I just finished adding proxy function to hostapd, this will allow hosapd to act as a RADIUS proxy as defined in RFC 2865, Section 2.3.

→ Read more...

The Nvidia 8800 GT is one of the finest graphic cards arround these days. Nvidia has recently released a linux driver for these cards. This manual goes through the steps for getting the 8800GT working properly.

→ Read more...

The use of the Kerberos protocol in authentication for network access has several advantages. In this post, I overview why Kerberos authentication for network access control is something every admin would want to have. Then I introduce the Kernac project that is working towards a solution.

→ Read more...

Hostapd is a free, dual-licensed (BSD/GNU) software that allows you to implement an access point and/or a RADIUS server.

When acting as a RADIUS server, I have noticed that the hostapd does not copy Proxy-State attribute back to downstream RADIUS servers. According to RFC2865 section 2 : “If any Proxy-State attributes were present in the Access-Request, they MUST be copied unmodified and in order into the response packet.”

This makes it a bug. According to Jouni Malinen, the author of hostapd, a fix is already applied to the git repository and should be included in future releases.

Hostapd calls the daemon(3) function to run in the background. For some reason (probaly because I have changed the original code for my own needs), when I run hostapd from the command line with the -B option, the deamon call causes hostapd to exit. So, I decided to make hostapd use fork instead. The following is a patch against hostapd-0.5.9.

To apply the patch, cd to hostapd-0.5.9, then run

  patch -R os_internal.c patch-file

→ Read more...