service: Allow state downgrade from online to ready
[platform/upstream/connman.git] / src / service.c
index 9fca184..0380dbe 100644 (file)
 #include <config.h>
 #endif
 
+#include <errno.h>
 #include <stdio.h>
 #include <string.h>
+#include <netdb.h>
 #include <gdbus.h>
 
 #include "connman.h"
@@ -53,12 +55,14 @@ struct connman_stats_counter {
 
 struct connman_service {
        gint refcount;
+       gint session_usage_count;
        char *identifier;
        char *path;
        enum connman_service_type type;
-       enum connman_service_mode mode;
        enum connman_service_security security;
        enum connman_service_state state;
+       enum connman_service_state state_ipv4;
+       enum connman_service_state state_ipv6;
        enum connman_service_error error;
        connman_uint8_t strength;
        connman_bool_t favorite;
@@ -71,25 +75,24 @@ struct connman_service {
        unsigned int order;
        char *name;
        char *passphrase;
+       char *agent_passphrase;
        char *profile;
-       char *apn;
-       char *username;
-       char *password;
-       char *mcc;
-       char *mnc;
        connman_bool_t roaming;
        connman_bool_t login_required;
+       connman_bool_t network_created;
        struct connman_ipconfig *ipconfig_ipv4;
        struct connman_ipconfig *ipconfig_ipv6;
        struct connman_network *network;
        struct connman_provider *provider;
        char **nameservers;
-       char *nameserver;
+       char **nameservers_config;
        char **domains;
        char *domainname;
+       char **timeservers;
        /* 802.1x settings from the config files */
        char *eap;
        char *identity;
+       char *agent_identity;
        char *ca_cert_file;
        char *client_cert_file;
        char *private_key_file;
@@ -123,6 +126,9 @@ static void append_path(gpointer value, gpointer user_data)
 
 void __connman_service_list(DBusMessageIter *iter, void *user_data)
 {
+       if (service_list == NULL)
+               return;
+
        g_sequence_foreach(service_list, append_path, iter);
 }
 
@@ -182,26 +188,6 @@ const char *__connman_service_type2string(enum connman_service_type type)
        return NULL;
 }
 
-static const char *mode2string(enum connman_service_mode mode)
-{
-       switch (mode) {
-       case CONNMAN_SERVICE_MODE_UNKNOWN:
-               break;
-       case CONNMAN_SERVICE_MODE_MANAGED:
-               return "managed";
-       case CONNMAN_SERVICE_MODE_ADHOC:
-               return "adhoc";
-       case CONNMAN_SERVICE_MODE_GPRS:
-               return "gprs";
-       case CONNMAN_SERVICE_MODE_EDGE:
-               return "edge";
-       case CONNMAN_SERVICE_MODE_UMTS:
-               return "umts";
-       }
-
-       return NULL;
-}
-
 static const char *security2string(enum connman_service_security security)
 {
        switch (security) {
@@ -261,6 +247,12 @@ static const char *error2string(enum connman_service_error error)
                return "dhcp-failed";
        case CONNMAN_SERVICE_ERROR_CONNECT_FAILED:
                return "connect-failed";
+       case CONNMAN_SERVICE_ERROR_LOGIN_FAILED:
+               return "login-failed";
+       case CONNMAN_SERVICE_ERROR_AUTH_FAILED:
+               return "auth-failed";
+       case CONNMAN_SERVICE_ERROR_INVALID_KEY:
+               return "invalid-key";
        }
 
        return NULL;
@@ -272,6 +264,8 @@ static enum connman_service_error string2error(const char *error)
                return CONNMAN_SERVICE_ERROR_DHCP_FAILED;
        else if (g_strcmp0(error, "pin-missing") == 0)
                return CONNMAN_SERVICE_ERROR_PIN_MISSING;
+       else if (g_strcmp0(error, "invalid-key") == 0)
+               return CONNMAN_SERVICE_ERROR_INVALID_KEY;
 
        return CONNMAN_SERVICE_ERROR_UNKNOWN;
 }
@@ -304,15 +298,134 @@ static enum connman_service_proxy_method string2proxymethod(const char *method)
                return CONNMAN_SERVICE_PROXY_METHOD_UNKNOWN;
 }
 
-static connman_bool_t is_connecting(struct connman_service *service)
+static enum connman_service_state combine_state(
+                                       enum connman_service_state state_a,
+                                       enum connman_service_state state_b)
 {
-       switch (service->state) {
+       enum connman_service_state result;
+
+       if (state_a == state_b) {
+               result = state_a;
+               goto done;
+       }
+
+       if (state_a == CONNMAN_SERVICE_STATE_UNKNOWN) {
+               result = state_b;
+               goto done;
+       }
+
+       if (state_b == CONNMAN_SERVICE_STATE_UNKNOWN) {
+               result = state_a;
+               goto done;
+       }
+
+       if (state_a == CONNMAN_SERVICE_STATE_IDLE) {
+               result = state_b;
+               goto done;
+       }
+
+       if (state_b == CONNMAN_SERVICE_STATE_IDLE) {
+               result = state_a;
+               goto done;
+       }
+
+       if (state_a == CONNMAN_SERVICE_STATE_ASSOCIATION) {
+               if (state_b == CONNMAN_SERVICE_STATE_CONFIGURATION ||
+                               state_b == CONNMAN_SERVICE_STATE_ONLINE ||
+                               state_b == CONNMAN_SERVICE_STATE_READY)
+                       result = state_b;
+               else
+                       result = state_a;
+               goto done;
+       }
+
+       if (state_b == CONNMAN_SERVICE_STATE_ASSOCIATION) {
+               if (state_a == CONNMAN_SERVICE_STATE_CONFIGURATION ||
+                               state_a == CONNMAN_SERVICE_STATE_ONLINE ||
+                               state_a == CONNMAN_SERVICE_STATE_READY)
+                       result = state_a;
+               else
+                       result = state_b;
+               goto done;
+       }
+
+       if (state_a == CONNMAN_SERVICE_STATE_CONFIGURATION) {
+               if (state_b == CONNMAN_SERVICE_STATE_ONLINE ||
+                               state_b == CONNMAN_SERVICE_STATE_READY)
+                       result = state_b;
+               else
+                       result = state_a;
+               goto done;
+       }
+
+       if (state_b == CONNMAN_SERVICE_STATE_CONFIGURATION) {
+               if (state_a == CONNMAN_SERVICE_STATE_ONLINE ||
+                               state_a == CONNMAN_SERVICE_STATE_READY)
+                       result = state_a;
+               else
+                       result = state_b;
+               goto done;
+       }
+
+       if (state_a == CONNMAN_SERVICE_STATE_READY) {
+               if (state_b == CONNMAN_SERVICE_STATE_ONLINE ||
+                               state_b == CONNMAN_SERVICE_STATE_DISCONNECT)
+                       result = state_b;
+               else
+                       result = state_a;
+               goto done;
+       }
+
+       if (state_b == CONNMAN_SERVICE_STATE_READY) {
+               if (state_a == CONNMAN_SERVICE_STATE_ONLINE ||
+                               state_a == CONNMAN_SERVICE_STATE_DISCONNECT)
+                       result = state_a;
+               else
+                       result = state_b;
+               goto done;
+       }
+
+       if (state_a == CONNMAN_SERVICE_STATE_ONLINE) {
+               if (state_b == CONNMAN_SERVICE_STATE_DISCONNECT)
+                       result = state_b;
+               else
+                       result = state_a;
+               goto done;
+       }
+
+       if (state_b == CONNMAN_SERVICE_STATE_ONLINE) {
+               if (state_a == CONNMAN_SERVICE_STATE_DISCONNECT)
+                       result = state_a;
+               else
+                       result = state_b;
+               goto done;
+       }
+
+       if (state_a == CONNMAN_SERVICE_STATE_DISCONNECT) {
+               result = state_a;
+               goto done;
+       }
+
+       if (state_b == CONNMAN_SERVICE_STATE_DISCONNECT) {
+               result = state_b;
+               goto done;
+       }
+
+       result = CONNMAN_SERVICE_STATE_FAILURE;
+
+done:
+       return result;
+}
+
+static connman_bool_t is_connecting_state(struct connman_service *service,
+                                       enum connman_service_state state)
+{
+       switch (state) {
        case CONNMAN_SERVICE_STATE_UNKNOWN:
        case CONNMAN_SERVICE_STATE_IDLE:
        case CONNMAN_SERVICE_STATE_FAILURE:
                if (service->network != NULL)
-                       return __connman_network_get_connecting(
-                                                       service->network);
+                       return connman_network_get_connecting(service->network);
        case CONNMAN_SERVICE_STATE_DISCONNECT:
        case CONNMAN_SERVICE_STATE_READY:
        case CONNMAN_SERVICE_STATE_ONLINE:
@@ -325,9 +438,10 @@ static connman_bool_t is_connecting(struct connman_service *service)
        return FALSE;
 }
 
-static connman_bool_t is_connected(const struct connman_service *service)
+static connman_bool_t is_connected_state(const struct connman_service *service,
+                                       enum connman_service_state state)
 {
-       switch (service->state) {
+       switch (state) {
        case CONNMAN_SERVICE_STATE_UNKNOWN:
        case CONNMAN_SERVICE_STATE_IDLE:
        case CONNMAN_SERVICE_STATE_ASSOCIATION:
@@ -343,6 +457,16 @@ static connman_bool_t is_connected(const struct connman_service *service)
        return FALSE;
 }
 
+static connman_bool_t is_connecting(struct connman_service *service)
+{
+       return is_connecting_state(service, service->state);
+}
+
+static connman_bool_t is_connected(struct connman_service *service)
+{
+       return is_connected_state(service, service->state);
+}
+
 static void update_nameservers(struct connman_service *service)
 {
        const char *ifname;
@@ -357,7 +481,7 @@ static void update_nameservers(struct connman_service *service)
        if (ifname == NULL)
                return;
 
