diff options
| author | Lev A. Melnikovsky | 2024-08-08 18:22:58 +0000 |
|---|---|---|
| committer | Hauke Mehrtens | 2024-09-22 21:25:14 +0000 |
| commit | b0aecfaa4fd710df2dec9ceb90c3a6ebd97dcb7e (patch) | |
| tree | 2519a2a5a3bbe27616f24fa7643becdaddb9a813 | |
| parent | adb641e57856ded185e7b34a69801511a0ddaa84 (diff) | |
| download | openwrt-b0aecfaa4fd710df2dec9ceb90c3a6ebd97dcb7e.tar.gz | |
hostapd-common: add missing ingredients for standalone EAP server
Namely radius_server_auth_port and radius_server_clients arguments. Below is a working config example:
config wifi-iface 'enterprise1'
option device 'radio1'
option mode 'ap'
option network 'lan'
option ssid 'openwrt'
option encryption 'wpa2'
option dh_file '/etc/hostapd/dh.pem'
option eap_server '1'
option eap_user_file '/etc/hostapd/eap_user'
option ca_cert '/etc/hostapd/ca.pem'
option server_cert '/etc/hostapd/server.crt'
option private_key '/etc/hostapd/server.key'
option radius_server_clients '/etc/hostapd/radius_clients'
option radius_server_auth_port 1812
config wifi-iface 'enterprise2'
option device 'radio2'
option mode 'ap'
option network 'lan'
option ssid 'openwrt'
option encryption 'wpa2'
option dh_file '/etc/hostapd/dh.pem'
option auth_server '127.0.0.1'
option auth_secret 'radius_secret'
option auth_cache '0'
Signed-off-by: Lev A. Melnikovsky <melnikovsky@gmail>
Link: https://github.com/openwrt/openwrt/pull/16112
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
| -rw-r--r-- | package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh b/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh index 232f9021b9..32b9d9d082 100644 --- a/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh +++ b/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh @@ -376,8 +376,8 @@ hostapd_common_add_bss_config() { config_add_array radius_auth_req_attr config_add_array radius_acct_req_attr - config_add_int eap_server - config_add_string eap_user_file ca_cert server_cert private_key private_key_passwd server_id + config_add_int eap_server radius_server_auth_port + config_add_string eap_user_file ca_cert server_cert private_key private_key_passwd server_id radius_server_clients config_add_boolean fils config_add_string fils_dhcp @@ -571,7 +571,7 @@ hostapd_set_bss_options() { multi_ap multi_ap_backhaul_ssid multi_ap_backhaul_key skip_inactivity_poll \ ppsk airtime_bss_weight airtime_bss_limit airtime_sta_weight \ multicast_to_unicast_all proxy_arp per_sta_vif \ - eap_server eap_user_file ca_cert server_cert private_key private_key_passwd server_id \ + eap_server eap_user_file ca_cert server_cert private_key private_key_passwd server_id radius_server_clients radius_server_auth_port \ vendor_elements fils ocv apup set_default fils 0 @@ -1151,6 +1151,8 @@ hostapd_set_bss_options() { [ -n "$private_key" ] && append bss_conf "private_key=$private_key" "$N" [ -n "$private_key_passwd" ] && append bss_conf "private_key_passwd=$private_key_passwd" "$N" [ -n "$server_id" ] && append bss_conf "server_id=$server_id" "$N" + [ -n "$radius_server_clients" ] && append bss_conf "radius_server_clients=$radius_server_clients" "$N" + [ -n "$radius_server_auth_port" ] && append bss_conf "radius_server_auth_port=$radius_server_auth_port" "$N" fi set_default multicast_to_unicast_all 0 |