CGI程序与diameter的交互

Socket认证适配器实现

最新推荐文章于 2025-11-30 18:25:46 发布

原创最新推荐文章于 2025-11-30 18:25:46 发布 · 604 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#cgi #command #path #struct #socket #unix

本文介绍了一种基于Socket的认证适配器实现方案，包括客户端和服务端接口定义及其实现源代码。该方案适用于网关（CGI程序）与diameter客户端（NAS）之间的身份验证过程。

考虑到网关（CGI程序）和diameter客户端（NAS）可能不在一台机器上，还是使用了socket 编程，不是使用的是本地socket，一方面方便，一方面容易改成远程的。

客户端接口

VerifyAdaptor_Result_T Verify_UsrInfo_WithPw(const char* InUsrName, const char* InUsrPw);

服务器接口

VerifyAdaptor_Result_T Initialize_VerifyAdaptor();
void Destroy_VerifyAdaptor();

VerifyAdaptor_Result_T Retrieve_UsrInfo_WithPw(char* OutUsrName, unsigned int NameLenCap, char* OUtUsrPw, unsigned int PwLenCap, int* OutSocketID);
VerifyAdaptor_Result_T NotifyVerifyResult(VerifyAdaptor_Result_T InResult, int OutPutSocketID);

实现源代码

#include <stdio.h> #include <stdlib.h> #include <errno.h> #include <string.h> #include <sys/types.h> #include <sys/socket.h> #include <sys/un.h> #include <sys/time.h> #include <unistd.h> #include "verify_adaptor.h" #define SOCK_PATH "/tmp/socket" enum { COMMAND_VERIFY_USR_PW, COMMAND_VERIFY_RESULT }; VerifyAdaptor_Result_T Verify_UsrInfo_WithPw(const char* InUsrName, const char* InUsrPw) { int s, t, len; struct sockaddr_un remote; int command, userNameLen, userPwLen; if ((s = socket(AF_UNIX, SOCK_STREAM, 0)) == -1) { return VERIFY_FAIL; } remote.sun_family = AF_UNIX; strcpy(remote.sun_path, SOCK_PATH); len = strlen(remote.sun_path) + sizeof(remote.sun_family); if (connect(s, (struct sockaddr *)&remote, len) == -1) { goto err; } //send user info command = COMMAND_VERIFY_USR_PW; send(s, &command, sizeof(command), 0); userNameLen = strlen(InUsrName)+1; send(s, &userNameLen, sizeof(userNameLen), 0); send(s, InUsrName, userNameLen, 0); userPwLen = strlen(InUsrPw) + 1; send(s, &userPwLen, sizeof(userPwLen),0); send(s, InUsrPw, userPwLen, 0); //wait for the verify result; { fd_set rfds; struct timeval tv; int retval; /* Watch stdin (fd 0) to see when it has input. */ FD_ZERO(&rfds); FD_SET(s, &rfds); /* Wait up to five seconds. */ tv.tv_sec = 5; tv.tv_usec = 0; retval = select(s+1, &rfds, NULL, NULL, &tv); /* Don't rely on the value of tv now! */ if (retval) { /* FD_ISSET(0, &rfds) will be true. */ //read the data recv(s,&command, sizeof(command), 0); if (command == COMMAND_VERIFY_RESULT) { int result = 0; recv(s, &result, sizeof(result), 0); if (result == VERIFY_PASS) goto success; } } } err: close(s); return VERIFY_FAIL; success: close(s); return VERIFY_PASS; } static int ServerSocketFileID = 0; VerifyAdaptor_Result_T Initialize_VerifyAdaptor() { struct sockaddr_un local; char str[100]; int len; if ((ServerSocketFileID = socket(AF_UNIX, SOCK_STREAM, 0)) == -1) { return VERIFY_FAIL; } local.sun_family = AF_UNIX; strcpy(local.sun_path, SOCK_PATH); unlink(local.sun_path); len = strlen(local.sun_path) + sizeof(local.sun_family); if (bind(ServerSocketFileID, (struct sockaddr *)&local, len) == -1) { close(ServerSocketFileID); ServerSocketFileID = 0; return VERIFY_FAIL; } chmod(SOCK_PATH, S_IRWXU|S_IRWXG|S_IRWXO); if (listen(ServerSocketFileID, 5) == -1) { close(ServerSocketFileID); ServerSocketFileID = 0; return VERIFY_FAIL; } return VERIFY_PASS; } void Destroy_VerifyAdaptor() { if (ServerSocketFileID > 0) close(ServerSocketFileID); ServerSocketFileID = 0; unlink(SOCK_PATH); } VerifyAdaptor_Result_T Retrieve_UsrInfo_WithPw(char* OutUsrName, unsigned int NameLenCap, char* OUtUsrPw, unsigned int PwLenCap, int* OutSocketID) { struct sockaddr_un remote; int t,s,command, n; if (ServerSocketFileID <= 0) return VERIFY_FAIL; t = sizeof(remote); if ((s = accept(ServerSocketFileID, (struct sockaddr *)&remote, &t)) == -1) { return VERIFY_FAIL; } n = recv(s, &command, sizeof(command), 0); if (n != sizeof(command)) goto err; if (command == COMMAND_VERIFY_USR_PW) { int usrNamelen, usrPwLen; n = recv(s, &usrNamelen, sizeof(usrNamelen), 0); if (n != sizeof(usrNamelen)) goto err; if (usrNamelen > NameLenCap) goto err; n = recv(s, OutUsrName, usrNamelen, 0); if (n != usrNamelen) goto err; n = recv(s, &usrPwLen, sizeof(usrPwLen), 0); if (n != sizeof(usrPwLen) goto err; if (usrPwLen > PwLenCap) goto err; n = recv(s, OUtUsrPw, usrPwLen, 0); if (n != usrPwLen) goto err; *OutSocketID = s; return VERIFY_PASS; } err: close(s); return VERIFY_FAIL; } VerifyAdaptor_Result_T NotifyVerifyResult(VerifyAdaptor_Result_T InResult, int OutPutSocketID) { int command,result,n; if (ServerSocketFileID <= 0 || OutPutSocketID <= 0) return VERIFY_FAIL; command = COMMAND_VERIFY_RESULT; n = send(OutPutSocketID, &command, sizeof(command), 0); if (n != sizeof(command)) goto err; result = InResult; n = send(OutPutSocketID, &result, sizeof(result), 0); if (n != sizeof(result)) goto err; close(OutPutSocketID); return VERIFY_PASS; err: close(OutPutSocketID); return VERIFY_FAIL; }