blob: 25cb1469097e513cc4fa986d1da6dd8182efe43c [file] [log] [blame]
/*********************************************************************************************************
* Software License Agreement (BSD License) *
* Author: Sebastien Decugis <sdecugis@freediameter.net> *
* *
* Copyright (c) 2013, WIDE Project and NICT *
* All rights reserved. *
* *
* Redistribution and use of this software in source and binary forms, with or without modification, are *
* permitted provided that the following conditions are met: *
* *
* * Redistributions of source code must retain the above *
* copyright notice, this list of conditions and the *
* following disclaimer. *
* *
* * Redistributions in binary form must reproduce the above *
* copyright notice, this list of conditions and the *
* following disclaimer in the documentation and/or other *
* materials provided with the distribution. *
* *
* * Neither the name of the WIDE Project or NICT nor the *
* names of its contributors may be used to endorse or *
* promote products derived from this software without *
* specific prior written permission of WIDE Project and *
* NICT. *
* *
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED *
* WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A *
* PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR *
* ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT *
* LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS *
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR *
* TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF *
* ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. *
*********************************************************************************************************/
/* Manage incoming RADIUS messages. */
#include "rgw.h"
/* How many threads to handle messages in parallel ? */
#define NB_WORKERS 2
static pthread_t workers[NB_WORKERS];
static struct fifo * work_stack = NULL;
/* Data that is stacked */
struct work_item {
struct rgw_radius_msg_meta * msg;
struct rgw_client * cli;
};
/* Data stored in freeDiameter while pending Diameter answer */
struct pending_answer {
struct rgw_radius_msg_meta * rad; /* the RADIUS message that was received and translated */
struct rgw_client * cli; /* the client it was received from */
};
/* Callback when a Diameter answer is received */
static void receive_diam_answer(void * paback, struct msg **ans);
/* Worker thread, processing incoming RADIUS messages (after parsing) */
static void * work_th(void * arg)
{
TRACE_ENTRY("%p", arg);
/* Set the thread name */
{
char buf[48];
snprintf(buf, sizeof(buf), "radgw/worker #%ld", (long)arg);
fd_log_threadname ( buf );
}
while (1) { /* The thread will be cancelled */
struct rgw_radius_msg_meta * msg;
struct rgw_client * cli;
struct msg * diam_msg;
int pb, a;
struct pending_answer * pa;
/* Get the next incoming RADIUS message */
{
struct work_item * wi = NULL;
CHECK_FCT_DO( fd_fifo_get(work_stack, &wi), break );
msg = wi->msg;
cli = wi->cli;
free(wi);
}
TRACE_DEBUG(ANNOYING, "Processing next RADIUS message: %p received on client: %p", msg, cli);
/* process the data */
/* Check authenticator, if any */
CHECK_FCT_DO( rgw_clients_auth_check(msg, cli, NULL),
{
/* An error occurred, discard message */
rgw_msg_free(&msg);
rgw_clients_dispose(&cli);
continue;
} );
/* Check duplicate */
CHECK_FCT_DO( rgw_clients_check_dup(&msg, cli),
{
/* An error occurred, discard message */
rgw_msg_free(&msg);
rgw_clients_dispose(&cli);
continue;
} );
if (msg == NULL) {
rgw_clients_dispose(&cli);
continue; /* the message was a duplicate */
}
diam_msg = NULL;
/* Note: after this point, the radius message buffer may not be consistent with the array of attributes anymore. */
/* Check that IP is coherent with the identity in the message, and create an empty message with only Origin information */
CHECK_FCT_DO( rgw_clients_create_origin(msg, cli, &diam_msg),
{
/* An error occurred, discard message */
if (diam_msg) {
CHECK_FCT_DO( fd_msg_free(diam_msg), );
}
rgw_msg_free(&msg);
rgw_clients_dispose(&cli);
continue;
} );
/* Pass the message to the list of registered plugins */
CHECK_FCT_DO( rgw_plg_loop_req(&msg, &diam_msg, cli),
{
/* An error occurred, discard message */
if (diam_msg) {
CHECK_FCT_DO( fd_msg_free(diam_msg), );
diam_msg = NULL;
}
rgw_msg_free(&msg);
rgw_clients_dispose(&cli);
continue;
} );
if (msg == NULL) { /* Error or RADIUS answer locally generated */
rgw_clients_dispose(&cli);
if (diam_msg) {
CHECK_FCT_DO( fd_msg_free(diam_msg), );
diam_msg = NULL;
}
continue; /* the message was handled already */
}
pb = 0;
/* Check the created Diameter message -- it will be invalid if no callback has handled the RADIUS message */
if ((diam_msg == NULL) || ( fd_msg_parse_rules(diam_msg, fd_g_config->cnf_dict, NULL) ) ) {
fd_log_debug("[radgw] No or invalid Diameter message was generated after processing the RADIUS command %hhd (%s)."
