avp_radius.c 9.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413
  1. /*
  2. * $Id$
  3. *
  4. * Copyright (C) 2004 Juha Heinanen <[email protected]>
  5. * Copyright (C) 2004 FhG Fokus
  6. *
  7. * This file is part of ser, a free SIP server.
  8. *
  9. * ser is free software; you can redistribute it and/or modify
  10. * it under the terms of the GNU General Public License as published by
  11. * the Free Software Foundation; either version 2 of the License, or
  12. * (at your option) any later version
  13. *
  14. * For a license to use the ser software under conditions
  15. * other than those described here, or to purchase support for this
  16. * software, please contact iptel.org by e-mail at the following addresses:
  17. * [email protected]
  18. *
  19. * ser is distributed in the hope that it will be useful,
  20. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  21. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  22. * GNU General Public License for more details.
  23. *
  24. * You should have received a copy of the GNU General Public License
  25. * along with this program; if not, write to the Free Software
  26. * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
  27. */
  28. #ifdef RADIUSCLIENT_NG_4
  29. # include <radiusclient.h>
  30. # else
  31. # include <radiusclient-ng.h>
  32. #endif
  33. #include "../../rad_dict.h"
  34. #include "../../sr_module.h"
  35. #include "../../mem/mem.h"
  36. #include "../../parser/digest/digest_parser.h"
  37. #include "../../parser/digest/digest.h"
  38. #include "../../parser/parse_uri.h"
  39. #include "../../parser/parse_from.h"
  40. #include "../domain/domain.h"
  41. #include "../../usr_avp.h"
  42. #include "../../ut.h"
  43. #include "../../config.h"
  44. MODULE_VERSION
  45. static int mod_init(void);
  46. static int radius_load_attrs(struct sip_msg*, char*, char*);
  47. static int attrs_fixup(void**, int);
  48. static char *radius_config = "/usr/local/etc/radiusclient/radiusclient.conf";
  49. static void *rh;
  50. struct attr attrs[A_MAX];
  51. struct val vals[V_MAX];
  52. static domain_get_did_t dm_get_did = NULL;
  53. /*
  54. * Exported functions
  55. */
  56. static cmd_export_t cmds[] = {
  57. {"radius_load_attrs", radius_load_attrs, 2, attrs_fixup, REQUEST_ROUTE | FAILURE_ROUTE},
  58. {0, 0, 0, 0, 0}
  59. };
  60. /*
  61. * Exported parameters
  62. */
  63. static param_export_t params[] = {
  64. {"radius_config", PARAM_STRING, &radius_config },
  65. {0, 0, 0}
  66. };
  67. struct module_exports exports = {
  68. "avp_radius",
  69. cmds, /* Exported commands */
  70. 0, /* RPC methods */
  71. params, /* Exported parameters */
  72. mod_init, /* module initialization function */
  73. 0, /* response function*/
  74. 0, /* destroy function */
  75. 0, /* oncancel function */
  76. 0 /* per-child init function */
  77. };
  78. static int mod_init(void)
  79. {
  80. DICT_VENDOR *vend;
  81. memset(attrs, 0, sizeof(attrs));
  82. memset(vals, 0, sizeof(vals));
  83. attrs[A_USER_NAME].n = "User-Name";
  84. attrs[A_SER_SERVICE_TYPE].n = "SER-Service-Type";
  85. attrs[A_SER_ATTR].n = "SER-Attr";
  86. attrs[A_SER_DID].n = "SER-DID";
  87. attrs[A_SER_URI_SCHEME].n = "SER-Uri-Scheme";
  88. vals[V_GET_URI_ATTRS].n = "Get-URI-Attrs";
  89. vals[V_GET_USER_ATTRS].n = "Get-User-Attrs";
  90. /* open log */
  91. rc_openlog("ser");
  92. /* read config */
  93. if ((rh = rc_read_config(radius_config)) == NULL) {
  94. LOG(L_ERR, "avp_radius: Error opening radius config file: %s\n",
  95. radius_config);
  96. return -1;
  97. }
  98. /* read dictionary */
  99. if (rc_read_dictionary(rh, rc_conf_str(rh, "dictionary")) != 0) {
