1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
|
/*
* radius.h Constants of the radius protocol.
*
* Version: $Id$
*
*/
/** Internal data types used within libfreeradius
*
*/
typedef enum {
PW_TYPE_INVALID = 0, //!< Invalid (uninitialised) attribute type.
PW_TYPE_STRING, //!< String of printable characters.
PW_TYPE_INTEGER, //!< 32 Bit unsigned integer.
PW_TYPE_IPV4_ADDR, //!< 32 Bit IPv4 Address.
PW_TYPE_DATE, //!< 32 Bit Unix timestamp.
PW_TYPE_ABINARY, //!< Ascend binary format a packed data structure.
PW_TYPE_OCTETS, //!< Raw octets.
PW_TYPE_IFID, //!< Interface ID.
PW_TYPE_IPV6_ADDR, //!< 128 Bit IPv6 Address.
PW_TYPE_IPV6_PREFIX, //!< IPv6 Prefix.
PW_TYPE_BYTE, //!< 8 Bit unsigned integer.
PW_TYPE_SHORT, //!< 16 Bit unsigned integer.
PW_TYPE_ETHERNET, //!< 48 Bit Mac-Address.
PW_TYPE_SIGNED, //!< 32 Bit signed integer.
PW_TYPE_COMBO_IP_ADDR, //!< WiMAX IPv4 or IPv6 address depending on length.
PW_TYPE_TLV, //!< Contains nested attributes.
PW_TYPE_EXTENDED, //!< Extended attribute space attribute.
PW_TYPE_LONG_EXTENDED, //!< Long extended attribute space attribute.
PW_TYPE_EVS, //!< Extended attribute, vendor specific.
PW_TYPE_INTEGER64, //!< 64 Bit unsigned integer.
PW_TYPE_IPV4_PREFIX, //!< IPv4 Prefix.
PW_TYPE_VSA, //!< Vendor-Specific, for RADIUS attribute 26.
PW_TYPE_TIMEVAL, //!< Time value (struct timeval), only for config items.
PW_TYPE_BOOLEAN, //!< A truth value.
PW_TYPE_COMBO_IP_PREFIX, //!< WiMAX IPv4 or IPv6 address prefix depending on length.
PW_TYPE_MAX //!< Number of defined data types.
} PW_TYPE;
/** RADIUS packet codes
*
*/
typedef enum {
PW_CODE_UNDEFINED = 0, //!< Packet code has not been set
PW_CODE_ACCESS_REQUEST = 1, //!< RFC2865 - Access-Request
PW_CODE_ACCESS_ACCEPT = 2, //!< RFC2865 - Access-Accept
PW_CODE_ACCESS_REJECT = 3, //!< RFC2865 - Access-Reject
PW_CODE_ACCOUNTING_REQUEST = 4, //!< RFC2866 - Accounting-Request
PW_CODE_ACCOUNTING_RESPONSE = 5, //!< RFC2866 - Accounting-Response
PW_CODE_ACCOUNTING_STATUS = 6, //!< RFC3575 - Reserved
PW_CODE_PASSWORD_REQUEST = 7, //!< RFC3575 - Reserved
PW_CODE_PASSWORD_ACK = 8, //!< RFC3575 - Reserved
PW_CODE_PASSWORD_REJECT = 9, //!< RFC3575 - Reserved
PW_CODE_ACCOUNTING_MESSAGE = 10, //!< RFC3575 - Reserved
PW_CODE_ACCESS_CHALLENGE = 11, //!< RFC2865 - Access-Challenge
PW_CODE_STATUS_SERVER = 12, //!< RFC2865/RFC5997 - Status Server (request)
PW_CODE_STATUS_CLIENT = 13, //!< RFC2865/RFC5997 - Status Server (response)
PW_CODE_DISCONNECT_REQUEST = 40, //!< RFC3575/RFC5176 - Disconnect-Request
PW_CODE_DISCONNECT_ACK = 41, //!< RFC3575/RFC5176 - Disconnect-Ack (positive)
PW_CODE_DISCONNECT_NAK = 42, //!< RFC3575/RFC5176 - Disconnect-Nak (not willing to perform)
PW_CODE_COA_REQUEST = 43, //!< RFC3575/RFC5176 - CoA-Request
PW_CODE_COA_ACK = 44, //!< RFC3575/RFC5176 - CoA-Ack (positive)
PW_CODE_COA_NAK = 45, //!< RFC3575/RFC5176 - CoA-Nak (not willing to perform)
PW_CODE_PROTOCOL_ERROR = 52, //!< RFC7930 - Protocol layer issue
PW_CODE_MAX = 255, //!< Maximum possible code
} PW_CODE;
#define PW_AUTH_UDP_PORT 1812
#define PW_AUTH_UDP_PORT_ALT 1645
#define PW_ACCT_UDP_PORT 1813
#define PW_ACCT_UDP_PORT_ALT 1646
#define PW_POD_UDP_PORT 3799
#define PW_RADIUS_TLS_PORT 2083
#define PW_COA_UDP_PORT 3799
/*
* The RFC says 4096 octets max, and most packets are less than 256.
