hostapd/src/ap
Lee Harding e6ec62aa2d Allow Session-Timeout with PSK RADIUS during 4-way handshake
When the RADIUS response included a Session-Timeout attribute, but is
otherwise valid (an Access-Accept with a valid Tunnel-Password), the
association still failed due to the strict comparison of the accepted
value with HOSTAPD_ACL_ACCEPT. Apparently this combination wasn't
previously tested.

Extend this to allow a packet containing a valid Session-Timeout
attribute to be accepted by extending the "success" comparison to
include HOSTAPD_ACL_ACCEPT_TIMEOUT.

Fixes: 1c3438fec4 ("RADIUS ACL/PSK check during 4-way handshake")
Signed-off-by: Lee Harding <somerandomstring@gmail.com>
2024-04-21 11:55:53 +03:00
..
accounting.c Extra RADIUS request attributes from SQLite 2019-07-30 19:58:09 +03:00
accounting.h RADIUS: Use more likely unique accounting Acct-{,Multi-}Session-Id 2016-02-06 17:10:19 +02:00
acs.c ACS: More consistent checking of the best channel pointer 2024-01-22 21:58:06 +02:00
acs.h ACS: Fix memory leak if interface is disabled during scan 2017-03-04 17:30:15 +02:00
airtime_policy.c Use ether_addr_equal() to compare whether two MAC addresses are equal 2024-01-13 23:47:21 +02:00
airtime_policy.h hostapd: Add airtime policy configuration support 2019-05-02 14:57:43 +03:00
ap_config.c hostapd: Add support for testing Probe Response frame elements 2024-04-16 10:38:00 +03:00
ap_config.h Add TWT responder support for AP in HT and VHT modes 2024-04-19 18:38:37 +03:00
ap_drv_ops.c AP MLD: Link-specific flushing of stations 2024-04-20 18:31:11 +03:00
ap_drv_ops.h nl80211: Add callback function for removing link STAs 2024-03-27 18:12:39 +02:00
ap_list.c Use ether_addr_equal() to compare whether two MAC addresses are equal 2024-01-13 23:47:21 +02:00
ap_list.h Move ap_list_timer() to use common AP periodic cleanup mechanism 2015-07-20 13:42:35 +03:00
ap_mlme.c Move default action from after switch to within 2022-10-14 16:08:20 +03:00
ap_mlme.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
authsrv.c AP MLD: Use MLD struct for MLD level information 2024-03-27 11:15:19 +02:00
authsrv.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
beacon.c Fix RNR building for co-location and MLO 2024-04-20 18:31:11 +03:00
beacon.h hostapd: Avoid unnecessary Beacon frame update for co-location 2023-11-02 16:18:36 +02:00
bss_load.c hostapd: Avoid unnecessary Beacon frame update for co-location 2023-11-02 16:18:36 +02:00
bss_load.h AP: Add support for BSS load element (STA Count, Channel Utilization) 2014-10-21 23:25:48 +03:00
comeback_token.c Move SAE comeback token functionality into a separate file 2022-11-04 00:52:17 +02:00
comeback_token.h Move SAE comeback token functionality into a separate file 2022-11-04 00:52:17 +02:00
ctrl_iface_ap.c AP MLD: Add link details in STATUS command 2024-04-20 18:31:11 +03:00
ctrl_iface_ap.h Add return value to ACL functions 2022-03-24 20:53:28 +02:00
dfs.c AP MLD: Track radar detection in offloaded DFS case 2024-04-15 11:38:56 +03:00
dfs.h DFS: Add new hostapd_is_dfs_overlap() helper 2020-03-29 21:15:16 +03:00
dhcp_snoop.c proxyarp: Fix compilation with Hotspot 2.0 disabled 2021-10-18 21:24:59 +03:00
dhcp_snoop.h AP: Add support for Proxy ARP, DHCP snooping mechanism 2014-10-28 01:08:29 +02:00
dpp_hostapd.c DPP: Emit a DPP PB_STATUS event when push button starts 2024-03-08 10:37:28 +02:00
dpp_hostapd.h DPP: Allow Relay connections to Controllers to be added and removed 2022-07-25 00:23:31 +03:00
drv_callbacks.c AP MLD: Require same AKM and pairwise cipher for all links 2024-04-20 18:31:11 +03:00
