net.jradius.client.auth.CHAPAuthenticator Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of jradius-core Show documentation
JRadius Core
The newest version!
/**
 * JRadius - A RADIUS Server Java Adapter
 * Copyright (C) 2004-2005 PicoPoint, B.V.
 *
 * This library is free software; you can redistribute it and/or modify it
 * under the terms of the GNU Lesser General Public License as published by
 * the Free Software Foundation; either version 2.1 of the License, or (at
 * your option) any later version.
 *
 * This library is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
 * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public
 * License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public License
 * along with this library; if not, write to the Free Software Foundation,
 * Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
 *
 */

package net.jradius.client.auth;

import java.security.NoSuchAlgorithmException;
import java.util.Arrays;

import net.jradius.exception.RadiusException;
import net.jradius.packet.RadiusPacket;
import net.jradius.packet.attribute.AttributeFactory;
import net.jradius.packet.attribute.RadiusAttribute;
import net.jradius.util.CHAP;
import net.jradius.util.RadiusRandom;


/**
 * CHAP Authentication.
 * 
 * @author David Bird
 */
public class CHAPAuthenticator extends RadiusAuthenticator 
{
    public static final String NAME = "chap";
    
    public String getAuthName()
    {
        return NAME;
    }
    
    public void processRequest(RadiusPacket p) throws RadiusException, NoSuchAlgorithmException
    {
    	if (password == null) throw new RadiusException("no password given");

    	p.removeAttribute(password);
        
        RadiusAttribute attr;
        byte authChallenge[] = RadiusRandom.getBytes(16);
        byte chapResponse[] = CHAP.chapResponse((byte)p.getIdentifier(), password.getValue().getBytes(), authChallenge);

        p.addAttribute(attr = AttributeFactory.newAttribute("CHAP-Challenge"));
        attr.setValue(authChallenge);
            
        p.addAttribute(attr = AttributeFactory.newAttribute("CHAP-Password"));
        attr.setValue(chapResponse);
    }

	public static boolean verifyPassword(byte[] response, byte[] challenge, byte id, byte[] clearText) throws NoSuchAlgorithmException 
	{
        byte chapResponse[] = CHAP.chapResponse(response[0], clearText, challenge);
        return Arrays.equals(response, chapResponse);
	}
}