authserver/authd/authd.php

   1 <?php
   2
   3 // TODO: SO MUCH ERROR CHECKING ITS NOT FUNNY
   4
   5
   6 // get out master library for ga4php
   7 require_once("../lib/lib.php");
   8
   9
  10 //exit(0);
  11 // first we want to fork into the background like all good daemons should
  12 //$pid = pcntl_fork();
  13 $pid = 0;
  14
  15 if($pid == -1) {
  16
  17 } else if($pid) {
  18         // i am the parent, i shall leave
  19         echo "i am a parent, i leave\n";
  20         exit(0);
  21 } else {
  22         global $MSG_QUEUE_KEY_ID_SERVER, $MSG_QUEUE_KEY_ID_CLIENT;
  23
  24         $cl_queue = msg_get_queue($MSG_QUEUE_KEY_ID_CLIENT, 0666 | 'IPC_CREAT');
  25         $sr_queue = msg_get_queue($MSG_QUEUE_KEY_ID_SERVER, 0666 | 'IPC_CREAT');
  26
  27         $myga = new gaasGA();
  28         global $myga;
  29
  30
  31         while(true) {
  32                 msg_receive($sr_queue, 0, $msg_type, 16384, $msg);
  33                 echo "got message of type $msg_type\n";
  34                 switch($msg_type) {
  35                         case MSG_GET_RADIUS_CLIENTS:
  36                                 $sql = "select * from radclients";
  37                                 $dbo = getDatabase();
  38                                 $res = $dbo->query($sql);
  39                                 $clients = "";
  40                                 $i=0;
  41                                 foreach($res as $row) {
  42                                         //              $sql = 'CREATE TABLE "radclients" ("rad_id" INTEGER PRIMARY KEY AUTOINCREMENT,"rad_name" TEXT, "rad_ip" TEXT, "rad_secret" TEXT, "rad_desc" TEXT);';
  43                                         $clients[$i]["name"] = $row["rad_name"];
  44                                         $clients[$i]["ip"] = $row["rad_ip"];
  45                                         $clients[$i]["secret"] = $row["rad_secret"];
  46                                         $clients[$i]["desc"] = $row["rad_desc"];
  47                                         $i++;
  48                                 }
  49                                 msg_send($cl_queue, MSG_GET_RADIUS_CLIENTS, $clients);
  50                                 break;
  51                         case MSG_REMOVE_RADIUS_CLIENT:
  52                                 // it should send us a client by rad_name - doesnt work yet
  53                                 $client = $msg["clientname"];
  54                                 $sql = "delete from radclients where rad_name='$client'";
  55                                 $dbo = getDatabase();
  56                                 $res = $dbo->query($sql);
  57                                 updateRadius();
  58                                 msg_send($cl_queue, MSG_REMOVE_RADIUS_CLIENT, true);
  59                                 break;
  60                         case MSG_ADD_RADIUS_CLIENT:
  61                                 echo "in addradclient\n";
  62                                 $client = $msg["clientname"];
  63                                 $clientsecret = $msg["clientsecret"];
  64                                 $clientip = $msg["clientip"];
  65                                 $clientdesc = $msg["clientdescription"];
  66                                 $dbo = getDatabase();
  67
  68                                 // check for existing clients with same name
  69                                 $sql = "select * from radclients where rad_name='$client'";
  70                                 echo "doing select, $sql\n";
  71                                 $res = $dbo->query($sql);
  72                                 if($res->fetchColumn() > 0) {
  73                                         msg_send($cl_queue, MSG_ADD_RADIUS_CLIENT, "name");
  74
  75                                 } else {
  76                                         // check for existing clients with same ip
  77                                         $sql = "select * from radclients where rad_ip='$clientip'";
  78                                         $res = $dbo->query($sql);
  79                                         echo "doing select, $sql\n";
  80                                         if($res->fetchColumn() > 0) {
  81                                                 msg_send($cl_queue, MSG_ADD_RADIUS_CLIENT, "ip");
  82
  83                                         } else {
  84                                                 $sql = "insert into radclients values (NULL, '$client', '$clientip', '$clientsecret', '$clientdesc')";
  85                                                 $res = $dbo->query($sql);
  86                                                 updateRadius();
  87                                                 msg_send($cl_queue, MSG_ADD_RADIUS_CLIENT, true);
  88                                                 break;
  89                                         }
  90                                 }
  91                                 break;
  92                         case MSG_DELETE_USER_TOKEN:
  93                                 $username = $msg["username"];
  94
  95                                 $sql = "select users_otk from users where users_username='$username'";
  96                                 $dbo = getDatabase();
  97                                 $res = $dbo->query($sql);
  98                                 $otkid = "";
  99                                 foreach($res as $row) {
 100                                         $otkid = $row["users_otk"];
 101                                 }
 102                                 if($otkid!="") {
 103                                         global $BASE_DIR;
 104                                         unlink("$BASE_DIR/authserver/authd/otks/$otkid.png");
 105                                 }
 106
 107                                 $sql = "update users set users_tokendata='',users_otk='' where users_username='$username'";
 108                                 $dbo = getDatabase();
 109                                 $res = $dbo->query($sql);
 110
 111                                 msg_send($cl_queue, MSG_DELETE_USER_TOKEN, true);
