#include <freeradius-devel/util/net.h>
#include <freeradius-devel/util/md5.h>
#include <freeradius-devel/util/struct.h>
#include "tacacs.h"
#include "attrs.h"

Include dependency graph for base.c:

Macros
#define	ASCII(_prefix, _field)

#define	CHECK(_length)

#define	HEXIT(_prefix, _field)

#define	PRINT(_fmt, ...) fr_log(log, L_DBG, file, line, _fmt, ## __VA_ARGS__)

#define	REQUIRE(_length)

Functions
void	_fr_tacacs_packet_log_hex (fr_log_t const log, fr_tacacs_packet_t const packet, size_t packet_len, char const *file, int line)

static bool	attr_valid (fr_dict_attr_t *da)

int	fr_tacacs_body_xor (fr_tacacs_packet_t const pkt, uint8_t body, size_t body_len, char const *secret, size_t secret_len)
	XOR the body based on the secret key.

void	fr_tacacs_global_free (void)

int	fr_tacacs_global_init (void)

ssize_t	fr_tacacs_length (uint8_t const *buffer, size_t buffer_len)

static void	print_args (fr_log_t const log, char const file, int line, size_t arg_cnt, uint8_t const argv, uint8_t const start, uint8_t const *end)

static void	print_ascii (fr_log_t const log, char const file, int line, char const prefix, uint8_t const data, size_t datalen)

static void	print_hex (fr_log_t const log, char const file, int line, char const prefix, uint8_t const data, size_t datalen)

Variables
fr_dict_attr_t const *	attr_tacacs_accounting_flags

fr_dict_attr_t const *	attr_tacacs_accounting_status

fr_dict_attr_t const *	attr_tacacs_action

fr_dict_attr_t const *	attr_tacacs_argument_list

fr_dict_attr_t const *	attr_tacacs_authentication_continue_flags

fr_dict_attr_t const *	attr_tacacs_authentication_flags

fr_dict_attr_t const *	attr_tacacs_authentication_method

fr_dict_attr_t const *	attr_tacacs_authentication_service

fr_dict_attr_t const *	attr_tacacs_authentication_status

fr_dict_attr_t const *	attr_tacacs_authentication_type

fr_dict_attr_t const *	attr_tacacs_authorization_status

fr_dict_attr_t const *	attr_tacacs_chap_challenge

fr_dict_attr_t const *	attr_tacacs_chap_password

fr_dict_attr_t const *	attr_tacacs_client_port

fr_dict_attr_t const *	attr_tacacs_data

fr_dict_attr_t const *	attr_tacacs_flags

fr_dict_attr_t const *	attr_tacacs_length

fr_dict_attr_t const *	attr_tacacs_mschap2_response

fr_dict_attr_t const *	attr_tacacs_mschap_challenge

fr_dict_attr_t const *	attr_tacacs_mschap_response

fr_dict_attr_t const *	attr_tacacs_packet

fr_dict_attr_t const *	attr_tacacs_packet_body_type

fr_dict_attr_t const *	attr_tacacs_packet_type

fr_dict_attr_t const *	attr_tacacs_privilege_level

fr_dict_attr_t const *	attr_tacacs_remote_address

fr_dict_attr_t const *	attr_tacacs_sequence_number

fr_dict_attr_t const *	attr_tacacs_server_message

fr_dict_attr_t const *	attr_tacacs_session_id

fr_dict_attr_t const *	attr_tacacs_user_message

fr_dict_attr_t const *	attr_tacacs_user_name

fr_dict_attr_t const *	attr_tacacs_user_password

fr_dict_attr_t const *	attr_tacacs_version_major

fr_dict_attr_t const *	attr_tacacs_version_minor

fr_dict_t const *	dict_tacacs

char const *	fr_tacacs_packet_names [FR_TACACS_CODE_MAX]

static uint32_t	instance_count = 0

static bool	instantiated = false

fr_dict_autoload_t	libfreeradius_tacacs_dict []

fr_dict_attr_autoload_t	libfreeradius_tacacs_dict_attr []

fr_dict_protocol_t	libfreeradius_tacacs_dict_protocol

Macro Definition Documentation

◆ ASCII

#define ASCII	(	_prefix,
		_field
	)

Value:

        do { \
        CHECK(_field); \
        print_ascii(log, file, line, _prefix, data, data_len); \
   } while (0)

Definition at line 344 of file base.c.

◆ CHECK

#define CHECK ( _length )

Value:

        do { \
        size_t plen = _length; \
        if ((size_t) (end - p) < plen) { \
                fr_log_hex(log, L_DBG, file, line, p, end - p, "%s", "      TRUNCATED     "); \
                return; \
        } \
        data = p; \
        data_len = plen; \
        p += plen; \
    } while (0)

Definition at line 332 of file base.c.

