Commit Graph

321 Commits (2dfb3a4f2a41a936f1f2b58e63388c48fc890355)

Author SHA1 Message Date
Hauke Mehrtens 6a827ac101 samaba36: do not build libtevent
This fixes a build error on some mips systems.

This closes #15769.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40652 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-05-01 21:17:56 +00:00
Hauke Mehrtens 7d751eb0b7 samba: update to version 3.6.23
This updates samba to the most recent minor version.
This patch is based on a patch by Anton van Bohemen <avbohemen@ziggo.nl>

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40618 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-05-01 12:17:52 +00:00
Hauke Mehrtens 5d1d8efab0 authsae: Update to latest version
Ping tested, add a cool fix
295164a837

Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40579 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-04-27 20:49:14 +00:00
Felix Fietkau ebabaedd67 hostapd: fix eglibc 2.15 support
This patch fixes compilation failure for hostapd when using eglibc 2.15.

Signed-off-by: Zachery Stoddard <zacherystoddard@gmail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40575 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-04-27 18:30:50 +00:00
Felix Fietkau 27a58eb4ae hostapd: update to version 2014-04-24, fixes some dfs related issues
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40571 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-04-26 19:48:06 +00:00
Steven Barth c4d4aef229 odhcpd: better dhcpv6 client-compatibility (thanks Hans Dedecker)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40567 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-04-24 09:36:01 +00:00
John Crispin b41d91bff6 802.11s: fix authsae support in netifd
This patch implements support for 802.11s protected mesh wireless networks (using authsae) in the netifd framework.

Until meshd-nl80211 implements a proper -P option for the PID file, this uses shell backgrounding in order to be able to get the PID for the process.

Signed-off-by: Vittorio Gambaletta <openwrt@vittgam.net>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40497 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-04-12 21:22:17 +00:00
Felix Fietkau df3937062b hostapd: fix "bad number" error due to missing wps_pbc_in_m1 option (since r39995)
r39995 introduced a new parameter wps_pbc_in_m1 to wifi wps config, but
apparently did not provide a default value 0.

When that option's non-existing value is later evaluated in
/lib/netifd/hostapd.sh, it causes the "bad number" error to be logged in
syslog if user has not set the wps_pbc_in_m1 option. The error materialises
only if user has enabled wps.
    Sat Apr 12 13:25:01 2014 daemon.notice netifd: radio1 (1254): sh: bad number
    Sat Apr 12 13:25:01 2014 daemon.notice netifd: radio0 (1253): sh: bad number

Discussion in bug 15508: https://dev.openwrt.org/ticket/15508#comment:3

Error is caused by line 282:
https://dev.openwrt.org/browser/trunk/package/network/services/hostapd/files/netifd.sh#L282

My patch sets the parameter's default value to 0, which does nothing. The
default might also be set a bit later in the function, but this felt like the
most clear place to do that.

Signed-off-by hnyman <hannu.nyman@iki.fi>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40469 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-04-12 14:28:34 +00:00
Jo-Philipp Wich a417886bdc uhttpd: do not attempt to configure Lua handler if referenced file does not exist
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40457 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-04-11 16:13:27 +00:00
Steven Barth 1898acd9b4 odhcpd: use correct defaults for interfaces not in UCI
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40435 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-04-09 12:29:43 +00:00
Steven Barth c580cc13d7 odhcpd: improve managed PD
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40395 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-04-06 14:34:45 +00:00
Felix Fietkau 1617cf7da2 hostapd: update to version 2014-04-04
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40394 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-04-06 12:13:55 +00:00
Steven Barth 72b2e82419 odhcpd: add preliminary support for managed DHCPv6-PD and CER-ID
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40355 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-04-01 18:52:09 +00:00
John Crispin 09287d5129 samba36: revert r40341
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40343 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-30 19:05:25 +00:00
John Crispin 8b51cfac71 samba: update to 3.6.23
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40341 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-30 19:03:12 +00:00
Felix Fietkau a273f66de7 dropbear: move options.h editing to Build/Configure
fixes incremental build with change to CONFIG_DROPBEAR_ECC
drop --with-shared which is unknown to configure

Patch by Catalin Patulea <cat@vv.carleton.ca>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40300 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-29 17:10:52 +00:00
Felix Fietkau 31c24e7253 dropbear: add options SSHKeepAlive and IdleTimeout.
Without timeout mechanism, if ssh client disconnected without sending
FIN or RST, forked dropbear servers would hang there for
KEX_RETRY_TIMEOUT seconds (8 hours).

TCP keepalive is not implemented in dropbear yet, thus the name
SSHKeepAlive.

300 seconds in this patch is selected from the default value of
ServerAliveInterval for Debian ssh client (See man ssh_config).

