Annotation of embedaddon/libpdel/ppp/ppp_auth_chap_msv1.c, revision 1.1.1.1
1.1 misho 1:
2: /*
3: * Copyright (c) 2001-2002 Packet Design, LLC.
4: * All rights reserved.
5: *
6: * Subject to the following obligations and disclaimer of warranty,
7: * use and redistribution of this software, in source or object code
8: * forms, with or without modifications are expressly permitted by
9: * Packet Design; provided, however, that:
10: *
11: * (i) Any and all reproductions of the source or object code
12: * must include the copyright notice above and the following
13: * disclaimer of warranties; and
14: * (ii) No rights are granted, in any manner or form, to use
15: * Packet Design trademarks, including the mark "PACKET DESIGN"
16: * on advertising, endorsements, or otherwise except as such
17: * appears in the above copyright notice or in the software.
18: *
19: * THIS SOFTWARE IS BEING PROVIDED BY PACKET DESIGN "AS IS", AND
20: * TO THE MAXIMUM EXTENT PERMITTED BY LAW, PACKET DESIGN MAKES NO
21: * REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED, REGARDING
22: * THIS SOFTWARE, INCLUDING WITHOUT LIMITATION, ANY AND ALL IMPLIED
23: * WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE,
24: * OR NON-INFRINGEMENT. PACKET DESIGN DOES NOT WARRANT, GUARANTEE,
25: * OR MAKE ANY REPRESENTATIONS REGARDING THE USE OF, OR THE RESULTS
26: * OF THE USE OF THIS SOFTWARE IN TERMS OF ITS CORRECTNESS, ACCURACY,
27: * RELIABILITY OR OTHERWISE. IN NO EVENT SHALL PACKET DESIGN BE
28: * LIABLE FOR ANY DAMAGES RESULTING FROM OR ARISING OUT OF ANY USE
29: * OF THIS SOFTWARE, INCLUDING WITHOUT LIMITATION, ANY DIRECT,
30: * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL
31: * DAMAGES, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES, LOSS OF
32: * USE, DATA OR PROFITS, HOWEVER CAUSED AND UNDER ANY THEORY OF
33: * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
34: * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF
35: * THE USE OF THIS SOFTWARE, EVEN IF PACKET DESIGN IS ADVISED OF
36: * THE POSSIBILITY OF SUCH DAMAGE.
37: *
38: * Author: Archie Cobbs <archie@freebsd.org>
39: */
40:
41: #include "ppp/ppp_defs.h"
42: #include "ppp/ppp_log.h"
43: #include "ppp/ppp_util.h"
44: #include "ppp/ppp_fsm_option.h"
45: #include "ppp/ppp_auth.h"
46: #include "ppp/ppp_auth_chap.h"
47: #include "ppp/ppp_msoft.h"
48:
49: static ppp_auth_chap_hash_t ppp_auth_chap_msv1_hash;
50: static ppp_auth_chap_equal_t ppp_auth_chap_msv1_equal;
51: static ppp_auth_chap_final_t ppp_auth_chap_msv1_final;
52:
53: /* MS-CHAP version 1 descriptor */
54: const struct ppp_auth_chap_type ppp_auth_chap_msv1 = {
55: NULL,
56: ppp_auth_chap_msv1_hash,
57: ppp_auth_chap_msv1_equal,
58: ppp_auth_chap_msv1_final,
59: 1,
60: PPP_MSOFTV1_CHAL_LEN,
61: 0,
62: PPP_MSOFT_RESP_LEN
63: };
64:
65: /* MS-CHAP error codes */
66: const struct mschap_err ppp_mschap_errs[] = {
67: { 646, "Restricted logon hours" },
68: { 647, "Account disabled" },
69: { 648, "Password expired" },
70: { 649, "No dialin permission" },
71: { 691, "Authentication failure" },
72: { 709, "Changing password" },
73: { 0, NULL }
74: };
75:
76: static void
77: ppp_auth_chap_msv1_hash(struct ppp_auth_cred_chap *chap,
78: const void *secret, size_t slen)
79: {
80: struct ppp_auth_cred_chap_msv1 *const msv1 = &chap->u.msv1;
81:
82: memset(&msv1->lm_hash, 0, sizeof(msv1->lm_hash));
83: ppp_msoft_nt_challenge_response(chap->chal_data, secret, msv1->nt_hash);
84: msv1->use_nt = 1;
85: }
86:
87: static int
88: ppp_auth_chap_msv1_equal(struct ppp_auth_cred_chap *chap1,
89: struct ppp_auth_cred_chap *chap2)
90: {
91: struct ppp_auth_cred_chap_msv1 *const msv1_1 = &chap1->u.msv1;
92: struct ppp_auth_cred_chap_msv1 *const msv1_2 = &chap2->u.msv1;
93:
94: if (msv1_1->use_nt != 1 || msv1_2->use_nt != 1)
95: return (0);
96: return (memcmp(msv1_1->nt_hash,
97: msv1_2->nt_hash, PPP_MSOFT_NT_HASH_LEN) == 0);
98: }
99:
100: static int
101: ppp_auth_chap_msv1_final(struct ppp_auth_cred_chap *cred, struct ppp_log *log,
102: int valid, const u_char *payload, size_t len, const u_char *authresp)
103: {
104: char buf[256];
105: char *s;
106:
107: /* Put payload into nul-terminated buffer */
108: if (len > sizeof(buf) - 1)
109: len = sizeof(buf) - 1;
110: memcpy(buf, payload, len);
111: buf[len] = '\0';
112:
113: /* Handle failure message */
114: if (!valid) {
115: const struct mschap_err *me;
116: int err;
117:
118: if ((s = strstr(buf, "E=")) == NULL)
119: return (0);
120: if (sscanf(s + 2, "%d", &err) != 1)
121: return (0);
122: for (me = ppp_mschap_errs;
123: me->err != err && me->msg != NULL; me++);
124: ppp_log_put(log, LOG_NOTICE, "error #%d: %s",
125: err, me->msg != NULL ? me->msg : "Unknown error");
126: return (0);
127: }
128:
129: /* Display message */
130: ppp_util_ascify(buf, sizeof(buf), payload, len);
131: ppp_log_put(log, LOG_INFO, "message: %s", buf);
132: return (0);
133: }
134:
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>