-       switch (service->state) {
+       switch (combine_state(service->state_ipv4, service->state_ipv6)) {
        case CONNMAN_SERVICE_STATE_UNKNOWN:
        case CONNMAN_SERVICE_STATE_IDLE:
        case CONNMAN_SERVICE_STATE_ASSOCIATION:
@@ -374,14 +498,21 @@ static void update_nameservers(struct connman_service *service)
 
        connman_resolver_remove_all(ifname);
 
-       if (service->nameservers != NULL) {
+       if (service->nameservers_config != NULL) {
                int i;
 
-               for (i = 0; service->nameservers[i]; i++)
+               for (i = 0; service->nameservers_config[i] != NULL; i++) {
+                       connman_resolver_append(ifname, NULL,
+                                               service->nameservers_config[i]);
+               }
+       } else if (service->nameservers != NULL) {
+               int i;
+
+               for (i = 0; service->nameservers[i] != NULL; i++) {
                        connman_resolver_append(ifname, NULL,
                                                service->nameservers[i]);
-       } else if (service->nameserver != NULL)
-               connman_resolver_append(ifname, NULL, service->nameserver);
+               }
+       }
 
        if (service->domains != NULL) {
                int i;
@@ -395,47 +526,177 @@ static void update_nameservers(struct connman_service *service)
        connman_resolver_flush();
 }
 
-void __connman_service_append_nameserver(struct connman_service *service,
+int __connman_service_nameserver_append(struct connman_service *service,
                                                const char *nameserver)
 {
-       DBG("service %p nameserver %s", service, nameserver);
+       int len;
+
+       DBG("service %p nameserver %s", service, nameserver);
 
        if (nameserver == NULL)
-               return;
+               return -EINVAL;
 
-       g_free(service->nameserver);
-       service->nameserver = g_strdup(nameserver);
+       if (service->nameservers != NULL) {
+               int i;
+
+               for (i = 0; service->nameservers[i] != NULL; i++)
+                       if (g_strcmp0(service->nameservers[i], nameserver) == 0)
+                               return -EEXIST;
+
+               len = g_strv_length(service->nameservers);
+               service->nameservers = g_try_renew(char *, service->nameservers,
+                                                       len + 2);
+       } else {
+               len = 0;
+               service->nameservers = g_try_new0(char *, len + 2);
+       }
+
+       if (service->nameservers == NULL)
+               return -ENOMEM;
+
+       service->nameservers[len] = g_strdup(nameserver);
+       service->nameservers[len + 1] = NULL;
 
        update_nameservers(service);
+
+       return 0;
 }
 
-void __connman_service_remove_nameserver(struct connman_service *service,
+int __connman_service_nameserver_remove(struct connman_service *service,
                                                const char *nameserver)
 {
+       char **servers;
+       int len, i, j;
+
        DBG("service %p nameserver %s", service, nameserver);
 
        if (nameserver == NULL)
-               return;
+               return -EINVAL;
+
+       if (service->nameservers == NULL)
+               return 0;
+
+       len = g_strv_length(service->nameservers);
+       if (len == 1) {
+               if (g_strcmp0(service->nameservers[0], nameserver) != 0)
+                       return 0;
+
+               g_strfreev(service->nameservers);
+               service->nameservers = NULL;
+
+               return 0;
+       }
+
+       servers = g_try_new0(char *, len);
+       if (servers == NULL)
+               return -ENOMEM;
+
+       for (i = 0, j = 0; i < len; i++) {
+               if (g_strcmp0(service->nameservers[i], nameserver) != 0) {
+                       servers[j] = g_strdup(service->nameservers[i]);
+                       j++;
+               }
+       }
+       servers[len - 1] = NULL;
 
-       g_free(service->nameserver);
-       service->nameserver = NULL;
+       g_strfreev(service->nameservers);
+       service->nameservers = servers;
+
+       update_nameservers(service);
+
+       return 0;
+}
+
+void __connman_service_nameserver_clear(struct connman_service *service)
+{
+       g_strfreev(service->nameservers);
+       service->nameservers = NULL;
 
        update_nameservers(service);
 }
 
+static void nameserver_add_routes(int index, char **nameservers,
+                                       const char *gw)
+{
+       int i, ret, family;
+       struct addrinfo hints;
+       struct addrinfo *addr;
+
+       for (i = 0; nameservers[i] != NULL; i++) {
+               memset(&hints, 0, sizeof(struct addrinfo));
+               hints.ai_flags = AI_NUMERICHOST;
+               addr = NULL;
+
+               ret = getaddrinfo(nameservers[i], NULL, &hints, &addr);
+               if (ret == EAI_NONAME)
+                       family = AF_INET; /* use the IPv4 as a default */
+               else if (ret != 0)
+                       continue;
+               else
+                       family = addr->ai_family;
+
+               if (family == AF_INET) {
+                       if (connman_inet_compare_subnet(index,
+                                               nameservers[i]) != TRUE)
+                               connman_inet_add_host_route(index,
+                                                       nameservers[i], gw);
+               } else if (family == AF_INET6)
+                       connman_inet_add_ipv6_host_route(index,
+                                                       nameservers[i], gw);
+
+               freeaddrinfo(addr);
+       }
+}
+
+static void nameserver_del_routes(int index, char **nameservers)
+{
+       int i, ret, family;
+       struct addrinfo hints;
+       struct addrinfo *addr;
+
+       for (i = 0; nameservers[i] != NULL; i++) {
+               memset(&hints, 0, sizeof(struct addrinfo));
+               hints.ai_flags = AI_NUMERICHOST;
+               addr = NULL;
+
+               ret = getaddrinfo(nameservers[i], NULL, &hints, &addr);
+               if (ret == EAI_NONAME)
+                       family = AF_INET; /* use the IPv4 as a default */
+               else if (ret != 0)
+                       continue;
+               else
+                       family = addr->ai_family;
+
+               if (family == AF_INET)
+                       connman_inet_del_host_route(index, nameservers[i]);
+               else if (family == AF_INET6)
+                       connman_inet_del_ipv6_host_route(index,
+                                                       nameservers[i]);
+
+               freeaddrinfo(addr);
+       }
+}
+
 void __connman_service_nameserver_add_routes(struct connman_service *service,
                                                const char *gw)
 {
-       int index;
+       int index = -1;
 
        if (service == NULL)
                return;
 
-       index = connman_network_get_index(service->network);
-
-       if (service->nameservers != NULL) {
-               int i;
+       if (service->network != NULL)
+               index = connman_network_get_index(service->network);
+       else if (service->provider != NULL)
+               index = connman_provider_get_index(service->provider);
 
+       if (service->nameservers_config != NULL) {
+               /*
+                * Configured nameserver takes preference over the
+                * discoverd nameserver gathered from DHCP, VPN, etc.
+                */
+               nameserver_add_routes(index, service->nameservers_config, gw);
+       } else if (service->nameservers != NULL) {
                /*
                 * We add nameservers host routes for nameservers that
                 * are not on our subnet. For those who are, the subnet
@@ -443,40 +704,26 @@ void __connman_service_nameserver_add_routes(struct connman_service *service,
                 * tries to reach them. The subnet route is installed
                 * when setting the interface IP address.
                 */
-               for (i = 0; service->nameservers[i]; i++) {
-                       if (connman_inet_compare_subnet(index,
-                                                       service->nameservers[i]))
-                               continue;
-
-                       connman_inet_add_host_route(index,
-                                               service->nameservers[i], gw);
-               }
-       } else if (service->nameserver != NULL) {
-               if (connman_inet_compare_subnet(index, service->nameserver))
-                       return;
-
-               connman_inet_add_host_route(index, service->nameserver, gw);
+               nameserver_add_routes(index, service->nameservers, gw);
        }
 }
 
 void __connman_service_nameserver_del_routes(struct connman_service *service)
 {
-       int index;
+       int index = -1;
 
        if (service == NULL)
                return;
 
-       index = connman_network_get_index(service->network);
-
-       if (service->nameservers != NULL) {
-               int i;
+       if (service->network != NULL)
+               index = connman_network_get_index(service->network);
+       else if (service->provider != NULL)
+               index = connman_provider_get_index(service->provider);
 
-               for (i = 0; service->nameservers[i]; i++)
-                       connman_inet_del_host_route(index,
-                                               service->nameservers[i]);
-       } else if (service->nameserver != NULL) {
-               connman_inet_del_host_route(index, service->nameserver);
-       }
+       if (service->nameservers_config != NULL)
+               nameserver_del_routes(index, service->nameservers_config);
+       else if (service->nameservers != NULL)
+               nameserver_del_routes(index, service->nameservers);
 }
 
 static struct connman_stats *stats_get(struct connman_service *service)
@@ -603,23 +850,12 @@ const char *__connman_service_default(void)
        return __connman_service_type2string(service->type);
 }
 
-static void mode_changed(struct connman_service *service)
-{
-       const char *str;
-
-       str = mode2string(service->mode);
-       if (str == NULL)
-               return;
-
-       connman_dbus_property_changed_basic(service->path,
-                               CONNMAN_SERVICE_INTERFACE, "Mode",
-                                               DBUS_TYPE_STRING, &str);
-}
-
 static void state_changed(struct connman_service *service)
 {
        const char *str;
 
+       __connman_notifier_service_state_changed(service, service->state);
+
        str = state2string(service->state);
        if (str == NULL)
                return;
@@ -731,30 +967,20 @@ static void login_changed(struct connman_service *service)
                                                DBUS_TYPE_BOOLEAN, &required);
 }
 
-static void apn_changed(struct connman_service *service)
+static void append_security(DBusMessageIter *iter, void *user_data)
 {
-       dbus_bool_t required;
-
-       switch (service->type) {
-       case CONNMAN_SERVICE_TYPE_UNKNOWN:
-       case CONNMAN_SERVICE_TYPE_SYSTEM:
-       case CONNMAN_SERVICE_TYPE_ETHERNET:
-       case CONNMAN_SERVICE_TYPE_WIMAX:
-       case CONNMAN_SERVICE_TYPE_BLUETOOTH:
-       case CONNMAN_SERVICE_TYPE_WIFI:
-       case CONNMAN_SERVICE_TYPE_GPS:
-       case CONNMAN_SERVICE_TYPE_VPN:
-       case CONNMAN_SERVICE_TYPE_GADGET:
-               return;
-       case CONNMAN_SERVICE_TYPE_CELLULAR:
-               break;
-       }
+       struct connman_service *service = user_data;
+       const char *str;
 
