[PATCH 1/1] Don't complain about missing PAC when teap_provisioning=0

Alan DeKok aland at deployingradius.com
Wed Dec 25 09:46:42 PST 2024


If we're not provisioning, then we don't need the PAC.

RFC 7170bis officially deprecates the PAC, and it doesn't
appear that other TEAP implementations use it.

Signed-off-by: Alan DeKok <aland at freeradius.org>
---
 src/eap_peer/eap_teap.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/eap_peer/eap_teap.c b/src/eap_peer/eap_teap.c
index ced7b1642..20a491e00 100644
--- a/src/eap_peer/eap_teap.c
+++ b/src/eap_peer/eap_teap.c
@@ -205,6 +205,8 @@ static void * eap_teap_init(struct eap_sm *sm)
 		return NULL;
 	}
 
+	if (!data->provisioning_allowed) return data;
+
 	if (!config->pac_file) {
 		wpa_printf(MSG_INFO, "EAP-TEAP: No PAC file configured");
 		eap_teap_deinit(sm, data);
-- 
2.38.1




More information about the Hostap mailing list