aaa_session_auth_client_fsm.cxx

Diameter协议栈

/* BEGIN_COPYRIGHT                                                        */
/*                                                                        */
/* Open Diameter: Open-source software for the Diameter and               */
/*                Diameter related protocols                              */
/*                                                                        */
/* Copyright (C) 2002-2004 Open Diameter Project                          */
/*                                                                        */
/* This library is free software; you can redistribute it and/or modify   */
/* it under the terms of the GNU Lesser General Public License as         */
/* published by the Free Software Foundation; either version 2.1 of the   */
/* License, or (at your option) any later version.                        */
/*                                                                        */
/* This library is distributed in the hope that it will be useful,        */
/* but WITHOUT ANY WARRANTY; without even the implied warranty of         */
/* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU      */
/* Lesser General Public License for more details.                        */
/*                                                                        */
/* You should have received a copy of the GNU Lesser General Public       */
/* License along with this library; if not, write to the Free Software    */
/* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307    */
/* USA.                                                                   */
/*                                                                        */
/* In addition, when you copy and redistribute some or the entire part of */
/* the source code of this software with or without modification, you     */
/* MUST include this copyright notice in each copy.                       */
/*                                                                        */
/* If you make any changes that are appeared to be useful, please send    */
/* sources that include the changed part to                               */
/* [e-mail] so that we can reflect your  */
/* changes to one unified version of this software.                       */
/*                                                                        */
/* END_COPYRIGHT                                                          */

#include "aaa_session_auth_client_fsm.h"

static AAA_SessAuthClientStateTable AuthClientStateTable_S;

AAA_AuthSessionClientStateMachine::AAA_AuthSessionClientStateMachine
(AAA_Task &t, AAA_AuthSession &s) :
     AAA_AuthSessionStateMachine<AAA_AuthSessionClientStateMachine>
         (t, AuthClientStateTable_S, *this, s)
 {
 }

void AAA_AuthSessionClientStateMachine::TxSTR(diameter_unsigned32_t cause)
{
   /*
        8.4.1.  Session-Termination-Request

        The Session-Termination-Request (STR), indicated by the Command-Code
        set to 275 and the Command Flags' 'R' bit set, is sent by the access
        device to inform the Diameter Server that an authenticated and/or
        authorized session is being terminated.

        Message Format

            <STR> ::= < Diameter Header: 275, REQ, PXY >
                        < Session-Id >
                        { Origin-Host }
                        { Origin-Realm }
                        { Destination-Realm }
                        { Auth-Application-Id }
                        { Termination-Cause }
                        [ User-Name ]
                        [ Destination-Host ]
                      * [ Class ]
                        [ Origin-State-Id ]
                      * [ Proxy-Info ]
                      * [ Route-Record ]
                      * [ AVP ]
   */
   std::auto_ptr<AAAMessage> msg(new AAAMessage);
   ACE_OS::memset(&msg->hdr, 0, sizeof(msg->hdr));
   msg->hdr.ver = AAA_PROTOCOL_VERSION;
   msg->hdr.length = 0;
   msg->hdr.flags.r = AAA_FLG_SET;
   msg->hdr.flags.p = AAA_FLG_CLR;
   msg->hdr.flags.e = AAA_FLG_CLR;
   msg->hdr.code = AAA_MSGCODE_SESSIONTERMINATION;
   msg->hdr.appId = AAA_BASE_APPLICATION_ID;

   // required
   Attributes().SessionId().Set(*msg);

   AAA_IdentityAvpWidget orHostAvp(AAA_AVPNAME_ORIGINHOST);
   AAA_IdentityAvpWidget orRealmAvp(AAA_AVPNAME_ORIGINREALM);
   AAA_IdentityAvpWidget destRealmAvp(AAA_AVPNAME_DESTREALM);
   AAA_UInt32AvpWidget authIdAvp(AAA_AVPNAME_AUTHAPPID);
   AAA_UInt32AvpWidget causeAvp(AAA_AVPNAME_TERMINATION);
   AAA_UInt32AvpWidget orStateId(AAA_AVPNAME_ORIGINSTATEID);

   orHostAvp.Get() = AAA_CFG_TRANSPORT()->identity;
   orRealmAvp.Get() = AAA_CFG_TRANSPORT()->realm;
   destRealmAvp.Get() = Attributes().DestinationRealm()();
   authIdAvp.Get() = Attributes().ApplicationId();
   causeAvp.Get() = cause;

   msg->acl.add(orHostAvp());
   msg->acl.add(orRealmAvp());
   msg->acl.add(destRealmAvp());
   msg->acl.add(authIdAvp());
   msg->acl.add(causeAvp());

   // optional avps
   if (Attributes().Username().IsSet()) {
       AAA_Utf8AvpWidget unameAvp(AAA_AVPNAME_USERNAME);
       unameAvp.Get() = Attributes().Username()();
       msg->acl.add(unameAvp());
   }

   if (Attributes().DestinationHost().IsSet()) {
       AAA_IdentityAvpWidget dhostAvp(AAA_AVPNAME_DESTHOST);
       dhostAvp.Get() = Attributes().DestinationHost()();
       msg->acl.add(dhostAvp());
   }

   AAA_ScholarAttribute<diameter_octetstring_t> cls;
   m_Session.SetClassAvp(cls);
   if (cls.IsSet()) {
       AAA_StringAvpWidget classAvp(AAA_AVPNAME_CLASS);
       classAvp.Get() = cls();
       msg->acl.add(classAvp());
   }

   orStateId.Get() = AAA_CFG_RUNTIME()->originStateId;
   msg->acl.add(orStateId());

   // TBD: Add more AVP's here if needed

   m_Session.TxDelivery(msg);
}

void AAA_AuthSessionClientStateMachine::TxASA(diameter_unsigned32_t rcode)
{
    /*
        8.5.2.  Abort-Session-Answer

        The Abort-Session-Answer (ASA), indicated by the Command-Code set to
        274 and the message flags' 'R' bit clear, is sent in response to the
        ASR.  The Result-Code AVP MUST be present, and indicates the
        disposition of the request.