-       required = (service->apn == NULL) ? TRUE : FALSE;
+       str = security2string(service->security);
+       if (str != NULL)
+               dbus_message_iter_append_basic(iter,
+                               DBUS_TYPE_STRING, &str);
 
-       connman_dbus_property_changed_basic(service->path,
-                               CONNMAN_SERVICE_INTERFACE, "SetupRequired",
-                                               DBUS_TYPE_BOOLEAN, &required);
+       str = "wps";
+       if (service->wps == TRUE)
+               dbus_message_iter_append_basic(iter,
+                               DBUS_TYPE_STRING, &str);
 }
 
 static void append_ethernet(DBusMessageIter *iter, void *user_data)
@@ -773,7 +999,10 @@ static void append_ipv4(DBusMessageIter *iter, void *user_data)
 {
        struct connman_service *service = user_data;
 
-       if (is_connected(service) == FALSE)
+       DBG("ipv4 %p state %s", service->ipconfig_ipv4,
+                               state2string(service->state_ipv4));
+
+       if (is_connected_state(service, service->state_ipv4) == FALSE)
                return;
 
        if (service->ipconfig_ipv4 != NULL)
@@ -784,11 +1013,15 @@ static void append_ipv6(DBusMessageIter *iter, void *user_data)
 {
        struct connman_service *service = user_data;
 
-       if (is_connected(service) == FALSE)
+       DBG("ipv6 %p state %s", service->ipconfig_ipv6,
+                               state2string(service->state_ipv6));
+
+       if (is_connected_state(service, service->state_ipv6) == FALSE)
                return;
 
        if (service->ipconfig_ipv6 != NULL)
-               __connman_ipconfig_append_ipv6(service->ipconfig_ipv6, iter);
+               __connman_ipconfig_append_ipv6(service->ipconfig_ipv6, iter,
+                                               service->ipconfig_ipv4);
 }
 
 static void append_ipv4config(DBusMessageIter *iter, void *user_data)
@@ -809,6 +1042,19 @@ static void append_ipv6config(DBusMessageIter *iter, void *user_data)
                                                        iter);
 }
 
+static void append_nameserver(DBusMessageIter *iter, char ***nameservers)
+{
+       char **servers;
+       int i;
+
+       servers = *nameservers;
+
+       for (i = 0; servers[i] != NULL; i++) {
+               dbus_message_iter_append_basic(iter,
+                                       DBUS_TYPE_STRING, &servers[i]);
+       }
+}
+
 static void append_dns(DBusMessageIter *iter, void *user_data)
 {
        struct connman_service *service = user_data;
@@ -816,21 +1062,13 @@ static void append_dns(DBusMessageIter *iter, void *user_data)
        if (is_connected(service) == FALSE)
                return;
 
-       if (service->nameservers != NULL) {
-               int i;
-
-               for (i = 0; service->nameservers[i]; i++)
-                       dbus_message_iter_append_basic(iter,
-                               DBUS_TYPE_STRING, &service->nameservers[i]);
-
+       if (service->nameservers_config != NULL) {
+               append_nameserver(iter, &service->nameservers_config);
                return;
-       }
-
-       if (service->nameserver == NULL)
+       } else if (service->nameservers != NULL) {
+               append_nameserver(iter, &service->nameservers);
                return;
-
-       dbus_message_iter_append_basic(iter,
-                               DBUS_TYPE_STRING, &service->nameserver);
+       }
 }
 
 static void append_dnsconfig(DBusMessageIter *iter, void *user_data)
@@ -838,19 +1076,22 @@ static void append_dnsconfig(DBusMessageIter *iter, void *user_data)
        struct connman_service *service = user_data;
        int i;
 
-       if (service->nameservers == NULL)
+       if (service->nameservers_config == NULL)
                return;
 
-       for (i = 0; service->nameservers[i]; i++)
+       for (i = 0; service->nameservers_config[i]; i++) {
                dbus_message_iter_append_basic(iter,
-                               DBUS_TYPE_STRING, &service->nameservers[i]);
+                               DBUS_TYPE_STRING,
+                               &service->nameservers_config[i]);
+       }
 }
 
 static void append_domain(DBusMessageIter *iter, void *user_data)
 {
        struct connman_service *service = user_data;
 
-       if (is_connected(service) == FALSE && is_connecting(service) == FALSE)
+       if (is_connected(service) == FALSE &&
+                               is_connecting(service) == FALSE)
                return;
 
        if (service->domainname == NULL)
@@ -1006,7 +1247,8 @@ static void append_provider(DBusMessageIter *iter, void *user_data)
 }
 
 
-static void settings_changed(struct connman_service *service)
+static void settings_changed(struct connman_service *service,
+                               struct connman_ipconfig *ipconfig)
 {
        connman_dbus_property_changed_dict(service->path,
                                        CONNMAN_SERVICE_INTERFACE, "IPv4",
@@ -1015,6 +1257,8 @@ static void settings_changed(struct connman_service *service)
        connman_dbus_property_changed_dict(service->path,
                                        CONNMAN_SERVICE_INTERFACE, "IPv6",
                                                        append_ipv6, service);
+
+       __connman_notifier_ipconfig_changed(service, ipconfig);
 }
 
 static void ipv4_configuration_changed(struct connman_service *service)
@@ -1235,6 +1479,28 @@ static void stats_update(struct connman_service *service,
        stats->data.time = stats->data_last.time + seconds;
 }
 
+static char *wifi_build_group_name(const unsigned char *ssid,
+                                               unsigned int ssid_len,
+                                                       const char *mode,
+                                                       const char *security)
+{
+       GString *str;
+       unsigned int i;
+
+       /* the last 3 is for the 2 '_' and '\0' */
+       str = g_string_sized_new((ssid_len * 2) + strlen(mode)
+                                       + strlen(security) + 3);
+       if (str == NULL)
+               return NULL;
+
+       for (i = 0; i < ssid_len; i++)
+               g_string_append_printf(str, "%02x", ssid[i]);
+
+       g_string_append_printf(str, "_%s_%s", mode, security);
+
+       return g_string_free(str, FALSE);
+}
+
 void __connman_service_notify(struct connman_service *service,
                        unsigned int rx_packets, unsigned int tx_packets,
                        unsigned int rx_bytes, unsigned int tx_bytes,
@@ -1326,6 +1592,59 @@ void __connman_service_counter_unregister(const char *counter)
        counter_list = g_slist_remove(counter_list, counter);
 }
 
+GSequence *__connman_service_get_list(struct connman_session *session,
+                               service_match_cb service_match,
+                               create_service_entry_cb create_service_entry,
+                               GDestroyNotify destroy_service_entry)
+{
+       GSequence *list;
+       GSequenceIter *iter;
+       struct connman_service *service;
+       struct service_entry *entry;
+
+       list = g_sequence_new(destroy_service_entry);
+       if (list == NULL)
+               return NULL;
+
+       iter = g_sequence_get_begin_iter(service_list);
+
+       while (g_sequence_iter_is_end(iter) == FALSE) {
+               service = g_sequence_get(iter);
+
+               if (service_match(session, service) == TRUE) {
+                       entry = create_service_entry(service, service->name,
+                                                       service->state);
+                       if (entry == NULL)
+                               return list;
+
+                       g_sequence_append(list, entry);
+               }
+
+               iter = g_sequence_iter_next(iter);
+       }
+
+       return list;
+}
+
+void __connman_service_session_inc(struct connman_service *service)
+{
+       DBG("service %p ref count %d", service,
+               g_atomic_int_get(&service->session_usage_count) + 1);
+
+       g_atomic_int_inc(&service->session_usage_count);
+}
+
+connman_bool_t __connman_service_session_dec(struct connman_service *service)
+{
+       DBG("service %p ref count %d", service,
+               g_atomic_int_get(&service->session_usage_count) - 1);
+
+       if (g_atomic_int_dec_and_test(&service->session_usage_count) == FALSE)
+               return FALSE;
+
+       return TRUE;
+}
+
 static void append_properties(DBusMessageIter *dict, dbus_bool_t limited,
                                        struct connman_service *service)
 {
@@ -1337,15 +1656,8 @@ static void append_properties(DBusMessageIter *dict, dbus_bool_t limited,
                connman_dbus_dict_append_basic(dict, "Type",
                                                DBUS_TYPE_STRING, &str);
 
-       str = mode2string(service->mode);
-       if (str != NULL)
-               connman_dbus_dict_append_basic(dict, "Mode",
-                                               DBUS_TYPE_STRING, &str);
-
-       str = security2string(service->security);
-       if (str != NULL)
-               connman_dbus_dict_append_basic(dict, "Security",
-                                               DBUS_TYPE_STRING, &str);
+       connman_dbus_dict_append_array(dict, "Security",
+                               DBUS_TYPE_STRING, append_security, service);
 
        str = state2string(service->state);
        if (str != NULL)
@@ -1392,24 +1704,7 @@ static void append_properties(DBusMessageIter *dict, dbus_bool_t limited,
                connman_dbus_dict_append_basic(dict, "Roaming",
                                        DBUS_TYPE_BOOLEAN, &service->roaming);
 