eap_user_db.c Check snprintf result to avoid compiler warnings 2018-12-24 11:09:22 +02:00
eth_p_oui.c FT: Replace inter-AP protocol with use of OUI Extended Ethertype 2017-05-03 18:30:31 +03:00
eth_p_oui.h FT: Replace inter-AP protocol with use of OUI Extended Ethertype 2017-05-03 18:30:31 +03:00
fils_hlp.c Use ether_addr_equal() to compare whether two MAC addresses are equal 2024-01-13 23:47:21 +02:00
fils_hlp.h FILS: DHCP relay for HLP requests 2017-02-01 18:17:39 +02:00
gas_query_ap.c Use ether_addr_equal() to compare whether two MAC addresses are equal 2024-01-13 23:47:21 +02:00
gas_query_ap.h DPP: Integration for hostapd 2017-06-19 21:13:17 +03:00
gas_serv.c DPP: Respond to GAS on the same channel it was received on 2022-12-18 21:07:56 +02:00
gas_serv.h DPP: Respond to GAS on the same channel it was received on 2022-12-18 21:07:56 +02:00
hostapd.c Fix center segment indexes in channel switch fallback to non-5 GHz cases 2024-04-21 11:55:53 +03:00
hostapd.h AP MLD: Simplify for_each_mld_link() macro 2024-04-16 10:51:24 +03:00
hs20.c AP: Check driver's capability to enable OCV when driver SME is used 2021-02-16 00:47:43 +02:00
hs20.h HS 2.0: Move Terms and Conditions Server URL generation from AP to AS 2018-06-21 20:50:54 +03:00
hw_features.c AP MLD: Request Handle OBSS scan for a specific link 2024-04-12 10:52:19 +03:00
hw_features.h Update hw_mode when CSA finishes 2023-08-30 16:37:37 +03:00
ieee802_1x.c AP MLD: Use MLD struct for MLD level information 2024-03-27 11:15:19 +02:00
ieee802_1x.h Provide information about the encryption status of received EAPOL frames 2022-05-07 21:37:03 +03:00
ieee802_11.c Check whether to skip a BSS in RNR with a shared helper 2024-04-20 18:31:11 +03:00
ieee802_11.h Fix RNR building for co-location and MLO 2024-04-20 18:31:11 +03:00
ieee802_11_auth.c Allow Session-Timeout with PSK RADIUS during 4-way handshake 2024-04-21 11:55:53 +03:00
ieee802_11_auth.h RADIUS ACL/PSK check during 4-way handshake 2022-04-02 17:52:32 +03:00
ieee802_11_eht.c AP NLD: Extend support for cohosted ML BSS 2024-04-20 15:58:48 +03:00
ieee802_11_he.c EHT: Support punct_bitmap overriding in HE element generation 2024-03-08 10:13:12 +02:00
ieee802_11_ht.c Reduce delay between Association Request and Association Response 2023-11-03 12:58:35 +02:00
ieee802_11_shared.c Add TWT responder support for AP in HT and VHT modes 2024-04-19 18:38:37 +03:00
ieee802_11_vht.c Move punct_update_legacy_bw() into src/common 2024-03-08 10:13:12 +02:00
Makefile build: Make more library things common 2020-10-12 20:20:35 +03:00
mbo_ap.c MBO: Do not parse reason_detail in non_pref_chan attr (AP) 2016-09-25 17:31:26 +03:00
mbo_ap.h MBO: Parse non-preferred channel list on the AP 2016-02-22 21:17:38 +02:00
nan_usd_ap.c NAN: USD in hostapd 2024-02-15 19:54:17 +02:00
nan_usd_ap.h NAN: USD in hostapd 2024-02-15 19:54:17 +02:00
ndisc_snoop.c ndisc_snoop: Call dl_list_del() before freeing IPv6 addresses 2024-04-15 23:05:00 +03:00
ndisc_snoop.h proxyarp: Use C library header files and CONFIG_IPV6 2014-11-25 16:58:21 +02:00
neighbor_db.c Use a helper function to free neighbor DB entries 2024-03-03 21:33:46 +02:00
neighbor_db.h Update own report in nr_db if SSID is changed 2024-03-03 21:33:46 +02:00
p2p_hostapd.c Use P2P_IE_VENDOR_TYPE more consistently 2014-03-05 23:36:54 +02:00
p2p_hostapd.h Remove the GPL notification from files contributed by Atheros 2012-02-11 19:39:36 +02:00
pmksa_cache_auth.c Use ether_addr_equal() to compare whether two MAC addresses are equal 2024-01-13 23:47:21 +02:00
