Radius DAS won't work

Robert Plestenjak robert.plestenjak at xlab.si
Thu Feb 20 09:13:26 EST 2014


Great news, thanks!

- Robert

----- Original Message -----
From: "Jouni Malinen" <j at w1.fi>
To: hostap at lists.shmoo.com
Sent: Thursday, February 20, 2014 2:04:59 PM
Subject: Re: Radius DAS won't work

On Thu, Feb 20, 2014 at 10:43:29AM +0100, Robert Plestenjak wrote:
> PMKSA cache may not be acting properly. After it receives disconnect-message, connection is broken but then it accepts client by authenticating it with data from cache.

> Hostapd should probably ignore cached identity data in case of disconnect-message?

Agreed. PMKSA cache entry should have been removed when processing
Disconnect-Request. This is now implemented in the development tree. By
the way, there is also support for NAS identification attributes, so it
should be fine to include NAS-IP-Address as well.
 
-- 
Jouni Malinen                                            PGP id EFC895FA
_______________________________________________
HostAP mailing list
HostAP at lists.shmoo.com
http://lists.shmoo.com/mailman/listinfo/hostap


More information about the HostAP mailing list