 112                                 break;
 113                         case MSG_AUTH_USER_TOKEN:
 114                                 echo "Call to auth user token\n";
 115                                 // minimal checking, we leav it up to authenticateUser to do the real
 116                                 // checking
 117                                 if(!isset($msg["username"])) $msg["username"] = "";
 118                                 if(!isset($msg["passcode"])) $msg["passcode"] = "";
 119                                 $username = $msg["username"];
 120                                 $passcode = $msg["passcode"];
 121                                 global $myga;
 122                                 $authval = $myga->authenticateUser($username, $passcode);
 123                                 msg_send($cl_queue, MSG_AUTH_USER_TOKEN, $authval);
 124                                 break;
 125                         case MSG_GET_OTK_ID:
 126                                 if(!isset($msg["username"])) {
 127                                         msg_send($cl_queue, MSG_GET_OTK_ID, false);
 128                                 } else {
 129                                         $username = $msg["username"];
 130                                         $sql = "select users_otk from users where users_username='$username'";
 131                                         $dbo = getDatabase();
 132                                         $res = $dbo->query($sql);
 133                                         $otkid = "";
 134                                         foreach($res as $row) {
 135                                                 $otkid = $row["users_otk"];
 136                                         }
 137
 138                                         if($otkid == "") {
 139                                                 msg_send($cl_queue, MSG_GET_OTK_ID, false);
 140                                         } else {
 141                                                 msg_send($cl_queue, MSG_GET_OTK_ID, $otkid);
 142                                         }
 143                                 }
 144                                 break;
 145                         case MSG_GET_OTK_PNG:
 146                                 if(!isset($msg["otk"])) {
 147                                         msg_send($cl_queue, MSG_GET_OTK_PNG, false);
 148                                 } else {
 149                                         $otk = $msg["otk"];
 150                                         $sql = "select users_username from users where users_otk='$otk'";
 151                                         $dbo = getDatabase();
 152                                         $res = $dbo->query($sql);
 153                                         $username = "";
 154                                         foreach($res as $row) {
 155                                                 $username = $row["users_username"];
 156                                         }
 157
 158                                         if($username == "") {
 159                                                 msg_send($cl_queue, MSG_GET_OTK_PNG, false);
 160                                         } else if($username != $msg["username"]) {
 161                                                 msg_send($cl_queue, MSG_GET_OTK_PNG, false);
 162                                         } else {
 163                                                 global $BASE_DIR;
 164                                                 $hand = fopen("$BASE_DIR/authserver/authd/otks/$otk.png", "rb");
 165                                                 $data = fread($hand, filesize("$BASE_DIR/authserver/authd/otks/$otk.png"));
 166                                                 fclose($hand);
 167                                                 unlink("$BASE_DIR/authserver/authd/otks/$otk.png");
 168                                                 $sql = "update users set users_otk='' where users_username='$username'";
 169                                                 $dbo->query($sql);
 170                                                 error_log("senting otk, fsize: ".filesize("$BASE_DIR/authserver/authd/otks/$otk.png")." $otk ");
 171                                                 msg_send($cl_queue, MSG_GET_OTK_PNG, $data);
 172                                         }
 173                                 }
 174
 175                                 break;
 176                         case MSG_SYNC_TOKEN:
 177                                 if(!isset($msg["username"])) {
 178                                         msg_send($cl_queue, MSG_SYNC_TOKEN, false);
 179                                 } else {
 180                                         $tokenone = $msg["tokenone"];
 181                                         $tokentwo = $msg["tokentwo"];
 182
 183                                         msg_send($cl_queue, MSG_SYNC_TOKEN, $myga->resyncCode($msg["username"], $tokenone, $tokentwo));
 184                                 }
 185
 186                                 break;
 187                         case MSG_GET_TOKEN_TYPE:
 188                                 if(!isset($msg["username"])) {
 189                                         msg_send($cl_queue, MSG_GET_TOKEN_TYPE, false);
 190                                 } else {
 191                                         msg_send($cl_queue, MSG_GET_TOKEN_TYPE, $myga->getTokenType($msg["username"]));
 192                                 }
 193                                 break;
 194                         case MSG_ADD_USER_TOKEN:
 195                                 echo "Call to add user token\n";
 196                                 if(!isset($msg["username"])) {
 197                                         msg_send($cl_queue, MSG_ADD_USER_TOKEN, false);
 198                                 } else {
 199                                         global $BASE_DIR;
 200                                         $username = $msg["username"];
 201                                         $tokentype="TOTP";
 202                                         if(isset($msg["tokentype"])) {