*/
#define MAX_PACKET_LEN 4096
#include <freeradius-devel/rfc2865.h>
#include <freeradius-devel/rfc2866.h>
#include <freeradius-devel/rfc2867.h>
#include <freeradius-devel/rfc2868.h>
#include <freeradius-devel/rfc2869.h>
#include <freeradius-devel/rfc3162.h>
#include <freeradius-devel/rfc3576.h>
#include <freeradius-devel/rfc3580.h>
#include <freeradius-devel/rfc4072.h>
#include <freeradius-devel/rfc4372.h>
#define PW_CUI PW_CHARGEABLE_USER_IDENTITY
#include <freeradius-devel/rfc4675.h>
#include <freeradius-devel/rfc4818.h>
#include <freeradius-devel/rfc4849.h>
#include <freeradius-devel/rfc5580.h>
#include <freeradius-devel/rfc5607.h>
#include <freeradius-devel/rfc5904.h>
#include <freeradius-devel/rfc6572.h>
#include <freeradius-devel/rfc6677.h>
#include <freeradius-devel/rfc6911.h>
#include <freeradius-devel/rfc6929.h>
#include <freeradius-devel/rfc6930.h>
#include <freeradius-devel/rfc7055.h>
#include <freeradius-devel/rfc7155.h>
#include <freeradius-devel/rfc7268.h>
/*
* All internal attributes are now defined in this file.
*/
#include <freeradius-devel/attributes.h>
#include <freeradius-devel/freeradius.h>
#include <freeradius-devel/vqp.h>
#define PW_DIGEST_RESPONSE 206
#define PW_DIGEST_ATTRIBUTES 207
/*
* Integer Translations
*/
/* User Types */
#define PW_LOGIN_USER 1
#define PW_FRAMED_USER 2
#define PW_CALLBACK_LOGIN_USER 3
#define PW_CALLBACK_FRAMED_USER 4
#define PW_OUTBOUND_USER 5
#define PW_ADMINISTRATIVE_USER 6
#define PW_NAS_PROMPT_USER 7
#define PW_AUTHENTICATE_ONLY 8
#define PW_CALLBACK_NAS_PROMPT 9
#define PW_AUTHORIZE_ONLY 17
/* Framed Protocols */
#define PW_PPP 1
#define PW_SLIP 2
/* Status Types */
#define PW_STATUS_START 1
#define PW_STATUS_STOP 2
#define PW_STATUS_ALIVE 3
#define PW_STATUS_ACCOUNTING_ON 7
#define PW_STATUS_ACCOUNTING_OFF 8
/*
* Vendor Private Enterprise Codes
*/
#define VENDORPEC_MICROSOFT 311
#define VENDORPEC_FREERADIUS 11344
#define VENDORPEC_WIMAX 24757
#define VENDORPEC_UKERNA 25622
/*
* Microsoft has vendor code 311.
*/
#define PW_MSCHAP_RESPONSE 1
#define PW_MSCHAP_ERROR 2
#define PW_MSCHAP_CPW_1 3
#define PW_MSCHAP_CPW_2 4
#define PW_MSCHAP_NT_ENC_PW 6
#define PW_MSCHAP_MPPE_ENCRYPTION_POLICY 7
#define PW_MSCHAP_MPPE_ENCRYPTION_TYPES 8
#define PW_MSCHAP_CHALLENGE 11
#define PW_MSCHAP_MPPE_SEND_KEY 16
#define PW_MSCHAP_MPPE_RECV_KEY 17
#define PW_MSCHAP2_RESPONSE 25
#define PW_MSCHAP2_SUCCESS 26
#define PW_MSCHAP2_CPW 27
#define PW_MS_QUARANTINE_SOH 55
/*
* JANET's code for transporting eap channel binding data over ttls
*/
#define PW_UKERNA_CHBIND 135
#define PW_UKERNA_TR_COI 136
|
