diff options
| author | Jouni Malinen <j@w1.fi> | 2012-06-17 17:43:36 +0300 |
|---|---|---|
| committer | Jouni Malinen <j@w1.fi> | 2012-06-17 17:43:36 +0300 |
| commit | bde7ba6caf3a2e56b277d9fcf3ff05b0606cb833 (patch) | |
| tree | 58e7f172c472d1410328d34b040ada38bd568598 /hostapd | |
| parent | c2d76aa6247b4769b935f11c902aa3f31278278e (diff) | |
| download | external_wpa_supplicant_8_ti-bde7ba6caf3a2e56b277d9fcf3ff05b0606cb833.zip external_wpa_supplicant_8_ti-bde7ba6caf3a2e56b277d9fcf3ff05b0606cb833.tar.gz external_wpa_supplicant_8_ti-bde7ba6caf3a2e56b277d9fcf3ff05b0606cb833.tar.bz2 | |
RADIUS DAS: Validate Event-Timestamp
DAS will now validate Event-Timestamp value to be within an acceptable
time window (300 seconds by default; can be set using
radius_das_time_window parameter). In addition, Event-Timestamp can be
required in Disconnect-Request and CoA-Request messages with
radius_das_require_event_timestamp=1.
Signed-hostap: Jouni Malinen <j@w1.fi>
Diffstat (limited to 'hostapd')
| -rw-r--r-- | hostapd/config_file.c | 5 | ||||
| -rw-r--r-- | hostapd/hostapd.conf | 6 |
2 files changed, 11 insertions, 0 deletions
diff --git a/hostapd/config_file.c b/hostapd/config_file.c index 6729e5c..b00ed8f 100644 --- a/hostapd/config_file.c +++ b/hostapd/config_file.c @@ -1693,6 +1693,11 @@ static int hostapd_config_fill(struct hostapd_config *conf, "DAS client", line); errors++; } + } else if (os_strcmp(buf, "radius_das_time_window") == 0) { + bss->radius_das_time_window = atoi(pos); + } else if (os_strcmp(buf, "radius_das_require_event_timestamp") + == 0) { + bss->radius_das_require_event_timestamp = atoi(pos); #endif /* CONFIG_NO_RADIUS */ } else if (os_strcmp(buf, "auth_algs") == 0) { bss->auth_algs = atoi(pos); diff --git a/hostapd/hostapd.conf b/hostapd/hostapd.conf index 611ce95..a7b8ba6 100644 --- a/hostapd/hostapd.conf +++ b/hostapd/hostapd.conf @@ -708,6 +708,12 @@ own_ip_addr=127.0.0.1 # # DAS client (the host that can send Disconnect/CoA requests) and shared secret #radius_das_client=192.168.1.123 shared secret here +# +# DAS Event-Timestamp time window in seconds +#radius_das_time_window=300 +# +# DAS require Event-Timestamp +#radius_das_require_event_timestamp=1 ##### RADIUS authentication server configuration ############################## |