new file mode 100644
@@ -0,0 +1,2 @@
+[Security]
+Passphrase=EasilyGuessedPassword
new file mode 100644
@@ -0,0 +1,41 @@
+hw_mode=g
+channel=1
+ssid=TestFT
+utf8_ssid=1
+ctrl_interface=/var/run/hostapd
+
+r1_key_holder=120000000001
+nas_identifier=dummy1
+
+wpa=2
+# Can support WPA-PSK and FT-PSK (space separated list) and/or EAP at the same
+# time but we want to force FT
+wpa_key_mgmt=FT-PSK
+wpa_pairwise=CCMP
+wpa_passphrase=EasilyGuessedPassword
+ieee80211w=0
+rsn_preauth=1
+rsn_preauth_interfaces=lo
+disable_pmksa_caching=0
+# Allow PMK cache to be shared opportunistically among configured interfaces
+# and BSSes (i.e., all configurations within a single hostapd process).
+okc=1
+mobility_domain=1234
+reassociation_deadline=60000
+r0kh=12:00:00:00:00:01 dummy1 000102030405060708090a0b0c0d0e0f
+r0kh=12:00:00:00:00:02 dummy2 000102030405060708090a0b0c0d0e0f
+r1kh=12:00:00:00:00:01 00:00:00:00:00:01 000102030405060708090a0b0c0d0e0f
+r1kh=12:00:00:00:00:02 00:00:00:00:00:02 000102030405060708090a0b0c0d0e0f
+# Push mode only needed for 8021x, not PSK mode since msk already known
+pmk_r1_push=0
+# Allow locally generated FT response so we don't have to configure push/pull
+# between BSSes running as separate hostapd processes as in the test-runner
+# case. Only works with FT-PSK, otherwise brctl needs to be installed and
+# CONFIG_BRIDGE enabled in the kernel.
+ft_psk_generate_local=1
+rkh_pull_timeout=50
+ft_over_ds=0
+ap_table_expiration_time=36000
+ap_table_max_size=10
+rrm_neighbor_report=1
+ocv=1
new file mode 100644
@@ -0,0 +1,41 @@
+hw_mode=g
+channel=2
+ssid=TestFT
+utf8_ssid=1
+ctrl_interface=/var/run/hostapd
+
+r1_key_holder=120000000002
+nas_identifier=dummy2
+
+wpa=2
+# Can support WPA-PSK and FT-PSK (space separated list) and/or EAP at the same
+# time but we want to force FT
+wpa_key_mgmt=FT-PSK
+wpa_pairwise=CCMP
+wpa_passphrase=EasilyGuessedPassword
+ieee80211w=0
+rsn_preauth=1
+rsn_preauth_interfaces=lo
+disable_pmksa_caching=0
+# Allow PMK cache to be shared opportunistically among configured interfaces
+# and BSSes (i.e., all configurations within a single hostapd process).
+okc=1
+mobility_domain=1234
+reassociation_deadline=60000
+r0kh=12:00:00:00:00:01 dummy1 000102030405060708090a0b0c0d0e0f
+r0kh=12:00:00:00:00:02 dummy2 000102030405060708090a0b0c0d0e0f
+r1kh=12:00:00:00:00:01 00:00:00:00:00:01 000102030405060708090a0b0c0d0e0f
+r1kh=12:00:00:00:00:02 00:00:00:00:00:02 000102030405060708090a0b0c0d0e0f
+# Push mode only needed for 8021x, not PSK mode since msk already known
+pmk_r1_push=0
+# Allow locally generated FT response so we don't have to configure push/pull
+# between BSSes running as separate hostapd processes as in the test-runner
+# case. Only works with FT-PSK, otherwise brctl needs to be installed and
+# CONFIG_BRIDGE enabled in the kernel.
