This patch adds support for multiple candidate passphrases and VLAN IDs in RADIUS Access-Accept messages, like in the following example: Tunnel-Type:1 = VLAN Tunnel-Medium-Type:1 = IEEE-802 Tunnel-Password:1 = "passphrase1" Tunnel-Private-Group-Id:1 = "101" Tunnel-Type:2 = VLAN Tunnel-Medium-Type:2 = IEEE-802 Tunnel-Password:2 = "passphrase2" Tunnel-Private-Group-Id:2 = "102" Tunnel-Type:3 = VLAN It can be used to replicate a useful feature found in some commercial products (usually called "Dynamic PSK", "Identity PSK" or "Private PSK"), in which the access point picks the VLAN ID depending on the passphrase. Please note that this is my first attempt at contributing to hostap, so the code quality is probably way below the expectations of the projet. Tom Barthe (7): Support for RADIUS attributes filtering by tag Replace some vlan_ids with vlan_descriptions Add a per PSK vlan_description Fix selection of Tunnel* attributes by tag Add default_radius_vlan in sta_info Retrieve and use a per-PSK vlan_description Remove useless variable src/ap/ap_config.c | 23 ++++++++-- src/ap/ap_config.h | 5 +- src/ap/ieee802_11.c | 16 +------ src/ap/ieee802_11_auth.c | 44 +++++++++++++++--- src/ap/ieee802_1x.c | 2 +- src/ap/sta_info.h | 3 +- src/ap/wpa_auth.c | 29 +++++++----- src/ap/wpa_auth.h | 5 +- src/ap/wpa_auth_glue.c | 46 +++++++++++-------- src/radius/radius.c | 42 ++++++++++------- src/radius/radius.h | 5 +- tests/fuzzing/eapol-key-auth/eapol-key-auth.c | 6 +-- 12 files changed, 140 insertions(+), 86 deletions(-) -- 2.30.2 _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap
