aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* imx23: rename imx23 to mxs for upcoming imx23/28 supportZoltan HERPAI2013-10-1414-25/+25
| | | | | | | | | Signed-off-by: Michael Heimpold <mhei@heimpold.de> Signed-off-by: Zoltan HERPAI <wigyori@uid0.hu> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38394 3c298f89-4303-0410-b956-a3cf2f4a3e73
* odhcp6c: various fixesSteven Barth2013-10-141-2/+2
| | | | | | | | | | * Make SOL_MAX_RT configurable and default back to 120s * Prefer servers with bigger prefixes (allows to use Comcast /60) * Don't hang indefinitely if DHCPv6 REQUEST is not answered Signed-off-by: Steven Barth <steven@midlink.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38393 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ubox: fix extroot after kmodloader changesJo-Philipp Wich2013-10-141-2/+2
| | | | | | | | | The kmodloader executable disregarded the global directory prefix in scan_module_folder() leading to a broken extroot for non-builtin modules. Update to current git head to fix the prefix handling again. git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38392 3c298f89-4303-0410-b956-a3cf2f4a3e73
* opkg: ignore empty fields in package listsSteven Barth2013-10-142-1/+17
| | | | | | | | | | This is to work around issues with package list generators creating empty fields in some environments. Based on a patch by Paul Selkrik <pselkrik@isc.org> Signed-off-by: Steven Barth <steven@midlink.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38390 3c298f89-4303-0410-b956-a3cf2f4a3e73
* iputils: do not compile this for brcm47xx with -O2Hauke Mehrtens2013-10-131-4/+0
| | | | | | | | | | ping is now working for me with -Os on brcm47xx. This revert r26278. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38389 3c298f89-4303-0410-b956-a3cf2f4a3e73
* brcm47xx: activate ARP daemon supportHauke Mehrtens2013-10-131-1/+0
| | | | | | | | | This just add some bytes to the kernel and is activated on other targets. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38388 3c298f89-4303-0410-b956-a3cf2f4a3e73
* switch: remove old switch driverHauke Mehrtens2013-10-1310-2850/+1
| | | | | | | | | | The switch driver is not used by brcm47xx any more and can be removed, instead of this switch driver b53 is used now. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38387 3c298f89-4303-0410-b956-a3cf2f4a3e73
* cobalt: do not build userland with support for mips1Hauke Mehrtens2013-10-131-1/+1
| | | | | | | | | | | Without specifying -march gcc uses -march=mips1 by default, but that causes problems when compiling openssl. Use -march=r5000 instead to compile a userland optimized for the CPU used on this device. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38386 3c298f89-4303-0410-b956-a3cf2f4a3e73
* mac80211: b43: fix prefix for config optionsHauke Mehrtens2013-10-132-5/+5
| | | | | | | | | | | | Config options in backports are starting with CPTCFG and not with CONFIG_. CONFIG_B43_BCMA was never true. This closes #13883. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38385 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kernel: update kernel to 3.10.15Hauke Mehrtens2013-10-1324-37/+26
| | | | | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38384 3c298f89-4303-0410-b956-a3cf2f4a3e73
* brcm47xx: fix detection of some boardsHauke Mehrtens2013-10-131-0/+20
| | | | | | | | | | | This adds some more boards. This fixes parts of #14316 and #14133. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38383 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ar71xx: Fix sysupgrade when upgrading to images with small rootfs partitionVasilis Tsiligiannis2013-10-131-1/+1
| | | | | | Signed-off-by: Vasilis Tsiligiannis <acinonyx@openwrt.gr> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38382 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ubifs: when creating ubi(fs) images profile originated arguments have priorityLuka Perkov2013-10-131-4/+10
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38381 3c298f89-4303-0410-b956-a3cf2f4a3e73
* image: introduce MkuImageARM functionLuka Perkov2013-10-131-0/+5
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38380 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kirkwood: enable appended dtb (3.10.x)Luka Perkov2013-10-131-1/+4
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38379 3c298f89-4303-0410-b956-a3cf2f4a3e73
* zd1201: fix url to zd1201 firmwareHauke Mehrtens2013-10-121-1/+1
| | | | | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38378 3c298f89-4303-0410-b956-a3cf2f4a3e73
* yaffs2: the yaffs2 git movedHauke Mehrtens2013-10-121-1/+1
| | | | | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38377 3c298f89-4303-0410-b956-a3cf2f4a3e73
* lantiq: add some missing PKG_SOURCE_URLsHauke Mehrtens2013-10-123-1/+4
| | | | | | | | | These URLs where missing and causes build failures. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38376 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ubifs: enable building modular imagesLuka Perkov2013-10-123-10/+32
| | | | | | | | | Now it is possible to build ubi/ubifs images for only selected boards inside single target. Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38375 3c298f89-4303-0410-b956-a3cf2f4a3e73
* image: if possible use profile name when building .tar.gz imagesLuka Perkov2013-10-121-1/+1
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38374 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kernel: add kirkwood thermal moduleLuka Perkov2013-10-121-0/+17
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38371 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ar7: drop linux 3.9 supportJonas Gorski2013-10-1216-1755/+0
| | | | | | | | Linux 3.9 is EOL since quite a while, no need to keep support for it. Signed-off-by: Jonas Gorski <jogo@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38370 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ar7: add support for linux 3.10 and switch to itJonas Gorski2013-10-1217-1/+1756
| | | | | | | | Run tested on WAG354Gv2. Signed-off-by: Jonas Gorski <jogo@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38369 3c298f89-4303-0410-b956-a3cf2f4a3e73
* mvswitch: fix compilation for linux 3.10Jonas Gorski2013-10-121-0/+35
| | | | | | Signed-off-by: Jonas Gorski <jogo@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38368 3c298f89-4303-0410-b956-a3cf2f4a3e73
* acx-mac80211: update to latest versionJonas Gorski2013-10-128-192/+178
| | | | | | | | Fixes compilation for linux 3.10. Signed-off-by: Jonas Gorski <jogo@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38367 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ar7-atm: fix compilation for linux 3.10Jonas Gorski2013-10-126-18/+6085
| | | | | | | | | Update proc code to new proc_create to allow compilation with linux 3.10+. Signed-off-by: Jonas Gorski <jogo@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38366 3c298f89-4303-0410-b956-a3cf2f4a3e73
* dnsmasq: add option broadcast to host sectionsJo-Philipp Wich2013-10-112-2/+7
| | | | | | | | | | | | | | | | | | | There are certain consumer devices which are outliers in protocol conformance. An example is Samsung bluray players, which require broadcast DHCP responses (on Ethernet only, strangely not on Wifi). By specifying: config host ... option broadcast 1 this will enable the response to be sent as an Ethernet broadcast and not as a unicast. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38365 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [ar71xx]: make the generated images actually flashable on the Unifi devices.Imre Kaloz2013-10-111-2/+2
| | | | | | | | Signed-off-by: Imre Kaloz <kaloz@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38364 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ath9k: fix rx issues introduced in my last commit (fixes #14307)Felix Fietkau2013-10-106-13/+114
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38362 3c298f89-4303-0410-b956-a3cf2f4a3e73
* firewall: small improvements in nat reflectionJo-Philipp Wich2013-10-101-2/+2
| | | | | | | - do not insert duplicate rules when setting up reflection to a zone containing multiple interfaces - set up reflection for any protocol, not just TCP and UDP git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38361 3c298f89-4303-0410-b956-a3cf2f4a3e73
* Incorrect checkout of git submodulesJo-Philipp Wich2013-10-101-1/+1
| | | | | | | | | | | When checking out git packages, buildroot doesn't seem to track the revisions correctly of any submodules referenced by that project. As a result, the submodule stays at whatever revision was referenced by the head of the master branch. Running a 'git submodule update' after the checkout fixes this problem. Signed-off-by: Owen Kirby <osk@exegin.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38359 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ppp: correct module loaded check in proto_pptp_setupJo-Philipp Wich2013-10-101-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | proto_pptp_setup is responsible for loading the required modules to establish a pptp connection to a foreign peer. The function checks whether all required modules are already loaded, before actually loading them. It seems that the filter being used to accomplish this, is not restrictive enough in some cases. For instance when pptp nat helper modules are present on a system, and already loaded before a pptp connection is enabled. Then the search filter (possibly) returns the following for module=pptp, where actually no matches are expected, resulting in the pptp.ko module not being loaded, thereby failing to establish the pptp connection. # module="pptp" ; grep "$module" /proc/modules nf_nat_pptp 1312 0 - Live 0x86ce7000 nf_conntrack_pptp 3072 1 nf_nat_pptp, Live 0x86cb9000 nf_nat_proto_gre 784 1 nf_nat_pptp, Live 0x86cba000 nf_conntrack_proto_gre 2368 1 nf_conntrack_pptp, Live 0x86cbf000 nf_nat 9792 13 nf_nat_rtsp,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_h323,nf_nat_proto_gre,nf_nat_amanda,nf_nat_irc,nf_nat_ftp,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,iptable_nat, Live 0x86ca8000 nf_conntrack 37264 31 nf_nat_rtsp,nf_conntrack_rtsp,nf_nat_tftp,nf_conntrack_tftp,nf_nat_snmp_basic,nf_conntrack_snmp,nf_nat_sip,nf_conntrack_sip,nf_nat_pptp,nf_conntrack_pptp,nf_nat_h323,nf_conntrack_h323,nf_conntrack_proto_gre,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_broadcast,nf_nat_irc,nf_conntrack_irc,nf_nat_ftp,nf_conntrack_ftp,ipt_MASQUERADE,iptable_nat,nf_nat,xt_helper,xt_connmark,xt_connbytes,xt_conntrack,xt_CT,xt_NOTRACK,xt_state,nf_conntrack_ipv4, Live 0x86c90000 The search filter can be made more accurate/restrictive, by requiring the occurance of the exact name of the module at the beginning of a line in /proc/modules. # module="pptp" ; grep "^$module " /proc/modules pptp 13296 2 - Live 0x86e80000 Signed-off-by: Tijs Van Buggenhout <tvb@able.be> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38358 3c298f89-4303-0410-b956-a3cf2f4a3e73
* dropbear: update to 2013.59 (released 4 october 2013)Jo-Philipp Wich2013-10-108-38/+22
| | | | | | | | | | | - drop mirror www.mirrors.wiretapped.net (not working anymore) - drop patch 300-ipv6_addr_port_split.patch, included upstream - refresh patches - various upstream changes: http://matt.ucc.asn.au/dropbear/CHANGES Signed-off-by: Catalin Patulea <cat@vv.carleton.ca> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38356 3c298f89-4303-0410-b956-a3cf2f4a3e73
* x86: kvm: disable squashfs and jffs2 images by defaultJo-Philipp Wich2013-10-101-0/+1
| | | | git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38355 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ath9k: add some cleanups and minor fixesFelix Fietkau2013-10-1016-274/+1435
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38354 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kernel: add default config for ARM_ERRATA symbols for kernel 3.3Hauke Mehrtens2013-10-101-0/+13
| | | | | | | | | Commit r37470 did not add a default conig for the ARM_ERRATA symbols for kernel 3.3. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38352 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package] openvpn: rework initscript (fixes #14299)Luka Perkov2013-10-091-8/+30
| | | | | | Signed-off-by: Luka Perkov <luka@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38351 3c298f89-4303-0410-b956-a3cf2f4a3e73
* procd: fix command handling in procd_add_instance()Felix Fietkau2013-10-091-1/+1
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38350 3c298f89-4303-0410-b956-a3cf2f4a3e73
* [package/libs/libpcap]: IPv6 support should depend on if we've enabled itImre Kaloz2013-10-091-1/+5
| | | | | | | | Signed-off-by: Imre Kaloz <kaloz@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38349 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ralink: fixes mpr a1/a2 network setupJohn Crispin2013-10-091-0/+2
| | | | | | | Signed-off-by: Suschman <suschman@gmx.net> Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38348 3c298f89-4303-0410-b956-a3cf2f4a3e73
* mac80211: rtlwifi: Align private space in rtl_priv structHauke Mehrtens2013-10-091-0/+27
| | | | | | | Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38346 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ralink: add support for the mt7530 eval boardJohn Crispin2013-10-085-40/+177
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38345 3c298f89-4303-0410-b956-a3cf2f4a3e73
* ralink: add missing header file to mt7530 driverJohn Crispin2013-10-081-30/+49
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38344 3c298f89-4303-0410-b956-a3cf2f4a3e73
* lantiq: fix up diag.shJohn Crispin2013-10-081-2/+0
| | | | | | | | init no longer exists as a parameter Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38342 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kernel: dont rely on library modules to be depended onJohn Crispin2013-10-081-0/+11
| | | | | | | | fixes https://dev.openwrt.org/ticket/14257 Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38341 3c298f89-4303-0410-b956-a3cf2f4a3e73
* kernel: remove debug code from module insert scriptJohn Crispin2013-10-081-1/+0
| | | | | | Signed-off-by: John Crispin <blogic@openwrt.org> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38340 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: recognize 8021x as an authentication modeFelix Fietkau2013-10-081-1/+1
| | | | | | | | | | | | | | Currently, in order to configure the authentication daemon in 8021x mode, we need to set wireless.@wifi-iface[0].encryption="wpa" Though it works it confuses folks as 8021x is using WEP encryption and not WPA. Therefore the terminology itself is confusing. This change adds 8021x as a recognized string for 8021x authentication. Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38339 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: add external registrar supportFelix Fietkau2013-10-081-0/+3
| | | | | | | | | | | | | Setting wireless.@wifi-iface[N].ext_registrar=1 will enable UPNP advertising and add an external registrar to the interface this vif belongs to (br-lan if the vif is included in the LAN bridge). By enabling this we append upnp_iface=xxx to the hostapd config file. Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com> Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38338 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: enable WPS2 support on hostapd-full.configFelix Fietkau2013-10-081-1/+2
| | | | | | | | | | Enable CONFIG_WPS2 for hostapd. This is required to support options like Virtual Push Button in WPS. Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com> Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38337 3c298f89-4303-0410-b956-a3cf2f4a3e73
