[PATCH 0/7] Support for multiple RADIUS Tunnel-* attributes
Tom Barthe
jeltz+hostap at auro.re
Mon Oct 11 04:24:30 PDT 2021
This patch adds support for multiple candidate passphrases and VLAN IDs
in RADIUS Access-Accept messages, like in the following example:
Tunnel-Type:1 = VLAN
Tunnel-Medium-Type:1 = IEEE-802
Tunnel-Password:1 = "passphrase1"
Tunnel-Private-Group-Id:1 = "101"
Tunnel-Type:2 = VLAN
Tunnel-Medium-Type:2 = IEEE-802
Tunnel-Password:2 = "passphrase2"
Tunnel-Private-Group-Id:2 = "102"
Tunnel-Type:3 = VLAN
It can be used to replicate a useful feature found in some commercial
products (usually called "Dynamic PSK", "Identity PSK" or "Private
PSK"), in which the access point picks the VLAN ID depending on the
passphrase.
Please note that this is my first attempt at contributing to hostap, so
the code quality is probably way below the expectations of the projet.
Tom Barthe (7):
Support for RADIUS attributes filtering by tag
Replace some vlan_ids with vlan_descriptions
Add a per PSK vlan_description
Fix selection of Tunnel* attributes by tag
Add default_radius_vlan in sta_info
Retrieve and use a per-PSK vlan_description
Remove useless variable
src/ap/ap_config.c | 23 ++++++++--
src/ap/ap_config.h | 5 +-
src/ap/ieee802_11.c | 16 +------
src/ap/ieee802_11_auth.c | 44 +++++++++++++++---
src/ap/ieee802_1x.c | 2 +-
src/ap/sta_info.h | 3 +-
src/ap/wpa_auth.c | 29 +++++++-----
src/ap/wpa_auth.h | 5 +-
src/ap/wpa_auth_glue.c | 46 +++++++++++--------
src/radius/radius.c | 42 ++++++++++-------
src/radius/radius.h | 5 +-
tests/fuzzing/eapol-key-auth/eapol-key-auth.c | 6 +--
12 files changed, 140 insertions(+), 86 deletions(-)
--
2.30.2
More information about the Hostap
mailing list