EAP server: Force identity request after eapRestart for passthrough

Fix start of reauthentication after failed authentication with
passthrough (external AAA server) to use internal EAP Identity method.

Signed-hostap: Jouni Malinen <j@w1.fi>

diff --git a/src/eap_server/eap_server.c b/src/eap_server/eap_server.c
index 4483508ceb4066b0bb14fdd2da8082707622c313..7a5beb6d916d2ec11f23a6a4f2a9c8af9b63545f 100644 (file)
--- a/src/eap_server/eap_server.c
+++ b/src/eap_server/eap_server.c
@@ -136,6 +136,14 @@ SM_STATE(EAP, INITIALIZE)
 {
        SM_ENTRY(EAP, INITIALIZE);
 
+       if (sm->eap_if.eapRestart && !sm->eap_server && sm->identity) {
+               /*
+                * Need to allow internal Identity method to be used instead
+                * of passthrough at the beginning of reauthentication.
+                */
+               eap_server_clear_identity(sm);
+       }
+
        sm->currentId = -1;
        sm->eap_if.eapSuccess = FALSE;
        sm->eap_if.eapFail = FALSE;