Annotation of embedaddon/libpdel/ppp/ppp_auth_chap_msv1.c, revision 1.1
1.1 ! misho 1:
! 2: /*
! 3: * Copyright (c) 2001-2002 Packet Design, LLC.
! 4: * All rights reserved.
! 5: *
! 6: * Subject to the following obligations and disclaimer of warranty,
! 7: * use and redistribution of this software, in source or object code
! 8: * forms, with or without modifications are expressly permitted by
! 9: * Packet Design; provided, however, that:
! 10: *
! 11: * (i) Any and all reproductions of the source or object code
! 12: * must include the copyright notice above and the following
! 13: * disclaimer of warranties; and
! 14: * (ii) No rights are granted, in any manner or form, to use
! 15: * Packet Design trademarks, including the mark "PACKET DESIGN"
! 16: * on advertising, endorsements, or otherwise except as such
! 17: * appears in the above copyright notice or in the software.
! 18: *
! 19: * THIS SOFTWARE IS BEING PROVIDED BY PACKET DESIGN "AS IS", AND
! 20: * TO THE MAXIMUM EXTENT PERMITTED BY LAW, PACKET DESIGN MAKES NO
! 21: * REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, REGARDING
! 22: * THIS SOFTWARE, INCLUDING WITHOUT LIMITATION, ANY AND ALL IMPLIED
! 23: * WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE,
! 24: * OR NON-INFRINGEMENT. PACKET DESIGN DOES NOT WARRANT, GUARANTEE,
! 25: * OR MAKE ANY REPRESENTATIONS REGARDING THE USE OF, OR THE RESULTS
! 26: * OF THE USE OF THIS SOFTWARE IN TERMS OF ITS CORRECTNESS, ACCURACY,
! 27: * RELIABILITY OR OTHERWISE. IN NO EVENT SHALL PACKET DESIGN BE
! 28: * LIABLE FOR ANY DAMAGES RESULTING FROM OR ARISING OUT OF ANY USE
! 29: * OF THIS SOFTWARE, INCLUDING WITHOUT LIMITATION, ANY DIRECT,
! 30: * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL
! 31: * DAMAGES, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES, LOSS OF
! 32: * USE, DATA OR PROFITS, HOWEVER CAUSED AND UNDER ANY THEORY OF
! 33: * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
! 34: * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF
! 35: * THE USE OF THIS SOFTWARE, EVEN IF PACKET DESIGN IS ADVISED OF
! 36: * THE POSSIBILITY OF SUCH DAMAGE.
! 37: *
! 38: * Author: Archie Cobbs <archie@freebsd.org>
! 39: */
! 40:
! 41: #include "ppp/ppp_defs.h"
! 42: #include "ppp/ppp_log.h"
! 43: #include "ppp/ppp_util.h"
! 44: #include "ppp/ppp_fsm_option.h"
! 45: #include "ppp/ppp_auth.h"
! 46: #include "ppp/ppp_auth_chap.h"
! 47: #include "ppp/ppp_msoft.h"
! 48:
! 49: static ppp_auth_chap_hash_t ppp_auth_chap_msv1_hash;
! 50: static ppp_auth_chap_equal_t ppp_auth_chap_msv1_equal;
! 51: static ppp_auth_chap_final_t ppp_auth_chap_msv1_final;
! 52:
! 53: /* MS-CHAP version 1 descriptor */
! 54: const struct ppp_auth_chap_type ppp_auth_chap_msv1 = {
! 55: NULL,
! 56: ppp_auth_chap_msv1_hash,
! 57: ppp_auth_chap_msv1_equal,
! 58: ppp_auth_chap_msv1_final,
! 59: 1,
! 60: PPP_MSOFTV1_CHAL_LEN,
! 61: 0,
! 62: PPP_MSOFT_RESP_LEN
! 63: };
! 64:
! 65: /* MS-CHAP error codes */
! 66: const struct mschap_err ppp_mschap_errs[] = {
! 67: { 646, "Restricted logon hours" },
! 68: { 647, "Account disabled" },
! 69: { 648, "Password expired" },
! 70: { 649, "No dialin permission" },
! 71: { 691, "Authentication failure" },
! 72: { 709, "Changing password" },
! 73: { 0, NULL }
! 74: };
! 75:
! 76: static void
! 77: ppp_auth_chap_msv1_hash(struct ppp_auth_cred_chap *chap,
! 78: const void *secret, size_t slen)
! 79: {
! 80: struct ppp_auth_cred_chap_msv1 *const msv1 = &chap->u.msv1;
! 81:
! 82: memset(&msv1->lm_hash, 0, sizeof(msv1->lm_hash));
! 83: ppp_msoft_nt_challenge_response(chap->chal_data, secret, msv1->nt_hash);
! 84: msv1->use_nt = 1;
! 85: }
! 86:
! 87: static int
! 88: ppp_auth_chap_msv1_equal(struct ppp_auth_cred_chap *chap1,
! 89: struct ppp_auth_cred_chap *chap2)
! 90: {
! 91: struct ppp_auth_cred_chap_msv1 *const msv1_1 = &chap1->u.msv1;
! 92: struct ppp_auth_cred_chap_msv1 *const msv1_2 = &chap2->u.msv1;
! 93:
! 94: if (msv1_1->use_nt != 1 || msv1_2->use_nt != 1)
! 95: return (0);
! 96: return (memcmp(msv1_1->nt_hash,
! 97: msv1_2->nt_hash, PPP_MSOFT_NT_HASH_LEN) == 0);
! 98: }
! 99:
! 100: static int
! 101: ppp_auth_chap_msv1_final(struct ppp_auth_cred_chap *cred, struct ppp_log *log,
! 102: int valid, const u_char *payload, size_t len, const u_char *authresp)
! 103: {
! 104: char buf[256];
! 105: char *s;
! 106:
! 107: /* Put payload into nul-terminated buffer */
! 108: if (len > sizeof(buf) - 1)
! 109: len = sizeof(buf) - 1;
! 110: memcpy(buf, payload, len);
! 111: buf[len] = '\0';
! 112:
! 113: /* Handle failure message */
! 114: if (!valid) {
! 115: const struct mschap_err *me;
! 116: int err;
! 117:
! 118: if ((s = strstr(buf, "E=")) == NULL)
! 119: return (0);
! 120: if (sscanf(s + 2, "%d", &err) != 1)
! 121: return (0);
! 122: for (me = ppp_mschap_errs;
! 123: me->err != err && me->msg != NULL; me++);
! 124: ppp_log_put(log, LOG_NOTICE, "error #%d: %s",
! 125: err, me->msg != NULL ? me->msg : "Unknown error");
! 126: return (0);
! 127: }
! 128:
! 129: /* Display message */
! 130: ppp_util_ascify(buf, sizeof(buf), payload, len);
! 131: ppp_log_put(log, LOG_INFO, "message: %s", buf);
! 132: return (0);
! 133: }
! 134:
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>