aaa_session_auth_server_fsm.cxx

Diameter协议栈

/* BEGIN_COPYRIGHT                                                        */
/*                                                                        */
/* Open Diameter: Open-source software for the Diameter and               */
/*                Diameter related protocols                              */
/*                                                                        */
/* Copyright (C) 2002-2004 Open Diameter Project                          */
/*                                                                        */
/* This library is free software; you can redistribute it and/or modify   */
/* it under the terms of the GNU Lesser General Public License as         */
/* published by the Free Software Foundation; either version 2.1 of the   */
/* License, or (at your option) any later version.                        */
/*                                                                        */
/* This library is distributed in the hope that it will be useful,        */
/* but WITHOUT ANY WARRANTY; without even the implied warranty of         */
/* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU      */
/* Lesser General Public License for more details.                        */
/*                                                                        */
/* You should have received a copy of the GNU Lesser General Public       */
/* License along with this library; if not, write to the Free Software    */
/* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307    */
/* USA.                                                                   */
/*                                                                        */
/* In addition, when you copy and redistribute some or the entire part of */
/* the source code of this software with or without modification, you     */
/* MUST include this copyright notice in each copy.                       */
/*                                                                        */
/* If you make any changes that are appeared to be useful, please send    */
/* sources that include the changed part to                               */
/* [e-mail] so that we can reflect your  */
/* changes to one unified version of this software.                       */
/*                                                                        */
/* END_COPYRIGHT                                                          */

#include "aaa_session_auth_server_fsm.h"

static AAA_SessAuthServerStateTable AuthServerStateTable_S;

AAA_AuthSessionServerStateMachine::AAA_AuthSessionServerStateMachine
(AAA_Task &t, AAA_AuthSession &a) :
     AAA_AuthSessionStateMachine<AAA_AuthSessionServerStateMachine>
         (t, AuthServerStateTable_S, *this, a),
     m_ASRSent(false)
{
}

void AAA_AuthSessionServerStateMachine::RxSTR(AAAMessage &msg)
{
   /*
        8.4.1.  Session-Termination-Request

        The Session-Termination-Request (STR), indicated by the Command-Code
        set to 275 and the Command Flags' 'R' bit set, is sent by the access
        device to inform the Diameter Server that an authenticated and/or
        authorized session is being terminated.

        Message Format

            <STR> ::= < Diameter Header: 275, REQ, PXY >
                        < Session-Id >
                        { Origin-Host }
                        { Origin-Realm }
                        { Destination-Realm }
                        { Auth-Application-Id }
                        { Termination-Cause }
                        [ User-Name ]
                        [ Destination-Host ]
                      * [ Class ]
                        [ Origin-State-Id ]
                      * [ Proxy-Info ]
                      * [ Route-Record ]
                      * [ AVP ]
   */
    AAA_IdentityAvpContainerWidget oHostAvp(msg.acl);
    AAA_IdentityAvpContainerWidget oRealmAvp(msg.acl);
    AAA_UInt32AvpContainerWidget authAppIdAvp(msg.acl);
    AAA_UInt32AvpContainerWidget acctAppIdAvp(msg.acl);
    AAA_UInt32AvpContainerWidget termCauseAvp(msg.acl);
    AAA_Utf8AvpContainerWidget uNameAvp(msg.acl);
    AAA_StringAvpContainerWidget classAvp(msg.acl);

    diameter_identity_t *host = oHostAvp.GetAvp(AAA_AVPNAME_ORIGINHOST);
    diameter_identity_t *realm = oRealmAvp.GetAvp(AAA_AVPNAME_ORIGINREALM);
    diameter_unsigned32_t *authAppId = authAppIdAvp.GetAvp(AAA_AVPNAME_AUTHAPPID);
    diameter_unsigned32_t *acctAppId = acctAppIdAvp.GetAvp(AAA_AVPNAME_ACCTAPPID);
    diameter_unsigned32_t *termCause = termCauseAvp.GetAvp(AAA_AVPNAME_TERMINATION);
    diameter_utf8string_t *uname = uNameAvp.GetAvp(AAA_AVPNAME_USERNAME);
    diameter_octetstring_t *cls = classAvp.GetAvp(AAA_AVPNAME_CLASS);