-               if (service->apn != NULL) {
-                       connman_dbus_dict_append_basic(dict, "APN",
-                                       DBUS_TYPE_STRING, &service->apn);
-
-                       if (service->username != NULL)
-                               connman_dbus_dict_append_basic(dict,
-                                       "Username", DBUS_TYPE_STRING,
-                                                       &service->username);
-
-                       if (service->password != NULL)
-                               connman_dbus_dict_append_basic(dict,
-                                       "Password", DBUS_TYPE_STRING,
-                                                       &service->password);
-
-                       required = FALSE;
-               } else
-                       required = TRUE;
-
+               required = FALSE;
                connman_dbus_dict_append_basic(dict, "SetupRequired",
                                                DBUS_TYPE_BOOLEAN, &required);
                connman_dbus_dict_append_dict(dict, "Ethernet",
@@ -1440,8 +1735,6 @@ static void append_properties(DBusMessageIter *dict, dbus_bool_t limited,
                connman_dbus_dict_append_basic(dict, "PassphraseRequired",
                                                DBUS_TYPE_BOOLEAN, &required);
 
-               connman_dbus_dict_append_basic(dict, "WPS",
-                                       DBUS_TYPE_BOOLEAN, &service->wps);
                /* fall through */
        case CONNMAN_SERVICE_TYPE_ETHERNET:
        case CONNMAN_SERVICE_TYPE_WIMAX:
@@ -1513,10 +1806,12 @@ int __connman_service_get_index(struct connman_service *service)
        if (service == NULL)
                return -1;
 
-       if (service->network == NULL)
-               return -1;
+       if (service->network != NULL)
+               return connman_network_get_index(service->network);
+       else if (service->provider != NULL)
+               return connman_provider_get_index(service->provider);
 
-       return connman_network_get_index(service->network);
+       return -1;
 }
 
 void __connman_service_set_domainname(struct connman_service *service,
@@ -1542,12 +1837,17 @@ const char *connman_service_get_domainname(struct connman_service *service)
                return service->domainname;
 }
 
-const char *connman_service_get_nameserver(struct connman_service *service)
+char **connman_service_get_nameservers(struct connman_service *service)
 {
        if (service == NULL)
                return NULL;
 
-       return service->nameserver;
+       if (service->nameservers_config != NULL)
+               return service->nameservers_config;
+       else if (service->nameservers != NULL)
+               return service->nameservers;
+
+       return NULL;
 }
 
 void connman_service_set_proxy_method(struct connman_service *service,
@@ -1637,6 +1937,150 @@ const char *connman_service_get_proxy_autoconfig(struct connman_service *service
        return NULL;
 }
 
+static void update_timeservers(struct connman_service *service)
+{
+       int i;
+
+       if (service->timeservers == NULL)
+               return;
+
+       switch (service->state) {
+       case CONNMAN_SERVICE_STATE_UNKNOWN:
+       case CONNMAN_SERVICE_STATE_IDLE:
+       case CONNMAN_SERVICE_STATE_ASSOCIATION:
+       case CONNMAN_SERVICE_STATE_CONFIGURATION:
+               return;
+       case CONNMAN_SERVICE_STATE_FAILURE:
+       case CONNMAN_SERVICE_STATE_DISCONNECT:
+               for (i = 0; service->timeservers[i] != NULL; i++)
+                       connman_timeserver_remove(service->timeservers[i]);
+               return;
+       case CONNMAN_SERVICE_STATE_READY:
+       case CONNMAN_SERVICE_STATE_ONLINE:
+               break;
+       }
+
+       for (i = 0; service->timeservers[i] != NULL; i++)
+               connman_timeserver_append(service->timeservers[i]);
+}
+
+int __connman_service_timeserver_append(struct connman_service *service,
+                                               const char *timeserver)
+{
+       int len;
+
+       DBG("service %p timeserver %s", service, timeserver);
+
+       if (timeserver == NULL)
+               return -EINVAL;
+
+       if (service->timeservers != NULL) {
+               int i;
+
+               for (i = 0; service->timeservers[i] != NULL; i++)
+                       if (g_strcmp0(service->timeservers[i], timeserver) == 0)
+                               return -EEXIST;
+
+               len = g_strv_length(service->timeservers);
+               service->timeservers = g_try_renew(char *, service->timeservers,
+                                                       len + 2);
+       } else {
+               len = 0;
+               service->timeservers = g_try_new0(char *, len + 2);
+       }
+
+       if (service->timeservers == NULL)
+               return -ENOMEM;
+
+       service->timeservers[len] = g_strdup(timeserver);
+       service->timeservers[len + 1] = NULL;
+
+       update_timeservers(service);
+
+       return 0;
+}
+
+int __connman_service_timeserver_remove(struct connman_service *service,
+                                               const char *timeserver)
+{
+       char **servers;
+       int len, i, j;
+
+       DBG("service %p timeserver %s", service, timeserver);
+
+       if (timeserver == NULL)
+               return -EINVAL;
+
+       if (service->timeservers == NULL)
+               return 0;
+
+       len = g_strv_length(service->timeservers);
+       if (len == 1) {
+               if (g_strcmp0(service->timeservers[0], timeserver) != 0)
+                       return 0;
+
+               g_strfreev(service->timeservers);
+               service->timeservers = NULL;
+
+               return 0;
+       }
+
+       servers = g_try_new0(char *, len - 1);
+       if (servers == NULL)
+               return -ENOMEM;
+
+       for (i = 0, j = 0; i < len; i++) {
+               if (g_strcmp0(service->timeservers[i], timeserver) != 0) {
+                       servers[j] = g_strdup(service->timeservers[i]);
+                       j++;
+               }
+       }
+       servers[len - 2] = NULL;
+
+       g_strfreev(service->timeservers);
+       service->timeservers = servers;
+
+       update_timeservers(service);
+
+       return 0;
+}
+
+void __connman_service_set_pac(struct connman_service *service,
+                                       const char *pac)
+{
+       g_free(service->pac);
+       service->pac = g_strdup(pac);
+
+       proxy_changed(service);
+}
+
+void __connman_service_set_identity(struct connman_service *service,
+                                       const char *identity)
+{
+       if (service->immutable)
+               return;
+
+       g_free(service->identity);
+       service->identity = g_strdup(identity);
+
+       if (service->network != NULL)
+               connman_network_set_string(service->network,
+                                       "WiFi.Identity",
+                                       service->identity);
+}
+
+void __connman_service_set_agent_identity(struct connman_service *service,
+                                               const char *agent_identity)
+{
+       g_free(service->agent_identity);
+       service->agent_identity = g_strdup(agent_identity);
+
+       if (service->network != NULL)
+               connman_network_set_string(service->network,
+                                       "WiFi.AgentIdentity",
+                                       service->agent_identity);
+}
+
 void __connman_service_set_passphrase(struct connman_service *service,
                                        const char* passphrase)
 {
@@ -1656,6 +2100,18 @@ void __connman_service_set_passphrase(struct connman_service *service,
        __connman_storage_save_service(service);
 }
 
+void __connman_service_set_agent_passphrase(struct connman_service *service,
+                                               const char *agent_passphrase)
+{
+       g_free(service->agent_passphrase);
+       service->agent_passphrase = g_strdup(agent_passphrase);
+
+       if (service->network != NULL)
+               connman_network_set_string(service->network,
+                                       "WiFi.AgentPassphrase",
+                                       service->agent_passphrase);
+}
+
 static DBusMessage *get_properties(DBusConnection *conn,
                                        DBusMessage *msg, void *user_data)
 {
@@ -1851,6 +2307,49 @@ error:
        return -EINVAL;
 }
 
+static int set_ipconfig(struct connman_service *service,
+                       struct connman_ipconfig *ipconfig,
+                       DBusMessageIter *array,
+                       enum connman_service_state state,
+                       enum connman_service_state *new_state)
+{
+       enum connman_ipconfig_method old_method;
+       enum connman_ipconfig_method method = CONNMAN_IPCONFIG_METHOD_UNKNOWN;
+       enum connman_ipconfig_type type;
+       int err;
+
+       old_method = __connman_ipconfig_get_method(ipconfig);
+
+       if (is_connecting_state(service, state) ||
+                                       is_connected_state(service, state))
+               __connman_network_clear_ipconfig(service->network, ipconfig);
+
+       err = __connman_ipconfig_set_config(ipconfig, array);
+       method = __connman_ipconfig_get_method(ipconfig);
+       type = __connman_ipconfig_get_config_type(ipconfig);
+
+       if (type == CONNMAN_IPCONFIG_TYPE_IPV4) {
+               if (err == 0 && old_method == CONNMAN_IPCONFIG_METHOD_OFF &&
+                               method == CONNMAN_IPCONFIG_METHOD_DHCP) {
+                       *new_state = service->state_ipv4 =
+                               CONNMAN_SERVICE_STATE_CONFIGURATION;
+                       __connman_ipconfig_enable(ipconfig);
+               }
+
+       } else if (type == CONNMAN_IPCONFIG_TYPE_IPV6) {
+               if (err == 0 && old_method == CONNMAN_IPCONFIG_METHOD_OFF &&
+                               method == CONNMAN_IPCONFIG_METHOD_AUTO) {
+                       *new_state = service->state_ipv6;
+                       __connman_ipconfig_enable(ipconfig);
+               }
+       }
+
+       DBG("err %d ipconfig %p type %d method %d state %s", err, ipconfig,
+               type, method, state2string(*new_state));
+
+       return err;
+}
+
 static DBusMessage *set_property(DBusConnection *conn,
                                        DBusMessage *msg, void *user_data)
 {
@@ -1864,91 +2363,33 @@ static DBusMessage *set_property(DBusConnection *conn,
        if (dbus_message_iter_init(msg, &iter) == FALSE)
                return __connman_error_invalid_arguments(msg);
 