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40299 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-29 17:05:35 +00:00
Felix Fietkau 49be87f44e dropbear: fix interface config setting
Patch from #15070

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40298 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-29 16:59:33 +00:00
Felix Fietkau fa81f88bd4 dropbear: update to 2014.63
Upstream changelog:
https://matt.ucc.asn.au/dropbear/CHANGES

This adds elliptic curve cryptography (ECC) support as an option, disabled
by default.

dropbear mips 34kc uClibc binary size:
before: 161,672 bytes
after, without ECC (default): 164,968
after, with ECC: 198,008

Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40297 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-29 16:59:26 +00:00
Felix Fietkau 58933441da uhttpd: update to latest version, improves cgi path handling
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40005 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-22 19:38:48 +00:00
Felix Fietkau 1a4dd4ddff uhttpd: update to latest version, fixes HEAD requests to CGI scripts
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@40003 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-21 20:49:56 +00:00
Felix Fietkau b0126e4395 hostapd: add pbc_in_m1 option
Option pbc_in_m1 is being used as a WPS capability discovery
workaround for PBC with Windows 7.
Add possibility to enable this workaround from UCI.

To enable it, turn on wps and set wps_pbc_in_m1 parameter to 1.

Signed-off-by: Pawel Kulakowski <pawel.kulakowski@tieto.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39995 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-21 15:55:03 +00:00
Felix Fietkau c97013b87b ead: clean up
Remove unused variables
Correct some (non important) memory leaks
Remove fclose(NULL)
Correct possible out of bound access

spotted with cppcheck

Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39994 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-21 15:54:59 +00:00
Felix Fietkau dd4175bcc1 ead: set_nonblock() is doing nothing (typo)
spotted with cppcheck

Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39993 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-21 15:54:56 +00:00
Felix Fietkau 8fe5646e4f ppp: remove ppp requirement from chat
This patch removes dependancy of PPP from chat application as chat application can be used for other serial communication as well that is not dependant on PPP and therefore one should be able to install chat without PPP. There also are no dependencies within chat application for PPP.

Signed-off-by: Oskari Rauta <oskari.rauta at gmail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39992 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-21 15:54:52 +00:00
Felix Fietkau 137c4262e8 pppd: fix build errors with musl
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39963 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-20 13:51:36 +00:00
Steven Barth c8564bfc33 odhcpd: fix more segfaults + ubus interaction
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39960 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-20 12:25:17 +00:00
Steven Barth d903c5a77b odhcpd: fix possible segfaults
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39958 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-20 09:39:00 +00:00
Felix Fietkau c8457cf43a polarssl: update to version 1.3.4 and add openssl compat patch
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39930 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-14 15:05:46 +00:00
John Crispin 36deac18a4 72ca3bfc401a4f1b695dcc86640dddee62716cea contained too many files
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39908 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-13 07:42:59 +00:00
John Crispin 2b77148377 fstools: add the new fstools package
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39895 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-12 19:32:51 +00:00
Felix Fietkau 402a931919 openvpn: make size optimization configurable
Signed-off-by: Christoph Kottke <christoph.kottke@gmx.de>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39872 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-11 12:07:17 +00:00
Steven Barth 74cecba0d9 odhcpd/odhcp6c: fix HMAC-MD5 in DHCPv6-Reconfigure
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39868 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-03-11 08:21:58 +00:00
Felix Fietkau cb82ccb277 hostapd: fix deletion of wds sta interfaces in AP mode
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39765 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-28 14:43:53 +00:00
Felix Fietkau 314909f7c0 hostapd: link against librt if eglibc is used
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39741 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-24 15:03:06 +00:00
Steven Barth 97815a6e18 odhcpd: avoid the unspecificed address being advertised as DNS
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39740 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-24 13:37:11 +00:00
Steven Barth 884cd62669 odhcpd: fix DNS-server and MSR-entries in RA
Similarly to the previously broken address pools, DNS-servers and some
MSRs could be advertised incorrectly as well. This is now fixed.

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39739 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-24 13:33:45 +00:00
Steven Barth b7a8cc562f odhcpd: fix wrong address pool being advertised
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39651 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-21 18:02:25 +00:00
John Crispin 7e90362903 relayd: add uci validation
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39623 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-18 13:34:12 +00:00
John Crispin 9450ebce2b hostapd: add validation rules to wireless handler
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39620 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-18 13:33:59 +00:00
John Crispin 4aff5a4e3d ppp: add validation rules to proto handler
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39619 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-18 13:33:56 +00:00
John Crispin bed28742bc authsae: update to latest version
Signed-off-by: Stefan May <smay@4finger.net>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39608 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-18 13:33:13 +00:00
Steven Barth e828e7aaf3 odhcpd: Fix RA interval + add support for prefixes > 64 and < 97
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39604 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-17 20:30:29 +00:00
Hauke Mehrtens fbcb8cc986 authsae: Update authsae to latest version
Only compile tested but the changes are minimal
f5693a3...1d1a122

Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39518 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-06 22:20:20 +00:00
Steven Barth 03fde8dd10 odhcpd: fix homenet dhcpv6 filter
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39479 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-05 15:42:02 +00:00
Felix Fietkau 5eca73f476 wifi: Introduce 802.11ac support
This patch introduces 802.11ac support to mac80211 and hostapd. The split of
VHT160 in two 80 MHz bands is not yet supported, since it requires an
additional user supplied parameter for the channel of the second band.

