[RFC PATCH v2 11/13] SAE: Preserve password VLAN in PMKSA cache
Jeff Hansen
x at jeffhansen.com
Thu Oct 22 15:59:46 PDT 2026
Copy the selected SAE password VLAN when deriving an opportunistic
PMKSA cache entry so that roaming retains the authenticated policy.
Credential changes are expected to invalidate affected PMKSA entries.
Signed-off-by: Jeff Hansen <x at jeffhansen.com>
---
src/ap/pmksa_cache_auth.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/ap/pmksa_cache_auth.c b/src/ap/pmksa_cache_auth.c
index bdc7fd5e2..616fc9269 100644
--- a/src/ap/pmksa_cache_auth.c
+++ b/src/ap/pmksa_cache_auth.c
@@ -430,6 +430,7 @@ pmksa_cache_add_okc(struct rsn_pmksa_cache *pmksa,
radius_copy_class(&entry->radius_class, &old_entry->radius_class);
#endif /* CONFIG_NO_RADIUS */
entry->eap_type_authsrv = old_entry->eap_type_authsrv;
+ entry->sae_vlan_id = old_entry->sae_vlan_id;
if (old_entry->vlan_desc) {
entry->vlan_desc = os_zalloc(sizeof(struct vlan_description));
if (entry->vlan_desc)
--
2.56.0
More information about the Hostap
mailing list