aboutsummaryrefslogtreecommitdiffstats
path: root/src/radius
diff options
context:
space:
mode:
authorJouni Malinen <jouni@qca.qualcomm.com>2015-01-16 10:10:52 (GMT)
committerJouni Malinen <j@w1.fi>2015-01-16 10:50:16 (GMT)
commit861beb7269946b9b940b6233ebaae19d6ee3cdf0 (patch)
tree46691b89bb4c9d0d20f0fcdd76795ce9bc8228c2 /src/radius
parent201c9ad77f180e0f015bb4b9ce9ddb550d0d7820 (diff)
downloadhostap-861beb7269946b9b940b6233ebaae19d6ee3cdf0.zip
hostap-861beb7269946b9b940b6233ebaae19d6ee3cdf0.tar.gz
hostap-861beb7269946b9b940b6233ebaae19d6ee3cdf0.tar.bz2
RADIUS DAS: Check for single session match for Disconnect-Request
Previously, the first matching STA was picked. That is not really the design in RFC 5176, so extend this matching code to go through all specified session identification attributes and verify that all of them match. In addition, check for a possible case of multiple sessions matching. If such a case is detected, return with Disconnect-NAK and Error-Code 508 (multiple session selection not supported). Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
Diffstat (limited to 'src/radius')
-rw-r--r--src/radius/radius_das.c6
-rw-r--r--src/radius/radius_das.h3
2 files changed, 8 insertions, 1 deletions
diff --git a/src/radius/radius_das.c b/src/radius/radius_das.c
index 9655f4c..7aa703c 100644
--- a/src/radius/radius_das.c
+++ b/src/radius/radius_das.c
@@ -147,6 +147,12 @@ static struct radius_msg * radius_das_disconnect(struct radius_das_data *das,
"%s:%d", abuf, from_port);
error = 503;
break;
+ case RADIUS_DAS_MULTI_SESSION_MATCH:
+ wpa_printf(MSG_INFO,
+ "DAS: Multiple sessions match for request from %s:%d",
+ abuf, from_port);
+ error = 508;
+ break;
case RADIUS_DAS_SUCCESS:
error = 0;
break;
diff --git a/src/radius/radius_das.h b/src/radius/radius_das.h
index e3ed540..1d76c26 100644
--- a/src/radius/radius_das.h
+++ b/src/radius/radius_das.h
@@ -14,7 +14,8 @@ struct radius_das_data;
enum radius_das_res {
RADIUS_DAS_SUCCESS,
RADIUS_DAS_NAS_MISMATCH,
- RADIUS_DAS_SESSION_NOT_FOUND
+ RADIUS_DAS_SESSION_NOT_FOUND,
+ RADIUS_DAS_MULTI_SESSION_MATCH,
};
struct radius_das_attrs {