-       dbus_message_iter_get_basic(&iter, &name);
-       dbus_message_iter_next(&iter);
-       dbus_message_iter_recurse(&iter, &value);
-
-       type = dbus_message_iter_get_arg_type(&value);
-
-       if (g_str_equal(name, "AutoConnect") == TRUE) {
-               connman_bool_t autoconnect;
-
-               if (type != DBUS_TYPE_BOOLEAN)
-                       return __connman_error_invalid_arguments(msg);
-
-               if (service->favorite == FALSE)
-                       return __connman_error_invalid_service(msg);
-
-               dbus_message_iter_get_basic(&value, &autoconnect);
-
-               if (service->autoconnect == autoconnect)
-                       return g_dbus_create_reply(msg, DBUS_TYPE_INVALID);
-
-               service->autoconnect = autoconnect;
-
-               autoconnect_changed(service);
-
-               __connman_storage_save_service(service);
-       } else if (g_str_equal(name, "Passphrase") == TRUE) {
-               const char *passphrase;
-
-               if (type != DBUS_TYPE_STRING)
-                       return __connman_error_invalid_arguments(msg);
-
-               if (service->immutable == TRUE)
-                       return __connman_error_not_supported(msg);
-
-               dbus_message_iter_get_basic(&value, &passphrase);
-
-               __connman_service_set_passphrase(service, passphrase);
-       } else if (g_str_equal(name, "APN") == TRUE) {
-               const char *apn;
-
-               if (type != DBUS_TYPE_STRING)
-                       return __connman_error_invalid_arguments(msg);
-
-               if (service->immutable == TRUE)
-                       return __connman_error_not_supported(msg);
-
-               if (service->type != CONNMAN_SERVICE_TYPE_CELLULAR)
-                       return __connman_error_invalid_service(msg);
-
-               dbus_message_iter_get_basic(&value, &apn);
-
-               g_free(service->apn);
-               service->apn = g_strdup(apn);
-
-               apn_changed(service);
+       dbus_message_iter_get_basic(&iter, &name);
+       dbus_message_iter_next(&iter);
+       dbus_message_iter_recurse(&iter, &value);
 
-               if (service->network != NULL)
-                       connman_network_set_string(service->network,
-                                               "Cellular.APN", service->apn);
+       type = dbus_message_iter_get_arg_type(&value);
 
-               __connman_storage_save_service(service);
-       } else if (g_str_equal(name, "Username") == TRUE) {
-               const char *username;
+       if (g_str_equal(name, "AutoConnect") == TRUE) {
+               connman_bool_t autoconnect;
 
-               if (type != DBUS_TYPE_STRING)
+               if (type != DBUS_TYPE_BOOLEAN)
                        return __connman_error_invalid_arguments(msg);
 
-               if (service->immutable == TRUE)
-                       return __connman_error_not_supported(msg);
-
-               if (service->type != CONNMAN_SERVICE_TYPE_CELLULAR)
+               if (service->favorite == FALSE)
                        return __connman_error_invalid_service(msg);
 
-               dbus_message_iter_get_basic(&value, &username);
+               dbus_message_iter_get_basic(&value, &autoconnect);
+
+               if (service->autoconnect == autoconnect)
+                       return g_dbus_create_reply(msg, DBUS_TYPE_INVALID);
 
-               g_free(service->username);
-               service->username = g_strdup(username);
+               service->autoconnect = autoconnect;
 
-               if (service->network != NULL)
-                       connman_network_set_string(service->network,
-                                       "Cellular.Username", service->username);
+               autoconnect_changed(service);
 
                __connman_storage_save_service(service);
-       } else if (g_str_equal(name, "Password") == TRUE) {
-               const char *password;
+       } else if (g_str_equal(name, "Passphrase") == TRUE) {
+               const char *passphrase;
 
                if (type != DBUS_TYPE_STRING)
                        return __connman_error_invalid_arguments(msg);
@@ -1956,19 +2397,9 @@ static DBusMessage *set_property(DBusConnection *conn,
                if (service->immutable == TRUE)
                        return __connman_error_not_supported(msg);
 
-               if (service->type != CONNMAN_SERVICE_TYPE_CELLULAR)
-                       return __connman_error_invalid_service(msg);
-
-               dbus_message_iter_get_basic(&value, &password);
-
-               g_free(service->password);
-               service->password = g_strdup(password);
-
-               if (service->network != NULL)
-                       connman_network_set_string(service->network,
-                                       "Cellular.Password", service->password);
+               dbus_message_iter_get_basic(&value, &passphrase);
 
-               __connman_storage_save_service(service);
+               __connman_service_set_passphrase(service, passphrase);
        } else if (g_str_equal(name, "Nameservers.Configuration") == TRUE) {
                DBusMessageIter entry;
                GString *str;
@@ -1983,7 +2414,7 @@ static DBusMessage *set_property(DBusConnection *conn,
                        return __connman_error_invalid_arguments(msg);
 
                index = connman_network_get_index(service->network);
-               gw = __connman_ipconfig_get_gateway(index);
+               gw = __connman_ipconfig_get_gateway_from_index(index);
 
                if (gw && strlen(gw))
                        __connman_service_nameserver_del_routes(service);
@@ -2000,12 +2431,14 @@ static DBusMessage *set_property(DBusConnection *conn,
                                g_string_append(str, val);
                }
 
-               g_strfreev(service->nameservers);
+               g_strfreev(service->nameservers_config);
 
-               if (str->len > 0)
-                       service->nameservers = g_strsplit_set(str->str, " ", 0);
-               else
-                       service->nameservers = NULL;
+               if (str->len > 0) {
+                       service->nameservers_config =
+                               g_strsplit_set(str->str, " ", 0);
+               } else {
+                       service->nameservers_config = NULL;
+               }
 
                g_string_free(str, TRUE);
 
@@ -2065,11 +2498,15 @@ static DBusMessage *set_property(DBusConnection *conn,
 
                proxy_configuration_changed(service);
 
+               __connman_notifier_proxy_changed(service);
+
                __connman_storage_save_service(service);
        } else if (g_str_equal(name, "IPv4.Configuration") == TRUE ||
                        g_str_equal(name, "IPv6.Configuration")) {
 
                struct connman_ipconfig *ipv4 = NULL, *ipv6 = NULL;
+               enum connman_service_state state =
+                                               CONNMAN_SERVICE_STATE_UNKNOWN;
                int err = 0;
 
                DBG("%s", name);
@@ -2079,26 +2516,19 @@ static DBusMessage *set_property(DBusConnection *conn,
                        return __connman_error_invalid_property(msg);
 
                if (g_str_equal(name, "IPv4.Configuration") == TRUE) {
-                       if (is_connecting(service) || is_connected(service))
-                               __connman_network_clear_ipconfig(
-                                               service->network,
-                                               service->ipconfig_ipv4);
-
                        ipv4 = service->ipconfig_ipv4;
-                       err = __connman_ipconfig_set_config(ipv4, &value);
+                       err = set_ipconfig(service, ipv4, &value,
+                                       service->state_ipv4, &state);
 
                } else if (g_str_equal(name, "IPv6.Configuration") == TRUE) {
-                       if (is_connecting(service) || is_connected(service))
-                               __connman_network_clear_ipconfig(
-                                               service->network,
-                                               service->ipconfig_ipv6);
-
                        ipv6 = service->ipconfig_ipv6;
-                       err = __connman_ipconfig_set_config(ipv6, &value);
+                       err = set_ipconfig(service, ipv6, &value,
+                                       service->state_ipv6, &state);
                }
 
                if (err < 0) {
-                       if (is_connected(service) || is_connecting(service))
+                       if (is_connected_state(service, state) ||
+                                       is_connecting_state(service, state))
                                __connman_network_set_ipconfig(service->network,
                                                                ipv4, ipv6);
                        return __connman_error_failed(msg, -err);
@@ -2122,7 +2552,8 @@ static DBusMessage *set_property(DBusConnection *conn,
 
 static void set_idle(struct connman_service *service)
 {
-       service->state = CONNMAN_SERVICE_STATE_IDLE;
+       service->state = service->state_ipv4 = service->state_ipv6 =
+                                               CONNMAN_SERVICE_STATE_IDLE;
        service->error = CONNMAN_SERVICE_ERROR_UNKNOWN;
        state_changed(service);
 }
@@ -2183,6 +2614,11 @@ void __connman_service_auto_connect(void)
 
        DBG("");
 
+       if (__connman_session_mode() == TRUE) {
+               DBG("Session mode enabled: auto connect disabled");
+               return;
+       }
+
        iter = g_sequence_get_begin_iter(service_list);
 
        while (g_sequence_iter_is_end(iter) == FALSE) {
@@ -2200,8 +2636,8 @@ void __connman_service_auto_connect(void)
                if (is_connected(service) == TRUE)
                        return;
 
-               if (is_ignore(service) == FALSE &&
-                               service->state == CONNMAN_SERVICE_STATE_IDLE)
+               if (is_ignore(service) == FALSE && service->state ==
+                                               CONNMAN_SERVICE_STATE_IDLE)
                        break;
 
                service = NULL;
@@ -2235,9 +2671,21 @@ static void reply_pending(struct connman_service *service, int error)
                                                                error);
                        if (reply != NULL)
                                g_dbus_send_message(connection, reply);
-               } else
-                       g_dbus_send_reply(connection, service->pending,
+               } else {
+                       const char *sender;
+
+                       sender = dbus_message_get_interface(service->pending);
+
+                       DBG("sender %s", sender);
+
+                       if (g_strcmp0(sender, CONNMAN_MANAGER_INTERFACE) == 0)
+                               g_dbus_send_reply(connection, service->pending,
+                                       DBUS_TYPE_OBJECT_PATH, &service->path,
+                                                       DBUS_TYPE_INVALID);
+                       else
+                               g_dbus_send_reply(connection, service->pending,
                                                        DBUS_TYPE_INVALID);
+               }
 
                dbus_message_unref(service->pending);
                service->pending = NULL;
@@ -2273,8 +2721,12 @@ static gboolean connect_timeout(gpointer user_data)
        } else
                autoconnect = TRUE;
 
-       __connman_service_indicate_state(service,
-                                       CONNMAN_SERVICE_STATE_FAILURE);
+       __connman_service_ipconfig_indicate_state(service,
+                                       CONNMAN_SERVICE_STATE_FAILURE,
+                                       CONNMAN_IPCONFIG_TYPE_IPV4);
+       __connman_service_ipconfig_indicate_state(service,
+                                       CONNMAN_SERVICE_STATE_FAILURE,
+                                       CONNMAN_IPCONFIG_TYPE_IPV6);
 
        if (autoconnect == TRUE && service->userconnect == FALSE)
                __connman_service_auto_connect();
@@ -2312,75 +2764,42 @@ static connman_bool_t get_reconnect_state(struct connman_service *service)
 }
 
 static void request_input_cb (struct connman_service *service,
-                       const char *passphrase, void *user_data)
+                       const char *identity, const char *passphrase,
+                       void *user_data)
 {
        DBG ("RequestInput return, %p", service);
 
