if (auth_CheckPasswd(vector[0], vector[1], key)) {
|
|
|
|
CloseSecret(fp);
|
|
|
|
if (n > 2 && !UseHisaddr(bundle, vector[2], 1))
|
|
|
|
return (0);
|
|
|
|
/* XXX This should be deferred - we may join an existing bundle ! */
|
|
|
|
ipcp_Setup(&IpcpInfo);
|
|
|
|
if (n > 3)
|
|
|
|
SetLabel(vector[3]);
|
|
|
|
return 1; /* Valid */
|
|
|
|
} else {
|
|
|
|
CloseSecret(fp);
|
|
|
|
return 0; /* Invalid */
|
|
|
|
}
|
1998-01-29 00:44:16 +00:00
|
|
|
}
|
1998-03-09 19:25:35 +00:00
|
|
|
CloseSecret(fp);
|
1998-01-29 00:44:16 +00:00
|
|
|
}
|
1998-03-09 19:25:35 +00:00
|
|
|
|
|
|
|
#ifndef NOPASSWDAUTH
|
|
|
|
if (Enabled(ConfPasswdAuth))
|
|
|
|
return auth_CheckPasswd(system, "*", key);
|
|
|
|
#endif
|
|
|
|
|
|
|
|
return 0; /* Invalid */
|
1998-01-29 00:44:16 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
char *
|
1998-02-02 19:32:16 +00:00
|
|
|
AuthGetSecret(struct bundle *bundle, const char *fname, const char *system,
|
|
|
|
int len, int setaddr, struct physical *physical)
|
1998-01-29 00:44:16 +00:00
|
|
|
{
|
1998-03-09 19:25:35 +00:00
|
|
|
/* Used by CHAP routines */
|
|
|
|
|
1998-01-29 00:44:16 +00:00
|
|
|
FILE *fp;
|
|
|
|
int n;
|
|
|
|
char *vector[5];
|
1998-03-09 19:25:35 +00:00
|
|
|
static char buff[LINE_LEN];
|
1998-01-29 00:44:16 +00:00
|
|
|
|
|
|
|
fp = OpenSecret(fname);
|
|
|
|
if (fp == NULL)
|
|
|
|
return (NULL);
|
1998-03-09 19:25:35 +00:00
|
|
|
|
1998-01-29 00:44:16 +00:00
|
|
|
while (fgets(buff, sizeof buff, fp)) {
|
|
|
|
if (buff[0] == '#')
|
|
|
|
continue;
|
|
|
|
buff[strlen(buff) - 1] = 0;
|
|
|
|
memset(vector, '\0', sizeof vector);
|
|
|
|
n = MakeArgs(buff, vector, VECSIZE(vector));
|
|
|
|
if (n < 2)
|
|
|
|
continue;
|
|
|
|
if (strlen(vector[0]) == len && strncmp(vector[0], system, len) == 0) {
|
1998-01-29 23:11:44 +00:00
|
|
|
if (setaddr)
|
1998-02-21 01:45:26 +00:00
|
|
|
memset(&IpcpInfo.cfg.peer_range, '\0', sizeof IpcpInfo.cfg.peer_range);
|
1998-01-29 00:44:16 +00:00
|
|
|
if (n > 2 && setaddr)
|
1998-02-02 19:32:16 +00:00
|
|
|
if (UseHisaddr(bundle, vector[2], 1))
|
|
|
|
/* XXX This should be deferred - we may join an existing bundle ! */
|
1998-02-21 01:45:26 +00:00
|
|
|
ipcp_Setup(&IpcpInfo);
|
1998-01-29 00:44:16 +00:00
|
|
|
else
|
|
|
|
return NULL;
|
|
|
|
if (n > 3)
|
|
|
|
SetLabel(vector[3]);
|
1998-03-09 19:25:35 +00:00
|
|
|
return vector[1];
|
1998-01-29 00:44:16 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
CloseSecret(fp);
|
|
|
|
return (NULL); /* Invalid */
|
|
|
|
}
|
|
|
|
|
|
|
|
static void
|
|
|
|
AuthTimeout(void *vauthp)
|
|
|
|
{
|
|
|
|
struct authinfo *authp = (struct authinfo *)vauthp;
|
|
|
|
|
1998-03-01 01:07:49 +00:00
|
|
|
StopTimer(&authp->authtimer);
|
1998-01-29 00:44:16 +00:00
|
|
|
if (--authp->retry > 0) {
|
1998-03-01 01:07:49 +00:00
|
|
|
StartTimer(&authp->authtimer);
|
|
|
|
(*authp->ChallengeFunc)(authp, ++authp->id, authp->physical);
|
1998-01-29 00:44:16 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
void
|
1998-03-01 01:07:49 +00:00
|
|
|
authinfo_Init(struct authinfo *authinfo)
|
1998-01-29 00:44:16 +00:00
|
|
|
{
|
1998-03-01 01:07:49 +00:00
|
|
|
memset(authinfo, '\0', sizeof(struct authinfo));
|
|
|
|
}
|
1998-01-29 00:49:32 +00:00
|
|
|
|
1998-03-01 01:07:49 +00:00
|
|
|
void
|
|
|
|
StartAuthChallenge(struct authinfo *authp, struct physical *physical,
|
|
|
|
void (*fn)(struct authinfo *, int, struct physical *))
|
|
|
|
{
|
|
|
|
authp->ChallengeFunc = fn;
|
1998-01-29 00:49:32 +00:00
|
|
|
authp->physical = physical;
|
1998-03-01 01:07:49 +00:00
|
|
|
StopTimer(&authp->authtimer);
|
|
|
|
authp->authtimer.func = AuthTimeout;
|
|
|
|
authp->authtimer.load = VarRetryTimeout * SECTICKS;
|
|
|
|
authp->authtimer.state = TIMER_STOPPED;
|
|
|
|
authp->authtimer.arg = (void *) authp;
|
1998-01-29 00:44:16 +00:00
|
|
|
authp->retry = 3;
|
|
|
|
authp->id = 1;
|
1998-03-01 01:07:49 +00:00
|
|
|
(*authp->ChallengeFunc)(authp, authp->id, physical);
|
|
|
|
StartTimer(&authp->authtimer);
|
1998-01-29 00:44:16 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
void
|
|
|
|
StopAuthTimer(struct authinfo *authp)
|
|
|
|
{
|
|
|
|
StopTimer(&authp->authtimer);
|
1998-01-29 00:49:32 +00:00
|
|
|
authp->physical = NULL;
|
1998-01-29 00:44:16 +00:00
|
|
|
}
|