com.theorem.radserver3.eap
Class EAPMD5Auth

Object
  EAPMD5Auth

public final class EAPMD5Auth

extends Object

Field Summary

static int	MD5 MD5 response is expected (1).
static int	NAK_AUTH_UKNOWN Return value if no prefered authentication accomanpanied a NAK.
static int	NO_NAK Return value if the authentication completed succesfully.

Constructor Summary

EAPMD5Auth(AuthInfo ai, EAPPacket eapIn)
Constructor.

Method Summary

int	getNAK() Get any NAK information that might have been received.
boolean	MD5(byte[] password) EAP MD5 handler.

Methods inherited from class Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

MD5

public static final int MD5

MD5 response is expected (1).

See Also:

Constant Field Values

NAK_AUTH_UKNOWN

public static final int NAK_AUTH_UKNOWN

Return value if no prefered authentication accomanpanied a NAK.

See Also:

Constant Field Values

NO_NAK

public static final int NO_NAK

Return value if the authentication completed succesfully.

See Also:

Constant Field Values

Constructor Detail

EAPMD5Auth

public EAPMD5Auth(AuthInfo ai,
                  EAPPacket eapIn)

Constructor.

Parameters:

ai - AuthInfo object.

eapIn - EAPPacket object.

Method Detail

getNAK

public int getNAK()

Get any NAK information that might have been received. There are three possibilities:

1. No NAK was received - the value will be NO_NAK.
2. A NAK was received suggesting another authentication method the value will be the requested EAP authentication method
3. A NAK was received but suggested no better authentication method - the value will be NAK_AUTH_UKNOWN.

Returns:

The value accompanying the NAK or NO_NAK, NAK_AUTH_UKNOWN. A legal authentication type will be in the range of 4 to 255.

MD5

public boolean MD5(byte[] password)
            throws AccessDropException,
                   AccessRejectException

EAP MD5 handler.

This is similar to the handleStartPacket() in that it handles the entire transaction from the Identity Response to the actual authentication.

If successful it will have appended the EAP success message to the response attributes.

The sequence of packets:
Client --> Server: Identity Response
Server --> Client: MD5 Challenge
Client --> Server: MD5 Response
Server --> Client: Success or Failure Response.

Parameters:

password - Password.

Returns:

True if the authentication is preceeding normally. If False is returned check to see if a NAK was received. AUTH_COMPLETE if the authentication completed. Returns the prefered authentication Type if a NAK was received. If no prefered authentication type accompanied the NAK NAK_AUTH_UKNOWN is returned.

Throws:

AccessDropException - if there's a problem with the EAP packet.

AccessRejectException - if there's an authentication error.

See Also:

getNAK()