 203                                                 $tokentype=$msg["tokentype"];
 204                                         }
 205                                         $hexkey = "";
 206                                         if(isset($msg["hexkey"])) {
 207                                                 $hexkey = $msg["hexkey"];
 208                                         }
 209                                         global $myga;
 210                                         $myga->setUser($username, $tokentype, "", $hexkey);
 211
 212                                         $url = $myga->createUrl($username);
 213                                         if(!file_exists("$BASE_DIR/authserver/authd/otks")) mkdir("$BASE_DIR/authserver/authd/otks");
 214                                         $otk = generateRandomString();
 215                                         system("qrencode -o $BASE_DIR/authserver/authd/otks/$otk.png $url");
 216
 217                                         $sql = "update users set users_otk='$otk' where users_username='$username'";
 218                                         $dbo = getDatabase();
 219                                         $res = $dbo->query($sql);
 220
 221                                         msg_send($cl_queue, MSG_ADD_USER_TOKEN, true);
 222                                 }
 223                                 break;
 224                         case MSG_DELETE_USER:
 225                                 echo "Call to del user\n";
 226                                 if(!isset($msg["username"])) {
 227                                         msg_send($cl_queue, MSG_DELETE_USER, false);
 228                                 } else {
 229                                         $username = $msg["username"];
 230                                         global $myga;
 231
 232                                         $sql = "select users_otk from users where users_username='$username'";
 233                                         $dbo = getDatabase();
 234                                         $res = $dbo->query($sql);
 235                                         $otkid = "";
 236                                         foreach($res as $row) {
 237                                                 $otkid = $row["users_otk"];
 238                                         }
 239                                         if($otkid!="") {
 240                                                 unlink("otks/$otkid.png");
 241                                         }
 242
 243
 244                                         $sql = "delete from users where users_username='$username'";
 245                                         $dbo = getDatabase();
 246                                         $dbo->query($sql);
 247
 248                                         msg_send($cl_queue, MSG_DELETE_USER, true);
 249                                 }
 250                                 break;
 251                         case MSG_AUTH_USER_PASSWORD:
 252                                 // TODO
 253                                 echo "Call to auth user pass\n";
 254                                 if(!isset($msg["username"])) {
 255                                         msg_send($cl_queue, MSG_AUTH_USER_PASSWORD, false);
 256                                         break;
 257                                 }
 258                                 if(!isset($msg["password"])) {
 259                                         msg_send($cl_queue, MSG_AUTH_USER_PASSWORD, false);
 260                                         break;
 261                                 }
 262
 263                                 $username = $msg["username"];
 264                                 $password = $msg["password"];
 265                                 $sql = "select users_password from users where users_username='$username'";
 266                                 $dbo = getDatabase();
 267                                 $res = $dbo->query($sql);
 268                                 $pass = "";
 269                                 foreach($res as $row) {
 270                                         $pass = $row["users_password"];
 271                                 }
 272
 273                                 // TODO now do auth
 274                                 $ourpass = hash('sha512', $password);
 275                                 echo "ourpass: $ourpass\nourhash: $pass\n";
 276                                 if($ourpass == $pass) {
 277                                         msg_send($cl_queue, MSG_AUTH_USER_PASSWORD, true);
 278
 279                                 } else {
 280                                         msg_send($cl_queue, MSG_AUTH_USER_PASSWORD, false);
 281
 282                                 }
 283
 284                                 break;
 285                         case MSG_SET_USER_PASSWORD:
 286                                 echo "how on earth is that happening Call to set user pass, wtf?\n";
 287                                 // TODO
 288                                 print_r($msg);
 289                                 if(!isset($msg["username"])) {
 290                                         msg_send($cl_queue, MSG_SET_USER_PASSWORD, false);
 291                                         echo "in break 1\n";
 292                                         break;
 293                                 }
 294                                 if(!isset($msg["password"])) {
 295                                         msg_send($cl_queue, MSG_SET_USER_PASSWORD, false);
 296                                         echo "in break 1\n";
 297                                         break;
 298                                 }
 299
 300                                 $username = $msg["username"];
 301                                 $password = $msg["password"];
 302
 303                                 echo "would set pass for $username, to $password\n";
 304                                 if($password == "") $pass = "";
 305                                 else $pass = hash('sha512', $password);
 306
 307                                 $dbo = getDatabase();