◆ HEXIT

#define HEXIT	(	_prefix,
		_field
	)

Value:

        do { \
        CHECK(_field); \
        print_hex(log, file, line, _prefix, data, data_len); \
   } while (0)

Definition at line 350 of file base.c.

◆ PRINT

#define PRINT	(	_fmt,
		...
	)	fr_log(log, L_DBG, file, line, _fmt, ## __VA_ARGS__)

Definition at line 355 of file base.c.

◆ REQUIRE

#define REQUIRE ( _length )

Value:

        do { \
        size_t plen = _length; \
        if ((size_t) (end - hdr) < plen) { \
                print_hex(log, file, line, "      TRUNCATED     ", hdr, end - hdr); \
                return; \
        } \
        p = hdr + plen; \
    } while (0)

Function Documentation

◆ _fr_tacacs_packet_log_hex()

void _fr_tacacs_packet_log_hex	(	fr_log_t const *	log,
		fr_tacacs_packet_t const *	packet,
		size_t	packet_len,
		char const *	file,
		int	line
	)

Definition at line 389 of file base.c.

Here is the call graph for this function:

◆ attr_valid()

static bool attr_valid ( fr_dict_attr_t * da )

static

Definition at line 625 of file base.c.

Here is the call graph for this function:

◆ fr_tacacs_body_xor()

int fr_tacacs_body_xor	(	fr_tacacs_packet_t const *	pkt,
		uint8_t *	body,
		size_t	body_len,
		char const *	secret,
		size_t	secret_len
	)

XOR the body based on the secret key.

This function encrypts (or decrypts) TACACS+ packets, and sets the "encrypted" flag.

Definition at line 149 of file base.c.

Here is the call graph for this function:

Here is the caller graph for this function:

◆ fr_tacacs_global_free()

void fr_tacacs_global_free ( void )

Definition at line 613 of file base.c.

Here is the caller graph for this function:

◆ fr_tacacs_global_init()

int fr_tacacs_global_init ( void )

Definition at line 589 of file base.c.

Here is the call graph for this function:

Here is the caller graph for this function:

◆ fr_tacacs_length()

ssize_t fr_tacacs_length	(	uint8_t const *	buffer,
		size_t	buffer_len
	)

 Return how long a TACACS+ packet is

 Note that we only look at the 12 byte packet header.  We don't
 (yet) do validation on authentication / authorization /
 accounting headers.  The packet may still be determined later
 to be invalid.

Parameters

buffer	to check
buffer_len	length of the buffer

Returns: >0 size of the TACACS+ packet. We want. MAY be larger than "buffer_len" <=0 error, packet should be discarded.

Definition at line 211 of file base.c.

Here is the caller graph for this function:

◆ print_args()

static void print_args	(	fr_log_t const *	log,
		char const *	file,
		int	line,
		size_t	arg_cnt,
		uint8_t const *	argv,
		uint8_t const *	start,
		uint8_t const *	end
	)

static

Definition at line 357 of file base.c.

Here is the call graph for this function:

Here is the caller graph for this function:

◆ print_ascii()

static void print_ascii	(	fr_log_t const *	log,
		char const *	file,
		int	line,
		char const *	prefix,
		uint8_t const *	data,
		size_t	datalen
	)

static

Definition at line 313 of file base.c.

Here is the call graph for this function:

◆ print_hex()

static void print_hex	(	fr_log_t const *	log,
		char const *	file,
		int	line,
		char const *	prefix,
		uint8_t const *	data,
		size_t	datalen
	)

static

Definition at line 306 of file base.c.

Here is the call graph for this function:

Here is the caller graph for this function:

Variable Documentation

◆ attr_tacacs_accounting_flags

fr_dict_attr_t const* attr_tacacs_accounting_flags

Definition at line 45 of file base.c.

◆ attr_tacacs_accounting_status

fr_dict_attr_t const* attr_tacacs_accounting_status

Definition at line 46 of file base.c.

◆ attr_tacacs_action

fr_dict_attr_t const* attr_tacacs_action

Definition at line 47 of file base.c.

◆ attr_tacacs_argument_list

fr_dict_attr_t const* attr_tacacs_argument_list

Definition at line 55 of file base.c.

◆ attr_tacacs_authentication_continue_flags

fr_dict_attr_t const* attr_tacacs_authentication_continue_flags

Definition at line 49 of file base.c.

◆ attr_tacacs_authentication_flags

fr_dict_attr_t const* attr_tacacs_authentication_flags

Definition at line 48 of file base.c.

◆ attr_tacacs_authentication_method

fr_dict_attr_t const* attr_tacacs_authentication_method

Definition at line 50 of file base.c.

