jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
10747 commits 3 branches 0 tags 27 MiB
Commit graph

46 commits

Author SHA1 Message Date
Jouni Malinen
03aac597a0 tests: RADIUS accounting with various security cases 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2016-03-27 21:26:19 +03:00
Jouni Malinen
9961c70a85 tests: RADIUS Accounting interim update retry 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2016-02-29 17:43:13 +02:00
Jouni Malinen
44f4394296 tests: RADIUS Accounting and non-ASCII SSID 
This shows an example of Called-Station-Id in Access-Request and
Accounting-Request with non-ASCII characters.

Signed-off-by: Jouni Malinen <j@w1.fi>
 2015-12-24 12:19:41 +02:00
Jouni Malinen
e1195efd1e tests: Skip radius_acct_ipaddr if kernel does not support ProxyARP 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2015-10-26 00:47:47 +02:00
Jouni Malinen
2ab957afc5 tests: RADIUS Accounting and Framed-IP-Address 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2015-10-17 19:55:12 +03:00
Jouni Malinen
0b5740fdef tests: More RADIUS testing coverage with CUI/User-Name in ACL response 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2015-06-19 00:23:49 +03:00
Michael Braun
bfcc073caf tests: Verify dynamic_vlan=required is honored with macaddr_acl=2 
dynamic_vlan=required also applies to macaddr_acl=2 (RADIUS), especially
when used with WPA-PSK.

Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
 2015-04-25 10:28:19 +03:00
Jouni Malinen
96cbb7b561 tests: Skip radius_acct_unreachable3 when not running under VM 
It looks like the IP routing table changes used here to trigger
unreachability and following reachability of the server do not work very
well with full IP routing configuration, so run this test case only when
executed under vm-run.sh.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
 2015-03-02 16:30:13 +02:00
Jouni Malinen
58980654af tests: RADIUS server failure cases 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2015-03-01 22:36:52 +02:00
Jouni Malinen
5ff53fd6dd tests: RADIUS failover and failed attempt to return to primary server 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2015-03-01 22:36:52 +02:00
Jouni Malinen
7c5658c661 tests: RADIUS client address specified 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2015-03-01 22:36:52 +02:00
Jouni Malinen
1b5664f0fb tests: RADIUS Accounting server unreachable and multiple STAs 
This verifies behavior on reaching RADIUS_CLIENT_MAX_ENTRIES.

Signed-off-by: Jouni Malinen <j@w1.fi>
 2015-03-01 22:36:52 +02:00
Jouni Malinen
48d9065f7d tests: RADIUS Accounting server initially unreachable, but then available 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2015-03-01 22:36:52 +02:00
Jouni Malinen
abeea374a4 tests: RADIUS server connect() failing during startup 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2015-02-28 15:45:17 +02:00
Jouni Malinen
c4668009d0 tests: Remove unnecessary use of sudo from test cases 
run-tests.py is running as root, so sudo does not need to be used
anymore from within each test case.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
 2015-02-07 15:37:13 +02:00
Jouni Malinen
4a4cd04cad tests: RADIUS MAC ACL and accounting enabled 
This ends up using the special User-Name = STA MAC address case for
Accounting-Request. In addition, add Chargeable-User-Identity for one of
the STAs.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
 2015-01-29 15:55:48 +02:00
Jouni Malinen
6ace81ea77 tests: Disconnect-Request with no session identification attributes 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2015-01-16 16:16:28 +02:00
Jouni Malinen
9921689759 tests: Use a helper function to send and check RADIUS DAS messages 
No need to have this same sequence of steps duplicated in multiple
places.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
 2015-01-16 16:14:54 +02:00
Jouni Malinen
05dad77c8f tests: RADIUS DAS and Disconnect-Request removing PMKSA cache entry 
Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
 2015-01-16 16:07:52 +02:00
Jouni Malinen
e94a3f626d tests: RADIUS DAS with Acct-Multi-Session-Id 
Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
 2015-01-16 13:10:48 +02:00
Jouni Malinen
9142b4dd45 tests: Disconnect-Request multi-session-match 
Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
 2015-01-16 12:50:16 +02:00
Jouni Malinen
c2b48088f6 tests: Fix radius_das_disconnect match + non-match case 
If Calling-Station-Id matches, but CUI does not, NAS is expected to
reject the request instead of accepting it. Verify that Disconnect-NAK
is returned for this.

Signed-off-by: Jouni Malinen <j@w1.fi>
 2015-01-16 12:50:16 +02:00
Jouni Malinen
81e787b750 tests: Convert test skipping to use exception 
Instead of returning "skip" from the test function, raise the new
HwsimSkip exception to indicate a test case was skipped.

