def get(self):
qstr = self.request.query
wlan_params = self.get_wlan_params(qstr)
if self.settings.debug:
self.syslog.debug(u"Open portal auth page, wlan params:{0}".format(utils.safestr(wlan_params)))
tpl = yield self.get_template_attrs(wlan_params.get("ssid", "default"))
self.render(self.get_login_template(tpl['tpl_name']), msg=None, tpl=tpl, qstr=qstr, **wlan_params)
def papAuth():
try:
cli = PortalClient(secret=secret, syslog=self.syslog)
# req auth
ra_req = self.vendor.Portal.newReqAuth(
userIp,
username,
password,
0,
None,
secret,
ac_addr[0],
chap=False
)
ra_resp = yield cli.sendto(ra_req, ac_addr)
if ra_resp.errCode > 0:
if ra_resp.errCode == 2:
self.redirect(firsturl)
return
_err_msg = "{0},{1}".format(self.vendor.AckAuthErrs[ra_resp.errCode], ra_resp.get_text_info()[0] or "")
raise PortalError(_err_msg)
# aff_ack
aa_req = self.vendor.Portal.newAffAckAuth(userIp, secret, ac_addr[0], ra_req.serialNo, 0, chap=False)
yield cli.sendto(aa_req, ac_addr, recv=False)
self.syslog.info('Portal [username:%s] pap auth success' % _username)
if self.settings.debug:
self.syslog.debug('Portal [username:%s] pap auth login [cast:%s ms]' % (
_username, (time.time() - start_time) * 1000))
self.redirect(firsturl)
except Exception as err:
try:
self.syslog.error("portal [username:%s] pap auth catch exception,%s" % (
_username, utils.safestr(err.message)))
back_login(msg=u"portal pap auth error,%s" % utils.safestr(err.message))
except:
back_login(msg=u"portal pap auth error,server process error")
import traceback
traceback.print_exc()
finally:
cli.close()
def chapAuth():
try:
cli = PortalClient(secret=secret, syslog=self.syslog)
rc_req = self.vendor.Portal.newReqChallenge(userIp,secret, chap=is_chap)
rc_resp = yield cli.sendto(rc_req,ac_addr)
if rc_resp.errCode > 0:
if rc_resp.errCode == 2:
self.redirect(firsturl)
return
raise PortalError(self.vendor.AckChallengeErrs[rc_resp.errCode])
# req auth
ra_req = self.vendor.Portal.newReqAuth(
userIp,
username,
password,
rc_resp.reqId,
rc_resp.get_challenge(),
secret,
ac_addr[0],
serialNo=rc_req.serialNo,
chap=is_chap,
)
ra_resp = yield cli.sendto(ra_req,ac_addr)
if ra_resp.errCode > 0:
if ra_resp.errCode == 2:
self.redirect(firsturl)
return
_err_msg = "{0},{1}".format(self.vendor.AckAuthErrs[ra_resp.errCode], ra_resp.get_text_info()[0] or "")
raise PortalError(_err_msg)
# aff_ack
aa_req = self.vendor.Portal.newAffAckAuth(userIp,secret,ac_addr[0],ra_req.serialNo,rc_resp.reqId, chap=is_chap)
yield cli.sendto(aa_req,ac_addr,recv=False)
self.syslog.info('Portal [username:{0}] chap auth success'.format(_username))
if self.settings.debug:
self.syslog.debug('Portal [username:%s] chap auth login [cast:%s ms]' % (
_username, (time.time() - start_time) * 1000))
self.redirect(firsturl)
except Exception as err:
try:
self.syslog.exception("Portal [username:%s] chap auth catch exception, %s" % (
_username, utils.safestr(err.message)))
back_login(msg=u"Portal chap auth error,%s" % err.message)
except:
back_login(msg=u"Portal chap auth error,server process error")
finally:
cli.close()
def post(url,data=None,**kwargs):
return treq.post(url, data=safestr(data), pool=pool,data_to_body_producer=StringProducer,**kwargs)
for attempt in range(self.retry):
self.syslog.info("Send portal packet times %s" % attempt)
self.transport.write(str(req),(host,port))
now = time.time()
waitto = now + self.timeout
while now < waitto:
if req.sid in self.results:
defer.returnValue(self.results.pop(req.sid))
return
else:
now = time.time()
yield sleep(0.002)
continue
raise Timeout("send packet timeout")
def datagramReceived(self, datagram, (host, port)):
try:
if self.debug:
print ":: Hexdump > %s"%hexdump(datagram,len(datagram))
resp = self.vendor.proto(packet=datagram,secret=self.secret)
self.results[resp.sid] = resp
self.syslog.info(":: Received <%s> packet from AC %s >> %s " % (self.vendor.name, (host, port), repr(resp)))
except Exception as err:
self.syslog.error('Process <%s> packet error %s >> %s' % (self.vendor.name, (host, port), utils.safestr(err)))
def on_exception(self, err):
self.syslog.error('Packet process error：%s' % utils.safestr(err))
self.transport.write(str(resp), (host, port))
except:
pass
def datagramReceived(self, datagram, (host, port)):
ac = self.validAc(host)
if not ac:
return self.syslog.info('Dropping packet from unknown ac host ' + host)
try:
req = self.vendor.Portal(
secret=self.secret,
packet=datagram,
source=(host, port)
)
self.syslog.info("Received portal packet from %s:%s: %s"%(host,port,utils.safestr(req)))
if req.type in self.actions:
self.actions[req.type](req,(host, port))
else:
self.syslog.error('Not support packet from ac host ' + host)
except Exception as err:
self.syslog.error('Dropping invalid packet from %s: %s' % ((host, port), utils.safestr(err)))
def on_exception(self, err):
self.syslog.error('Packet process error：%s' % utils.safestr(err))
