a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap/*
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * CDDL HEADER START
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap *
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * The contents of this file are subject to the terms of the
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * Common Development and Distribution License (the "License").
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * You may not use this file except in compliance with the License.
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap *
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * or http://www.opensolaris.org/os/licensing.
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * See the License for the specific language governing permissions
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * and limitations under the License.
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap *
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * When distributing Covered Code, include this CDDL HEADER in each
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * If applicable, add the following below this CDDL HEADER, with the
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * fields enclosed by brackets "[]" replaced with your own identifying
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * information: Portions Copyright [yyyy] [name of copyright owner]
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap *
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * CDDL HEADER END
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap/*
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * Copyright 2008 Sun Microsystems, Inc. All rights reserved.
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap * Use is subject to license terms.
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#ifndef _RADIUS_PROTOCOL_H
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define _RADIUS_PROTOCOL_H
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#ifdef __cplusplus
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlapextern "C" {
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#endif
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap/* Packet type. RFC 2865 section 4. */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define RAD_ACCESS_REQ 1 /* Authentication Request */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define RAD_ACCESS_ACPT 2 /* Authentication Accepted */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define RAD_ACCESS_REJ 3 /* Authentication Rejected */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap/* RADIUS Attribute Types. RFC 2865 section 5. */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define RAD_USER_NAME 1
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define RAD_CHAP_PASSWORD 3
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define RAD_CHAP_CHALLENGE 60
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap/* RFC 2865 Section 3. The Identifier field is one octet. */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define RAD_IDENTIFIER_LEN 1
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap/* RFC 2865 Section 5.3. The String field is 16 octets. */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define RAD_CHAP_PASSWD_STR_LEN 16
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap/* RFC 2865 Section 3. Authenticator field is 16 octets. */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define RAD_AUTHENTICATOR_LEN 16
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap/* RFC 2865 Section 5: 1-253 octets */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define MAX_RAD_ATTR_VALUE_LEN 253
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap/* RFC 2865 Section 3. Minimum length 20 octets. */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define MIN_RAD_PACKET_LEN 20
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap/* RFC 2865 Section 3. Maximum length 4096 octets. */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define MAX_RAD_PACKET_LEN 4096
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap/* Maximum RADIUS shared secret length (in fact there is no defined limit) */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define MAX_RAD_SHARED_SECRET_LEN 128
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap/* RFC 2865 Section 3. Minimum RADIUS shared secret length */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define MIN_RAD_SHARED_SECRET_LEN 16
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap/* Raw RADIUS packet. RFC 2865 section 3. */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlaptypedef struct radius_packet {
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap uint8_t code; /* RADIUS code, section 3, RFC 2865 */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap uint8_t identifier; /* 1 octet in length. RFC 2865 section 3 */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap uint8_t length[2]; /* 2 octets, or sizeof (u_short) */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap uint8_t authenticator[RAD_AUTHENTICATOR_LEN];
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap uint8_t data[1];
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap} radius_packet_t;
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap/* Length of a RADIUS packet minus the payload */
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#define RAD_PACKET_HDR_LEN 20
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#ifdef __cplusplus
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap}
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#endif
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap
a6d42e7d71324c5193c3b94d57d96ba2925d52e1Peter Dunlap#endif /* _RADIUS_PROTOCOL_H */