hostapd question

[Jouni Malinen]

On Mon, May 21, 2007 at 07:15:47PM -0400, Michael Alexeev wrote:

> I need to modify hostapd code to add a post authentication routine
> that would pass the FreeRADIUS response to some external routine and
> only open the port if that routine is successful. I found several
> places in the code that look like potential candidates:

If I understood what you are planning on doing correct, the best
location would likely be in ieee80211_1x_receive_auth() where the switch
statement is processing RADIUS_CODE_ACCESS_ACCEPT. You can set authFail
to TRUE there and break from switch (like one of the existing VLAN
operations is doing) if the additional response fails. This function can
access the RADIUS Access-Accept message, so assuming the data you are
looking for is an attribute of that message, you should be able to
process it here.

-- 
Jouni Malinen                                            PGP id EFC895FA