1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
|
/*
* Tiny TACACS+ Client Library
* Copyright (C) 2022 David M. Syzdek <david@syzdek.net>.
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions are
* met:
*
* * Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* * Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
* * Neither the name of David M. Syzdek nor the
* names of its contributors may be used to endorse or promote products
* derived from this software without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
* IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL DAVID M. SYZDEK BE LIABLE FOR
* ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
* SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
* CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*/
#ifndef __TINYTAC_H
#define __TINYTAC_H 1
///////////////
// //
// Headers //
// //
///////////////
#pragma mark - Headers
#include <stddef.h>
#include <inttypes.h>
#include <sys/types.h>
#include <tinytac_plus.h>
//////////////
// //
// Macros //
// //
//////////////
#pragma mark - Macros
// Exports function type
#undef TINYTAC_C_DECLS
#undef TINYTAC_BEGIN_C_DECLS
#undef TINYTAC_END_C_DECLS
#undef _TINYTAC_I
#undef _TINYTAC_F
#undef _TINYTAC_V
#if defined(__cplusplus) || defined(c_plusplus)
# define TINYTAC_C_DECLS "C" ///< exports as C functions
# define TINYTAC_BEGIN_C_DECLS extern "C" { ///< exports as C functions
# define TINYTAC_END_C_DECLS } ///< exports as C functions
#else
# define TINYTAC_C_DECLS /* empty */ ///< exports as C functions
# define TINYTAC_BEGIN_C_DECLS /* empty */ ///< exports as C functions
# define TINYTAC_END_C_DECLS /* empty */ ///< exports as C functions
#endif
#ifdef WIN32
# ifdef _LIB_LIBTINYTAC_H
# define _TINYTAC_I inline
# define _TINYTAC_F extern TINYTAC_C_DECLS __declspec(dllexport) ///< used for library calls
# define _TINYTAC_V extern TINYTAC_C_DECLS __declspec(dllexport) ///< used for library calls
# else
# define _TINYTAC_I extern TINYTAC_C_DECLS __declspec(dllimport) ///< used for library calls
# define _TINYTAC_F extern TINYTAC_C_DECLS __declspec(dllimport) ///< used for library calls
# define _TINYTAC_V extern TINYTAC_C_DECLS __declspec(dllimport) ///< used for library calls
# endif
#else
# ifdef _LIB_LIBTINYTAC_H
# define _TINYTAC_I inline
# define _TINYTAC_F /* empty */ ///< used for library calls
# define _TINYTAC_V extern TINYTAC_C_DECLS ///< used for library calls
# else
# define _TINYTAC_I extern TINYTAC_C_DECLS ///< used for library calls
# define _TINYTAC_F extern TINYTAC_C_DECLS ///< used for library calls
# define _TINYTAC_V extern TINYTAC_C_DECLS ///< used for library calls
# endif
#endif
///////////////////
// //
// Definitions //
// //
///////////////////
#pragma mark - Definitions
// library error codes
#define TTAC_SUCCESS 0x0000 ///< success
#define TTAC_EUNKNOWN 0x0001 ///< unknown error
#define TTAC_ENOMEM 0x0002 ///< out of virtual memory
#define TTAC_EACCES 0x0003 ///< permission denied
#define TTAC_ENOENT 0x0004 ///< no such file or directory
#define TTAC_ESYNTAX 0x0005 ///< invalid or unrecognized syntax
#define TTAC_ENOBUFS 0x0006 ///< no buffer space available
#define TTAC_EEXISTS 0x0007 ///< dictionary object exists
#define TTAC_EINVAL 0x0008 ///< invalid argument
#define TTAC_EOPTION 0x0009 ///< invalid or unknown option
#define TTAC_EOPTVAL 0x000a ///< invalid option value
#define TTAC_ESTOPINIT 0x000b ///< stop configuration initialization (used internally)