    AAA_LOG(LM_INFO, "(%P|%t) *** Session termination request received ***\n");
    Attributes().MsgIdRxMessage(msg);

    AAA_SessionId sid;
    sid.Get(msg);
    sid.Dump();
    if (host) {
        AAA_LOG(LM_INFO, "(%P|%t) From Host: %s\n", host->data());
    }
    if (realm) {
        AAA_LOG(LM_INFO, "(%P|%t) From Realm: %s\n", realm->data());
    }
    if (uname) {
        AAA_LOG(LM_INFO, "(%P|%t) From User: %s\n", uname->data());
    }
    if (termCause) {
        AAA_LOG(LM_INFO, "(%P|%t) Termination Cause: %d\n", *termCause);
    }
    if (authAppId) {
        AAA_LOG(LM_INFO, "(%P|%t) Auth Application Id: %d\n", *authAppId);
    }
    if (acctAppId) {
        AAA_LOG(LM_INFO, "(%P|%t) Acct Application Id: %d\n", *acctAppId);
    }
    if (cls) {
        AAA_ScholarAttribute<diameter_octetstring_t> schClass(*cls);
        m_Session.ClassAvp(schClass);
    }
}

void AAA_AuthSessionServerStateMachine::RxASA(AAAMessage &msg)
{
   /*
        8.5.2.  Abort-Session-Answer

        The Abort-Session-Answer (ASA), indicated by the Command-Code set to
        274 and the message flags' 'R' bit clear, is sent in response to the
        ASR.  The Result-Code AVP MUST be present, and indicates the
        disposition of the request.

        If the session identified by Session-Id in the ASR was successfully
        terminated, Result-Code is set to DIAMETER_SUCCESS.  If the session
        is not currently active, Result-Code is set to
        DIAMETER_UNKNOWN_SESSION_ID.  If the access device does not stop the
        session for any other reason, Result-Code is set to
        DIAMETER_UNABLE_TO_COMPLY.

        Message Format

            <ASA>  ::= < Diameter Header: 274, PXY >
                        < Session-Id >
                        { Result-Code }
                        { Origin-Host }
                        { Origin-Realm }
                        [ User-Name ]
                        [ Origin-State-Id ]
                        [ Error-Message ]
                        [ Error-Reporting-Host ]
                        * [ Failed-AVP ]
                        * [ Redirect-Host ]
                        [ Redirect-Host-Usage ]
                        [ Redirect-Max-Cache-Time ]
                        * [ Proxy-Info ]
                        * [ AVP ]
    */
    AAA_UInt32AvpContainerWidget rcodeAvp(msg.acl);
    AAA_IdentityAvpContainerWidget oHostAvp(msg.acl);
    AAA_IdentityAvpContainerWidget oRealmAvp(msg.acl);
    AAA_Utf8AvpContainerWidget uNameAvp(msg.acl);
    AAA_Utf8AvpContainerWidget errMsgAvp(msg.acl);
    AAA_IdentityAvpContainerWidget errHostAvp(msg.acl);

    diameter_unsigned32_t *rcode = rcodeAvp.GetAvp(AAA_AVPNAME_RESULTCODE);
    diameter_identity_t *host = oHostAvp.GetAvp(AAA_AVPNAME_ORIGINHOST);
    diameter_identity_t *realm = oRealmAvp.GetAvp(AAA_AVPNAME_ORIGINREALM);
    diameter_utf8string_t *uname = uNameAvp.GetAvp(AAA_AVPNAME_USERNAME);
    diameter_utf8string_t *errMsg = errMsgAvp.GetAvp(AAA_AVPNAME_ERRORMESSAGE);
    diameter_identity_t *errHost = errHostAvp.GetAvp(AAA_AVPNAME_ERRORREPORTINGHOST);

    AAA_LOG(LM_INFO, "(%P|%t) *** Abort session answer received ***\n");
    Attributes().MsgIdRxMessage(msg);

    AAA_SessionId sid;
    sid.Get(msg);
    sid.Dump();
    if (host) {
        AAA_LOG(LM_INFO, "(%P|%t) From Host: %s\n", host->data());
    }
    if (realm) {
        AAA_LOG(LM_INFO, "(%P|%t) From Realm: %s\n", realm->data());
    }
    if (uname) {
        AAA_LOG(LM_INFO, "(%P|%t) From User: %s\n", uname->data());
    }
    if (rcode) {
        AAA_LOG(LM_INFO, "(%P|%t) Result-Code: %d\n", *rcode);
    }
    if (errMsg) {
        if (errHost) {
            AAA_LOG(LM_INFO, "(%P|%t) Message from [%s]: %s\n", 
                errHost->data(), errMsg->data());
        }
        else {
            AAA_LOG(LM_INFO, "(%P|%t) Message: %s\n", 
                errMsg->data());
        }
    }
}

void AAA_AuthSessionServerStateMachine::TxSTA(diameter_unsigned32_t rcode)
{
    /*
        8.4.2.  Session-Termination-Answer

        The Session-Termination-Answer (STA), indicated by the Command-Code
        set to 275 and the message flags' 'R' bit clear, is sent by the
        Diameter Server to acknowledge the notification that the session has
        been terminated.  The Result-Code AVP MUST be present, and MAY
        contain an indication that an error occurred while servicing the STR.

        Upon sending or receipt of the STA, the Diameter Server MUST release
        all resources for the session indicated by the Session-Id AVP.  Any
        intermediate server in the Proxy-Chain MAY also release any
        resources, if necessary.

        Message Format

            <STA>  ::= < Diameter Header: 275, PXY >
                        < Session-Id >
                        { Result-Code }
                        { Origin-Host }
                        { Origin-Realm }
                        [ User-Name ]
                      * [ Class ]
                        [ Error-Message ]
                        [ Error-Reporting-Host ]
                      * [ Failed-AVP ]
                        [ Origin-State-Id ]
                      * [ Redirect-Host ]
                        [ Redirect-Host-Usage ]
                                            ^
                        [ Redirect-Max-Cache-Time ]
                      * [ Proxy-Info ]
                      * [ AVP ]
     */
    std::auto_ptr<AAAMessage> msg(new AAAMessage);
    ACE_OS::memset(&msg->hdr, 0, sizeof(msg->hdr));
    msg->hdr.ver = AAA_PROTOCOL_VERSION;
    msg->hdr.length = 0;
    msg->hdr.flags.r = AAA_FLG_CLR;
    msg->hdr.flags.p = AAA_FLG_CLR;
    msg->hdr.flags.e = AAA_FLG_CLR;
    msg->hdr.code = AAA_MSGCODE_SESSIONTERMINATION;
    msg->hdr.appId = AAA_BASE_APPLICATION_ID;

    // required
    Attributes().SessionId().Set(*msg);

    AAA_UInt32AvpWidget rcodeAvp(AAA_AVPNAME_RESULTCODE);
    AAA_IdentityAvpWidget orHostAvp(AAA_AVPNAME_ORIGINHOST);
    AAA_IdentityAvpWidget orRealmAvp(AAA_AVPNAME_ORIGINREALM);
    AAA_UInt32AvpWidget orStateId(AAA_AVPNAME_ORIGINSTATEID);

    rcodeAvp.Get() = rcode;
    orHostAvp.Get() = AAA_CFG_TRANSPORT()->identity;
    orRealmAvp.Get() = AAA_CFG_TRANSPORT()->realm;

    msg->acl.add(rcodeAvp());