def run_normal(self):
log.startLogging(sys.stdout)
self.syslog.info('portal server listen %s' % self.config.portal.host)
reactor.listenUDP(int(self.config.portal.listen), self,interface=self.config.portal.host)
def post(self):
qstr = self.get_argument("qstr", "")
wlan_params = self.get_wlan_params(qstr)
self.vendor = vendors.get(self.settings.config.portal.vendor)
start_time = time.time()
secret = self.settings.config.portal.key
nas = yield self.get_nas(wlan_params.get("wlanacip"))
print nas
if not nas:
self.render_error(msg=u"AC server {0} didn't register ".format(wlan_params.get("wlanacip")))
return
ac_addr = (nas['ipaddr'], int(nas['ac_port']))
is_chap = self.settings.config.portal.chap in ("1", "chap")
if self.settings.debug:
self.syslog.debug("Post portal auth page, wlan params:{0}".format(utils.safestr(wlan_params)))
username = self.get_argument("username", None)
password = self.get_argument("password", None)
_username = username
if self.settings.debug:
self.syslog.debug("Start [username:%s] portal auth, wlan params:%s" % (_username, utils.safestr(wlan_params)))
userIp = wlan_params.get('wlanuserip','')
tpl = yield self.get_template_attrs(wlan_params.get("ssid", "default"))
firsturl = tpl.get("home_page", "/?tpl_name=%s" % tpl.get('tpl_name', 'default'))
def back_login(msg=u''):
self.render(self.get_login_template(tpl['tpl_name']),tpl=tpl, msg=msg,qstr=qstr, **wlan_params)
if not username or not password:
back_login(msg=u"请输入用户名和密码")
return
# checkos
# cli_dev, cli_os = self.chk_os
# domain = yield self.get_domain(wlan_params.get("ssid", "default"))
# username = "******" % (username, cli_dev, cli_os, domain)
####################################################################################
## portal chap auth
####################################################################################
@defer.inlineCallbacks
def chapAuth():
try:
cli = PortalClient(secret=secret, syslog=self.syslog)
rc_req = self.vendor.Portal.newReqChallenge(userIp,secret, chap=is_chap)
rc_resp = yield cli.sendto(rc_req,ac_addr)
if rc_resp.errCode > 0:
if rc_resp.errCode == 2:
self.redirect(firsturl)
return
raise PortalError(self.vendor.AckChallengeErrs[rc_resp.errCode])
# req auth
ra_req = self.vendor.Portal.newReqAuth(
userIp,
username,
password,
rc_resp.reqId,
rc_resp.get_challenge(),
secret,
ac_addr[0],
serialNo=rc_req.serialNo,
chap=is_chap,
)
ra_resp = yield cli.sendto(ra_req,ac_addr)
if ra_resp.errCode > 0:
if ra_resp.errCode == 2:
self.redirect(firsturl)
return
_err_msg = "{0},{1}".format(self.vendor.AckAuthErrs[ra_resp.errCode], ra_resp.get_text_info()[0] or "")
raise PortalError(_err_msg)
# aff_ack
aa_req = self.vendor.Portal.newAffAckAuth(userIp,secret,ac_addr[0],ra_req.serialNo,rc_resp.reqId, chap=is_chap)
yield cli.sendto(aa_req,ac_addr,recv=False)
self.syslog.info('Portal [username:{0}] chap auth success'.format(_username))
if self.settings.debug:
self.syslog.debug('Portal [username:%s] chap auth login [cast:%s ms]' % (
_username, (time.time() - start_time) * 1000))
self.redirect(firsturl)
except Exception as err:
try:
self.syslog.exception("Portal [username:%s] chap auth catch exception, %s" % (
_username, utils.safestr(err.message)))
back_login(msg=u"Portal chap auth error,%s" % err.message)
except:
back_login(msg=u"Portal chap auth error,server process error")
finally:
cli.close()
####################################################################################
## portal pap auth
####################################################################################
@defer.inlineCallbacks
def papAuth():
try:
cli = PortalClient(secret=secret, syslog=self.syslog)
# req auth
ra_req = self.vendor.Portal.newReqAuth(
userIp,
username,
password,
0,
None,
secret,
ac_addr[0],
chap=False
)
ra_resp = yield cli.sendto(ra_req, ac_addr)
if ra_resp.errCode > 0:
if ra_resp.errCode == 2:
self.redirect(firsturl)
return
_err_msg = "{0},{1}".format(self.vendor.AckAuthErrs[ra_resp.errCode], ra_resp.get_text_info()[0] or "")
raise PortalError(_err_msg)
# aff_ack
aa_req = self.vendor.Portal.newAffAckAuth(userIp, secret, ac_addr[0], ra_req.serialNo, 0, chap=False)
yield cli.sendto(aa_req, ac_addr, recv=False)
self.syslog.info('Portal [username:%s] pap auth success' % _username)
if self.settings.debug:
self.syslog.debug('Portal [username:%s] pap auth login [cast:%s ms]' % (
_username, (time.time() - start_time) * 1000))
self.redirect(firsturl)
except Exception as err:
try:
self.syslog.error("portal [username:%s] pap auth catch exception,%s" % (
_username, utils.safestr(err.message)))
back_login(msg=u"portal pap auth error,%s" % utils.safestr(err.message))
except:
back_login(msg=u"portal pap auth error,server process error")
import traceback
traceback.print_exc()
finally:
cli.close()
if is_chap:
yield chapAuth()
else:
yield papAuth()