* hostapd: fix hostapd RSN preauthentication PMKSA cachingFelix Fietkau2013-10-081-4/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In 2009 OpenWrt's hostapd config added an "auth_cache" boolean to be used to address a reported issue #12129 [0] on a forum [1]. The reported issue on the ticket is different that the one described on the forum. The commit was r33359. This change broke proper RSN preauthentication [2] [3] [4] expectations on hostapd's configuration for WPA2 and this in turn disabled PMKSA caching and Opportunistic Key Caching. This change: * Leaves the "auth_cache" to be used only for WPA networks for those looking to use this as a workaround to a reported issue but annotates a warning over its usage. * Separate "auth_cache" from WPA2 RSN preauthentication, leaving WPA2 RSN preauthentication to enabled only with "rsn_preauth" with the expected and recommended settings. * Adds a new WPA2 RSN preauthentication "rsn_preauth_testing" to be used when evaluating funcionality for WPA2 RSN preauthentication with the expected and recommended settings with the only difference so far with what should be enabled by default to disable Opportunistic Key Caching. Disabling the PMKSA cache should mean the STA could not roam off and back onto the AP that had PMKSA caching disabled and would require a full authentication cycle. This fixes this for WPA2 networks with RSN preauthentication enabled. This change should be applied to AA as well as trunk. TL DR; The issue described on the forum has to do with failure of a STA being able to try to authenticate again with the AP if it failed its first try. This may have been an issue with hostapd in 2009 but as per some tests I cannot reproduce this today on a WPA2 network. The issue described on the ticket alludes to a security issue with the design of using a Radius server to authenticate to an AP. The issue vaguely alludes to the circumstances of zapping a user, deleting their authentication credentials to log in to the network, and that if RSN preauthentication is enabled with PMKSA caching that the user that was zapped would still be able to authenticate. Lets treat these as separate issues. I cannot reproduce the first issue reported on the forums of not being able to authenticate anymore on a WPA2 network. The issue reported on the ticket modified WPA2 RSN preauthentication by adding two fields to the hostapd configuration if auth_cache was enabled: * disable_pmksa_caching=1 * okc=0 The first one disables PMKSA authentication cache. The second one disables Opportunistic Key Caching. The issue reported on the ticket was fixed by implementing a workaround in hostapd's configuration. Disabling PMKSA caching breaks proper use of WPA2 RSN pre authentication. The usage of disable_pmksa_caching=1 prevents hostapd from adding PMKSA entries into its cache when a successful 802.1x authentication occurs. In practice RSN preauthentication would trigger a STA to perform authentication with other APs on the same SSID, it would then have its own supplicant PMKSA cache held. If a STA roams between one AP to another no new authenitcation would need to be performed as the new AP would already have authenticated the STA. The purpose of the PMKSA cache on the AP side would be for the AP to use the same PMKID for a STA when the STA roams off onto another BSSID and later comes back to it. Disabling Opportunistic Key Caching could help the reported issue as well but its not the correct place to address this. Opportunistic Key Caching enables an AP with different interfaces to share the PMKSA cache. Its a technical enhancement and disabling it would be useful to let a testing suite properly test for RSN preauthentication given that otherwise Opportunistic Key Caching would enable an interface being tested to derive its own derive the PMKSA entry. In production though okc=1 should be enabled to help with RSN preauthentication. The real fix for this particular issue outside of the scope of hostapd's configuration and it should not be dealt with as a workaround to its configuration and breaking expected RSN preauthentication and technical optimizations. Revert this change and enable users to pick and choose to enable or disable disable_pmksa_caching and okc expecting them to instead have read clearly more what these do. As for the core issure ported, the correct place to fix this is to enable a sort of messaging between the RADIUS server and its peers so that if caching for authentication is enabled that cache can be cleared upon user credential updates. Updating a user password (not just zapping a user) is another possible issue that would need to be resolved here. Another part of the solution might be to reduce the cache timing to account for any systematic limitations (RADIUS server not able to ask peers to clear cache might be one). [0] https://dev.openwrt.org/changeset/33359 [1] https://forum.openwrt.org/viewtopic.php?id=19596 [2] http://wireless.kernel.org/en/users/Documentation/hostapd#IEEE_802.11i.2FRSN.2FWPA2_pre-authentication [3] http://wireless.kernel.org/en/users/Documentation/wpa_supplicant#RSN_preauthentication [4] http://wiki.openwrt.org/doc/recipes/rsn_preauthentication Signed-off-by: Luis R. Rodriguez <mcgrof@do-not-panic.com> git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38336 3c298f89-4303-0410-b956-a3cf2f4a3e73
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-09 05:02:44 +0000