Signed-off-by: Matti Laakso <malaakso@elisanet.fi>
Signed-off-by: Simon Wunderlich <simon@open-mesh.com>
[sven@open-mesh.com: Rebased patch, merged htmode and vhtmode,
removed special hwmode, replaced uci vht_capab list with overwritable
autoconfig, fixed hostapd integration, fixed commit description, add HT40+/-
for VHT modes, add VHT40 center_freq autoconfig, refactored major parts]
Signed-off-by: Sven Eckelmann <sven@open-mesh.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39456 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-03 13:31:44 +00:00
Felix Fietkau 2919295941 hostapd: do not get basic_rate as a simple string variable
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39448 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-02 14:25:02 +00:00
Steven Barth 0655f42bc3 odhcpd: fix internal router DHCPv4 filter
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39441 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-02-01 13:33:05 +00:00
Felix Fietkau 254bb2efe5 hostapd: fix basic rate list handling with netifd
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39431 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-31 10:43:18 +00:00
Felix Fietkau fdd820a54a hostapd: fix frequency selection for ap+sta
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39426 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-30 13:21:30 +00:00
Jo-Philipp Wich e2dcb6b7ec lldpd: build without libreadline
lldpcli uses libreadline for tab completion. libreadline take around 110kb.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39421 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-29 13:10:39 +00:00
Jo-Philipp Wich 8d3d348e63 lldpd: add missing lldpcli
lldpd calls on startup lldpcli to configure itself.

Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39420 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-29 13:10:35 +00:00
Jo-Philipp Wich fe40759a80 lldpd: push to version 0.7.7
Signed-off-by: Alexander Couzens <lynxis@fe80.eu>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39419 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-29 13:10:31 +00:00
Jo-Philipp Wich b972c8f969 hostapd: Fix 80211w setup with netifd
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39412 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-28 21:12:45 +00:00
Jo-Philipp Wich 3e82a6e0ff hostapd: Fix basic_rate setup with netifd
Signed-off-by: Helmut Schaa <helmut.schaa@googlemail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39411 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-28 21:12:36 +00:00
Steven Barth 52fafbe70b odhcpd: fix certain config values being overwritten
Thanks to Hans Dedecker for the fix.

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39371 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-23 11:02:18 +00:00
Steven Barth c5a32525eb odhcpd: Fix a memory corruption when static leases are used
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39319 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-18 10:11:03 +00:00
Steven Barth b5449fcb1e odhcpd: be even less verbose and don't start unnecessary relays
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39315 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-17 19:05:54 +00:00
Steven Barth 8abf4d5c65 odhcpd: fix logspam
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39314 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-17 15:53:43 +00:00
Steven Barth 6e6ceb1473 odhcpd: use hybrid management mode by default
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39313 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-17 15:48:02 +00:00
Steven Barth 39ecf08d2d dnsmasq: add dnsmasq.d config folder & improve odhcpd coexistence
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39312 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-17 14:00:09 +00:00
Steven Barth 259bddfde7 odhcpd: several bugfixes and improved integration
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39308 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-17 13:59:51 +00:00
John Crispin 3c2c7eca1e hostapd: fix mcast_rate setting
Introduced by ("netifd: add wireless configuration support and port mac80211 to
the new framework")

Reported-by: René van Weert <r.vanweert@sowifi.com>
Signed-off-by: Antonio Quartulli <antonio@meshcoding.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39288 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-14 19:35:55 +00:00
John Crispin f5325b8a0c hostapd: fix frequency setting for IBSS/RSN
Introduced by ("netifd: add wireless configuration support and port mac80211 to
the new framework")

Reported-by: René van Weert <rene@sowifi.com>
Signed-off-by: Antonio Quartulli <antonio@meshcoding.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39231 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-12 12:07:11 +00:00
John Crispin d8f87323d2 samba: add browsable option
https://dev.openwrt.org/ticket/14682

Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39227 3c298f89-4303-0410-b956-a3cf2f4a3e73
2014-01-12 12:06:53 +00:00
Felix Fietkau ca641673c7 hostapd: fix mixed wep/wpa with netifd
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39174 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-28 11:07:37 +00:00
Felix Fietkau 9996673fda hostapd: fix the uci option name for ap isolate
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39173 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-28 11:07:28 +00:00
Felix Fietkau 2fcc4f3477 hostapd: fix wep with netifd
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39156 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-23 12:11:28 +00:00
Felix Fietkau e6a85bcd9a wpa_supplicant: fix interface combination parsing issues
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39155 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-21 19:42:45 +00:00
Jo-Philipp Wich da833133d3 dnsmasq: rework init procedure
- cache udhcp check results to speed up subsequent reloads
	- enable procd file tracking for /var/etc/dnsmasq.conf to only reload service if needed
	- implement reload action to only restart dnsmasq if /var/etc/dnsmasq.conf actually changed
	- launch dnsmasq from interface hotplug to avoid race conditions with network bringup

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39152 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-21 13:31:28 +00:00
Felix Fietkau 509c8d5226 hostapd: move old wifi setup scripts to hostapd-common-old
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39103 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-16 18:42:43 +00:00
Jo-Philipp Wich 0005aadc83 dnsmasq: switch to /lib/functions/network.sh
This commit changes the dnsmasq init script to use the interface
status exposed by netifd. The old references to scan_interfaces()
and (indirect) accesses to uci state variables are removed and
replaced with corresponding network_*() calls.