-       if (passphrase == NULL)
+       if (identity == NULL && passphrase == NULL && service->wps == FALSE)
                return;
-       __connman_service_set_passphrase(service, passphrase);
-       __connman_service_connect(service);
-}
-
-struct connman_service *
-__connman_service_connect_type(enum connman_service_type type)
-{
-       struct connman_service *service;
-       GSequenceIter *iter;
-       int err;
 
-       DBG("type %d", type);
+       if (identity != NULL)
+               __connman_service_set_agent_identity(service, identity);
 
-       /*
-        * We go through the already sorted service list.
-        * We pick the first one matching our type, or just
-        * the first available one if we have no type.
-        */
-       iter = g_sequence_get_begin_iter(service_list);
-       if (g_sequence_iter_is_end(iter))
-               return NULL;
-       service = g_sequence_get(iter);
-
-       /*
-        * If the first service is connected or about to be
-        * connected, we return it, regardless of the type.
-        */
-       if ((g_sequence_iter_is_end(iter) == FALSE) &&
-               (is_connecting(service) == TRUE ||
-                       is_connected(service) == TRUE))
-               return service;
-
-       while (g_sequence_iter_is_end(iter) == FALSE) {
-               if (service->type == type ||
-                       type == CONNMAN_SERVICE_TYPE_UNKNOWN)
+       if (passphrase != NULL) {
+               switch (service->security) {
+               case CONNMAN_SERVICE_SECURITY_WEP:
+               case CONNMAN_SERVICE_SECURITY_PSK:
+                       __connman_service_set_passphrase(service, passphrase);
                        break;
-
-               iter = g_sequence_iter_next(iter);
-               service = g_sequence_get(iter);
+               case CONNMAN_SERVICE_SECURITY_8021X:
+                       __connman_service_set_agent_passphrase(service,
+                                                       passphrase);
+                       break;
+               case CONNMAN_SERVICE_SECURITY_UNKNOWN:
+               case CONNMAN_SERVICE_SECURITY_NONE:
+               case CONNMAN_SERVICE_SECURITY_WPA:
+               case CONNMAN_SERVICE_SECURITY_RSN:
+                       DBG("service security '%s' not handled",
+                               security2string(service->security));
+                       break;
+               }
        }
 
-       if (g_sequence_iter_is_end(iter))
-               return NULL;
-
-       service->ignore = FALSE;
-
-       service->userconnect = TRUE;
-
-       set_reconnect_state(service, FALSE);
-
-       err = __connman_service_connect(service);
-       if (err < 0) {
-               if (err == -ENOKEY)
-                       if ( __connman_agent_request_input(service,
-                                                       request_input_cb,
-                                                       NULL))
-                               return service;
-
-               if (err != -EINPROGRESS)
-                       return NULL;
-       }
+       __connman_service_connect(service);
 
-       return service;
+       /* Never cache agent provided credentials */
+       __connman_service_set_agent_identity(service, NULL);
+       __connman_service_set_agent_passphrase(service, NULL);
 }
 
 static DBusMessage *connect_service(DBusConnection *conn,
@@ -2400,8 +2819,7 @@ static DBusMessage *connect_service(DBusConnection *conn,
        while (g_sequence_iter_is_end(iter) == FALSE) {
                struct connman_service *temp = g_sequence_get(iter);
 
-               if (service->type == temp->type &&
-                                       is_connecting(temp) == TRUE)
+               if (service->type == temp->type && is_connecting(temp) == TRUE)
                        return __connman_error_in_progress(msg);
 
                iter = g_sequence_iter_next(iter);
@@ -2417,13 +2835,6 @@ static DBusMessage *connect_service(DBusConnection *conn,
 
        err = __connman_service_connect(service);
        if (err < 0) {
-               if (err == -ENOKEY) {
-                       if (__connman_agent_request_input(service,
-                                                       request_input_cb,
-                                                       NULL) == 0)
-                               return NULL;
-               }
-
                if (service->pending == NULL)
                        return NULL;
 
@@ -2478,8 +2889,8 @@ static DBusMessage *remove_service(DBusConnection *conn,
        if (service->immutable == TRUE)
                return __connman_error_not_supported(msg);
 
-       if (service->favorite == FALSE &&
-                       service->state != CONNMAN_SERVICE_STATE_FAILURE)
+       if (service->favorite == FALSE && service->state !=
+                                               CONNMAN_SERVICE_STATE_FAILURE)
                return __connman_error_not_supported(msg);
 
        if (service->network != NULL) {
@@ -2488,24 +2899,11 @@ static DBusMessage *remove_service(DBusConnection *conn,
                __connman_network_disconnect(service->network);
        }
 
-       g_hash_table_destroy(service->counter_table);
-
        g_free(service->passphrase);
        service->passphrase = NULL;
 
        passphrase_changed(service);
 
-       g_free(service->apn);
-       service->apn = NULL;
-
-       g_free(service->username);
-       service->username = NULL;
-
-       g_free(service->password);
-       service->password = NULL;
-
-       apn_changed(service);
-
        set_idle(service);
 
        __connman_service_set_favorite(service, FALSE);
@@ -2514,6 +2912,22 @@ static DBusMessage *remove_service(DBusConnection *conn,
        return g_dbus_create_reply(msg, DBUS_TYPE_INVALID);
 }
 
+static gboolean check_suitable_state(enum connman_service_state a,
+                                       enum connman_service_state b)
+{
+       /*
+        * Special check so that "ready" service can be moved before
+        * "online" one.
+        */
+       if ((a == CONNMAN_SERVICE_STATE_ONLINE &&
+                       b == CONNMAN_SERVICE_STATE_READY) ||
+               (b == CONNMAN_SERVICE_STATE_ONLINE &&
+                       a == CONNMAN_SERVICE_STATE_READY))
+               return TRUE;
+
+       return a == b;
+}
+
 static DBusMessage *move_service(DBusConnection *conn,
                                        DBusMessage *msg, void *user_data,
                                                                gboolean before)
@@ -2522,6 +2936,8 @@ static DBusMessage *move_service(DBusConnection *conn,
        struct connman_service *target;
        const char *path;
        GSequenceIter *src, *dst;
+       enum connman_ipconfig_method target4, target6;
+       enum connman_ipconfig_method service4, service6;
 
        DBG("service %p", service);
 
@@ -2535,10 +2951,54 @@ static DBusMessage *move_service(DBusConnection *conn,
        if (target == NULL || target->favorite == FALSE || target == service)
                return __connman_error_invalid_service(msg);
 
-       DBG("target %s", target->identifier);
+       target4 = __connman_ipconfig_get_method(target->ipconfig_ipv4);
+       target6 = __connman_ipconfig_get_method(target->ipconfig_ipv6);
+       service4 = __connman_ipconfig_get_method(service->ipconfig_ipv4);
+       service6 = __connman_ipconfig_get_method(service->ipconfig_ipv6);
 
-       if (target->state != service->state)
-               return __connman_error_invalid_service(msg);
+       DBG("target %s method %d/%d state %d/%d", target->identifier,
+                               target4, target6,
+                               target->state_ipv4, target->state_ipv6);
+
+       DBG("service %s method %d/%d state %d/%d", service->identifier,
+                               service4, service6,
+                               service->state_ipv4, service->state_ipv6);
+
+       /*
+        * If method is OFF, then we do not need to check the corresponding
+        * ipconfig state.
+        */
+       if (target4 == CONNMAN_IPCONFIG_METHOD_OFF) {
+               if (service6 != CONNMAN_IPCONFIG_METHOD_OFF) {
+                       if (check_suitable_state(target->state_ipv6,
+                                               service->state_ipv6) == FALSE)
+                               return __connman_error_invalid_service(msg);
+               }
+       }
+
+       if (target6 == CONNMAN_IPCONFIG_METHOD_OFF) {
+               if (service4 != CONNMAN_IPCONFIG_METHOD_OFF) {
+                       if (check_suitable_state(target->state_ipv4,
+                                               service->state_ipv4) == FALSE)
+                               return __connman_error_invalid_service(msg);
+               }
+       }
+
+       if (service4 == CONNMAN_IPCONFIG_METHOD_OFF) {
+               if (target6 != CONNMAN_IPCONFIG_METHOD_OFF) {
+                       if (check_suitable_state(target->state_ipv6,
+                                               service->state_ipv6) == FALSE)
+                               return __connman_error_invalid_service(msg);
+               }
+       }
+
+       if (service6 == CONNMAN_IPCONFIG_METHOD_OFF) {
+               if (target4 != CONNMAN_IPCONFIG_METHOD_OFF) {
+                       if (check_suitable_state(target->state_ipv4,
+                                               service->state_ipv4) == FALSE)
+                               return __connman_error_invalid_service(msg);
+               }
+       }
 
        g_get_current_time(&service->modified);
        __connman_storage_save_service(service);
@@ -2605,6 +3065,8 @@ static void service_free(gpointer user_data)
 
        g_hash_table_remove(service_hash, service->identifier);
 
+       __connman_notifier_service_remove(service);
+
        stats_stop(service);
        __connman_storage_save_service(service);
 
@@ -2618,18 +3080,26 @@ static void service_free(gpointer user_data)
                g_free(path);
        }
 
