pae module from Gunter... problems

[Gunter Burchardt]

> OK. I have managed to compile the pae module and insert it into the kernel :

Great! :)
Did you use layer2 patch into your kernel? Without this patch pae
module will not work!

> authenticatorII:/lib/modules/2.6.8-1-686-smp/kernel/net/pae# lsmod
> Module                  Size  Used by
> <SNIP>
> pae                    12040  0 [unsafe]
> </SNIP>
> 
> When patched-hostap runs I get :
> authenticatorII:/lib/modules/2.6.8-1-686-smp/kernel/net/pae# lsmod|more
> Module                  Size  Used by
> <SNIP>
> pae                    12040  1 [unsafe]
> </SNIP>
> Which means that the pae module is used by hostap right ?

Not hostap uses this module. hostapd uses this module.

> Can anyone explain why I get [unsafe] instead of hostapd in the lsmod line ?

hostapd is a user space program. In [] only other modules are listed.

> And.... unfortunately, when hostapd runs and when the supplicant is not
> authenticated, it can send packets anyway.
> Boooohhhh.... But yes, I'm still in a 2.6.8 kernel debian configuration and
> yes, it's unsupported. So...

I don't know if layer2 patch work on 2.6 machines. Pherhaps this is the
fault. Can you look into /proc/net/pae/* to figure out whether packets
go throug this module while authentication?

> Subsidiary question. Can the client interface of the authenticator have an
> IP address or has it got to be bridged with the WAN interface of the
> authenticator ? (the authenticator being the machine running hostapd).

You don't need to bridge the interfaces. The client interface can have
its own address.

> Many thanks !
> David.

regards
gunter