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39101 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-16 16:47:41 +00:00
Jo-Philipp Wich c5340d1dbf uhttpd: don't process ubus_* and lua_* options if corresponding plugin is not installed (#14618)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39057 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-15 15:32:37 +00:00
Jo-Philipp Wich 49cbd47a5c hostapd: fix short_preamble option
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39027 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-10 16:24:48 +00:00
Jo-Philipp Wich 8392c54e2e hostapd: properly parse wmm and hidden uci options (#14589)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@39005 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-08 20:51:21 +00:00
Steven Barth d2e17d996f odhcpd/6c: Add config menu for prefix class ext.
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38996 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-05 12:17:09 +00:00
Steven Barth 12f66d3324 odhcpd: Fix ubus integration
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38994 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-04 13:14:27 +00:00
Felix Fietkau 48fbe7cd69 hostapd: fix maclist processing with netifd
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38991 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-03 09:02:58 +00:00
Felix Fietkau 3fab0ab03f netifd: add wireless configuration support and port mac80211 to the new framework
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38988 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-02 16:41:03 +00:00
Felix Fietkau bbeadc25eb hostapd: change the wildcard for the hostapd control socket directory
prepare for using /var/run/hostapd instead of /var/run/hostapd-phy*

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38986 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-02 13:08:14 +00:00
Felix Fietkau a5b78a7edb wpa_supplicant: clean up hostapd control socket on exit to fix socket leak in ap+sta mode on wifi restarts
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38985 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-02 13:08:11 +00:00
Felix Fietkau 8b428d0899 hostapd: fix os_daemonize vs starting process race by creating the pid file in the parent
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38984 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-02 13:08:08 +00:00
Felix Fietkau 42370a3fa7 hostapd: always include p2p options in wpa_cli
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38981 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-12-02 13:07:46 +00:00
Felix Fietkau 4d6e9371a3 hostapd: add support for auto-channel selection
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38915 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-25 15:43:30 +00:00
Felix Fietkau 5d000ddd9e hostapd: update to version 2013-11-20
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38914 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-25 15:43:15 +00:00
John Crispin 00f0744743 pppd: Place plugin-specific options after `plugin name`.
Before this patch, if we specify a plugin specific option through
`pppd_options` in /etc/config/network, e.g. `rp_pppoe_verbose 1`, pppd
would quit with the following error in log.

    Wed Oct  9 09:42:58 2013 daemon.notice netifd: GORG (1689): /usr/sbin/pppd: unrecognized option 'rp_pppoe_verbose'
    Wed Oct  9 09:42:58 2013 daemon.err pppd[1689]: unrecognized option 'rp_pppoe_verbose'
    Wed Oct  9 09:42:58 2013 daemon.notice netifd: GORG (1689): pppd version 2.4.5
    Wed Oct  9 09:42:58 2013 daemon.notice netifd: GORG (1689): Usage: /usr/sbin/pppd [ options ], where options are:

This is due to the requirement that function add_option() should be
called by the plugin_init() function first before pppd can parse those
options.

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38911 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-25 14:09:16 +00:00
Felix Fietkau 6d79816d87 uhttpd: update to the latest version, fixes crashes in the ubus plugin
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38888 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-21 21:52:24 +00:00
Felix Fietkau 5e8561171f hostapd: remove random pool support - the entropy it gathers is questionable and we have better entropy sources on common platforms now
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38852 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-18 13:54:26 +00:00
John Crispin fdb2563eb3 procd: fixup 2 wrong option types
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38789 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-13 11:07:24 +00:00
John Crispin a79f9a758e procd: convert services to the new validation api
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38787 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-13 10:49:41 +00:00
Felix Fietkau 23e82fd7ba hostapd: remove #ifdef MULTICALL around ap+sta support code (to support separately installed supplicant+hostapd)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38782 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-12 22:11:14 +00:00
Jo-Philipp Wich 781c17117a uhttpd: return after processing -d switch, only set ubus prefix if not already defined
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38743 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-11 19:14:01 +00:00
John Crispin a58e136635 uhttp: add ubus.default
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38741 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-11 18:12:26 +00:00
John Crispin 8772424505 pppd: don't call modprobe at all from pppoatm
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38737 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-11 13:40:28 +00:00
John Crispin c77ae7ec32 uhttp: make the service auto respawn if it crashes
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38724 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-11 12:19:02 +00:00
John Crispin 7a06fe0b42 uhttp: make sure that the ubus module is loaded when when installed
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38723 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-11 12:18:58 +00:00
Jo-Philipp Wich a193e1c1eb dnsmasq: fix backward compatibility with existing configs
Changeset r36943 ("dnsmasq: use host-record instead of address") removed
the automatic domain expansion for config domain sections, this breaks
existing setups and alters the old behaviour in unexpected ways, therfore
restore behaviour of the current stable release.