-       if (service->network != NULL)
-               connman_network_unref(service->network);
+       g_hash_table_destroy(service->counter_table);
+
+       if (service->network != NULL) {
+               if (service->network_created == TRUE)
+                       connman_network_unref(service->network);
+       }
 
        if (service->provider != NULL)
                connman_provider_unref(service->provider);
 
        if (service->ipconfig_ipv4 != NULL) {
+               connman_ipconfig_set_ops(service->ipconfig_ipv4, NULL);
+               connman_ipconfig_set_data(service->ipconfig_ipv4, NULL);
                connman_ipconfig_unref(service->ipconfig_ipv4);
                service->ipconfig_ipv4 = NULL;
        }
 
        if (service->ipconfig_ipv6 != NULL) {
+               connman_ipconfig_set_ops(service->ipconfig_ipv6, NULL);
+               connman_ipconfig_set_data(service->ipconfig_ipv6, NULL);
                connman_ipconfig_unref(service->ipconfig_ipv6);
                service->ipconfig_ipv6 = NULL;
        }
@@ -2638,24 +3108,21 @@ static void service_free(gpointer user_data)
                connman_location_unref(service->location);
 
        g_strfreev(service->nameservers);
+       g_strfreev(service->nameservers_config);
        g_strfreev(service->domains);
        g_strfreev(service->proxies);
        g_strfreev(service->excludes);
 
-       g_free(service->nameserver);
        g_free(service->domainname);
        g_free(service->pac);
-       g_free(service->mcc);
-       g_free(service->mnc);
-       g_free(service->apn);
-       g_free(service->username);
-       g_free(service->password);
        g_free(service->profile);
        g_free(service->name);
        g_free(service->passphrase);
+       g_free(service->agent_passphrase);
        g_free(service->identifier);
        g_free(service->eap);
        g_free(service->identity);
+       g_free(service->agent_identity);
        g_free(service->ca_cert_file);
        g_free(service->client_cert_file);
        g_free(service->private_key_file);
@@ -2713,11 +3180,16 @@ static void service_initialize(struct connman_service *service)
        DBG("service %p", service);
 
        service->refcount = 1;
+       service->session_usage_count = 0;
+
+       service->network_created = FALSE;
 
        service->type     = CONNMAN_SERVICE_TYPE_UNKNOWN;
-       service->mode     = CONNMAN_SERVICE_MODE_UNKNOWN;
        service->security = CONNMAN_SERVICE_SECURITY_UNKNOWN;
-       service->state    = CONNMAN_SERVICE_STATE_UNKNOWN;
+
+       service->state = CONNMAN_SERVICE_STATE_UNKNOWN;
+       service->state_ipv4 = CONNMAN_SERVICE_STATE_UNKNOWN;
+       service->state_ipv6 = CONNMAN_SERVICE_STATE_UNKNOWN;
 
        service->favorite  = FALSE;
        service->immutable = FALSE;
@@ -2819,8 +3291,12 @@ static gint service_compare(gconstpointer a, gconstpointer b,
 {
        struct connman_service *service_a = (void *) a;
        struct connman_service *service_b = (void *) b;
+       enum connman_service_state state_a, state_b;
 
-       if (service_a->state != service_b->state) {
+       state_a = service_a->state;
+       state_b = service_b->state;
+
+       if (state_a != state_b) {
                if (is_connected(service_a) == TRUE)
                        return -1;
                if (is_connected(service_b) == TRUE)
@@ -2946,6 +3422,18 @@ __connman_service_get_ip6config(struct connman_service *service)
        return service->ipconfig_ipv6;
 }
 
+struct connman_ipconfig *
+__connman_service_get_ipconfig(struct connman_service *service, int family)
+{
+       if (family == AF_INET)
+               return __connman_service_get_ip4config(service);
+       else if (family == AF_INET6)
+               return __connman_service_get_ip6config(service);
+       else
+               return NULL;
+
+}
+
 enum connman_service_security __connman_service_get_security(struct connman_service *service)
 {
        if (service == NULL)
@@ -2954,6 +3442,22 @@ enum connman_service_security __connman_service_get_security(struct connman_serv
        return service->security;
 }
 
+const char *__connman_service_get_phase2(struct connman_service *service)
+{
+       if (service == NULL)
+               return NULL;
+
+       return service->phase2;
+}
+
+connman_bool_t __connman_service_wps_enabled(struct connman_service *service)
+{
+       if (service == NULL)
+               return FALSE;
+
+       return service->wps;
+}
+
 /**
  * __connman_service_set_favorite:
  * @service: service structure
@@ -3043,59 +3547,51 @@ static void report_error_cb(struct connman_service *service,
        else {
                service_complete(service);
                __connman_profile_changed(FALSE);
-               __connman_element_request_scan(CONNMAN_ELEMENT_TYPE_UNKNOWN);
+               __connman_device_request_scan(CONNMAN_DEVICE_TYPE_UNKNOWN);
        }
 }
 
-int __connman_service_indicate_state(struct connman_service *service,
-                                       enum connman_service_state state)
+static int __connman_service_indicate_state(struct connman_service *service)
 {
+       enum connman_service_state old_state, new_state;
        GSequenceIter *iter;
 
-       DBG("service %p state %d", service, state);
-
        if (service == NULL)
                return -EINVAL;
 
-       if (service->state == state)
-               return -EALREADY;
+       old_state = service->state;
+       new_state = combine_state(service->state_ipv4, service->state_ipv6);
 
-       if (service->state == CONNMAN_SERVICE_STATE_FAILURE &&
-                               state == CONNMAN_SERVICE_STATE_IDLE)
-               return -EINVAL;
+       if (old_state == new_state)
+               return -EALREADY;
 
-       if (service->state == CONNMAN_SERVICE_STATE_IDLE &&
-                               state == CONNMAN_SERVICE_STATE_DISCONNECT)
-               return -EINVAL;
+       DBG("service %p old %s - new %s/%s => %s",
+                                       service,
+                                       state2string(old_state),
+                                       state2string(service->state_ipv4),
+                                       state2string(service->state_ipv6),
+                                       state2string(new_state));
 
-       if (state == CONNMAN_SERVICE_STATE_IDLE &&
-                       service->state != CONNMAN_SERVICE_STATE_DISCONNECT) {
-               service->state = CONNMAN_SERVICE_STATE_DISCONNECT;
-               state_changed(service);
+       service->state = new_state;
+       state_changed(service);
 
+       if (new_state == CONNMAN_SERVICE_STATE_IDLE &&
+                       old_state != CONNMAN_SERVICE_STATE_DISCONNECT) {
                reply_pending(service, ECONNABORTED);
 
                __connman_service_disconnect(service);
        }
 
-       if (state == CONNMAN_SERVICE_STATE_CONFIGURATION) {
+       if (new_state == CONNMAN_SERVICE_STATE_CONFIGURATION) {
                if (__connman_stats_service_register(service) == 0) {
                        __connman_stats_get(service, FALSE,
                                                &service->stats.data);
                        __connman_stats_get(service, TRUE,
                                                &service->stats_roaming.data);
                }
-
-               if (service->ipconfig_ipv4)
-                       __connman_ipconfig_enable(service->ipconfig_ipv4);
-               if (service->ipconfig_ipv6)
-                       __connman_ipconfig_enable(service->ipconfig_ipv6);
        }
 
-       service->state = state;
-       state_changed(service);
-
-       if (state == CONNMAN_SERVICE_STATE_ONLINE) {
+       if (new_state == CONNMAN_SERVICE_STATE_ONLINE) {
                if (service->login_required == TRUE) {
                        service->login_required = FALSE;
                        login_changed(service);
@@ -3104,16 +3600,18 @@ int __connman_service_indicate_state(struct connman_service *service,
                connman_timeserver_sync();
        }
 
-       if (state == CONNMAN_SERVICE_STATE_IDLE) {
+       if (new_state == CONNMAN_SERVICE_STATE_IDLE) {
                connman_bool_t reconnect;
 
                reconnect = get_reconnect_state(service);
                if (reconnect == TRUE)
                        __connman_service_auto_connect();
+
+               __connman_device_request_scan(CONNMAN_DEVICE_TYPE_UNKNOWN);
        }
 
-       if (state == CONNMAN_SERVICE_STATE_READY) {
-               enum connman_service_proxy_method proxy_config;
+       if (new_state == CONNMAN_SERVICE_STATE_READY) {
+               enum connman_ipconfig_method method;
 
                set_reconnect_state(service, TRUE);
 
@@ -3130,28 +3628,10 @@ int __connman_service_indicate_state(struct connman_service *service,
                dns_changed(service);
                domain_changed(service);
 
-               proxy_config = service->proxy_config;
-
-               /*
-                * We start WPAD if we haven't got a PAC URL from DHCP and
-                * if our proxy manual configuration is either empty or set
-                * to AUTO with an empty URL.
-                */
-               if (service->proxy == CONNMAN_SERVICE_PROXY_METHOD_UNKNOWN &&
-                       (proxy_config == CONNMAN_SERVICE_PROXY_METHOD_UNKNOWN ||
-                               (proxy_config ==
-                                       CONNMAN_SERVICE_PROXY_METHOD_AUTO &&
-                                       service->pac == NULL)))
-                       if (__connman_wpad_start(service) < 0) {
-                               service->proxy =
-                                       CONNMAN_SERVICE_PROXY_METHOD_DIRECT;
-
-                               __connman_notifier_proxy_changed(service);
-                       }
-
                __connman_notifier_connect(service->type);
 
-               if (connman_network_get_bool(service->network,
+               if (service->type == CONNMAN_SERVICE_TYPE_WIFI &&
+                       connman_network_get_bool(service->network,
                                                "WiFi.UseWPS") == TRUE) {
                        const char *pass;
 
@@ -3165,7 +3645,20 @@ int __connman_service_indicate_state(struct connman_service *service,
                }
 
                default_changed();
-       } else if (state == CONNMAN_SERVICE_STATE_DISCONNECT) {
+
+               method = __connman_ipconfig_get_method(service->ipconfig_ipv6);
+               if (method == CONNMAN_IPCONFIG_METHOD_OFF)
+                       __connman_ipconfig_disable_ipv6(
+                                               service->ipconfig_ipv6);
+
+       } else if (new_state == CONNMAN_SERVICE_STATE_DISCONNECT) {
+               struct connman_service *def_service = get_default();
+
+               if (__connman_notifier_count_connected() == 0 &&
+                       def_service != NULL &&
+                               def_service->provider != NULL)
+                       __connman_provider_disconnect(def_service->provider);
+
                __connman_location_finish(service);
 
                default_changed();
@@ -3179,13 +3672,15 @@ int __connman_service_indicate_state(struct connman_service *service,
                __connman_notifier_disconnect(service->type);
        }
 
