From: Jouni Malinen <jouni@qca.qualcomm.com>
Date: Thu, 20 Feb 2014 11:26:22 +0000 (+0200)
Subject: RADIUS DAS: Remove PMKSA entry on Disconnect-Request
X-Git-Tag: hostap_2_2~835
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=0d7c5e1dfc9f8d5106f79f6aa6983f8bf9fa4ffd;p=thirdparty%2Fhostap.git

RADIUS DAS: Remove PMKSA entry on Disconnect-Request

When a station is disconnected based on Disconnect-Request, it is better
to force the station to go through full EAP authentication if it tries
to reconnect.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
---

diff --git a/src/ap/hostapd.c b/src/ap/hostapd.c
index f9edf3b3f..dc2c79cc0 100644
--- a/src/ap/hostapd.c
+++ b/src/ap/hostapd.c
@@ -596,6 +596,8 @@ hostapd_das_disconnect(void *ctx, struct radius_das_attrs *attr)
 	if (sta == NULL)
 		return RADIUS_DAS_SESSION_NOT_FOUND;
 
+	wpa_auth_pmksa_remove(hapd->wpa_auth, sta->addr);
+
 	hostapd_drv_sta_deauth(hapd, sta->addr,
 			       WLAN_REASON_PREV_AUTH_NOT_VALID);
 	ap_sta_deauthenticate(hapd, sta, WLAN_REASON_PREV_AUTH_NOT_VALID);