Additionally handle fully qualified hostnames properly when setting up the
own hostrecord by stripping the local domain part form the given name
instead of unconditionally appending it, so that "example.lan" results
in "example example.lan" and not "example.lan example.lan.lan".

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38648 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-11-04 22:40:56 +00:00
Felix Fietkau acf5ed0269 openvpn: clean up and fix the init script
- clean up duplication of procd instance handling code
- using --cd *after* --config is rather pointless
- to be able to log errors properly, --syslog needs to be passed before --config
- tell procd about the generated or referenced config file instead of
  the uci file. this avoids having to restart all instances if only one
  of them changes.

Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38632 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-31 17:36:24 +00:00
Steven Barth 7002de6567 odhcpd: fix cleaning of configuration on reload
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38503 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-23 09:30:28 +00:00
Steven Barth 0cbcc1e6b2 odhcpd: various bugfixes
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38454 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-18 13:39:48 +00:00
Jo-Philipp Wich 9620e5bae9 wpa_supplicant: fix beacon_int configuration option
wpa_supplicant expects beacon_int instead of beacon_interval in its config
file.

Signed-off-by: Bruno Randolf <br1@einfach.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38451 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-18 11:47:47 +00:00
Steven Barth 7ba0aa8dcf odhcpd: add new experimental dhcp-server
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38428 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-16 09:03:55 +00:00
Jo-Philipp Wich 9ba3fcdf85 dropbear: add dropbear.nl mirror, provided by dropbear maintainer
Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38413 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-15 13:10:32 +00:00
Luka Perkov 731d18c6ed [package] openvpn: make comp_lzo a parameter
Possible parameters are yes, no and adaptive. See manpage for more information.

Signed-off-by: Philipp Borgers <borgers@mi.fu-berlin.de>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38412 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-15 12:42:58 +00:00
Jo-Philipp Wich 8a41acee91 openvpn-easy-rsa: restore essential patch to make it actually work on the target (#14324)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38411 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-15 12:23:21 +00:00
Jo-Philipp Wich c081113e44 dnsmasq: add option broadcast to host sections
There are certain consumer devices which are outliers in protocol conformance.
An example is Samsung bluray players, which require broadcast DHCP responses
(on Ethernet only, strangely not on Wifi).

By specifying:

config host
	...
	option broadcast 1

this will enable the response to be sent as an Ethernet broadcast and not as
a unicast.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38365 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-11 18:33:15 +00:00
Jo-Philipp Wich 5a8864448a ppp: correct module loaded check in proto_pptp_setup
proto_pptp_setup is responsible for loading the required modules to establish
a pptp connection to a foreign peer. The function checks whether all required
modules are already loaded, before actually loading them.

It seems that the filter being used to accomplish this, is not restrictive
enough in some cases. For instance when pptp nat helper modules are present on
a system, and already loaded before a pptp connection is enabled. Then the
search filter (possibly) returns the following for module=pptp, where actually
no matches are expected, resulting in the pptp.ko module not being loaded,
thereby failing to establish the pptp connection.

# module="pptp" ; grep "$module" /proc/modules
nf_nat_pptp 1312 0 - Live 0x86ce7000
nf_conntrack_pptp 3072 1 nf_nat_pptp, Live 0x86cb9000
nf_nat_proto_gre 784 1 nf_nat_pptp, Live 0x86cba000
nf_conntrack_proto_gre 2368 1 nf_conntrack_pptp, Live 0x86cbf000
nf_nat 9792 13 nf_nat_rtsp,nf_nat_tftp,nf_nat_sip,nf_nat_pptp,nf_nat_h323,nf_nat_proto_gre,nf_nat_amanda,nf_nat_irc,nf_nat_ftp,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,iptable_nat, Live 0x86ca8000
nf_conntrack 37264 31 nf_nat_rtsp,nf_conntrack_rtsp,nf_nat_tftp,nf_conntrack_tftp,nf_nat_snmp_basic,nf_conntrack_snmp,nf_nat_sip,nf_conntrack_sip,nf_nat_pptp,nf_conntrack_pptp,nf_nat_h323,nf_conntrack_h323,nf_conntrack_proto_gre,nf_nat_amanda,nf_conntrack_amanda,nf_conntrack_broadcast,nf_nat_irc,nf_conntrack_irc,nf_nat_ftp,nf_conntrack_ftp,ipt_MASQUERADE,iptable_nat,nf_nat,xt_helper,xt_connmark,xt_connbytes,xt_conntrack,xt_CT,xt_NOTRACK,xt_state,nf_conntrack_ipv4, Live 0x86c90000

The search filter can be made more accurate/restrictive, by requiring the
occurance of the exact name of the module at the beginning of a line in
/proc/modules.

