root/EMS/radauth.php

<?
    //
    // $Id: radius_authentication.inc,v 1.3 2002/01/23 23:21:20 mavetju Exp $
    //
    // Roberto Lumbreras <rover@debian.org> Tue, 23 Mar 2004 00:34:01 +0100
    //   select fixes, error checks, more than one config file
    //
    // radius authentication v1.0 by Edwin Groothuis (edwin@mavetju.org)
    //
    // If you didn't get this file via http://www.mavetju.org, please
    // check for the availability of newer versions.
    //
    // See LICENSE for distribution issues. If this file isn't in
    // the distribution, please inform me about it.
    //
    // If you want to use this script, fill in the configuration in
    // radius_authentication.conf and call the function
    // RADIUS_AUTHENTICATION() with the username and password
    // provided by the user. If it returns a 2, the authentication
    // was successfull!

    // If you want to use this, make sure that you have raw sockets
    // enabled during compile-time: "./configure --enable-sockets".

    $radiushost = "127.0.0.1";
    $radiusport = 1812;
    $sharedsecret = "testing123";
    $suffix = "";

    function RADIUS_AUTHENTICATION($username,$password) {
    global $debug, $radiushost, $radiusport, $sharedsecret, $suffix;

    // check your /etc/services. Some radius servers 
    // listen on port 1812, some on 1645.
    if ($radiusport == 0)
        $radiusport = getservbyname("radius","udp");

    $nasIP=explode(".",$_SERVER['SERVER_ADDR']);
    $ip=gethostbyname($radiushost);

    // 17 is UDP, formerly known as PROTO_UDP
    $sock=socket_create(AF_INET, SOCK_DGRAM, SOL_UDP);
    if ($sock==FALSE) {
        echo "socket_create() failed: " . socket_strerror(socket_last_error()) . "\n";
        exit(0);
    }
    $retval=socket_connect($sock,$ip,$radiusport);
    if ($retval==FALSE) {
        echo "socket_connect() failed: " . socket_strerror(socket_last_error()) . "\n";
        exit(0);
    }

    if (!preg_match("/@/",$username))
        $username.=$suffix;

    if ($debug)
        echo "<br>radius-port: $radiusport<br>radius-host: $radiushost<br>username: $username<br>suffix: $suffix<hr>\n";

    $RA=pack("CCCCCCCCCCCCCCCC",                // auth code
        1+mt_rand()%255, 1+mt_rand()%255, 1+mt_rand()%255, 1+mt_rand()%255,
        1+mt_rand()%255, 1+mt_rand()%255, 1+mt_rand()%255, 1+mt_rand()%255,
        1+mt_rand()%255, 1+mt_rand()%255, 1+mt_rand()%255, 1+mt_rand()%255,
        1+mt_rand()%255, 1+mt_rand()%255, 1+mt_rand()%255, 1+mt_rand()%255);

    $encryptedpassword=Encrypt($password,$sharedsecret,$RA);

    $length=4+                // header
        16+                // auth code
        6+                // service type
        2+strlen($username)+        // username
        2+strlen($encryptedpassword)+    // userpassword
        6+                // nasIP
        6;                // nasPort

    $thisidentifier = 0;
    $thisidentifier = rand(0,256) % 256;
    //          v   v v     v   v   v     v     v
    $data=pack("CCCCa*CCCCCCCCa*CCa*CCCCCCCCN",
        1,$thisidentifier,$length/256,$length%256,        // header
        $RA,                        // authcode
        6,6,0,0,0,1,                    // service type
        1,2+strlen($username),$username,            // username
        2,2+strlen($encryptedpassword),$encryptedpassword,    // userpassword
        4,6,$nasIP[0],$nasIP[1],$nasIP[2],$nasIP[3],    // nasIP
        5,6,$_SERVER['SERVER_PORT']                // nasPort
        );

    socket_write($sock,$data,$length);

    if ($debug)
        echo "<br>writing $length bytes<hr>\n";

    //
    // Wait at most five seconds for the answer. Thanks to
    // Michael Long <mlong@infoave.net> for his remark about this.
    //
    $read = array($sock);
    $num_sockets = socket_select($read, $write = NULL, $except = NULL, 15);
    if ($num_sockets === FALSE) {
        echo "socket_select() failed: " .
            socket_strerror(socket_last_error()) . "\n";
        socket_close($sock);
        exit(0);
    } elseif ($num_sockets == 0) {
        echo "No answer from radius server, aborting\n";
        socket_close($sock);
        exit(0);
    }
    unset($read);

    $readdata=socket_read($sock,1024);
    socket_close($sock);
    if ($readdata===FALSE) {
        echo "socket_read() failed: " .
            socket_strerror(socket_last_error()) . "\n";
        exit(0);
    }

    if (ord(substr($readdata, 1, 1)) != $thisidentifier) {
        //echo "Wrong id received from radius server, aborting\n";
        //exit(0);
        return 3; // FIXME this is awfull
    }

    return ord($readdata);
    // 2 -> Access-Accept
    // 3 -> Access-Reject
    // See RFC2138 for this.
    }

    function Encrypt($password,$key,$RA) {
    global $debug;

    $keyRA=$key.$RA;

    if ($debug)
        echo "<br>key: $key<br>password: $password<hr>\n";

    $md5checksum=md5($keyRA);
    $output="";

    for ($i=0;$i<=15;$i++) {
        if (2*$i>strlen($md5checksum)) $m=0; else $m=hexdec(substr($md5checksum,2*$i,2));
        if ($i>strlen($keyRA)) $k=0; else $k=ord(substr($keyRA,$i,1));
        if ($i>strlen($password)) $p=0; else $p=ord(substr($password,$i,1));
        $c=$m^$p;
        $output.=chr($c);
    }
    return $output;
    }
?>