summaryrefslogtreecommitdiff
path: root/package/network/services/hostapd
AgeCommit message (Collapse)Author
2014-04-12802.11s: fix authsae support in netifdblogic
This patch implements support for 802.11s protected mesh wireless networks (using authsae) in the netifd framework. Until meshd-nl80211 implements a proper -P option for the PID file, this uses shell backgrounding in order to be able to get the PID for the process. Signed-off-by: Vittorio Gambaletta <openwrt@vittgam.net> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40497 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-04-12hostapd: fix "bad number" error due to missing wps_pbc_in_m1 option (since ↵nbd
r39995) r39995 introduced a new parameter wps_pbc_in_m1 to wifi wps config, but apparently did not provide a default value 0. When that option's non-existing value is later evaluated in /lib/netifd/hostapd.sh, it causes the "bad number" error to be logged in syslog if user has not set the wps_pbc_in_m1 option. The error materialises only if user has enabled wps. Sat Apr 12 13:25:01 2014 daemon.notice netifd: radio1 (1254): sh: bad number Sat Apr 12 13:25:01 2014 daemon.notice netifd: radio0 (1253): sh: bad number Discussion in bug 15508: https://dev.openwrt.org/ticket/15508#comment:3 Error is caused by line 282: https://dev.openwrt.org/browser/trunk/package/network/services/hostapd/files/netifd.sh#L282 My patch sets the parameter's default value to 0, which does nothing. The default might also be set a bit later in the function, but this felt like the most clear place to do that. Signed-off-by hnyman <hannu.nyman@iki.fi> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40469 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-04-06hostapd: update to version 2014-04-04nbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40394 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-21hostapd: add pbc_in_m1 optionnbd
Option pbc_in_m1 is being used as a WPS capability discovery workaround for PBC with Windows 7. Add possibility to enable this workaround from UCI. To enable it, turn on wps and set wps_pbc_in_m1 parameter to 1. Signed-off-by: Pawel Kulakowski <pawel.kulakowski@tieto.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39995 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-28hostapd: fix deletion of wds sta interfaces in AP modenbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39765 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-24hostapd: link against librt if eglibc is usednbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39741 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-18hostapd: add validation rules to wireless handlerblogic
Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39620 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-03wifi: Introduce 802.11ac supportnbd
This patch introduces 802.11ac support to mac80211 and hostapd. The split of VHT160 in two 80 MHz bands is not yet supported, since it requires an additional user supplied parameter for the channel of the second band. Signed-off-by: Matti Laakso <malaakso@elisanet.fi> Signed-off-by: Simon Wunderlich <simon@open-mesh.com> [sven@open-mesh.com: Rebased patch, merged htmode and vhtmode, removed special hwmode, replaced uci vht_capab list with overwritable autoconfig, fixed hostapd integration, fixed commit description, add HT40+/- for VHT modes, add VHT40 center_freq autoconfig, refactored major parts] Signed-off-by: Sven Eckelmann <sven@open-mesh.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39456 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-02hostapd: do not get basic_rate as a simple string variablenbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39448 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-31hostapd: fix basic rate list handling with netifdnbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39431 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-30hostapd: fix frequency selection for ap+stanbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39426 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-28hostapd: Fix 80211w setup with netifdjow
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39412 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-28hostapd: Fix basic_rate setup with netifdjow
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39411 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-14hostapd: fix mcast_rate settingblogic
Introduced by ("netifd: add wireless configuration support and port mac80211 to the new framework") Reported-by: René van Weert <r.vanweert@sowifi.com> Signed-off-by: Antonio Quartulli <antonio@meshcoding.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39288 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-12hostapd: fix frequency setting for IBSS/RSNblogic
Introduced by ("netifd: add wireless configuration support and port mac80211 to the new framework") Reported-by: René van Weert <rene@sowifi.com> Signed-off-by: Antonio Quartulli <antonio@meshcoding.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39231 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-28hostapd: fix mixed wep/wpa with netifdnbd
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39174 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-28hostapd: fix the uci option name for ap isolatenbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39173 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-23hostapd: fix wep with netifdnbd
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39156 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-21wpa_supplicant: fix interface combination parsing issuesnbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39155 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-16hostapd: move old wifi setup scripts to hostapd-common-oldnbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39103 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-10hostapd: fix short_preamble optionjow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39027 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-08hostapd: properly parse wmm and hidden uci options (#14589)jow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39005 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-03hostapd: fix maclist processing with netifdnbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38991 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-02netifd: add wireless configuration support and port mac80211 to the new ↵nbd
