[RFC PATCH v1 11/13] SAE: Preserve password VLAN in PMKSA cache

Jeff Hansen x at jeffhansen.com
Fri Sep 11 12:20:04 PDT 2026


Copy the selected SAE password VLAN when deriving an opportunistic
PMKSA cache entry so that roaming retains the authenticated policy.
Credential changes are expected to invalidate affected PMKSA entries.

Signed-off-by: Jeff Hansen <x at jeffhansen.com>
---
 src/ap/pmksa_cache_auth.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/ap/pmksa_cache_auth.c b/src/ap/pmksa_cache_auth.c
index 8769032aa..9abb15a13 100644
--- a/src/ap/pmksa_cache_auth.c
+++ b/src/ap/pmksa_cache_auth.c
@@ -428,6 +428,7 @@ pmksa_cache_add_okc(struct rsn_pmksa_cache *pmksa,
 	radius_copy_class(&entry->radius_class, &old_entry->radius_class);
 #endif /* CONFIG_NO_RADIUS */
 	entry->eap_type_authsrv = old_entry->eap_type_authsrv;
+	entry->sae_vlan_id = old_entry->sae_vlan_id;
 	if (old_entry->vlan_desc) {
 		entry->vlan_desc = os_zalloc(sizeof(struct vlan_description));
 		if (entry->vlan_desc)
-- 
2.53.0




More information about the Hostap mailing list