Re: [PATCH] RFC: Support full profile sharing via DPP 3rd party attributes

[Denis Kenzior <denkenz@gmail.com>]

Hi James,

On 11/13/23 12:28, James Prestwood wrote:
> If an IWD profile contains network-specific settings which are
> required to utilize the network correctly configuring via DPP
> will not carry over those settings to the enrollee. The DPP
> configuration object only contains the SSID/PSK to connect and
> anything else set in the configurators profile is not included.
> 
> This is likely something that the majority of users will not
> need (most networks don't need additional settings) but if the
> network does it would be convenient for the configurator to send
> over its exact configuration to the enrollee. This is useful for
> an automated use case where a configuration should be consistent
> across all devices.
> 
> DPP allows for arbitrary 3rd party attributes in the configuration
> object (section 4.5.2) which can be used to communicate additional
> settings.
> 
> The plan is to define a new object within the overall
> configuration object who's keys are IWD profile groups and values
> are objects containing settings for those groups:
> 
> {
>    "ssid": "my_ssid",
>    ... main configuration object ...
> 
>    ... The IWD profile, converted to JSON ...
>    "/net/connman/iwd": {
>      "Network": {
>        "MutlicastDNS": "true"
>      },
>      "IPv4": {
>        "SendHostname": "true"
>      },
>      ... etc ...
>    }
> }
> 
> The "/net/connman/iwd" object could then be parsed by the enrollee
> (potentially if the feature is enable in main.conf?) and set to
> the profile as it is now with the passphrase/psk.
> 
> Several profile values don't apply here like MAC/IP address
> overrides. Mainly the settings that do matter would be:
> 
> [IPv4].SendHostname

Yeah I can see this one since this might be a network-wide DHCP server quirk...

> [Network].MulticastDNS

But why would you want this one?

> [Settings] (most values here, except AddressOverride)

What settings do you want from here besides Hidden?  Transition disable settings 
would be automagically restored as soon as the transition network is connected to.

You may want to drop the IPv4/Network hierarchy and make these more generic.

Regards,
-Denis