# module="pptp" ; grep "^$module " /proc/modules
pptp 13296 2 - Live 0x86e80000

Signed-off-by: Tijs Van Buggenhout <tvb@able.be>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38358 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-10 14:58:12 +00:00
Jo-Philipp Wich 08715f05ef dropbear: update to 2013.59 (released 4 october 2013)
- drop mirror www.mirrors.wiretapped.net (not working anymore)
- drop patch 300-ipv6_addr_port_split.patch, included upstream
- refresh patches
- various upstream changes: http://matt.ucc.asn.au/dropbear/CHANGES

Signed-off-by: Catalin Patulea <cat@vv.carleton.ca>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38356 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-10 14:42:05 +00:00
Luka Perkov b883412931 [package] openvpn: rework initscript (fixes #14299)
Signed-off-by: Luka Perkov <luka@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38351 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-09 11:25:09 +00:00
Felix Fietkau 03dbfd74ae hostapd: recognize 8021x as an authentication mode
Currently, in order to configure the authentication daemon in
8021x mode, we need to set wireless.@wifi-iface[0].encryption="wpa"
Though it works it confuses folks as 8021x is using WEP
encryption and not WPA. Therefore the terminology itself is
confusing. This change adds 8021x as a recognized string for 8021x
authentication.

Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38339 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-08 11:09:52 +00:00
Felix Fietkau 7dbd213406 hostapd: add external registrar support
Setting wireless.@wifi-iface[N].ext_registrar=1 will enable UPNP
advertising and add an external registrar to the interface this vif
belongs to (br-lan if the vif is included in the LAN bridge). By
enabling this we append upnp_iface=xxx to the hostapd config file.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38338 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-08 11:09:48 +00:00
Felix Fietkau a8cf4fe00a hostapd: enable WPS2 support on hostapd-full.config
Enable CONFIG_WPS2 for hostapd. This is required to support
options like Virtual Push Button in WPS.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38337 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-08 11:09:44 +00:00
Felix Fietkau 66614d7572 hostapd: fix hostapd RSN preauthentication PMKSA caching
In 2009 OpenWrt's hostapd config added an "auth_cache" boolean
to be used to address a reported issue #12129 [0] on a forum [1].
The reported issue on the ticket is different that the one
described on the forum. The commit was r33359. This change broke
proper RSN preauthentication [2] [3] [4] expectations on hostapd's
configuration for WPA2 and this in turn disabled PMKSA caching and
Opportunistic Key Caching. This change:

  * Leaves the "auth_cache" to be used only for WPA networks for those
    looking to use this as a workaround to a reported issue but annotates
    a warning over its usage.

  * Separate "auth_cache" from WPA2 RSN preauthentication, leaving
    WPA2 RSN preauthentication to enabled only with "rsn_preauth" with
    the expected and recommended settings.

  * Adds a new WPA2 RSN preauthentication "rsn_preauth_testing" to
    be used when evaluating funcionality for WPA2 RSN preauthentication
    with the expected and recommended settings with the only difference
    so far with what should be enabled by default to disable Opportunistic
    Key Caching.

Disabling the PMKSA cache should mean the STA could not roam off and back
onto the AP that had PMKSA caching disabled and would require a full
authentication cycle. This fixes this for WPA2 networks with
RSN preauthentication enabled.

This change should be applied to AA as well as trunk.

  TL DR;

The issue described on the forum has to do with failure of a STA
being able to try to authenticate again with the AP if it failed
its first try. This may have been an issue with hostapd in 2009
but as per some tests I cannot reproduce this today on a WPA2
network.

The issue described on the ticket alludes to a security issue with the
design of using a Radius server to authenticate to an AP. The issue
vaguely alludes to the circumstances of zapping a user, deleting their
authentication credentials to log in to the network, and that if
RSN preauthentication is enabled with PMKSA caching that the user
that was zapped would still be able to authenticate.

Lets treat these as separate issues.

I cannot reproduce the first issue reported on the forums of not
being able to authenticate anymore on a WPA2 network.

The issue reported on the ticket modified WPA2 RSN preauthentication
by adding two fields to the hostapd configuration if auth_cache
was enabled:

  * disable_pmksa_caching=1
  * okc=0

The first one disables PMKSA authentication cache.
The second one disables Opportunistic Key Caching.

The issue reported on the ticket was fixed by implementing a workaround
in hostapd's configuration. Disabling PMKSA caching breaks proper use
of WPA2 RSN pre authentication. The usage of disable_pmksa_caching=1
prevents hostapd from adding PMKSA entries into its cache when a successful
802.1x authentication occurs. In practice RSN preauthentication would
trigger a STA to perform authentication with other APs on the same SSID,
it would then have its own supplicant PMKSA cache held. If a STA roams
between one AP to another no new authenitcation would need to be performed
as the new AP would already have authenticated the STA. The purpose of the
PMKSA cache on the AP side would be for the AP to use the same PMKID for
a STA when the STA roams off onto another BSSID and later comes back to it.

Disabling Opportunistic Key Caching could help the reported issue
as well but its not the correct place to address this. Opportunistic
Key Caching enables an AP with different interfaces to share the
PMKSA cache. Its a technical enhancement and disabling it would
be useful to let a testing suite properly test for RSN preauthentication
given that otherwise Opportunistic Key Caching would enable an
interface being tested to derive its own derive the PMKSA entry.
In production though okc=1 should be enabled to help with RSN
preauthentication.

The real fix for this particular issue outside of the scope of hostapd's
configuration and it should not be dealt with as a workaround to
its configuration and breaking expected RSN preauthentication and
technical optimizations. Revert this change and enable users to pick
and choose to enable or disable disable_pmksa_caching and okc expecting them
to instead have read clearly more what these do.