+ft_psk_generate_local=1
+rkh_pull_timeout=50
+ft_over_ds=0
+ap_table_expiration_time=36000
+ap_table_max_size=10
+rrm_neighbor_report=1
+ocv=1
new file mode 100644
@@ -0,0 +1,8 @@
+[SETUP]
+num_radios=3
+start_iwd=0
+hwsim_medium=yes
+
+[HOSTAPD]
+rad0=ft-psk-ccmp-1.conf
+rad1=ft-psk-ccmp-2.conf
new file mode 100644
@@ -0,0 +1,5 @@
+[Scan]
+DisableMacAddressRandomization=true
+
+[General]
+RoamRetryInterval=1
new file mode 100644
@@ -0,0 +1,224 @@
+#! /usr/bin/python3
+
+import unittest
+import sys, os
+import dbus
+
+sys.path.append('../util')
+from config import ctx
+import iwd
+from iwd import IWD, IWDDBusAbstract
+from iwd import NetworkType
+from hwsim import Hwsim
+from hostapd import HostapdCLI
+
+#
+# Separate client used to test DBus disconnects so we don't bring down the
+# entire IWD python library
+#
+class AffinityClient(IWDDBusAbstract):
+ def __init__(self, device_path):
+ self._bus = dbus.bus.BusConnection(address_or_type=ctx.dbus_address)
+ self._station_if = dbus.Interface(self._bus.get_object(iwd.IWD_SERVICE,
+ device_path), iwd.IWD_STATION_INTERFACE)
+
+ def set(self):
+ self._station_if.SetConnectedBssAffinity(reply_handler=self._success,
+ error_handler=self._failure)
+ self._wait_for_async_op()
+
+ def unset(self):
+ self._station_if.UnsetConnectedBssAffinity(reply_handler=self._success,
+ error_handler=self._failure)
+ self._wait_for_async_op()
+
+ def close(self):
+ self._bus.close()
+
+class Test(unittest.TestCase):
+ def connect(self, device, hapd):
+ ordered_network = device.get_ordered_network('TestFT', full_scan=True)
+
+ self.assertEqual(ordered_network.type, NetworkType.psk)
+
+ condition = 'not obj.connected'
+ self.wd.wait_for_object_condition(ordered_network.network_object, condition)
+
+ device.connect_bssid(hapd.bssid)
+
+ condition = 'obj.state == DeviceState.connected'
+ self.wd.wait_for_object_condition(device, condition)
+
+ def test_set_affinity(self):
+ device = self.wd.list_devices(1)[0]
+
+ self.connect(device, self.bss_hostapd[0])
+
+ device.set_connected_bss_affinity()
+
+ # IWD should not attempt to roam
+ with self.assertRaises(TimeoutError):
+ device.wait_for_event("roam-scan-triggered")
+
+ device.unset_connected_bss_affinity()
+ device.wait_for_event("roam-scan-triggered")
+
+ def test_roam_below_critical(self):
+ device = self.wd.list_devices(1)[0]
+
+ self.connect(device, self.bss_hostapd[0])
+
+ device.set_connected_bss_affinity()
+
+ # IWD should not attempt to roam
+ with self.assertRaises(TimeoutError):
+ device.wait_for_event("roam-scan-triggered")
+
+ # Lower signal past critical level
+ self.bss0_rule.signal = -9000
+
+ device.wait_for_event("roam-scan-triggered")
+
+ def test_affinity_reset_after_roam(self):
+ device = self.wd.list_devices(1)[0]
+
+ self.connect(device, self.bss_hostapd[0])
+
+ device.set_connected_bss_affinity()
+
+ # Lower signal past critical level
+ self.bss0_rule.signal = -9000
+
+ device.wait_for_event("roam-scan-triggered")
+ device.wait_for_event("ft-authenticating")
+ device.wait_for_event("associating")
+ device.wait_for_event("connected")
+
+ # Affinity should be reset, and IWD should be trying to roam
+ device.wait_for_event("roam-scan-triggered")
+
+ def test_error_conditions(self):
