commit 04e47f324abdc215a45def7f54fb1a24a361bff0
author ke han <Ke.Han@alcatel-sbell.com.cn> Fri Oct 28 14:15:43 2016 +0800
committer ke han <Ke.Han@alcatel-sbell.com.cn> Thu Oct 27 23:24:36 2016 -0700
tree b2dea505e92fb3ae8536aab18ab1cd8c548cf35b
parent 3c4d376a7494c9c00fe3881ea412985def22278f

1. send eap failure message when access denied;
2. change current state from unauthenticated to started when receiving eapol start message

Change-Id: I3d1a978a0f784f1bae41cebb51aed58f3f4742fe

src/main/java/org/opencord/aaa/AaaManager.java

diff --git a/src/main/java/org/opencord/aaa/AaaManager.java b/src/main/java/org/opencord/aaa/AaaManager.java
index 2aedc5f..2c02f69 100755
--- a/src/main/java/org/opencord/aaa/AaaManager.java
+++ b/src/main/java/org/opencord/aaa/AaaManager.java
@@ -462,10 +462,10 @@
                     break;
                 case RADIUS.RADIUS_CODE_ACCESS_ACCEPT:
                     //send an EAPOL - Success to the supplicant.
-                    byte[] eapMessage =
+                    byte[] eapMessageSuccess =
                             radiusPacket.getAttribute(RADIUSAttribute.RADIUS_ATTR_EAP_MESSAGE).getValue();
                     eapPayload = new EAP();
-                    eapPayload = (EAP) eapPayload.deserialize(eapMessage, 0, eapMessage.length);
+                    eapPayload = (EAP) eapPayload.deserialize(eapMessageSuccess, 0, eapMessageSuccess.length);
                     eth = buildEapolResponse(stateMachine.supplicantAddress(),
                                              MacAddress.valueOf(nasMacAddress),
                                              stateMachine.vlanId(),
@@ -477,6 +477,17 @@
                     break;
                 case RADIUS.RADIUS_CODE_ACCESS_REJECT:
                     stateMachine.denyAccess();
+                    //send an EAPOL - Failure to the supplicant.
+                    byte[] eapMessageFailure =
+                            radiusPacket.getAttribute(RADIUSAttribute.RADIUS_ATTR_EAP_MESSAGE).getValue();
+                    eapPayload = new EAP();
+                    eapPayload = (EAP) eapPayload.deserialize(eapMessageFailure, 0, eapMessageFailure.length);
+                    eth = buildEapolResponse(stateMachine.supplicantAddress(),
+                                             MacAddress.valueOf(nasMacAddress),
+                                             stateMachine.vlanId(),
+                                             EAPOL.EAPOL_PACKET,
+                                             eapPayload);
+                    sendPacketToSupplicant(eth, stateMachine.supplicantConnectpoint());
                     break;
                 default:
                     log.warn("Unknown RADIUS message received with code: {}", radiusPacket.getCode());