authserver/usercmd.php

   1 <?php
   2 /*
   3  *
   4  *
   5  * This file is designed as a "script" extension to freeradius (or some such tool) for radius authentication.
   6  * Also provided is a simple web interface for managing users in freeradius.
   7  *
   8  * The simple web interface should also provide a mechanism for configuring freeradius itself
   9  *
  10  */
  11
  12 require_once("lib/authClient.php");
  13
  14 $myAC = new GAAuthClient();
  15
  16 /*
  17 define("MSG_AUTH_USER_TOKEN", 1);
  18 define("MSG_ADD_USER_TOKEN", 2);
  19 define("MSG_DELETE_USER", 3);
  20 define("MSG_AUTH_USER_PASSWORD", 4);
  21 define("MSG_SET_USER_PASSWORD", 5);
  22 define("MSG_SET_USER_REALNAME", 6);
  23 define("MSG_SET_USER_TOKEN", 7);
  24 define("MSG_SET_USER_TOKEN_TYPE", 8);
  25
  26  */
  27 if(!isset($argv[1])) {
  28         echo "Usage: ".$argv[0]." command username [args]\n";
  29         echo "\tadd: add <username> - returns token code url\n";
  30         echo "\tauth: auth <username> <passcode> - returns 0/1 for pass/fail\n";
  31         echo "\tdelete: delete <username> - deletes user\n";
  32         echo "\tauthpass: authpass <username> <password> - returns 0/1 for pass/fail\n";
  33         echo "\tsetpass: setpass <username> <password> - sets a password for a user (x to remove pass)\n";
  34         echo "\tsetname: setname <username> <realname> - sets the real name for a user\n";
  35         echo "\tsettoken: settoken <username> <tokenkey> - sets the key (hex) for a token\n";
  36         echo "\tsettype: settype <username> <tokentype> - sets a token type for a user\n";
  37         echo "\tgetusers: getusers - gets a list of users\n";
  38         echo "\tgetotk: getotk <username> - gets the OTKID for a key\n";
  39         echo "\tradauth: radauth <username> <pin> - for radius, only returns a code\n";
  40         echo "\tsynctoken: synctoken <username> <tokenone> <tokentwo> - resync's a hotp token based on two token codes\n";
  41         echo "\ttokentype: tokentype <username> - gets the token type for a user\n";
  42         echo "\taddradclient: addradclient <client_name> <client_ip> <client_secret>\n";
  43         return 0;
  44 }
  45
  46 switch($argv[1]) {
  47         case "addradclient":
  48                 $msg = $myAC->addRadiusClient($argv[2], $argv[3], $argv[4], "");
  49                 if($msg) {
  50                         echo "Added successfully\n";
  51                 } else {
  52                         echo "Not added\n";
  53                 }
  54                 break;
  55         case "tokentype":
  56                 $msg = $myAC->getUserTokenType($argv[2]);
  57                 echo "token type: $msg\n";
  58                 break;
  59         case "synctoken":
  60                 if($myAC->syncUserToken($argv[2], $argv[3], $argv[4])) {
  61                         echo "Token synced\n";
  62                 } else {
  63                         echo "Token not synced\n";
  64                 }
  65                 break;
  66         case "radauth":
  67                 if($myAC->authUserToken($argv[2], $argv[3])==1) {
  68                         syslog(LOG_WARNING, "Got good request for user, ".$argv[2]);
  69                         exit(0);
  70                 } else {
  71                         syslog(LOG_WARNING, "Got bad request for user, ".$argv[2]);
  72                         exit(255);
  73                 }
  74                 break;
  75         case "getotk":
  76                 $val = $myAC->getOtkID($argv[2]);
  77                 if($val === false) {
  78                         echo "Failure\n";
  79                 } else {
  80                         echo "$val\n";
  81                 }
  82                 break;
  83         case "auth":
  84                 if($myAC->authUserToken($argv[2], $argv[3])==1) {
  85                         echo "Pass!\n";
  86                 } else {
  87                         echo "Fail!\n";
  88                 }
  89                 break;
  90         case "add":
  91                 $return = $myAC->addUser($argv[2]);
  92                 echo "Created user, ".$argv[2]." returned $return\n";
  93                 break;
  94         case "delete":
  95                 $res = $myAC->deleteUser($argv[2]);
  96                 if($res) {
  97                         echo "Deleted\n";
  98                 } else {
  99                         echo "Failure?\n";
 100                 }
 101                 break;
 102         case "authpass":
 103                 $ret = $myAC->authUserPass($argv[2], $argv[3]);
 104                 if($ret) echo "Authenticated\n";
 105                 else echo "Failed\n";
 106                 break;
 107         case "setpass":
 108                 $res = $myAC->setUserPass($argv[2], $argv[3]);
 109                 if($res) echo "Password Set\n";
 110                 else echo "Failure?\n";
 111                 break;
 112         case "setname":
 113                 $ret = $myAC->setUserRealName($argv[2], $argv[3]);
 114                 if($ret) echo "Real Name Set\n";
 115                 else echo "Failure?\n";
 116                 break;
 117         case "settoken":
 118                 $ret = $myAC->setUserToken($argv[2], $argv[3]);
 119                 if($ret) echo "Token Set\n";
 120                 else echo "Failure?\n";
 121                 break;
 122         case "settype":
 123                 $ret = $myAC->setUserTokenType($argv[2], $argv[3]);
 124                 if($ret) echo "Token Type Set\n";
 125                 else echo "Failure?\n";
 126                 break;
 127         case "getusers":
 128                 $users = $myAC->getUsers();
 129                 foreach($users as $user) {
 130                         if($user["realname"] != "") $realname = $user["realname"];
 131                         else $realname = "- Not Set -";
 132
 133                         if($user["haspass"]) $haspass = "Yes";
 134                         else $haspass = "No";
 135
 136                         if($user["hastoken"]) $hastoken = "Yes";
 137                         else $hastoken = "No";
 138
 139                         echo "Username: ".$user["username"]."\n";
 140                         echo "\tReal Name: ".$realname."\n";
 141                         echo "\tHas Password?: ".$haspass."\n";
 142                         echo "\tHas Token?: ".$hastoken."\n\n";
 143                 }
 144                 break;
 145         default:
 146                 echo "See the usage...\n";
 147 }
 148 ?>