hostapd-common: add missing ingredients for standalone EAP server

Namely radius_server_auth_port and radius_server_clients arguments. Below is a working config example:

config wifi-iface 'enterprise1'
        option device 'radio1'
        option mode 'ap'
        option network 'lan'
        option ssid 'openwrt'
        option encryption 'wpa2'
        option dh_file '/etc/hostapd/dh.pem'
        option eap_server '1'
        option eap_user_file '/etc/hostapd/eap_user'
        option ca_cert '/etc/hostapd/ca.pem'
        option server_cert '/etc/hostapd/server.crt'
        option private_key '/etc/hostapd/server.key'
        option radius_server_clients '/etc/hostapd/radius_clients'
        option radius_server_auth_port 1812

config wifi-iface 'enterprise2'
        option device 'radio2'
        option mode 'ap'
        option network 'lan'
        option ssid 'openwrt'
        option encryption 'wpa2'
        option dh_file '/etc/hostapd/dh.pem'
        option auth_server '127.0.0.1'
        option auth_secret 'radius_secret'
        option auth_cache '0'

Signed-off-by: Lev A. Melnikovsky <melnikovsky@gmail>
Link: https://github.com/openwrt/openwrt/pull/16112
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

diff --git a/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh b/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh
index 232f9021b9c3dda04506b893728d5534699f9260..32b9d9d082b5203f01631aa245b5cb8bb3386c90 100644 (file)
--- a/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh
+++ b/package/network/config/wifi-scripts/files/lib/netifd/hostapd.sh
@@ -376,8 +376,8 @@ hostapd_common_add_bss_config() {
        config_add_array radius_auth_req_attr
        config_add_array radius_acct_req_attr
 
-       config_add_int eap_server
-       config_add_string eap_user_file ca_cert server_cert private_key private_key_passwd server_id
+       config_add_int eap_server radius_server_auth_port
+       config_add_string eap_user_file ca_cert server_cert private_key private_key_passwd server_id radius_server_clients
 
        config_add_boolean fils
        config_add_string fils_dhcp
@@ -571,7 +571,7 @@ hostapd_set_bss_options() {
                multi_ap multi_ap_backhaul_ssid multi_ap_backhaul_key skip_inactivity_poll \
                ppsk airtime_bss_weight airtime_bss_limit airtime_sta_weight \
                multicast_to_unicast_all proxy_arp per_sta_vif \
-               eap_server eap_user_file ca_cert server_cert private_key private_key_passwd server_id \
+               eap_server eap_user_file ca_cert server_cert private_key private_key_passwd server_id radius_server_clients radius_server_auth_port \
                vendor_elements fils ocv apup
 
        set_default fils 0
@@ -1151,6 +1151,8 @@ hostapd_set_bss_options() {
                [ -n "$private_key" ] && append bss_conf "private_key=$private_key" "$N"
                [ -n "$private_key_passwd" ] && append bss_conf "private_key_passwd=$private_key_passwd" "$N"
                [ -n "$server_id" ] && append bss_conf "server_id=$server_id" "$N"
+               [ -n "$radius_server_clients" ] && append bss_conf "radius_server_clients=$radius_server_clients" "$N"
+               [ -n "$radius_server_auth_port" ] && append bss_conf "radius_server_auth_port=$radius_server_auth_port" "$N"
        fi
 
        set_default multicast_to_unicast_all 0