As for the core issure ported, the correct place to fix this is to
enable a sort of messaging between the RADIUS server and its peers
so that if caching for authentication is enabled that cache can be
cleared upon user credential updates. Updating a user password
(not just zapping a user) is another possible issue that would need
to be resolved here. Another part of the solution might be to reduce
the cache timing to account for any systematic limitations (RADIUS
server not able to ask peers to clear cache might be
one).

[0] https://dev.openwrt.org/changeset/33359
[1] https://forum.openwrt.org/viewtopic.php?id=19596
[2] http://wireless.kernel.org/en/users/Documentation/hostapd#IEEE_802.11i.2FRSN.2FWPA2_pre-authentication
[3] http://wireless.kernel.org/en/users/Documentation/wpa_supplicant#RSN_preauthentication
[4] http://wiki.openwrt.org/doc/recipes/rsn_preauthentication

Signed-off-by: Luis R. Rodriguez <mcgrof@do-not-panic.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38336 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-08 11:09:40 +00:00
Felix Fietkau 6ff7614c07 hostapd: Add WPS unconfigured & WPS pin method support
Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38335 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-08 11:09:36 +00:00
Felix Fietkau 21108bc210 hostapd: Add eap_reauth_period config option
This adds the eap_reauth_period to be used for modifying
the RADIUS server reauthentication authentication period,
a parameter that gets passed directly to the hostapd
configuration file.

Signed-off-by: Mathieu Olivari <mathieu@qca.qualcomm.com>
Signed-off-by: Luis R. Rodriguez <mcgrof@qca.qualcomm.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38334 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-08 11:09:27 +00:00
Luka Perkov 337f454532 [package] openvpn: switch to new procd init script style
Signed-off-by: Luka Perkov <luka@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38331 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-10-07 21:28:14 +00:00
Felix Fietkau b8672f84cb uhttpd: add a config option for using ustream-polarssl, and use it by default
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38250 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-09-29 11:26:09 +00:00
Felix Fietkau 3a931a5b0c uhttpd: fix appending https ports to cmdline
Otherwise it is started only on non-secure ports.

Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@neratec.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38171 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-09-25 07:44:48 +00:00
Luka Perkov cebf051302 [package] fix various init scripts
Changes include:

* removing unused variables
* replacing spaces with tabs where appropriate
* more consistency with variable declarations

Signed-off-by: Luka Perkov <luka@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38142 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-09-23 21:58:36 +00:00
John Crispin d330d9fac4 procd: convert various packages to procd style init.d scripts
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@38023 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-09-17 21:45:30 +00:00
Felix Fietkau e2a5d64c3e hostapd: adjust the md5sum for the uploaded source tarball (fixes #14155)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37990 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-09-14 20:07:35 +00:00
Jo-Philipp Wich 546a43923a uhttpd: udpat to git head
- fixes buffer corruption with JSON-RPC list calls
	- change JSON-RPC protocol to include the session ID into the call
	  attributes instead of passing it via the URL
	- forcibly pass effective session ID as "ubus_rpc_session" attribute
	  to called procedures
	- change ubus acl checking to conform with new ubus session namespace

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37962 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-09-13 13:24:45 +00:00
Vasilis Tsiligiannis 482f6fb9db lldpd: Add libbsd dependency when using eglibc
Signed-off-by: Vasilis Tsiligiannis <acinonyx@openwrt.gr>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37837 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-25 18:47:08 +00:00
Felix Fietkau a1fe46a80c hostapd: fix typo in version number
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37742 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-08 20:45:15 +00:00
Felix Fietkau fbf4f2e570 hostapd: fix ubus reconnect handling
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37741 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-08 20:45:12 +00:00
Felix Fietkau b6e54cd812 hostapd: add a build variant for wpa_supplicant with p2p (aka Wi-Fi Direct) support
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37739 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-08 16:24:50 +00:00
Felix Fietkau 58b0b6c534 hostapd: update to latest version (20130707)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37738 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-08 16:04:19 +00:00
Felix Fietkau 388917caf9 hostapd: Settings for DAE/CoA server
hostapd supports "Dynamic Authorization Extensions", making it possible
to forcibly disconnect a user by sending it a RADIUS "Disconnect-Request"
packet.

I've added three new variables to enable setting of the
"radius_das_client" and "radius_das_port" variables in the hostapd
configuration, which enable these extensions.

* dae_client - IP of the client that can send disconnect requests
* dae_secret - shared secret for DAE packets

These are combined into the "radius_das_client" option in hostapd.conf
To enable the server, both dae_client and dae_secret must be set.

* dae_port - optional, default value is 3799 as specified in RFC 5176

Signed-off-by: Martijn van de Streek <martijn@vandestreek.net>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37734 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-06 18:55:30 +00:00
Felix Fietkau 485af0c163 hostapd: Fix WDS/WEP usage
WEP in WDS is currently broken in hostapd. Add a patch
to fix the issue.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37733 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-06 17:59:12 +00:00
Felix Fietkau 2905bd034c hostapd: Refresh patches
Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37731 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-06 17:59:05 +00:00
Felix Fietkau 5e0ba1f79b hostapd: Add an option to disable beaconing
Add a patch for hostapd that introduces a config option
"start_disabled" which can be used to bring up an AP
interface with beaconing disabled. This is useful in
a Repeater-AP setup where the Repeater AP has to start
beaconing only after the WDS link has been established.