  100. LOG(L_ERR, "avp_radius: Error reading radius dictionary\n");
  101. return -1;
  102. }
  103. vend = rc_dict_findvend(rh, "iptelorg");
  104. if (vend == NULL) {
  105. ERR("RADIUS dictionary is missing required vendor 'iptelorg'\n");
  106. return -1;
  107. }
  108. INIT_AV(rh, attrs, vals, "avp", -1, -1);
  109. return 0;
  110. }
  111. static void attr_name_value(str* name, str* value, VALUE_PAIR* vp)
  112. {
  113. int i;
  114. for (i = 0; i < vp->lvalue; i++) {
  115. if (vp->strvalue[i] == ':' || vp->strvalue[i] == '=') {
  116. name->s = vp->strvalue;
  117. name->len = i;
  118. if (i == (vp->lvalue - 1)) {
  119. value->s = (char*)0;
  120. value->len = 0;
  121. } else {
  122. value->s = vp->strvalue + i + 1;
  123. value->len = vp->lvalue - i - 1;
  124. }
  125. return;
  126. }
  127. }
  128. name->len = value->len = 0;
  129. name->s = value->s = (char*)0;
  130. }
  131. /*
  132. * Generate AVPs from the database result
  133. */
  134. static int generate_avps(unsigned int flags, VALUE_PAIR* received)
  135. {
  136. int_str name, val;
  137. VALUE_PAIR *vp;
  138. vp = received;
  139. while ((vp = rc_avpair_get(vp, ATTRID(attrs[A_SER_ATTR].v), VENDOR(attrs[A_SER_ATTR].v)))) {
  140. attr_name_value(&name.s, &val.s, vp);
  141. if (name.s.len == 0) {
  142. ERR("Missing attribute name\n");
  143. return -1;
  144. }
  145. if (add_avp(flags | AVP_NAME_STR | AVP_VAL_STR, name, val) < 0) {
  146. ERR("Unable to create a new SER attribute\n");
  147. return -1;
  148. }
  149. vp = vp->next;
  150. }
  151. return 0;
  152. }
  153. static int load_user_attrs(struct sip_msg* msg, unsigned long flags, fparam_t* fp)
  154. {
  155. static char rad_msg[4096];
  156. str uid;
  157. UINT4 service;
  158. VALUE_PAIR* send, *received;
  159. send = NULL;
  160. received = NULL;
  161. if (get_str_fparam(&uid, msg, (fparam_t*)fp) < 0) {
  162. ERR("Unable to get UID\n");
  163. return -1;
  164. }
  165. service = vals[V_GET_USER_ATTRS].v;
  166. if (!rc_avpair_add(rh, &send, ATTRID(attrs[A_USER_NAME].v),
  167. uid.s, uid.len,
  168. VENDOR(attrs[A_USER_NAME].v))) {
  169. ERR("Error while adding A_USER_NAME\n");
  170. goto error;
  171. }
  172. if (!rc_avpair_add(rh, &send, ATTRID(attrs[A_SER_SERVICE_TYPE].v),
  173. &vals[V_GET_USER_ATTRS].v, -1,
  174. VENDOR(attrs[A_SER_SERVICE_TYPE].v))) {
  175. ERR("Error adding A_SERVICE_TYPE\n");
  176. goto error;
  177. }
  178. if (rc_auth(rh, 0, send, &received, rad_msg) != OK_RC) {
  179. DBG("load_user_attrs: Failure\n");
  180. goto error;
  181. }
  182. DBG("load_user_attrs: Success\n");
  183. rc_avpair_free(send);
  184. if (generate_avps(flags, received) < 0) {
  185. rc_avpair_free(received);
  186. goto error;
  187. }
  188. rc_avpair_free(received);
  189. return 1;
  190. error:
  191. if (send) rc_avpair_free(send);
  192. if (received) rc_avpair_free(send);
  193. return -1;
  194. }
  195. static int load_uri_attrs(struct sip_msg* msg, unsigned long flags, fparam_t* fp)
  196. {
  197. static char rad_msg[4096];
  198. struct sip_uri puri;
  199. str uri, did, scheme;
  200. UINT4 service;
  201. VALUE_PAIR* send, *received;
  202. send = NULL;
  203. received = NULL;
  204. if (get_str_fparam(&uri, msg, (fparam_t*)fp) != 0) {
  205. ERR("Unable to get URI\n");
  206. return -1;
  207. }
  208. if (parse_uri(uri.s, uri.len, &puri) < 0) {
  209. ERR("Error while parsing URI '%.*s'\n", uri.len, uri.s);
  210. return -1;
  211. }
  212. if (puri.host.len) {
  213. /* domain name is present */
  214. if (dm_get_did(&did, &puri.host) < 0) {
  215. DBG("Cannot lookup DID for domain %.*s, using default value\n", puri.host.len, ZSW(puri.host.s));