◆ attr_tacacs_authentication_service

fr_dict_attr_t const* attr_tacacs_authentication_service

Definition at line 51 of file base.c.

◆ attr_tacacs_authentication_status

fr_dict_attr_t const* attr_tacacs_authentication_status

Definition at line 52 of file base.c.

◆ attr_tacacs_authentication_type

fr_dict_attr_t const* attr_tacacs_authentication_type

Definition at line 53 of file base.c.

◆ attr_tacacs_authorization_status

fr_dict_attr_t const* attr_tacacs_authorization_status

Definition at line 54 of file base.c.

◆ attr_tacacs_chap_challenge

fr_dict_attr_t const* attr_tacacs_chap_challenge

Definition at line 75 of file base.c.

◆ attr_tacacs_chap_password

fr_dict_attr_t const* attr_tacacs_chap_password

Definition at line 74 of file base.c.

◆ attr_tacacs_client_port

fr_dict_attr_t const* attr_tacacs_client_port

Definition at line 56 of file base.c.

◆ attr_tacacs_data

fr_dict_attr_t const* attr_tacacs_data

Definition at line 57 of file base.c.

◆ attr_tacacs_flags

fr_dict_attr_t const* attr_tacacs_flags

Definition at line 58 of file base.c.

◆ attr_tacacs_length

fr_dict_attr_t const* attr_tacacs_length

Definition at line 59 of file base.c.

◆ attr_tacacs_mschap2_response

fr_dict_attr_t const* attr_tacacs_mschap2_response

Definition at line 77 of file base.c.

◆ attr_tacacs_mschap_challenge

fr_dict_attr_t const* attr_tacacs_mschap_challenge

Definition at line 78 of file base.c.

◆ attr_tacacs_mschap_response

fr_dict_attr_t const* attr_tacacs_mschap_response

Definition at line 76 of file base.c.

◆ attr_tacacs_packet

fr_dict_attr_t const* attr_tacacs_packet

Definition at line 60 of file base.c.

◆ attr_tacacs_packet_body_type

fr_dict_attr_t const* attr_tacacs_packet_body_type

Definition at line 61 of file base.c.

◆ attr_tacacs_packet_type

fr_dict_attr_t const* attr_tacacs_packet_type

Definition at line 62 of file base.c.

◆ attr_tacacs_privilege_level

fr_dict_attr_t const* attr_tacacs_privilege_level

Definition at line 63 of file base.c.

◆ attr_tacacs_remote_address

fr_dict_attr_t const* attr_tacacs_remote_address

Definition at line 64 of file base.c.

◆ attr_tacacs_sequence_number

fr_dict_attr_t const* attr_tacacs_sequence_number

Definition at line 65 of file base.c.

◆ attr_tacacs_server_message

fr_dict_attr_t const* attr_tacacs_server_message

Definition at line 66 of file base.c.

◆ attr_tacacs_session_id

fr_dict_attr_t const* attr_tacacs_session_id

Definition at line 67 of file base.c.

◆ attr_tacacs_user_message

fr_dict_attr_t const* attr_tacacs_user_message

Definition at line 68 of file base.c.

◆ attr_tacacs_user_name

fr_dict_attr_t const* attr_tacacs_user_name

Definition at line 72 of file base.c.

◆ attr_tacacs_user_password

fr_dict_attr_t const* attr_tacacs_user_password

Definition at line 73 of file base.c.

◆ attr_tacacs_version_major

fr_dict_attr_t const* attr_tacacs_version_major

Definition at line 69 of file base.c.

◆ attr_tacacs_version_minor

fr_dict_attr_t const* attr_tacacs_version_minor

Definition at line 70 of file base.c.

◆ dict_tacacs

fr_dict_t const* dict_tacacs

Definition at line 36 of file base.c.

◆ fr_tacacs_packet_names

char const* fr_tacacs_packet_names[FR_TACACS_CODE_MAX]

Initial value:

= {
        [FR_PACKET_TYPE_VALUE_AUTHENTICATION_START]             = "Authentication-Start",
        [FR_PACKET_TYPE_VALUE_AUTHENTICATION_PASS]              = "Authentication-Pass",
        [FR_PACKET_TYPE_VALUE_AUTHENTICATION_FAIL]              = "Authentication-Fail",
        [FR_PACKET_TYPE_VALUE_AUTHENTICATION_GETDATA]           = "Authentication-GetData",
        [FR_PACKET_TYPE_VALUE_AUTHENTICATION_GETUSER]           = "Authentication-GetUser",
        [FR_PACKET_TYPE_VALUE_AUTHENTICATION_GETPASS]           = "Authentication-GetPass",
        [FR_PACKET_TYPE_VALUE_AUTHENTICATION_RESTART]           = "Authentication-Restart",
        [FR_PACKET_TYPE_VALUE_AUTHENTICATION_ERROR]             = "Authentication-Error",
 