Signed-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37730 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-08-06 17:59:02 +00:00
Felix Fietkau 5cd74c5c9b uhttpd: update to the latest version, fixes a crash on early cgi/lua process termination
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37628 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-07-31 22:07:09 +00:00
Felix Fietkau ac4dea772d openvpn: update to 2.3.2
this patches updates openvpn to v2.3.2
and adds a PKG_MD5SUM to the Makefile

This release fixes a memory access violation when cipher none is used
on ar71xx - at least with my config

Signed-off-by: Peter Wagner <tripolar@gmx.at>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37560 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-07-26 12:35:22 +00:00
Felix Fietkau 6a732cad77 uhttpd: update to latest version, fixes issues with POST and keep-alive (#13940)
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37556 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-07-26 10:03:07 +00:00
Felix Fietkau 6fe49b24d1 authsae: add myself as a maintainer
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37555 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-07-26 10:03:03 +00:00
Felix Fietkau 2b073b7b73 authsae: adapt uci scripts to use authsae
This patch modifies the uci scripts to be able to
start meshd-nl80211 for encrypted mesh networks,
therefor a new script (authsae.sh) is inserted.

Signed-off-by: Emanuel Taube <emanuel.taube@gmail.com>
[etienne.champetier@free.fr: just update mac80211.sh path]
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37554 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-07-26 10:02:59 +00:00
Felix Fietkau a22105f7ce authsae 80211s authentication daemon
This patch adds authsae open80211s authentication daemon (http://open80211s.org)
It's a rework of Peter Naulls patch (http://patchwork.openwrt.org/patch/1350/)
I've excluded the sample conf file as it's useless when used with mac80211.sh (Emanuel Taube patch)
It now link against libnl-tiny instead of libnl (patch merged in authsae git)
Authsae is 58 Ko (OPENSSL_WITH_EC option adds 35Ko to libopenssl)

Signed-off-by: Peter Naulls <peter@chocky.org>
Signed-off-by: Etienne CHAMPETIER <etienne.champetier@free.fr>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37553 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-07-26 10:02:55 +00:00
Felix Fietkau e66785dcf8 ead: fix compile errors with recent kernels
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37482 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-07-20 12:56:07 +00:00
John Crispin 9af7d06947 dropbear: register a config.change trigger
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37245 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-07-11 17:00:40 +00:00
Jo-Philipp Wich 990e4f90d6 lldpd: upgrade to 0.7.5
lldpd 0.7.1 has several alignment issues that trip a system configured
to fault on misaligned accesses.  Version 0.7.5 fixes that along with a
few other minor issues.

Signed-off-by: John Szakmeister <john@szakmeister.net>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37168 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-07-04 16:57:03 +00:00
Jo-Philipp Wich 17a7b9cb50 hostapd: truncate default mac file before adding entries to it (#13797)
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37114 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-07-01 10:52:35 +00:00
Felix Fietkau 378caa3427 hostapd: fix multi-ssid and AP+STA, clean up code
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37111 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-30 21:01:13 +00:00
Felix Fietkau 5cdd493473 hostapd: update to latest git version
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37110 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-30 20:27:38 +00:00
John Crispin eed5ffcc11 hostapd: fix superflous coma
this cause the wps trigegr to be copied to the wrong place

https://dev.openwrt.org/ticket/13753

Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@37031 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-24 16:44:18 +00:00
John Crispin eaa7932386 hostapd: remove old button hotplug script
Signed-off-by: John Crispin <blogic@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36991 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-21 16:53:07 +00:00
Jo-Philipp Wich 49f5201b52 hostapd: correctly handle macfile uci option
Make hostapd.sh correctly handle the macfile uci option.

Such option specifies the macfile name to pass into the
hostapd configuration file. Moreover, if a maclist option
has been specified, copy the macfile before appending new
entries.

Signed-off-by: Antonio Quartulli <antonio@open-mesh.com>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36944 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-17 11:59:29 +00:00
Jo-Philipp Wich bf4c0b1b8a dnsmasq: use host-record instead of address
Using "--address" for individual host A records is broken, use "--host-record" instead.
The following patch changes dnsmasq.init to build individual host records using "--host-record" instead of "--address".

Signed-off-by: Adam Gensler <openwrt at gnslr.us>

[jow: shorter description, simplified shell script code]

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36943 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-17 11:55:30 +00:00
Jo-Philipp Wich f5a4945636 uhttpd: expose missing options to uci
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36932 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-13 11:55:12 +00:00
Steven Barth 5882e71509 ppp: correctly handle address when reloading
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36904 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-10 10:42:34 +00:00
Felix Fietkau 93ac2d0351 uhttpd: update to latest version, fixes CGI related crashes
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36817 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-01 21:43:06 +00:00