2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
4 * Copyright 1998-2009 The OpenLDAP Foundation.
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted only as authorized by the OpenLDAP
11 * A copy of this license is available in the file LICENSE in the
12 * top-level directory of the distribution or, alternatively, at
13 * <http://www.OpenLDAP.org/license.html>.
21 #include <lber_pvt.h> /* BER_BVC definition */
23 #include <ldap_pvt_thread.h>
24 #include <ac/string.h>
25 #include <ac/unistd.h>
29 static LUTIL_PASSWD_CHK_FUNC chk_radius;
30 static const struct berval scheme = BER_BVC("{RADIUS}");
31 static char *config_filename;
32 static ldap_pvt_thread_mutex_t libradius_mutex;
36 const struct berval *sc,
37 const struct berval *passwd,
38 const struct berval *cred,
42 int rc = LUTIL_PASSWD_ERR;
44 struct rad_handle *h = NULL;
46 for ( i = 0; i < cred->bv_len; i++ ) {
47 if ( cred->bv_val[ i ] == '\0' ) {
48 return LUTIL_PASSWD_ERR; /* NUL character in cred */
52 if ( cred->bv_val[ i ] != '\0' ) {
53 return LUTIL_PASSWD_ERR; /* cred must behave like a string */
56 for ( i = 0; i < passwd->bv_len; i++ ) {
57 if ( passwd->bv_val[ i ] == '\0' ) {
58 return LUTIL_PASSWD_ERR; /* NUL character in password */
62 if ( passwd->bv_val[ i ] != '\0' ) {
63 return LUTIL_PASSWD_ERR; /* passwd must behave like a string */
66 ldap_pvt_thread_mutex_lock( &libradius_mutex );
70 ldap_pvt_thread_mutex_unlock( &libradius_mutex );
71 return LUTIL_PASSWD_ERR;
74 if ( rad_config( h, config_filename ) != 0 ) {
78 if ( rad_create_request( h, RAD_ACCESS_REQUEST ) ) {
82 if ( rad_put_string( h, RAD_USER_NAME, passwd->bv_val ) != 0 ) {
86 if ( rad_put_string( h, RAD_USER_PASSWORD, cred->bv_val ) != 0 ) {
90 switch ( rad_send_request( h ) ) {
91 case RAD_ACCESS_ACCEPT:
95 case RAD_ACCESS_REJECT:
96 rc = LUTIL_PASSWD_ERR;
99 case RAD_ACCESS_CHALLENGE:
100 rc = LUTIL_PASSWD_ERR;
104 /* no valid response is received */
111 ldap_pvt_thread_mutex_unlock( &libradius_mutex );
118 return ldap_pvt_thread_mutex_destroy( &libradius_mutex );
122 init_module( int argc, char *argv[] )
126 for ( i = 0; i < argc; i++ ) {
127 if ( strncasecmp( argv[ i ], "config=", STRLENOF( "config=" ) ) == 0 ) {
128 /* FIXME: what if multiple loads of same module?
129 * does it make sense (e.g. override an existing one)? */
130 if ( config_filename == NULL ) {
131 config_filename = ber_strdup( &argv[ i ][ STRLENOF( "config=" ) ] );
135 fprintf( stderr, "init_module(radius): unknown arg#%d=\"%s\".\n",
141 ldap_pvt_thread_mutex_init( &libradius_mutex );
143 return lutil_passwd_add( (struct berval *)&scheme, chk_radius, NULL );