// library user options
#define TTAC_NOINIT 0x00000001U
#define TTAC_IPV4 0x00000002U
#define TTAC_IPV6 0x00000004U
// 0x00000008U UNUSED
#define TTAC_RAND 0x00000010U ///< use rand()
#define TTAC_RANDOM 0x00000020U ///< use random()
#define TTAC_URANDOM 0x00000040U ///< use /dev/urandom
#define TTAC_SERVER 0x00000080U
#define TTAC_ASCII 0x00000100U ///< allow ASCII authentication
#define TTAC_PAP 0x00000200U ///< allow PAP authentication
#define TTAC_CHAP 0x00000400U ///< allow CHAP authentication
#define TTAC_MSCHAP 0x00000800U ///< allow MSCHAP authentication
#define TTAC_MSCHAPV2 0x00001000U ///< allow MSCHAPv2 authentication
#define TTAC_AUTHEN_TYPES (TTAC_ASCII | TTAC_PAP | TTAC_CHAP | TTAC_MSCHAP | TTAC_MSCHAPV2 )
#define TTAC_IP_UNSPEC (TTAC_IPV4 | TTAC_IPV6)
#define TTAC_RND_METHODS (TTAC_RAND | TTAC_RANDOM | TTAC_URANDOM)
#define TTAC_NO 0
#define TTAC_YES 1
// library get/set options
#define TTAC_OPT_DEBUG_LEVEL 1
#define TTAC_OPT_DEBUG_IDENT 2
#define TTAC_OPT_DEBUG_SYSLOG 3
#define TTAC_OPT_RANDOM 4
#define TTAC_OPT_NOINIT 5
#define TTAC_OPT_IPV4 6
#define TTAC_OPT_IPV6 7
#define TTAC_OPT_TIMEOUT 8
#define TTAC_OPT_NETWORK_TIMEOUT 9
#define TTAC_OPT_HOSTS 10
#define TTAC_OPT_KEY 11
#define TTAC_OPT_KEYS 12
#define TTAC_OPT_AUTHEN_ASCII 20
#define TTAC_OPT_AUTHEN_PAP 21
#define TTAC_OPT_AUTHEN_CHAP 22
#define TTAC_OPT_AUTHEN_MSCHAP 23
#define TTAC_OPT_AUTHEN_MSCHAPV2 24
// library debug levels
#define TTAC_DEBUG_NONE 0
#define TTAC_DEBUG_TRACE 0x0000001
#define TTAC_DEBUG_ARGS 0x0000002
#define TTAC_DEBUG_CONNS 0x0000004
#define TTAC_DEBUG_PACKETS 0x0000008
#define TTAC_DEBUG_PARSE 0x0000010
#define TTAC_DEBUG_ANY (~0x00)
// library defaults
#define TTAC_DFLT_DEBUG_IDENT "libtinytac"
#define TTAC_DFLT_DEBUG_LEVEL TTAC_DEBUG_NONE
#define TTAC_DFLT_DEBUG_SYSLOG TTAC_NO
#define TTAC_DFLT_HOSTS "localhost"
#define TTAC_DFLT_SECRETS NULL
#define TTAC_DFLT_OPTS ( TTAC_URANDOM | TTAC_IP_UNSPEC | TTAC_AUTHEN_TYPES )
#define TTAC_DFLT_OPTS_NEG 0
#define TTAC_DFLT_PORT 49
#define TTAC_DFLT_TIMEOUT 10
#define TTAC_DFLT_NET_TIMEOUT_SEC 10
#define TTAC_DFLT_NET_TIMEOUT_USEC 0
#define TTAC_DFLT_RANDOM TTAC_URANDOM
//////////////////
// //
// Data Types //
// //
//////////////////
#pragma mark - Data Types
typedef struct _tinytac TinyTac;
typedef struct _tinytac_packet tinytac_pckt_t;
typedef struct _tinytac_authen_start tinytac_authen_start_t;
typedef struct _tinytac_authen_reply tinytac_authen_reply_t;
typedef struct _tinytac_authen_continue tinytac_authen_cont_t;
typedef struct _tinytac_author_request tinytac_author_req_t;
typedef struct _tinytac_author_reply tinytac_author_reply_t;
typedef struct _tinytac_account_request tinytac_acct_req_t;
typedef struct _tinytac_account_reply tinytac_acct_reply_t;
struct _tinytac_packet
{
uint8_t pckt_version; // 4 bits major and 4 bits minor
uint8_t pckt_type;
uint8_t pckt_seq_no;
uint8_t pckt_flags;
uint32_t pckt_session_id;
uint32_t pckt_length;
uint8_t pckt_body[];
};
struct _tinytac_authen_start
{
uint8_t bdy_action;
uint8_t bdy_priv_lvl;
uint8_t bdy_authen_type;
uint8_t bdy_authen_service;
uint8_t bdy_user_len;
uint8_t bdy_port_len;
uint8_t bdy_rem_addr_len;
uint8_t bdy_data_len;
uint8_t bdy_bytes[];
};
struct _tinytac_authen_reply
{
uint8_t bdy_status;
uint8_t bdy_flags;
uint16_t bdy_server_msg_len;
uint16_t bdy_data_len;
uint8_t bdy_bytes[];
};
struct _tinytac_authen_continue
{
uint16_t bdy_user_msg_len;
uint16_t bdy_data_len;
uint8_t bdy_flags;