+ device = self.wd.list_devices(1)[0]
+
+ # Calling set while disconnected should fail
+ with self.assertRaises(iwd.NotConnectedEx):
+ device.set_connected_bss_affinity()
+
+ # Calling unset prior to a successful set should fail
+ with self.assertRaises(iwd.NotConfiguredEx):
+ device.unset_connected_bss_affinity()
+
+ self.connect(device, self.bss_hostapd[0])
+
+ device.set_connected_bss_affinity()
+
+ # Multiple calls to set should fail
+ with self.assertRaises(iwd.AlreadyExistsEx):
+ device.set_connected_bss_affinity()
+
+ def test_affinity_client_disconnect(self):
+ device = self.wd.list_devices(1)[0]
+
+ client = AffinityClient(device.device_path)
+
+ self.connect(device, self.bss_hostapd[0])
+
+ client.set()
+
+ with self.assertRaises(TimeoutError):
+ device.wait_for_event("roam-scan-triggered")
+
+ client._bus.close()
+
+ device.wait_for_event("roam-scan-triggered")
+
+ def test_affinity_client_reconnect_during_roam(self):
+ device = self.wd.list_devices(1)[0]
+
+ client = AffinityClient(device.device_path)
+
+ self.connect(device, self.bss_hostapd[0])
+
+ client.set()
+
+ # Lower signal past critical level
+ self.bss0_rule.signal = -9000
+
+ device.wait_for_event("roam-scan-triggered")
+
+ client.close()
+ del client
+ client = AffinityClient(device.device_path)
+ # setting here should get cleared after connecting
+ client.set()
+
+ device.wait_for_event("ft-authenticating")
+ device.wait_for_event("associating")
+ device.wait_for_event("connected")
+
+ # Affinity should be reset, and IWD should be trying to roam
+ device.wait_for_event("roam-scan-triggered")
+
+ def test_cleanup_with_connected_client(self):
+ device = self.wd.list_devices(1)[0]
+
+ client = AffinityClient(device.device_path)
+
+ self.connect(device, self.bss_hostapd[0])
+
+ client.set()
+ self.wd.stop()
+
+ def tearDown(self):
+ os.system('ip link set "' + self.bss_hostapd[0].ifname + '" down')
+ os.system('ip link set "' + self.bss_hostapd[1].ifname + '" down')
+ os.system('ip link set "' + self.bss_hostapd[0].ifname + '" up')
+ os.system('ip link set "' + self.bss_hostapd[1].ifname + '" up')
+
+ self.wd.stop()
+ self.wd = None
+
+ def setUp(self):
+ self.bss0_rule.signal = -8000
+ self.bss1_rule.signal = -8000
+
+ self.wd = IWD(True)
+
+ @classmethod
+ def setUpClass(cls):
+ hwsim = Hwsim()
+
+ IWD.copy_to_storage('TestFT.psk')
+
+ cls.bss_hostapd = [ HostapdCLI(config='ft-psk-ccmp-1.conf'),
+ HostapdCLI(config='ft-psk-ccmp-2.conf') ]
+
+ rad0 = hwsim.get_radio('rad0')
+ rad1 = hwsim.get_radio('rad1')
+
+ cls.bss0_rule = hwsim.rules.create()
+ cls.bss0_rule.source = rad0.addresses[0]
+ cls.bss0_rule.bidirectional = True
+ cls.bss0_rule.signal = -8000
+ cls.bss0_rule.enabled = True
+
+ cls.bss1_rule = hwsim.rules.create()
+ cls.bss1_rule.source = rad1.addresses[0]
+ cls.bss1_rule.bidirectional = True
+ cls.bss1_rule.signal = -8000
+ cls.bss1_rule.enabled = True
+
+ cls.bss_hostapd[0].set_address('12:00:00:00:00:01')
+ cls.bss_hostapd[1].set_address('12:00:00:00:00:02')
+
+ HostapdCLI.group_neighbors(*cls.bss_hostapd)
+
+ @classmethod
+ def tearDownClass(cls):
+ IWD.clear_storage()
+ cls.bss_hostapd = None
+ cls.bss0_rule.remove()
+ cls.bss1_rule.remove()
+
+if __name__ == '__main__':
+ unittest.main(exit=True)