hostapd: enable CTRL_IFACE_MIB for hostapd-full
[openwrt/staging/dedeckeh.git] / package / network / services / hostapd / files / hostapd.sh
index 7335e75fd5f378583a08d137cfd23b83987499ae..f03b98ff85b8732bf5439d5b61bf9b58d725a7ba 100644 (file)
@@ -212,14 +212,19 @@ hostapd_common_add_bss_config() {
 
        config_add_string wpa_psk_file
 
+       config_add_int multi_ap
+
        config_add_boolean wps_pushbutton wps_label ext_registrar wps_pbc_in_m1
        config_add_int wps_ap_setup_locked wps_independent
        config_add_string wps_device_type wps_device_name wps_manufacturer wps_pin
+       config_add_string multi_ap_backhaul_ssid multi_ap_backhaul_key
 
        config_add_boolean ieee80211v wnm_sleep_mode bss_transition
        config_add_int time_advertisement
        config_add_string time_zone
 
+       config_add_boolean ieee80211k rrm_neighbor_report rrm_beacon_report
+
        config_add_boolean ieee80211r pmk_r1_push ft_psk_generate_local ft_over_ds
        config_add_int r0_key_lifetime reassociation_deadline
        config_add_string mobility_domain r1_key_holder
@@ -249,7 +254,7 @@ hostapd_set_bss_options() {
 
        wireless_vif_parse_encryption
 
-       local bss_conf
+       local bss_conf bss_md5sum
        local wep_rekey wpa_group_rekey wpa_pair_rekey wpa_master_rekey wpa_key_mgmt
 
        json_get_vars \
@@ -261,7 +266,8 @@ hostapd_set_bss_options() {
                macfilter ssid utf8_ssid wmm uapsd hidden short_preamble rsn_preauth \
                iapp_interface eapol_version dynamic_vlan ieee80211w nasid \
                acct_server acct_secret acct_port acct_interval \
-               bss_load_update_period chan_util_avg_period sae_require_mfp
+               bss_load_update_period chan_util_avg_period sae_require_mfp \
+               multi_ap multi_ap_backhaul_ssid multi_ap_backhaul_key
 
        set_default isolate 0
        set_default maxassoc 0
@@ -278,7 +284,8 @@ hostapd_set_bss_options() {
        set_default bss_load_update_period 60
        set_default chan_util_avg_period 600
        set_default utf8_ssid 1
-       
+       set_default multi_ap 0
+
        append bss_conf "ctrl_interface=/var/run/hostapd"
        if [ "$isolate" -gt 0 ]; then
                append bss_conf "ap_isolate=$isolate" "$N"
@@ -298,6 +305,7 @@ hostapd_set_bss_options() {
        append bss_conf "ignore_broadcast_ssid=$hidden" "$N"
        append bss_conf "uapsd_advertisement_enabled=$uapsd" "$N"
        append bss_conf "utf8_ssid=$utf8_ssid" "$N"
+       append bss_conf "multi_ap=$multi_ap" "$N"
 
        [ "$tdls_prohibit" -gt 0 ] && append bss_conf "tdls_prohibit=$tdls_prohibit" "$N"
 
@@ -420,6 +428,9 @@ hostapd_set_bss_options() {
        [ "$wps_pushbutton" -gt 0 ] && append config_methods push_button
        [ "$wps_label" -gt 0 ] && append config_methods label
 
+       # WPS not possible on Multi-AP backhaul-only SSID
+       [ "$multi_ap" = 1 ] && wps_possible=
+
        [ -n "$wps_possible" -a -n "$config_methods" ] && {
                set_default ext_registrar 0
                set_default wps_device_type "6-0050F204-1"
@@ -442,6 +453,19 @@ hostapd_set_bss_options() {
                append bss_conf "wps_independent=$wps_independent" "$N"
                [ -n "$wps_ap_setup_locked" ] && append bss_conf "ap_setup_locked=$wps_ap_setup_locked" "$N"
                [ "$wps_pbc_in_m1" -gt 0 ] && append bss_conf "pbc_in_m1=$wps_pbc_in_m1" "$N"
+               [ "$multi_ap" -gt 0 ] && [ -n "$multi_ap_backhaul_ssid" ] && {
+                       append bss_conf "multi_ap_backhaul_ssid=\"$multi_ap_backhaul_ssid\"" "$N"
+                       if [ -z "$multi_ap_backhaul_key" ]; then
+                               :
+                       elif [ ${#multi_ap_backhaul_key} -lt 8 ]; then
+                               wireless_setup_vif_failed INVALID_WPA_PSK
+                               return 1
+                       elif [ ${#multi_ap_backhaul_key} -eq 64 ]; then
+                               append bss_conf "multi_ap_backhaul_wpa_psk=$multi_ap_backhaul_key" "$N"
+                       else
+                               append bss_conf "multi_ap_backhaul_wpa_passphrase=$multi_ap_backhaul_key" "$N"
+                       fi
+               }
        }
 
        append bss_conf "ssid=$ssid" "$N"
@@ -467,6 +491,17 @@ hostapd_set_bss_options() {
                append bss_conf "bss_transition=$bss_transition" "$N"
        fi
 