uint8_t bdy_bytes[];
};
struct _tinytac_author_request
{
uint8_t bdy_authen_method;
uint8_t bdy_priv_lvl;
uint8_t bdy_authen_type;
uint8_t bdy_authen_service;
uint8_t bdy_user_len;
uint8_t bdy_port_len;
uint8_t bdy_rem_addr_len;
uint8_t bdy_arg_cnt;
uint8_t bdy_bytes[];
};
struct _tinytac_author_reply
{
uint8_t bdy_status;
uint8_t bdy_arg_cnt;
uint16_t bdy_server_msg_len;
uint16_t bdy_data_len;
uint8_t bdy_bytes[];
};
struct _tinytac_account_request
{
uint8_t bdy_flags;
uint8_t bdy_authen_method;
uint8_t bdy_priv_lvl;
uint8_t bdy_authen_type;
uint8_t bdy_authen_service;
uint8_t bdy_user_len;
uint8_t bdy_port_len;
uint8_t bdy_rem_addr_len;
uint8_t bdy_arg_cnt;
uint8_t bdy_bytes[];
};
struct _tinytac_account_reply
{
uint16_t bdy_server_msg_len;
uint16_t bdy_data_len;
uint8_t bdy_status;
uint8_t bdy_bytes[];
};
//////////////////
// //
// Prototypes //
// //
//////////////////
#pragma mark - Prototypes
//-----------------//
// conf prototypes //
//-----------------//
#pragma mark conf prototypes
void
tinytac_conf_print(
TinyTac * tt );
//------------------//
// error prototypes //
//------------------//
#pragma mark error prototypes
_TINYTAC_F char *
tinytac_strerror(
int errnum );
_TINYTAC_F char *
tinytac_strerror_r(
int errnum,
char * strerrbuf,
size_t buflen );
//-------------------//
// memory prototypes //
//-------------------//
#pragma mark memory prototypes
_TINYTAC_F void
tinytac_free(
void * ptr );
_TINYTAC_F int
tinytac_get_option(
TinyTac * tt,
int option,
void * outvalue );
_TINYTAC_F int
tinytac_initialize(
TinyTac ** ttp,
const char * hosts,
const char * key,
unsigned opts );
_TINYTAC_F int
tinytac_set_option(
TinyTac * tt,
int option,
const void * invalue );
//--------------------//
// network prototypes //
//--------------------//
#pragma mark network prototypes
_TINYTAC_F int
tinytac_recv(
int s,
char * key,
tinytac_pckt_t ** pcktp );
_TINYTAC_F int
tinytac_send(
int s,
char * key,
tinytac_pckt_t * pckt );
//---------------------//
// protocol prototypes //
//---------------------//
#pragma mark protocol prototypes
/// prints hexdump of packet to file stream
///
/// @param[in] fs write hexdump to file stream 'fs'
/// @param[in] pckt packet used to generate psuedo-random pad
/// @param[in] prefix string to prepend to each line
void
tinytac_pckt_hexdump(
FILE * fs,
tinytac_pckt_t * pckt,
const char * prefix );
/// generates pseudo-random pad used to obfuscate the packet body
///
/// @param[in] pckt packet used to generate psuedo-random pad
/// @param[in] key shared secret key used to protect the communication
/// @param[in] key_len length of shared secret key
/// @param[in] md5pad_prev previously generated psuedo-random pad (must be 16 bytes)
/// @param[out] md5pad buffer to store generated
///
/// @return Returns 0 on success or -1 on error.
_TINYTAC_F int
tinytac_pckt_md5pad(
tinytac_pckt_t * pckt,
char * key,
size_t key_len,
uint8_t * md5pad_prev,
uint8_t * md5pad );
/// obfuscate or unobfuscate packet using shared secret key
///
/// @param[in] pckt packet used to generate psuedo-random pad
/// @param[in] key shared secret key used to protect the communication
/// @param[in] key_len length of shared secret key
/// @param[in] unencrypted packet should not be obfuscated (TTAC_YES or TTAC_NO)
///
/// @return Returns 0 on success or -1 on error.
_TINYTAC_F int
tinytac_pckt_obfuscate(
tinytac_pckt_t * pckt,
char * key,
size_t key_len,
unsigned unencrypted );
#endif /* end of header */
|
