148 lines
3.8 KiB
Perl
148 lines
3.8 KiB
Perl
# --
|
|
# Copyright (C) 2001-2019 OTRS AG, https://otrs.com/
|
|
# --
|
|
# This software comes with ABSOLUTELY NO WARRANTY. For details, see
|
|
# the enclosed file COPYING for license information (GPL). If you
|
|
# did not receive this file, see https://www.gnu.org/licenses/gpl-3.0.txt.
|
|
# --
|
|
|
|
package Kernel::System::Auth::Radius;
|
|
|
|
use strict;
|
|
use warnings;
|
|
|
|
use Authen::Radius;
|
|
|
|
our @ObjectDependencies = (
|
|
'Kernel::Config',
|
|
'Kernel::System::Log',
|
|
);
|
|
|
|
sub new {
|
|
my ( $Type, %Param ) = @_;
|
|
|
|
# allocate new hash for object
|
|
my $Self = {};
|
|
bless( $Self, $Type );
|
|
|
|
# Debug 0=off 1=on
|
|
$Self->{Debug} = 0;
|
|
|
|
# get config object
|
|
my $ConfigObject = $Kernel::OM->Get('Kernel::Config');
|
|
|
|
# get config
|
|
$Self->{Die} = $ConfigObject->Get( 'AuthModule::Radius::Die' . $Param{Count} );
|
|
|
|
# get user table
|
|
$Self->{RadiusHost} = $ConfigObject->Get( 'AuthModule::Radius::Host' . $Param{Count} )
|
|
|| die "Need AuthModule::Radius::Host$Param{Count} in Kernel/Config.pm";
|
|
$Self->{RadiusSecret} = $ConfigObject->Get( 'AuthModule::Radius::Password' . $Param{Count} )
|
|
|| die "Need AuthModule::Radius::Password$Param{Count} in Kernel/Config.pm";
|
|
|
|
return $Self;
|
|
}
|
|
|
|
sub GetOption {
|
|
my ( $Self, %Param ) = @_;
|
|
|
|
# check needed stuff
|
|
if ( !$Param{What} ) {
|
|
$Kernel::OM->Get('Kernel::System::Log')->Log(
|
|
Priority => 'error',
|
|
Message => "Need What!"
|
|
);
|
|
return;
|
|
}
|
|
|
|
# module options
|
|
my %Option = ( PreAuth => 0 );
|
|
|
|
return $Option{ $Param{What} };
|
|
}
|
|
|
|
sub Auth {
|
|
my ( $Self, %Param ) = @_;
|
|
|
|
# check needed stuff
|
|
if ( !$Param{User} ) {
|
|
$Kernel::OM->Get('Kernel::System::Log')->Log(
|
|
Priority => 'error',
|
|
Message => "Need User!"
|
|
);
|
|
return;
|
|
}
|
|
|
|
# get params
|
|
my $User = $Param{User} || '';
|
|
my $Pw = $Param{Pw} || '';
|
|
my $RemoteAddr = $ENV{REMOTE_ADDR} || 'Got no REMOTE_ADDR env!';
|
|
my $UserID = '';
|
|
my $GetPw = '';
|
|
|
|
# just in case for debug!
|
|
if ( $Self->{Debug} > 0 ) {
|
|
$Kernel::OM->Get('Kernel::System::Log')->Log(
|
|
Priority => 'notice',
|
|
Message => "User: '$User' tried to authenticate with Pw: '$Pw' ($RemoteAddr)",
|
|
);
|
|
}
|
|
|
|
# just a note
|
|
if ( !$User ) {
|
|
$Kernel::OM->Get('Kernel::System::Log')->Log(
|
|
Priority => 'notice',
|
|
Message => "No User given!!! (REMOTE_ADDR: $RemoteAddr)",
|
|
);
|
|
return;
|
|
}
|
|
|
|
# just a note
|
|
if ( !$Pw ) {
|
|
$Kernel::OM->Get('Kernel::System::Log')->Log(
|
|
Priority => 'notice',
|
|
Message => "User: $User authentication without Pw!!! (REMOTE_ADDR: $RemoteAddr)",
|
|
);
|
|
return;
|
|
}
|
|
|
|
# Create a radius object
|
|
my $Radius = Authen::Radius->new(
|
|
Host => $Self->{RadiusHost},
|
|
Secret => $Self->{RadiusSecret},
|
|
);
|
|
if ( !$Radius ) {
|
|
if ( $Self->{Die} ) {
|
|
die "Can't connect to $Self->{RadiusHost}: $@";
|
|
}
|
|
else {
|
|
$Kernel::OM->Get('Kernel::System::Log')->Log(
|
|
Priority => 'error',
|
|
Message => "Can't connect to $Self->{RadiusHost}: $@",
|
|
);
|
|
return;
|
|
}
|
|
}
|
|
my $AuthResult = $Radius->check_pwd( $User, $Pw );
|
|
|
|
# login note
|
|
if ( defined($AuthResult) && $AuthResult == 1 ) {
|
|
$Kernel::OM->Get('Kernel::System::Log')->Log(
|
|
Priority => 'notice',
|
|
Message => "User: $User authentication ok (REMOTE_ADDR: $RemoteAddr).",
|
|
);
|
|
return $User;
|
|
}
|
|
|
|
# just a note
|
|
else {
|
|
$Kernel::OM->Get('Kernel::System::Log')->Log(
|
|
Priority => 'notice',
|
|
Message => "User: $User authentication with wrong Pw!!! (REMOTE_ADDR: $RemoteAddr)"
|
|
);
|
|
return;
|
|
}
|
|
}
|
|
|
|
1;
|