" It may indicate a gateway configuration problem, or implementation issue in a plugin.",
msg->radius.hdr->code, rgw_msg_code_str(msg->radius.hdr->code));
/* We should also dump the conflicting rule here to help debug? */
pb++;
}
/* Check if the full content of the RADIUS message was handled */
for (a = 0; a < msg->radius.attr_used; a++) {
struct radius_attr_hdr *attr = (struct radius_attr_hdr *)(msg->radius.buf + msg->radius.attr_pos[a]);
pb++;
fd_log_debug("[radgw] No plugin available to handle attribute %hhd (%s) in command %hhd (%s)! Translation aborted.",
attr->type, rgw_msg_attrtype_str(attr->type),
msg->radius.hdr->code, rgw_msg_code_str(msg->radius.hdr->code));
}
if (pb) {
/* Something went wrong during the conversion */
if (diam_msg) {
CHECK_FCT_DO( fd_msg_free(diam_msg), );
diam_msg = NULL;
}
rgw_msg_free(&msg);
rgw_clients_dispose(&cli);
TRACE_DEBUG(INFO, "%d problem(s) occurred while translating a RADIUS message, data discarded.", pb);
continue;
}
/* Send the Diameter message and register for receiving the answer */
CHECK_MALLOC_DO( pa = malloc(sizeof(struct pending_answer)), break );
memset(pa, 0, sizeof(*pa));
pa->rad = msg;
pa->cli = cli;
CHECK_FCT_DO( fd_msg_send( &diam_msg, receive_diam_answer, pa),
{
/* If an error occurs, log and destroy the data */
fd_log_debug("An error occurred while sending Diameter message, please turn Debug on for detail.");
if (diam_msg) {
CHECK_FCT_DO( fd_msg_free(diam_msg), );
diam_msg = NULL;
}
rgw_msg_free(&msg);
rgw_clients_dispose(&cli);
free(pa);
continue;
} );
/* Done! */
}
TRACE_DEBUG(INFO, "Thread terminated!");
return NULL;
}
static void receive_diam_answer(void * paback, struct msg **ans)
{
struct pending_answer * pa = (struct pending_answer *)paback;
struct radius_msg * rad_ans;
struct avp *avp;
struct avp_hdr *ahdr;
int pb = 0;
TRACE_ENTRY("%p %p", pa, ans);
CHECK_PARAMS_DO( pa && ans, return );
/* Create an empty RADIUS answer message */
CHECK_MALLOC_DO( rad_ans = radius_msg_new(0, pa->rad->radius.hdr->identifier), goto out );
/* Pass the Diameter answer to the same extensions as the request */
CHECK_FCT_DO( rgw_plg_loop_ans(pa->rad, ans, &rad_ans, pa->cli), goto out );
if (*ans != NULL) {
/* Now check what AVPs remain in the diameter answer. If AVPs with the 'M' flag are here, we have a problem... */
CHECK_FCT_DO( fd_msg_browse(*ans, MSG_BRW_FIRST_CHILD, &avp, NULL), { avp = NULL; pb++; } );
while (avp) {
CHECK_FCT_DO( fd_msg_avp_hdr ( avp, &ahdr ), { pb++; continue; } );
if (ahdr->avp_flags & AVP_FLAG_MANDATORY) {
if (ahdr->avp_flags & AVP_FLAG_VENDOR) {
TRACE_DEBUG(FULL, "Remaining Mandatory Vendor AVP, code %d", ahdr->avp_code);
pb++;
} else {
switch (ahdr->avp_code) {
/* A few AVPs can be safely ignored here: */
case DIAM_ATTR_SESSION_ID:
case DIAM_ATTR_ROUTE_RECORD:
case DIAM_ATTR_PROXY_INFO:
/* just ignore */
break;
default:
LOG_D("Remaining Mandatory AVP, code %d", ahdr->avp_code);
pb++;
}
}
}
CHECK_FCT_DO( fd_msg_browse(avp, MSG_BRW_NEXT, &avp, NULL), { pb++; break; } );
}
if (pb) {
TRACE_DEBUG(INFO, "[radgw] WARNING: %d mandatory AVP in the Diameter answer have not been translated to RADIUS! Please use debug.rgwx for more information.", pb);
}
}
out:
/* Now try and send the RADIUS answer */
if (rad_ans) {
CHECK_FCT_DO( rgw_client_finish_send(&rad_ans, pa->rad, pa->cli), );
} else {
/* Remove the request from the duplicate cache */
CHECK_FCT_DO( rgw_client_finish_nosend(pa->rad, pa->cli), );
}
/* Clear the Diameter message */
if (*ans) {
CHECK_FCT_DO( fd_msg_free(*ans), );
*ans = NULL;
}
/* Clear the RADIUS request */
if (pa->rad) {
rgw_msg_free(&pa->rad);
}
/* Release reference on the client */
rgw_clients_dispose(&pa->cli);
/* Clear the answer data */
free(pa);
/* Finished */
return;
}
int rgw_work_start(void)
{
long i;
TRACE_ENTRY();
memset(workers, 0, sizeof(workers));
CHECK_FCT( fd_fifo_new ( &work_stack, 30 ) );
/* Create the worker thread(s) */
for (i = 0; i < NB_WORKERS; i++) {
CHECK_POSIX( pthread_create(&workers[i], NULL, work_th, (void *)i) );
}
return 0;
}
int rgw_work_add(struct rgw_radius_msg_meta * msg, struct rgw_client * client)
{
struct work_item * new;
CHECK_MALLOC( new = malloc(sizeof(struct work_item)) );
memset(new, 0, sizeof(struct work_item));
new->msg = msg;
new->cli = client;
CHECK_FCT( fd_fifo_post(work_stack, &new) );
return 0;
}
void rgw_work_fini(void)
{
int i;
TRACE_ENTRY();
for (i = 0; i < NB_WORKERS; i++) {
fd_thr_term(&workers[i]);
}
TODO("Empty the stack, what to do about the RADIUS messages?");
return;
}