init III

2024-10-14 00:08:40 +02:00
parent dbfba56f66
commit 1462d52e13
4572 changed files with 2658864 additions and 0 deletions
--- a/OTRS/Kernel/System/Auth/Radius.pm
+++ b/OTRS/Kernel/System/Auth/Radius.pm
@@ -0,0 +1,147 @@
+# --
+# Copyright (C) 2001-2019 OTRS AG, https://otrs.com/
+# --
+# This software comes with ABSOLUTELY NO WARRANTY. For details, see
+# the enclosed file COPYING for license information (GPL). If you
+# did not receive this file, see https://www.gnu.org/licenses/gpl-3.0.txt.
+# --
+
+package Kernel::System::Auth::Radius;
+
+use strict;
+use warnings;
+
+use Authen::Radius;
+
+our @ObjectDependencies = (
+    'Kernel::Config',
+    'Kernel::System::Log',
+);
+
+sub new {
+    my ( $Type, %Param ) = @_;
+
+    # allocate new hash for object
+    my $Self = {};
+    bless( $Self, $Type );
+
+    # Debug 0=off 1=on
+    $Self->{Debug} = 0;
+
+    # get config object
+    my $ConfigObject = $Kernel::OM->Get('Kernel::Config');
+
+    # get config
+    $Self->{Die} = $ConfigObject->Get( 'AuthModule::Radius::Die' . $Param{Count} );
+
+    # get user table
+    $Self->{RadiusHost} = $ConfigObject->Get( 'AuthModule::Radius::Host' . $Param{Count} )
+        || die "Need AuthModule::Radius::Host$Param{Count} in Kernel/Config.pm";
+    $Self->{RadiusSecret} = $ConfigObject->Get( 'AuthModule::Radius::Password' . $Param{Count} )
+        || die "Need AuthModule::Radius::Password$Param{Count} in Kernel/Config.pm";
+
+    return $Self;
+}
+
+sub GetOption {
+    my ( $Self, %Param ) = @_;
+
+    # check needed stuff
+    if ( !$Param{What} ) {
+        $Kernel::OM->Get('Kernel::System::Log')->Log(
+            Priority => 'error',
+            Message  => "Need What!"
+        );
+        return;
+    }
+
+    # module options
+    my %Option = ( PreAuth => 0 );
+
+    return $Option{ $Param{What} };
+}
+
+sub Auth {
+    my ( $Self, %Param ) = @_;
+
+    # check needed stuff
+    if ( !$Param{User} ) {
+        $Kernel::OM->Get('Kernel::System::Log')->Log(
+            Priority => 'error',
+            Message  => "Need User!"
+        );
+        return;
+    }
+
+    # get params
+    my $User       = $Param{User}      || '';
+    my $Pw         = $Param{Pw}        || '';
+    my $RemoteAddr = $ENV{REMOTE_ADDR} || 'Got no REMOTE_ADDR env!';
+    my $UserID     = '';
+    my $GetPw      = '';
+
+    # just in case for debug!
+    if ( $Self->{Debug} > 0 ) {
+        $Kernel::OM->Get('Kernel::System::Log')->Log(
+            Priority => 'notice',
+            Message  => "User: '$User' tried to authenticate with Pw: '$Pw' ($RemoteAddr)",
+        );
+    }
+
+    # just a note
+    if ( !$User ) {
+        $Kernel::OM->Get('Kernel::System::Log')->Log(
+            Priority => 'notice',
+            Message  => "No User given!!! (REMOTE_ADDR: $RemoteAddr)",
+        );
+        return;
+    }
+
+    # just a note
+    if ( !$Pw ) {
+        $Kernel::OM->Get('Kernel::System::Log')->Log(
+            Priority => 'notice',
+            Message  => "User: $User authentication without Pw!!! (REMOTE_ADDR: $RemoteAddr)",
+        );
+        return;
+    }
+
+    # Create a radius object
+    my $Radius = Authen::Radius->new(
+        Host   => $Self->{RadiusHost},
+        Secret => $Self->{RadiusSecret},
+    );
+    if ( !$Radius ) {
+        if ( $Self->{Die} ) {
+            die "Can't connect to $Self->{RadiusHost}: $@";
+        }
+        else {
+            $Kernel::OM->Get('Kernel::System::Log')->Log(
+                Priority => 'error',
+                Message  => "Can't connect to $Self->{RadiusHost}: $@",
+            );
+            return;
+        }
+    }
+    my $AuthResult = $Radius->check_pwd( $User, $Pw );
+
+    # login note
+    if ( defined($AuthResult) && $AuthResult == 1 ) {
+        $Kernel::OM->Get('Kernel::System::Log')->Log(
+            Priority => 'notice',
+            Message  => "User: $User authentication ok (REMOTE_ADDR: $RemoteAddr).",
+        );
+        return $User;
+    }
+
+    # just a note
+    else {
+        $Kernel::OM->Get('Kernel::System::Log')->Log(
+            Priority => 'notice',
+            Message  => "User: $User authentication with wrong Pw!!! (REMOTE_ADDR: $RemoteAddr)"
+        );
+        return;
+    }
+}
+
+1;