        If the session identified by Session-Id in the ASR was successfully
        terminated, Result-Code is set to DIAMETER_SUCCESS.  If the session
        is not currently active, Result-Code is set to
        DIAMETER_UNKNOWN_SESSION_ID.  If the access device does not stop the
        session for any other reason, Result-Code is set to
        DIAMETER_UNABLE_TO_COMPLY.

        Message Format

            <ASA>  ::= < Diameter Header: 274, PXY >
                        < Session-Id >
                        { Result-Code }
                        { Origin-Host }
                        { Origin-Realm }
                        [ User-Name ]
                        [ Origin-State-Id ]
                        [ Error-Message ]
                        [ Error-Reporting-Host ]
                      * [ Failed-AVP ]
                      * [ Redirect-Host ]
                        [ Redirect-Host-Usage ]
                        [ Redirect-Max-Cache-Time ]
                      * [ Proxy-Info ]
                      * [ AVP ]
   */

   std::auto_ptr<AAAMessage> msg(new AAAMessage);
   ACE_OS::memset(&msg->hdr, 0, sizeof(msg->hdr));
   msg->hdr.ver = AAA_PROTOCOL_VERSION;
   msg->hdr.length = 0;
   msg->hdr.flags.r = AAA_FLG_CLR;
   msg->hdr.flags.p = AAA_FLG_CLR;
   msg->hdr.flags.e = AAA_FLG_CLR;
   msg->hdr.code = AAA_MSGCODE_ABORTSESSION;
   msg->hdr.appId = AAA_BASE_APPLICATION_ID;

   // required
   Attributes().SessionId().Set(*msg);

   AAA_UInt32AvpWidget rcodeAvp(AAA_AVPNAME_RESULTCODE);
   AAA_IdentityAvpWidget orHostAvp(AAA_AVPNAME_ORIGINHOST);
   AAA_IdentityAvpWidget orRealmAvp(AAA_AVPNAME_ORIGINREALM);
   AAA_UInt32AvpWidget orStateId(AAA_AVPNAME_ORIGINSTATEID);

   rcodeAvp.Get() = rcode;
   orHostAvp.Get() = AAA_CFG_TRANSPORT()->identity;
   orRealmAvp.Get() = AAA_CFG_TRANSPORT()->realm;

   msg->acl.add(rcodeAvp());
   msg->acl.add(orHostAvp());
   msg->acl.add(orRealmAvp());

   // optional avps
   if (Attributes().Username().IsSet()) {
       AAA_Utf8AvpWidget unameAvp(AAA_AVPNAME_USERNAME);
       unameAvp.Get() = Attributes().Username()();
       msg->acl.add(unameAvp());
   }

   orStateId.Get() = AAA_CFG_RUNTIME()->originStateId;
   msg->acl.add(orStateId());

   // TBD: Add more AVP's here if needed

   m_Session.TxDelivery(msg);
}

void AAA_AuthSessionClientStateMachine::RxASR(AAAMessage &msg)
{
   /*
        8.5.1.  Abort-Session-Request

        The Abort-Session-Request (ASR), indicated by the Command-Code set to
        274 and the message flags' 'R' bit set, may be sent by any server to
        the access device that is providing session service, to request that
        the session identified by the Session-Id be stopped.

        Message Format

            <ASR>  ::= < Diameter Header: 274, REQ, PXY >
                        < Session-Id >
                        { Origin-Host }
                        { Origin-Realm }
                        { Destination-Realm }
                        { Destination-Host }
                        { Auth-Application-Id }
                        [ User-Name ]
                        [ Origin-State-Id ]
                      * [ Proxy-Info ]
                      * [ Route-Record ]
                      * [ AVP ]
    */
    AAA_IdentityAvpContainerWidget oHostAvp(msg.acl);
    AAA_IdentityAvpContainerWidget oRealmAvp(msg.acl);
    AAA_Utf8AvpContainerWidget uNameAvp(msg.acl);
    AAA_UInt32AvpContainerWidget authAppIdAvp(msg.acl);
    AAA_UInt32AvpContainerWidget acctAppIdAvp(msg.acl);

    diameter_identity_t *host = oHostAvp.GetAvp(AAA_AVPNAME_ORIGINHOST);
    diameter_identity_t *realm = oRealmAvp.GetAvp(AAA_AVPNAME_ORIGINREALM);
    diameter_utf8string_t *uname = uNameAvp.GetAvp(AAA_AVPNAME_USERNAME);
    diameter_unsigned32_t *authAppId = authAppIdAvp.GetAvp(AAA_AVPNAME_AUTHAPPID);