pmksa_cache_auth.h OKC with Suite B AKMPs in hostapd 2023-10-30 19:52:06 +02:00
preauth_auth.c Use ether_addr_equal() to compare whether two MAC addresses are equal 2024-01-13 23:47:21 +02:00
preauth_auth.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
rrm.c hostapd: Add RRM link measurement request support 2024-04-15 22:28:55 +03:00
rrm.h hostapd: Add RRM link measurement request support 2024-04-15 22:28:55 +03:00
sta_info.c AP MLD: Enhance authenticator state machine 2024-04-20 18:31:11 +03:00
sta_info.h AP MLD: Support removal of link station from AP 2024-03-27 18:12:39 +02:00
taxonomy.c Fix or supress various sparse warnings 2017-01-29 18:33:10 +02:00
taxonomy.h taxonomy: Store Probe Request frames in hostapd_sta_info 2016-09-22 00:45:24 +03:00
tkip_countermeasures.c hostapd: Add logging around Michael MIC related failures 2018-04-02 16:51:29 +03:00
tkip_countermeasures.h hostapd: Fix a regression in TKIP countermeasures processing 2012-11-18 13:06:03 +02:00
utils.c AP: Do not prune station when adding a link station 2023-06-12 16:26:56 +03:00
vlan.c VLAN: Fix vlan_compare() for tagged VLANs 2016-02-22 19:53:05 +02:00
vlan.h radius: Add tagged VLAN parsing 2016-02-17 11:46:13 +02:00
vlan_full.c vlan: Use new bridge ioctl() 2019-01-02 00:23:43 +02:00
vlan_ifconfig.c vlan: Move if_nametoindex() use out of vlan_init.c 2016-03-25 18:00:44 +02:00
vlan_init.c Make WEP functionality an optional build parameter 2020-02-29 17:45:25 +02:00
vlan_init.h VLAN: Separate station grouping and uplink configuration 2016-02-17 11:46:11 +02:00
vlan_ioctl.c Use own header file for defining Linux VLAN kernel interface 2016-03-26 11:24:38 +02:00
vlan_util.c vlan: Remove unnecessary header includes from netlink implementation 2016-03-25 17:27:16 +02:00
vlan_util.h vlan: Move if_nametoindex() use out of vlan_init.c 2016-03-25 18:00:44 +02:00
wmm.c Get rid of multiple MIN macros 2024-01-14 20:13:20 +02:00
wmm.h Remove obsolete license notifications 2013-12-24 22:59:52 +02:00
wnm_ap.c AP MLD: Use MLD struct for MLD level information 2024-03-27 11:15:19 +02:00
wnm_ap.h WNM: Allow specifying dialog token for BSS transition request 2021-10-22 17:11:36 +03:00
wpa_auth.c AP MLD: Run authenticator state machine for all links 2024-04-20 18:31:11 +03:00
wpa_auth.h AP MLD: Require same AKM and pairwise cipher for all links 2024-04-20 18:31:11 +03:00
wpa_auth_ft.c Remove the bssid argument from send_auth_reply() 2024-04-20 15:58:48 +03:00
wpa_auth_glue.c AP MLD: Enhance authenticator state machine 2024-04-20 18:31:11 +03:00
wpa_auth_glue.h Remove the GPL notification from files contributed by Jouni Malinen 2012-02-11 19:39:36 +02:00
wpa_auth_i.h AP MLD: Enhance authenticator state machine 2024-04-20 18:31:11 +03:00
wpa_auth_ie.c AP MLD: Require same AKM and pairwise cipher for all links 2024-04-20 18:31:11 +03:00
wpa_auth_ie.h Merge wpa_supplicant and hostapd EAPOL-Key KDE parsers 2019-10-18 13:02:27 +03:00
wpa_auth_kay.c mka: Allow configuration of MACsec hardware offload 2023-02-21 19:26:47 +02:00
wpa_auth_kay.h macsec: Support IEEE 802.1X(EAP)/PSK MACsec Key Agreement in hostapd 2019-06-03 20:27:44 +03:00
wps_hostapd.c Use ether_addr_equal() to compare whether two MAC addresses are equal 2024-01-13 23:47:21 +02:00
wps_hostapd.h WPS NFC: Add AP mode connection handover report 2014-01-27 21:10:55 +02:00
x_snoop.c ProxyARP: Clear bridge parameters on deinit only if hostapd set them 2022-05-31 11:53:05 +03:00
x_snoop.h AP: Add multicast-to-unicast conversion send for "x_snoop" 2014-11-19 16:25:13 +02:00