framework Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38988 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-02hostapd: change the wildcard for the hostapd control socket directorynbd
prepare for using /var/run/hostapd instead of /var/run/hostapd-phy* Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38986 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-02wpa_supplicant: clean up hostapd control socket on exit to fix socket leak ↵nbd
in ap+sta mode on wifi restarts Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38985 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-02hostapd: fix os_daemonize vs starting process race by creating the pid file ↵nbd
in the parent Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38984 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-02hostapd: always include p2p options in wpa_clinbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38981 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-25hostapd: add support for auto-channel selectionnbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38915 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-25hostapd: update to version 2013-11-20nbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38914 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-18hostapd: remove random pool support - the entropy it gathers is questionable ↵nbd
and we have better entropy sources on common platforms now Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38852 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-12hostapd: remove #ifdef MULTICALL around ap+sta support code (to support ↵nbd
separately installed supplicant+hostapd) Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38782 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-18wpa_supplicant: fix beacon_int configuration optionjow
wpa_supplicant expects beacon_int instead of beacon_interval in its config file. Signed-off-by: Bruno Randolf <br1@einfach.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38451 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-08hostapd: recognize 8021x as an authentication modenbd
Currently, in order to configure the authentication daemon in 8021x mode, we need to set wireless.@wifi-iface[0].encryption="wpa" Though it works it confuses folks as 8021x is using WEP encryption and not WPA. Therefore the terminology itself is confusing. This change adds 8021x as a recognized string for 8021x authentication. Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38339 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-08hostapd: add external registrar supportnbd
Setting wireless.@wifi-iface[N].ext_registrar=1 will enable UPNP advertising and add an external registrar to the interface this vif belongs to (br-lan if the vif is included in the LAN bridge). By enabling this we append upnp_iface=xxx to the hostapd config file. Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com> Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38338 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-08hostapd: enable WPS2 support on hostapd-full.confignbd
Enable CONFIG_WPS2 for hostapd. This is required to support options like Virtual Push Button in WPS. Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38337 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-08hostapd: fix hostapd RSN preauthentication PMKSA cachingnbd
In 2009 OpenWrt's hostapd config added an "auth_cache" boolean to be used to address a reported issue #12129 [0] on a forum [1]. The reported issue on the ticket is different that the one described on the forum. The commit was r33359. This change broke proper RSN preauthentication [2] [3] [4] expectations on hostapd's configuration for WPA2 and this in turn disabled PMKSA caching and Opportunistic Key Caching. This change: * Leaves the "auth_cache" to be used only for WPA networks for those looking to use this as a workaround to a reported issue but annotates a warning over its usage. * Separate "auth_cache" from WPA2 RSN preauthentication, leaving WPA2 RSN preauthentication to enabled only with "rsn_preauth" with the expected and recommended settings. * Adds a new WPA2 RSN preauthentication "rsn_preauth_testing" to be used when evaluating funcionality for WPA2 RSN preauthentication with the expected and recommended settings with the only difference so far with what should be enabled by default to disable Opportunistic Key Caching. Disabling the PMKSA cache should mean the STA could not roam off and back onto the AP that had PMKSA caching disabled and would require a full authentication cycle. This fixes this for WPA2 networks with RSN preauthentication enabled. This change should be applied to AA as well as trunk. TL DR; The issue described on the forum has to do with failure of a STA being able to try to authenticate again with the AP if it failed its first try. This may have been an issue with hostapd in 2009 but as per some tests I cannot reproduce this today on a WPA2 network. The issue described on the ticket alludes to a security issue with the design of using a Radius server to authenticate to an AP. The issue vaguely alludes to the circumstances of zapping a user, deleting their authentication credentials to log in to the network, and that if RSN preauthentication is enabled with PMKSA caching that the user that was zapped would still be able to authenticate. Lets treat these as separate issues. I cannot reproduce the first issue reported on the forums of not being able to authenticate anymore on a WPA2 network. The issue reported on the ticket modified WPA2 RSN preauthentication by adding two fields to the hostapd configuration if auth_cache was enabled: * disable_pmksa_caching=1 * okc=0 The first one disables PMKSA authentication cache. The second one disables Opportunistic Key Caching. The issue reported on the ticket was fixed by