[openwrt/openwrt] hostapd-common: add missing ingredients for standalone EAP server

[LEDE Commits]

hauke pushed a commit to openwrt/openwrt.git, branch main:
https://git.openwrt.org/b0aecfaa4fd710df2dec9ceb90c3a6ebd97dcb7e

commit b0aecfaa4fd710df2dec9ceb90c3a6ebd97dcb7e
Author: Lev A. Melnikovsky <melnikovsky at gmail>
AuthorDate: Thu Aug 8 21:22:58 2024 +0300

    hostapd-common: add missing ingredients for standalone EAP server
    
    Namely radius_server_auth_port and radius_server_clients arguments. Below is a working config example:
    
    config wifi-iface 'enterprise1'
            option device 'radio1'
            option mode 'ap'
            option network 'lan'
            option ssid 'openwrt'
            option encryption 'wpa2'
            option dh_file '/etc/hostapd/dh.pem'
            option eap_server '1'
            option eap_user_file '/etc/hostapd/eap_user'
            option ca_cert '/etc/hostapd/ca.pem'
            option server_cert '/etc/hostapd/server.crt'
            option private_key '/etc/hostapd/server.key'
            option radius_server_clients '/etc/hostapd/radius_clients'
            option radius_server_auth_port 1812
    
    config wifi-iface 'enterprise2'
            option device 'radio2'
            option mode 'ap'
            option network 'lan'
            option ssid 'openwrt'
            option encryption 'wpa2'
            option dh_file '/etc/hostapd/dh.pem'
            option auth_server '127.0.0.1'
            option auth_secret 'radius_secret'
            option auth_cache '0'
    
    Signed-off-by: Lev A. Melnikovsky <melnikovsky at gmail>
    Link: https://github.com/openwrt/openwrt/pull/16112
    Signed-off-by: Hauke Mehrtens <hauke at hauke-m.de>
---
 package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh b/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh
index 232f9021b9..32b9d9d082 100644
--- a/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh
+++ b/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh
@@ -376,8 +376,8 @@ hostapd_common_add_bss_config() {
 	config_add_array radius_auth_req_attr
 	config_add_array radius_acct_req_attr
 
-	config_add_int eap_server
-	config_add_string eap_user_file ca_cert server_cert private_key private_key_passwd server_id
+	config_add_int eap_server radius_server_auth_port
+	config_add_string eap_user_file ca_cert server_cert private_key private_key_passwd server_id radius_server_clients
 
 	config_add_boolean fils
 	config_add_string fils_dhcp
@@ -571,7 +571,7 @@ hostapd_set_bss_options() {
 		multi_ap multi_ap_backhaul_ssid multi_ap_backhaul_key skip_inactivity_poll \
 		ppsk airtime_bss_weight airtime_bss_limit airtime_sta_weight \
 		multicast_to_unicast_all proxy_arp per_sta_vif \
-		eap_server eap_user_file ca_cert server_cert private_key private_key_passwd server_id \
+		eap_server eap_user_file ca_cert server_cert private_key private_key_passwd server_id radius_server_clients radius_server_auth_port \
 		vendor_elements fils ocv apup
 
 	set_default fils 0
@@ -1151,6 +1151,8 @@ hostapd_set_bss_options() {
 		[ -n "$private_key" ] && append bss_conf "private_key=$private_key" "$N"
 		[ -n "$private_key_passwd" ] && append bss_conf "private_key_passwd=$private_key_passwd" "$N"
 		[ -n "$server_id" ] && append bss_conf "server_id=$server_id" "$N"
+		[ -n "$radius_server_clients" ] && append bss_conf "radius_server_clients=$radius_server_clients" "$N"
+		[ -n "$radius_server_auth_port" ] && append bss_conf "radius_server_auth_port=$radius_server_auth_port" "$N"
 	fi
 
 	set_default multicast_to_unicast_all 0