  216. did.s = DEFAULT_DID;
  217. did.len = sizeof(DEFAULT_DID) - 1;
  218. }
  219. } else {
  220. /* domain name is missing -- can be caused by tel: URI */
  221. DBG("There is no domain name, using default value\n");
  222. did.s = DEFAULT_DID;
  223. did.len = sizeof(DEFAULT_DID) - 1;
  224. }
  225. uri_type_to_str(puri.type, &scheme);
  226. service = vals[V_GET_URI_ATTRS].v;
  227. if (scheme.len) {
  228. if (!rc_avpair_add(rh, &send, ATTRID(attrs[A_SER_URI_SCHEME].v),
  229. scheme.s, scheme.len,
  230. VENDOR(attrs[A_SER_URI_SCHEME].v))) {
  231. ERR("Error while adding A_SER_URI_SCHEME\n");
  232. goto error;
  233. }
  234. }
  235. if (!rc_avpair_add(rh, &send, ATTRID(attrs[A_USER_NAME].v),
  236. puri.user.s, puri.user.len,
  237. VENDOR(attrs[A_USER_NAME].v))) {
  238. ERR("Error while adding A_USER_NAME\n");
  239. goto error;
  240. }
  241. if (!rc_avpair_add(rh, &send, ATTRID(attrs[A_SER_DID].v),
  242. did.s, did.len,
  243. VENDOR(attrs[A_SER_DID].v))) {
  244. ERR("Error while adding A_SER_DID\n");
  245. goto error;
  246. }
  247. if (!rc_avpair_add(rh, &send, ATTRID(attrs[A_SER_SERVICE_TYPE].v),
  248. &vals[V_GET_URI_ATTRS].v, -1,
  249. VENDOR(attrs[A_SER_SERVICE_TYPE].v))) {
  250. ERR("Error adding A_SERVICE_TYPE\n");
  251. goto error;
  252. }
  253. if (rc_auth(rh, 0, send, &received, rad_msg) != OK_RC) {
  254. DBG("load_uri_attrs: Failure\n");
  255. goto error;
  256. }
  257. DBG("load_uri_attrs: Success\n");
  258. rc_avpair_free(send);
  259. if (generate_avps(flags, received) < 0) {
  260. rc_avpair_free(received);
  261. goto error;
  262. }
  263. rc_avpair_free(received);
  264. return 1;
  265. error:
  266. if (send) rc_avpair_free(send);
  267. if (received) rc_avpair_free(send);
  268. return -1;
  269. }
  270. /*
  271. * Load user attributes
  272. */
  273. static int radius_load_attrs(struct sip_msg* msg, char* fl, char* fp)
  274. {
  275. unsigned long flags;
  276. flags = (unsigned long)fl;
  277. if (flags & AVP_CLASS_URI) {
  278. return load_uri_attrs(msg, flags, (fparam_t*)fp);
  279. } else {
  280. return load_user_attrs(msg, flags, (fparam_t*)fp);
  281. }
  282. }
  283. static int attrs_fixup(void** param, int param_no)
  284. {
  285. unsigned long flags;
  286. char* s;
  287. if (param_no == 1) {
  288. /* Determine the track and class of attributes to be loaded */
  289. s = (char*)*param;
  290. flags = 0;
  291. if (*s != '$' || (strlen(s) != 3)) {
  292. ERR("Invalid parameter value, $xy expected\n");
  293. return -1;
  294. }
  295. switch((s[1] << 8) + s[2]) {
  296. case 0x4655: /* $fu */
  297. case 0x6675:
  298. case 0x4675:
  299. case 0x6655:
  300. flags = AVP_TRACK_FROM | AVP_CLASS_USER;
  301. break;
  302. case 0x4652: /* $fr */
  303. case 0x6672:
  304. case 0x4672:
  305. case 0x6652:
  306. flags = AVP_TRACK_FROM | AVP_CLASS_URI;
  307. break;
  308. case 0x5455: /* $tu */
  309. case 0x7475:
  310. case 0x5475:
  311. case 0x7455:
  312. flags = AVP_TRACK_TO | AVP_CLASS_USER;
  313. break;
  314. case 0x5452: /* $tr */
  315. case 0x7472:
  316. case 0x5472:
  317. case 0x7452:
  318. flags = AVP_TRACK_TO | AVP_CLASS_URI;
  319. break;
  320. default:
  321. ERR("Invalid parameter value: '%s'\n", s);
  322. return -1;
  323. }
  324. if ((flags & AVP_CLASS_URI) && !dm_get_did) {
  325. dm_get_did = (domain_get_did_t)find_export("get_did", 0, 0);
  326. if (!dm_get_did) {
  327. ERR("Domain module required but not found\n");
  328. return -1;
  329. }
  330. }
  331. pkg_free(*param);
  332. *param = (void*)flags;
  333. } else if (param_no == 2) {
  334. return fixup_var_str_12(param, 2);
  335. }
  336. return 0;
  337. }