Signed-off-by: Jouni Malinen <j@w1.fi>
 2015-01-08 22:43:47 +02:00
Jouni Malinen
5f35a5e27f tests: Add wait_connected() and wait_disconnected() helpers 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-12-20 13:10:09 +02:00
Jouni Malinen
7c8f5ea6a0 tests: WPA2-PSK with RADIUS for passphrase 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-11-25 01:28:34 +02:00
Jouni Malinen
414236b5db tests: RADIUS accounting with PMKSA caching 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-10-18 10:20:07 +03:00
Jouni Malinen
a47f815ff3 tests: Extend RADIUS protocol testing coverage 
Test RADIUS client behavior with various invalid Access-Accept messages.

Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-06-08 18:17:08 +03:00
Jouni Malinen
8f614cd7a7 tests: Initial mechanism for RADIUS protocol testing 
This brings in a minimal pyrad-based RADIUS server to allow various
protocol tests to be run. For now, the server is not adding
Message-Authenticator, so that error case is checked. Additional tests
can be added in the future.

Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-06-01 00:52:03 +03:00
Jouni Malinen
8b5f1095ce tests: RADIUS interim accounting with unreachable server 
This adds coverage for radius_client_list_del() loop that deletes
pending messages related to the specific STA.

Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-06-01 00:02:15 +03:00
Jouni Malinen
0aee8330bd tests: RADIUS server failover 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-05-31 12:43:37 +03:00
Jouni Malinen
6a188ba3fc tests: RADIUS server unreachable with error handling 
radius_{auth,acct}_unreachable tested some parts of RADIUS client code
error handling. However, they did not test everything since the send()
calls for unreachable port on localhost did not return an error (that
error was reported on receive side). Extend this with similar test cases
using unreachable IP address to get send() error returns covered as
well.

Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-05-30 18:34:39 +03:00
Jouni Malinen
19d64886ef tests: RADIUS MAC ACL 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-03-29 19:32:45 +02:00
Jouni Malinen
86c1861821 tests: Chargeable-User-Idnetity in Accounting-Request 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-03-29 16:16:24 +02:00
Jouni Malinen
945cc2fd88 tests: RADIUS Disconnect-Request using CUI 
Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
 2014-03-13 23:08:01 +02:00
Jouni Malinen
4056b0c747 tests: RADIUS Class attribute 
Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
 2014-03-10 11:16:29 +02:00
Jouni Malinen
18b92c6cfe tests: RADIUS attributes in Access-Request and Accounting-Request 
This verifies that hostapd can add extra RADIUS attributes using
radius_auth_req_attr and radius_acct_req_attr.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
 2014-03-10 11:05:48 +02:00
Jouni Malinen
9a19cc0807 tests: RADIUS interim accounting update 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-03-09 01:18:42 +02:00
Jouni Malinen
9d756af73e tests: Verify RADIUS functionality over IPv6 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-03-02 10:35:33 +02:00
Jouni Malinen
5be9dcbb86 tests: Remove unnecessary interpreter line from most python files 
Only run-tests.py is actually executed, so there is no need to specify
the interpreter in all the helper files and test script files.

Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-02-21 20:21:53 +02:00
Jouni Malinen
41ff0fa64c tests: Verify NAS identification attributes in Disconnect-Request 
Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
 2014-02-20 13:56:27 +02:00
Jouni Malinen
e58f59cb58 tests: Verify that Disconnect-Request prevents PMKSA caching 
Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
 2014-02-20 13:27:16 +02:00
Jouni Malinen
55497a51a8 tests: Verify CoA-Request behavior 
This version verifies that hostapd NAKs a valid request since
CoA-Request is not yet supported.

Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-02-15 22:03:06 +02:00
Jouni Malinen
a3b2bdaf24 tests: Verify RADIUS Disconnect-Request behavior 
This uses pyrad to build and send various Disconnect-Request packets to
hostapd.

Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-02-15 21:58:08 +02:00
Jouni Malinen
4fcee244b9 tests: Verify RADIUS server MIB values 
Enable hostapd control interface for the RADIUS server instance and
verify that the RADIUS server MIB counters are incremented.

Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-02-15 21:39:31 +02:00
Jouni Malinen
4287bb76bf tests: Verify RADIUS accounting functionality 
Signed-off-by: Jouni Malinen <j@w1.fi>
 2014-02-15 17:08:38 +02:00
Jouni Malinen
7fd15145ff tests: RADIUS 
This adds initial set of test cases to increase RADIUS testing coverage.

Signed-hostap: Jouni Malinen <j@w1.fi>
 2013-12-31 19:03:39 +02:00