implementing a workaround in hostapd's configuration. Disabling PMKSA caching breaks proper use of WPA2 RSN pre authentication. The usage of disable_pmksa_caching=1 prevents hostapd from adding PMKSA entries into its cache when a successful 802.1x authentication occurs. In practice RSN preauthentication would trigger a STA to perform authentication with other APs on the same SSID, it would then have its own supplicant PMKSA cache held. If a STA roams between one AP to another no new authenitcation would need to be performed as the new AP would already have authenticated the STA. The purpose of the PMKSA cache on the AP side would be for the AP to use the same PMKID for a STA when the STA roams off onto another BSSID and later comes back to it. Disabling Opportunistic Key Caching could help the reported issue as well but its not the correct place to address this. Opportunistic Key Caching enables an AP with different interfaces to share the PMKSA cache. Its a technical enhancement and disabling it would be useful to let a testing suite properly test for RSN preauthentication given that otherwise Opportunistic Key Caching would enable an interface being tested to derive its own derive the PMKSA entry. In production though okc=1 should be enabled to help with RSN preauthentication. The real fix for this particular issue outside of the scope of hostapd's configuration and it should not be dealt with as a workaround to its configuration and breaking expected RSN preauthentication and technical optimizations. Revert this change and enable users to pick and choose to enable or disable disable_pmksa_caching and okc expecting them to instead have read clearly more what these do. As for the core issure ported, the correct place to fix this is to enable a sort of messaging between the RADIUS server and its peers so that if caching for authentication is enabled that cache can be cleared upon user credential updates. Updating a user password (not just zapping a user) is another possible issue that would need to be resolved here. Another part of the solution might be to reduce the cache timing to account for any systematic limitations (RADIUS server not able to ask peers to clear cache might be one). [0] https://dev.openwrt.org/changeset/33359 [1] https://forum.openwrt.org/viewtopic.php?id=19596 [2] http://wireless.kernel.org/en/users/Documentation/hostapd#IEEE_802.11i.2FRSN.2FWPA2_pre-authentication [3] http://wireless.kernel.org/en/users/Documentation/wpa_supplicant#RSN_preauthentication [4] http://wiki.openwrt.org/doc/recipes/rsn_preauthentication Signed-off-by: Luis R. Rodriguez <mcgrof@do-not-panic.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38336 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-08hostapd: Add WPS unconfigured & WPS pin method supportnbd
Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38335 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-08hostapd: Add eap_reauth_period config optionnbd
This adds the eap_reauth_period to be used for modifying the RADIUS server reauthentication authentication period, a parameter that gets passed directly to the hostapd configuration file. Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38334 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-09-14hostapd: adjust the md5sum for the uploaded source tarball (fixes #14155)nbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37990 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-08hostapd: fix typo in version numbernbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37742 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-08hostapd: fix ubus reconnect handlingnbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37741 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-08hostapd: add a build variant for wpa_supplicant with p2p (aka Wi-Fi Direct) ↵nbd
support Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37739 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-08hostapd: update to latest version (20130707)nbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37738 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-06hostapd: Settings for DAE/CoA servernbd
hostapd supports "Dynamic Authorization Extensions", making it possible to forcibly disconnect a user by sending it a RADIUS "Disconnect-Request" packet. I've added three new variables to enable setting of the "radius_das_client" and "radius_das_port" variables in the hostapd configuration, which enable these extensions. * dae_client - IP of the client that can send disconnect requests * dae_secret - shared secret for DAE packets These are combined into the "radius_das_client" option in hostapd.conf To enable the server, both dae_client and dae_secret must be set. * dae_port - optional, default value is 3799 as specified in RFC 5176 Signed-off-by: Martijn van de Streek <martijn@vandestreek.net> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37734 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-06hostapd: Fix WDS/WEP usagenbd
WEP in WDS is currently broken in hostapd. Add a patch to fix the issue. Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37733 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-06hostapd: Refresh patchesnbd
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37731 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-06hostapd: Add an option to disable beaconingnbd
Add a patch for hostapd that introduces a config option "start_disabled" which can be used to bring up an AP interface with beaconing disabled. This is useful in a Repeater-AP setup where the Repeater AP has to start beaconing only after the WDS link has been established. Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37730 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-07-01hostapd: truncate default mac file before adding entries to it (#13797)jow
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37114 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-30hostapd: fix multi-ssid and AP+STA, clean up codenbd
Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37111 3c298f89-4303-0410-b956-a3cf2f4a3e73
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-18 08:28:02 +0000