 308                                 echo "in set user pass for $username, $pass\n";
 309                                 $sql = "update users set users_password='$pass' where users_username='$username'";
 310
 311                                 $dbo->query($sql);
 312
 313                                 msg_send($cl_queue, MSG_SET_USER_REALNAME, true);
 314
 315
 316                                 // these are irrelavent yet
 317                                 // TODO now set pass
 318                                 break;
 319                         case MSG_SET_USER_REALNAME:
 320                                 echo "Call to set user realname\n";
 321                                 // TODO
 322                                 if(!isset($msg["username"])) {
 323                                         msg_send($cl_queue, MSG_SET_USER_REALNAME, false);
 324                                         break;
 325                                 }
 326                                 if(!isset($msg["realname"])) {
 327                                         msg_send($cl_queue, MSG_SET_USER_REALNAME, false);
 328                                         break;
 329                                 }
 330
 331                                 $username = $msg["username"];
 332                                 $realname = $msg["realname"];
 333                                 $sql = "update users set users_realname='$realname' where users_username='$username'";
 334                                 $dbo = getDatabase();
 335
 336                                 $dbo->query($sql);
 337
 338                                 msg_send($cl_queue, MSG_SET_USER_REALNAME, true);
 339
 340                                 // TODO now set real name
 341                                 break;
 342                         case MSG_SET_USER_TOKEN:
 343                                 // TODO
 344                                 echo "Call to set user token\n";
 345                                 if(!isset($msg["username"])) {
 346                                         msg_send($cl_queue, MSG_SET_USER_TOKEN, false);
 347                                         break;
 348                                 }
 349                                 if(!isset($msg["tokenstring"])) {
 350                                         msg_send($cl_queue, MSG_SET_USER_TOKEN, false);
 351                                         break;
 352                                 }
 353
 354                                 global $myga;
 355                                 $username = $msg["username"];
 356                                 $token = $msg["tokenstring"];
 357                                 $return = $myga->setUserKey($username, $token);
 358                                 msg_send($cl_queue, MSG_SET_USER_TOKEN, $return);
 359
 360                                 // TODO now set token
 361                                 break;
 362                         case MSG_SET_USER_TOKEN_TYPE:
 363                                 // TODO
 364                                 echo "Call to set user token type\n";
 365                                 if(!isset($msg["username"])) {
 366                                         msg_send($cl_queue, MSG_SET_USER_TOKEN_TYPE, false);
 367                                         break;
 368                                 }
 369                                 if(!isset($msg["tokentype"])) {
 370                                         msg_send($cl_queue, MSG_SET_USER_TOKEN_TYPE, false);
 371                                         break;
 372                                 }
 373
 374                                 $username = $msg["username"];
 375                                 $tokentype = $msg["tokentype"];
 376                                 global $myga;
 377                                 msg_send($cl_queue, MSG_SET_USER_TOKEN_TYPE, $myga->setTokenType($username, $tokentype));
 378
 379                                 // TODO now set token
 380                                 break;
 381                         case MSG_GET_USERS:
 382                                 // TODO this needs to be better
 383                                 $sql = "select * from users";
 384
 385                                 $dbo = getDatabase();
 386                                 $res = $dbo->query($sql);
 387
 388                                 $users = "";
 389                                 $i = 0;
 390                                 foreach($res as $row) {
 391                                         $users[$i]["username"] = $row["users_username"];
 392                                         $users[$i]["realname"] = $row["users_realname"];
 393                                         if($row["users_password"]!="") {
 394                                                 $users[$i]["haspass"] = true;
 395                                         } else {
 396                                                 $users[$i]["haspass"] = false;
 397                                         }
 398                                         echo "user: ".$users[$i]["username"]." has tdata: \"".$row["users_tokendata"]."\"\n";
 399                                         if($row["users_tokendata"]!="") {
 400                                                 $users[$i]["hastoken"] = true;
 401                                         } else {
 402                                                 $users[$i]["hastoken"] = false;
 403                                         }
 404
 405                                         if($row["users_otk"]!="") {
 406                                                 $users[$i]["otk"] = $row["users_otk"];
 407                                         } else {
 408                                                 $users[$i]["otk"] = "";
 409                                         }
 410                                         $i++;
 411                                 }
 412                                 msg_send($cl_queue, MSG_GET_USERS, $users);
 413
 414                                 // TODO now set token
 415                                 break;
 416
 417                 }
 418         }
 419 }
 420
 421 ?>