From 0d7c5e1dfc9f8d5106f79f6aa6983f8bf9fa4ffd Mon Sep 17 00:00:00 2001 From: Jouni Malinen Date: Thu, 20 Feb 2014 13:26:22 +0200 Subject: [PATCH] RADIUS DAS: Remove PMKSA entry on Disconnect-Request When a station is disconnected based on Disconnect-Request, it is better to force the station to go through full EAP authentication if it tries to reconnect. Signed-off-by: Jouni Malinen --- src/ap/hostapd.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/ap/hostapd.c b/src/ap/hostapd.c index f9edf3b..dc2c79c 100644 --- a/src/ap/hostapd.c +++ b/src/ap/hostapd.c @@ -596,6 +596,8 @@ hostapd_das_disconnect(void *ctx, struct radius_das_attrs *attr) if (sta == NULL) return RADIUS_DAS_SESSION_NOT_FOUND; + wpa_auth_pmksa_remove(hapd->wpa_auth, sta->addr); + hostapd_drv_sta_deauth(hapd, sta->addr, WLAN_REASON_PREV_AUTH_NOT_VALID); ap_sta_deauthenticate(hapd, sta, WLAN_REASON_PREV_AUTH_NOT_VALID); -- 2.1.4