+       json_get_vars ieee80211k
+       set_default ieee80211k 0
+       if [ "$ieee80211k" -eq "1" ]; then
+               json_get_vars rrm_neighbor_report rrm_beacon_report
+
+               set_default rrm_neighbor_report 1
+               set_default rrm_beacon_report 1
+               append bss_conf "rrm_neighbor_report=$rrm_neighbor_report" "$N"
+               append bss_conf "rrm_beacon_report=$rrm_beacon_report" "$N"
+       fi
+
        if [ "$wpa" -ge "1" ]; then
                json_get_vars ieee80211r
                set_default ieee80211r 0
@@ -518,7 +553,14 @@ hostapd_set_bss_options() {
                        append bss_conf "rsn_preauth=1" "$N"
                        append bss_conf "rsn_preauth_interfaces=$network_bridge" "$N"
                else
-                       set_default auth_cache 0
+                       case "$auth_type" in
+                       sae|psk-sae|owe)
+                               set_default auth_cache 1
+                       ;;
+                       *)
+                               set_default auth_cache 0
+                       ;;
+                       esac
                fi
 
                append bss_conf "okc=$auth_cache" "$N"
@@ -585,6 +627,9 @@ hostapd_set_bss_options() {
                }
        }
 
+       bss_md5sum=$(echo $bss_conf | md5sum | cut -d" " -f1)
+       append bss_conf "config_id=$bss_md5sum" "$N"
+
        append "$var" "$bss_conf" "$N"
        return 0
 }
@@ -640,7 +685,7 @@ wpa_supplicant_prepare_interface() {
 
        _wpa_supplicant_common "$1"
 
-       json_get_vars mode wds
+       json_get_vars mode wds multi_ap
 
        [ -n "$network_bridge" ] && {
                fail=
@@ -649,7 +694,7 @@ wpa_supplicant_prepare_interface() {
                                fail=1
                        ;;
                        sta)
-                               [ "$wds" = 1 ] || fail=1
+                               [ "$wds" = 1 -o "$multi_ap" = 1 ] || fail=1
                        ;;
                esac
 
@@ -675,6 +720,12 @@ wpa_supplicant_prepare_interface() {
                country_str="country=$country"
        }
 
+       multiap_flag_file="${_config}.is_multiap"
+       if [ "$multi_ap" = "1" ]; then
+               touch "$multiap_flag_file"
+       else
+               [ -e "$multiap_flag_file" ] && rm "$multiap_flag_file"
+       fi
        wpa_supplicant_teardown_interface "$ifname"
        cat > "$_config" <<EOF
 $ap_scan
@@ -716,9 +767,20 @@ wpa_supplicant_add_network() {
        json_get_vars \
                ssid bssid key \
                basic_rate mcast_rate \
-               ieee80211w ieee80211r
+               ieee80211w ieee80211r \
+               multi_ap
+
+       case "$auth_type" in
+               sae|owe|eap192|eap-eap192)
+                       set_default ieee80211w 2
+               ;;
+               psk-sae)
+                       set_default ieee80211w 1
+               ;;
+       esac
 
        set_default ieee80211r 0
+       set_default multi_ap 0
 
        local key_mgmt='NONE'
        local enc_str=
@@ -752,10 +814,13 @@ wpa_supplicant_add_network() {
 
        [ "$_w_mode" = "adhoc" -o "$_w_mode" = "mesh" ] && append network_data "$_w_modestr" "$N$T"
 
+       [ "$multi_ap" = 1 -a "$_w_mode" = "sta" ] && append network_data "multi_ap_backhaul_sta=1" "$N$T"
+
        case "$auth_type" in
                none) ;;
                owe)
                        hostapd_append_wpa_key_mgmt
+                       key_mgmt="$wpa_key_mgmt"
                ;;
                wep)
                        local wep_keyidx=0
@@ -888,21 +953,19 @@ EOF
 }
 
 wpa_supplicant_run() {
-       local ifname="$1"; shift
+       local ifname="$1"
+       local hostapd_ctrl="$2"
 
        _wpa_supplicant_common "$ifname"
 
-       /usr/sbin/wpa_supplicant -B \
-               ${network_bridge:+-b $network_bridge} \
-               -P "/var/run/wpa_supplicant-${ifname}.pid" \
-               -D ${_w_driver:-wext} \
-               -i "$ifname" \
-               -c "$_config" \
-               -C "$_rpath" \
-               "$@"
+       ubus call wpa_supplicant.$phy config_add "{ \
+               \"driver\": \"${_w_driver:-wext}\", \"ctrl\": \"$_rpath\", \
+               \"iface\": \"$ifname\", \"config\": \"$_config\" \
+               ${network_bridge:+, \"bridge\": \"$network_bridge\"} \
+               ${hostapd_ctrl:+, \"hostapd_ctrl\": \"$hostapd_ctrl\"} \
+               }"
 
        ret="$?"
-       wireless_add_process "$(cat "/var/run/wpa_supplicant-${ifname}.pid")" /usr/sbin/wpa_supplicant 1
 
        [ "$ret" != 0 ] && wireless_setup_vif_failed WPA_SUPPLICANT_FAILED
 
@@ -910,5 +973,5 @@ wpa_supplicant_run() {
 }
 
 hostapd_common_cleanup() {
-       killall hostapd wpa_supplicant meshd-nl80211
+       killall meshd-nl80211
 }