ClearBox Server™ v1.2 Developer's Guide

IEAP::ProcessMessage

Called when server receives authentication request with EAP message embedded.

HRESULT ProcessMessage(
	[in] long tag,
	[in] long prevPackTag,
	[in] USERINFOLITE * userInf,
	[in] unsigned long messageSize,
	[in] unsigned char * EAPmessage,
	[out] unsigned long * attrNumOut,
	[out] RADIUS_ATTRIBUTE * * outpAttributes,
	[out] RADAUTHENREPLY * authenRes);

Parameters

tag
[in] Unique value identifying RADIUS packet in whose context this method is called.
prevPackTag
[in] Unique value identifying Challenge-Response packet (previously sent by the server) that caused this request packet identified by tag. Is 0 if this is first Access-Request packet in transaction.
userInf
[in] Describes user.
messageSize
[in] Number of bytes in EAPmessage.
EAPmessage
[in] Block of bytes containing EAP message.
attrNumOut
[out] If extension returns attributes in response to EAP message, this parameter must be set to the number of attributes in array pointed by outpAttributes.
outpAttributes
[out] If extension returns attributes in response to EAP message, this parameter must be an array of attributes allocated by calling CoTaskMemAlloc.
authenRes
[out] Extension must return the result of authentication in this parameter.

Return Values

If extension returns error code, user is rejected.

Thread Safety

This method is called in context of WORK thread. (See Server Threads Model for details.) You should synchronize data which is shared with other threads.

Memory Management

Memory for userInf fields is allocated and freed by the server, so extension must not change them. Also the server allocates and frees memory for EAPmessage. Server may allocate memory for outpAttributes, and it's freed by the server.

Remarks

The Access-Request packet may contain several EAP-Message attributes. They are merged into one EAPmessage block.

If any attributes are returned in outpAttributes, flags attribute field must be explicitly set to 0 or any appropriate value.

Attributes from outpAttributes array are included in response packet disregarding authenRes value.

See Also

IEAP, RADIUS Specific Authentication


© 2001-2003 XPerience Technologies. www.xperiencetech.com

Created by chm2web html help conversion utility.