[PATCH 0/1] Add FQDN support for auth and acct server addresses

Magnus Malm magnusmalm at gmail.com
Fri Dec 3 03:18:40 PST 2021


This is an RFC patch to add support for configuring RADIUS server address using Fully Qualified
Domain Names (FQDN). The patch in current form implements this support. The drawback is that
resolving is done in a syncronous manner. That is, the entire hostapd process locks up for the
duration of resolving.

One way to solve this would be to use, for instance, c-ares[1].

Besides the syncronous nature of resolving, which at first glance seems rather straight forward to
fix, this patch unfortunately breaks failover in the case a primary RADIUS server address is
configured to a FQDN that fails to resolve at startup.

I cannot for the life of me grok the code enough to realize why this is. hostapd simply never try
the secondary configured address.

Any and all comments, suggestions, and help is deeply appreciated.

Kind regards,
Magnus Malm

[1]: https://c-ares.org/

Magnus Malm (1):
  Add FQDN support for auth and acct server addresses

 hostapd/config_file.c      | 31 ++++++++++++++-
 src/radius/radius_client.c | 13 ++++++-
 src/radius/radius_client.h |  3 ++
 src/utils/ip_addr.c        | 77 ++++++++++++++++++++++++++++++++++++++
 src/utils/ip_addr.h        |  1 +
 5 files changed, 123 insertions(+), 2 deletions(-)

-- 
2.33.0




More information about the Hostap mailing list