*/
#ifndef lint
-static char rcsid[] = "$Id: auth.c,v 1.3 1994/04/18 03:59:28 paulus Exp $";
+static char rcsid[] = "$Id: auth.c,v 1.7 1994/08/09 06:29:14 paulus Exp $";
#endif
#include <stdio.h>
#include "upap.h"
#include "chap.h"
#include "ipcp.h"
+#include "ccp.h"
#include "pathnames.h"
#ifdef sparc
#include <alloca.h>
-#ifndef __GNUC__
-/* why alloca.h doesn't define what alloca() returns is a mystery */
-/* char *alloca __ARGS((int)); */
-#endif /*__GNUC__*/
#endif /*sparc*/
/* Used for storing a sequence of words. Usually malloced. */
/* Prototypes */
void check_access __ARGS((FILE *, char *));
+static void network_phase __ARGS((int));
static int login __ARGS((char *, char *, char **, int *));
static void logout __ARGS((void));
static int null_login __ARGS((int));
link_terminated(unit)
int unit;
{
+ if (phase == PHASE_DEAD)
+ return;
if (logged_in)
logout();
phase = PHASE_DEAD;
link_down(unit)
int unit;
{
+ ipcp_close(0);
+ ccp_close(0);
phase = PHASE_TERMINATE;
}
}
auth_pending[unit] = auth;
- if (!auth) {
- phase = PHASE_NETWORK;
- ipcp_open(unit);
- }
+ if (!auth)
+ network_phase(unit);
+}
+
+/*
+ * Proceed to the network phase.
+ */
+static void
+network_phase(unit)
+ int unit;
+{
+ phase = PHASE_NETWORK;
+ ipcp_open(unit);
+ ccp_open(unit);
}
/*
if ((auth_pending[unit] &= ~bit) == 0) {
phase = PHASE_NETWORK;
ipcp_open(unit);
+ ccp_open(unit);
}
}
default:
syslog(LOG_WARNING, "auth_peer_success: unknown protocol %x",
protocol);
+ bit = 0;
}
/*
* If there is no more authentication still being done,
* proceed to the network phase.
*/
- if ((auth_pending[unit] &= ~bit) == 0) {
- phase = PHASE_NETWORK;
- ipcp_open(unit);
- }
+ if ((auth_pending[unit] &= ~bit) == 0)
+ network_phase(unit);
}
char *server;
char *secret;
int *secret_len;
+ int save_addrs;
{
FILE *f;
int ret, len;
struct hostent *hp;
struct wordlist *addrs;
+ /* don't allow loopback or multicast address */
+ if (bad_ip_adrs(addr))
+ return 0;
+
if ((addrs = addresses[unit]) == NULL)
return 1; /* no restriction */
return 0; /* not in list => can't have it */
}
+/*
+ * bad_ip_adrs - return 1 if the IP address is one we don't want
+ * to use, such as an address in the loopback net or a multicast address.
+ * addr is in network byte order.
+ */
+int
+bad_ip_adrs(addr)
+ u_long addr;
+{
+ addr = ntohl(addr);
+ return (addr >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET
+ || IN_MULTICAST(addr) || IN_BADCLASS(addr);
+}
+
/*
* check_access - complain if a secret file has too-liberal permissions.
*/
*/
if (addr_list)
free_wordlist(addr_list);
- addr_list = NULL;
+ addr_list = addr_last = NULL;
for (;;) {
if (!getword(f, word, &newline, filename) || newline)
break;