[isf-wifidog] immediate user disconnect feature

[Benoit Grégoire]

On 21 April 2008, Wichert Akkerman wrote:
> Benoit Grégoire wrote:
> > On 21 April 2008, Wichert Akkerman wrote:
> >> I'm looking at implementing an immediate disconnect feature in the
> >> gateway. The basic flow I'm using is:
> >>
> >> - auth server sends a disconnect command to the gateway, specifying
> >>   enough information to find the client and authenticate the request
> >> - gateway removes client from the client list
> >> - gateway sends counters to auth server
> >> - gateway sends logout to auth server
> >
> > That's exactly what will happen (but not in that order) if the auth
> > server replies with a DENY to a counter update.
> >
> > Note that it is always assumed that the auth server cannot reach the
> > gateway directly, that is a fundamental feature of wifidog and it's
> > protocol.
>
> In my case the auth server can reach the gateway just fine.

I understand that, but we do not want to make that a requirement for any 
specific wifidog feature to work.

> > It is, and that feature already exists.  See
> > http://dev.wifidog.org/wiki/doc/developer/WiFiDogProtocol_V1, bottom of
> > the page.
>
> Except it does not handle counters properly (see my other mail)

As I said, that's a bug.

> and does 
> not generate a response the auth server parse to check for succes/failure.

You are supposed to get a final conuter update, you could wait for it on your 
auth server if you want.

-- 
Benoit Grégoire
Technologies Coeus inc.