请教如何获取 challenge 和 response

G-Akiraka commented 1 year ago

challenge := microsoft.MSCHAPChallenge_Get(r.Packet) response := microsoft.MSCHAP2Response_Get(r.Packet)

通过h3c、华硕、openwrt、unifi 无法获取到内容，都为空，想请教知道是为什么，我通过mschapv2去认证我参考了 https://github.com/layeh/radius/blob/master/vendors/microsoft/mschapv2-server-example.go 直接验证无法验证通过，通过freeradius的radtest -x -t mschap aka 123 127.0.0.1 0 test 可以通过，但是移动设备认证无法验证通过

我有尝试这样操作，由于无法获取到 challenge 与 response 导致无法返回 recvKey与sendKey，想知道是不是少了什么东西导致无法获取 microsoft.MSMPPERecvKey_Add(responsePacket, recvKey) microsoft.MSMPPESendKey_Add(responsePacket, sendKey)

package main

import (
    "fmt"
    "layeh.com/radius"
    "layeh.com/radius/rfc2865"
    "layeh.com/radius/rfc2868"
    "layeh.com/radius/rfc2869"
    "layeh.com/radius/vendors/microsoft"
    "log"
)

func runRadiusServer() {
    handler := func(w radius.ResponseWriter, r *radius.Request) {
        username := rfc2865.UserName_GetString(r.Packet)
        challenge := microsoft.MSCHAPChallenge_Get(r.Packet)
        response := microsoft.MSCHAP2Response_Get(r.Packet)
        fmt.Println("challenge", challenge)
        fmt.Println("response", response)

        log.Printf("[radius] Access denied for %s", username)
        responsePacket := r.Response(radius.CodeAccessAccept)
        success := make([]byte, 43)
        rfc2869.AcctInterimInterval_Add(responsePacket, rfc2869.AcctInterimInterval(3600))
        rfc2868.TunnelMediumType_Add(responsePacket, 0, rfc2868.TunnelMediumType_Value_IPv4)
        microsoft.MSCHAP2Success_Add(responsePacket, []byte(success))
        ////microsoft.MSMPPERecvKey_Add(responsePacket, recvKey)
        ////microsoft.MSMPPESendKey_Add(responsePacket, sendKey)
        microsoft.MSMPPEEncryptionPolicy_Add(responsePacket, microsoft.MSMPPEEncryptionPolicy_Value_EncryptionAllowed)
        microsoft.MSMPPEEncryptionTypes_Add(responsePacket, microsoft.MSMPPEEncryptionTypes_Value_RC440or128BitAllowed)
        w.Write(responsePacket)
    }

    server := radius.PacketServer{
        Handler:      radius.HandlerFunc(handler),
        SecretSource: radius.StaticSecretSource([]byte("test")),
    }

    log.Printf("Starting Radius server on :1812")
    if err := server.ListenAndServe(); err != nil {
        log.Fatal(err)
    }
}

func main() {
    runRadiusServer()
}