RADIUS server: Add EAP-Key-Name into Access-Accept

If the EAP Session-ID is available, add it into Access-Accept
(EAP-Key-Name attribute). This is needed for MACsec.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

diff --git a/src/radius/radius_server.c b/src/radius/radius_server.c
index d352f26eee6fa74c7818807577b79eccb67dd4b9..e0c0d82306fceabfb4f7d31559cee2e6293240ed 100644 (file)
--- a/src/radius/radius_server.c
+++ b/src/radius/radius_server.c
@@ -1136,6 +1136,13 @@ radius_server_encapsulate_eap(struct radius_server_data *data,
                                              len)) {
                        RADIUS_DEBUG("Failed to add MPPE key attributes");
                }
+
+               if (sess->eap_if->eapSessionId &&
+                   !radius_msg_add_attr(msg, RADIUS_ATTR_EAP_KEY_NAME,
+                                        sess->eap_if->eapSessionId,
+                                        sess->eap_if->eapSessionIdLen)) {
+                       RADIUS_DEBUG("Failed to add EAP-Key-Name attribute");
+               }
        }
 
 #ifdef CONFIG_HS20