        [FR_PACKET_TYPE_VALUE_AUTHENTICATION_CONTINUE]          = "Authentication-Continue",
        [FR_PACKET_TYPE_VALUE_AUTHENTICATION_CONTINUE_ABORT]    = "Authentication-Continue-Abort",
 
        [FR_PACKET_TYPE_VALUE_AUTHORIZATION_REQUEST]            = "Authorization-Request",
        [FR_PACKET_TYPE_VALUE_AUTHORIZATION_PASS_ADD]           = "Authorization-Pass-Add",
        [FR_PACKET_TYPE_VALUE_AUTHORIZATION_PASS_REPLACE]       = "Authorization-Pass-Replace",
        [FR_PACKET_TYPE_VALUE_AUTHORIZATION_FAIL]               = "Authorization-Fail",
        [FR_PACKET_TYPE_VALUE_AUTHORIZATION_ERROR]              = "Authorization-Error",
 
        [FR_PACKET_TYPE_VALUE_ACCOUNTING_REQUEST]               = "Accounting-Request",
        [FR_PACKET_TYPE_VALUE_ACCOUNTING_SUCCESS]               = "Accounting-Success",
        [FR_PACKET_TYPE_VALUE_ACCOUNTING_ERROR]                 = "Accounting-Error",
}

Definition at line 120 of file base.c.

◆ instance_count

uint32_t instance_count = 0

static

Definition at line 33 of file base.c.

◆ instantiated

bool instantiated = false

static

Definition at line 34 of file base.c.

◆ libfreeradius_tacacs_dict

fr_dict_autoload_t libfreeradius_tacacs_dict

Initial value:

= {
        { .out = &dict_tacacs, .proto = "tacacs" },
 
        DICT_AUTOLOAD_TERMINATOR
}

Definition at line 39 of file base.c.

◆ libfreeradius_tacacs_dict_attr

fr_dict_attr_autoload_t libfreeradius_tacacs_dict_attr

Definition at line 81 of file base.c.

◆ libfreeradius_tacacs_dict_protocol

fr_dict_protocol_t libfreeradius_tacacs_dict_protocol

Initial value:

= {
        .name = "tacacs",
        .default_type_size = 4,
        .default_type_length = 4,
        .attr = {
                .valid = attr_valid,
        },
 
        .init = fr_tacacs_global_init,
        .free = fr_tacacs_global_free,
}

Definition at line 670 of file base.c.

Macros

Functions

Variables

Macro Definition Documentation

◆ ASCII

◆ CHECK

◆ HEXIT

◆ PRINT

◆ REQUIRE

Function Documentation

◆ _fr_tacacs_packet_log_hex()

◆ attr_valid()

◆ fr_tacacs_body_xor()

◆ fr_tacacs_global_free()

◆ fr_tacacs_global_init()

◆ fr_tacacs_length()

◆ print_args()

◆ print_ascii()

◆ print_hex()

Variable Documentation

◆ attr_tacacs_accounting_flags

◆ attr_tacacs_accounting_status

◆ attr_tacacs_action

◆ attr_tacacs_argument_list

◆ attr_tacacs_authentication_continue_flags

◆ attr_tacacs_authentication_flags

◆ attr_tacacs_authentication_method

◆ attr_tacacs_authentication_service

◆ attr_tacacs_authentication_status

◆ attr_tacacs_authentication_type

◆ attr_tacacs_authorization_status

◆ attr_tacacs_chap_challenge

◆ attr_tacacs_chap_password

◆ attr_tacacs_client_port

◆ attr_tacacs_data

◆ attr_tacacs_flags

◆ attr_tacacs_length

◆ attr_tacacs_mschap2_response

◆ attr_tacacs_mschap_challenge

◆ attr_tacacs_mschap_response

◆ attr_tacacs_packet

◆ attr_tacacs_packet_body_type

◆ attr_tacacs_packet_type

◆ attr_tacacs_privilege_level

◆ attr_tacacs_remote_address

◆ attr_tacacs_sequence_number

◆ attr_tacacs_server_message

◆ attr_tacacs_session_id

◆ attr_tacacs_user_message

◆ attr_tacacs_user_name

◆ attr_tacacs_user_password

◆ attr_tacacs_version_major

◆ attr_tacacs_version_minor

◆ dict_tacacs

◆ fr_tacacs_packet_names

◆ instance_count

◆ instantiated

◆ libfreeradius_tacacs_dict

◆ libfreeradius_tacacs_dict_attr

◆ libfreeradius_tacacs_dict_protocol