-       if (state == CONNMAN_SERVICE_STATE_FAILURE) {
+       if (new_state == CONNMAN_SERVICE_STATE_FAILURE) {
                if (service->userconnect == TRUE &&
                        __connman_agent_report_error(service,
                                        error2string(service->error),
                                        report_error_cb, NULL) == -EIO)
                        return 0;
                service_complete(service);
+
+               __connman_device_request_scan(CONNMAN_DEVICE_TYPE_UNKNOWN);
        } else
                service->error = CONNMAN_SERVICE_ERROR_UNKNOWN;
 
@@ -3195,22 +3690,9 @@ int __connman_service_indicate_state(struct connman_service *service,
 
        __connman_profile_changed(FALSE);
 
-       if (service->state == CONNMAN_SERVICE_STATE_ONLINE)
+       if (new_state == CONNMAN_SERVICE_STATE_ONLINE)
                default_changed();
 
-       if (service->state == CONNMAN_SERVICE_STATE_DISCONNECT) {
-               struct connman_service *def_service = get_default();
-
-               if (__connman_notifier_count_connected() == 0 &&
-                       def_service != NULL &&
-                               def_service->provider != NULL)
-                       __connman_provider_disconnect(def_service->provider);
-       }
-
-       if (service->state == CONNMAN_SERVICE_STATE_IDLE ||
-                       service->state == CONNMAN_SERVICE_STATE_FAILURE)
-               __connman_element_request_scan(CONNMAN_ELEMENT_TYPE_UNKNOWN);
-
        return 0;
 }
 
@@ -3224,8 +3706,16 @@ int __connman_service_indicate_error(struct connman_service *service,
 
        service->error = error;
 
-       return __connman_service_indicate_state(service,
-                                       CONNMAN_SERVICE_STATE_FAILURE);
+       if (service->error == CONNMAN_SERVICE_ERROR_INVALID_KEY)
+               __connman_service_set_passphrase(service, NULL);
+
+       __connman_service_ipconfig_indicate_state(service,
+                                               CONNMAN_SERVICE_STATE_FAILURE,
+                                               CONNMAN_IPCONFIG_TYPE_IPV4);
+       __connman_service_ipconfig_indicate_state(service,
+                                               CONNMAN_SERVICE_STATE_FAILURE,
+                                               CONNMAN_IPCONFIG_TYPE_IPV6);
+       return 0;
 }
 
 int __connman_service_clear_error(struct connman_service *service)
@@ -3238,25 +3728,127 @@ int __connman_service_clear_error(struct connman_service *service)
        if (service->state != CONNMAN_SERVICE_STATE_FAILURE)
                return -EINVAL;
 
-       service->state = CONNMAN_SERVICE_STATE_UNKNOWN;
+       service->state_ipv4 = service->state_ipv6 =
+                                               CONNMAN_SERVICE_STATE_UNKNOWN;
        service->error = CONNMAN_SERVICE_ERROR_UNKNOWN;;
 
-       if (service->favorite == TRUE)
-               set_reconnect_state(service, TRUE);
+       if (service->favorite == TRUE)
+               set_reconnect_state(service, TRUE);
+
+       __connman_service_ipconfig_indicate_state(service,
+                                       CONNMAN_SERVICE_STATE_IDLE,
+                                       CONNMAN_IPCONFIG_TYPE_IPV6);
+
+       /*
+        * Toggling the IPv6 state to IDLE could trigger the auto connect
+        * machinery and consequently the IPv4 state.
+        */
+       if (service->state_ipv4 != CONNMAN_SERVICE_STATE_UNKNOWN &&
+                       service->state_ipv4 != CONNMAN_SERVICE_STATE_FAILURE)
+               return 0;
+
+       return __connman_service_ipconfig_indicate_state(service,
+                                               CONNMAN_SERVICE_STATE_IDLE,
+                                               CONNMAN_IPCONFIG_TYPE_IPV4);
+}
+
+int __connman_service_indicate_default(struct connman_service *service)
+{
+       DBG("service %p", service);
+
+       default_changed();
+
+       __connman_location_detect(service);
+
+       return 0;
+}
+
+static void check_proxy_setup(struct connman_service *service)
+{
+       /*
+        * We start WPAD if we haven't got a PAC URL from DHCP and
+        * if our proxy manual configuration is either empty or set
+        * to AUTO with an empty URL.
+        */
+
+       if (service->proxy != CONNMAN_SERVICE_PROXY_METHOD_UNKNOWN)
+               return;
+
+       if (service->proxy_config != CONNMAN_SERVICE_PROXY_METHOD_UNKNOWN &&
+               (service->proxy_config != CONNMAN_SERVICE_PROXY_METHOD_AUTO ||
+                       service->pac != NULL))
+               return;
+
+       if (__connman_wpad_start(service) < 0) {
+               service->proxy = CONNMAN_SERVICE_PROXY_METHOD_DIRECT;
+               __connman_notifier_proxy_changed(service);
+       }
+}
+
+int __connman_service_ipconfig_indicate_state(struct connman_service *service,
+                                       enum connman_service_state new_state,
+                                       enum connman_ipconfig_type type)
+{
+       struct connman_ipconfig *ipconfig = NULL;
+       enum connman_service_state old_state;
+
+       if (service == NULL)
+               return -EINVAL;
+
+       if (type == CONNMAN_IPCONFIG_TYPE_IPV4) {
+               old_state = service->state_ipv4;
+               ipconfig = service->ipconfig_ipv4;
+       } else if (type == CONNMAN_IPCONFIG_TYPE_IPV6) {
+               old_state = service->state_ipv6;
+               ipconfig = service->ipconfig_ipv6;
+       }
+
+       if (ipconfig == NULL)
+               return -EINVAL;
 
-       return __connman_service_indicate_state(service,
-                                       CONNMAN_SERVICE_STATE_IDLE);
-}
+       /* Any change? */
+       if (old_state == new_state)
+               return -EALREADY;
 
-int __connman_service_indicate_default(struct connman_service *service)
-{
-       DBG("service %p", service);
+       DBG("service %p (%s) state %d (%s) type %d (%s)",
+               service, service ? service->identifier : NULL,
+               new_state, state2string(new_state),
+               type, __connman_ipconfig_type2string(type));
 
-       default_changed();
+       switch (new_state) {
+       case CONNMAN_SERVICE_STATE_UNKNOWN:
+       case CONNMAN_SERVICE_STATE_IDLE:
+               if (service->state == CONNMAN_SERVICE_STATE_FAILURE)
+                       return -EINVAL;
+               break;
+       case CONNMAN_SERVICE_STATE_ASSOCIATION:
+               break;
+       case CONNMAN_SERVICE_STATE_CONFIGURATION:
+               __connman_ipconfig_enable(ipconfig);
+               break;
+       case CONNMAN_SERVICE_STATE_READY:
+               update_nameservers(service);
 
-       __connman_location_detect(service);
+               if (type == CONNMAN_IPCONFIG_TYPE_IPV4)
+                       check_proxy_setup(service);
+               break;
+       case CONNMAN_SERVICE_STATE_ONLINE:
+               break;
+       case CONNMAN_SERVICE_STATE_DISCONNECT:
+               if (service->state == CONNMAN_SERVICE_STATE_IDLE)
+                       return -EINVAL;
+               break;
+       case CONNMAN_SERVICE_STATE_FAILURE:
+               break;
+       }
 
-       return 0;
+       /* We keep that state */
+       if (type == CONNMAN_IPCONFIG_TYPE_IPV4)
+               service->state_ipv4 = new_state;
+       else if (type == CONNMAN_IPCONFIG_TYPE_IPV6)
+               service->state_ipv6 = new_state;
+
+       return __connman_service_indicate_state(service);
 }
 
 int __connman_service_request_login(struct connman_service *service)
@@ -3288,22 +3880,15 @@ static connman_bool_t prepare_network(struct connman_service *service)
                                                        &ssid_len) == NULL)
                        return FALSE;
 
-               connman_network_set_string(service->network,
+               if (service->passphrase != NULL)
+                       connman_network_set_string(service->network,
                                "WiFi.Passphrase", service->passphrase);
                break;
        case CONNMAN_NETWORK_TYPE_ETHERNET:
        case CONNMAN_NETWORK_TYPE_WIMAX:
        case CONNMAN_NETWORK_TYPE_BLUETOOTH_PAN:
        case CONNMAN_NETWORK_TYPE_BLUETOOTH_DUN:
-               break;
        case CONNMAN_NETWORK_TYPE_CELLULAR:
-               connman_network_set_string(service->network,
-                                               "Cellular.APN", service->apn);
-
-               connman_network_set_string(service->network,
-                                       "Cellular.Username", service->username);
-               connman_network_set_string(service->network,
-                                       "Cellular.Password", service->password);
                break;
        }
 
@@ -3357,11 +3942,8 @@ static int service_connect(struct connman_service *service)
        case CONNMAN_SERVICE_TYPE_ETHERNET:
        case CONNMAN_SERVICE_TYPE_WIMAX:
        case CONNMAN_SERVICE_TYPE_BLUETOOTH:
-       case CONNMAN_SERVICE_TYPE_VPN:
-               break;
        case CONNMAN_SERVICE_TYPE_CELLULAR:
-               if (service->apn == NULL)
-                       return -EINVAL;
+       case CONNMAN_SERVICE_TYPE_VPN:
                break;
        case CONNMAN_SERVICE_TYPE_WIFI:
                switch (service->security) {
@@ -3372,10 +3954,39 @@ static int service_connect(struct connman_service *service)
                case CONNMAN_SERVICE_SECURITY_PSK:
                case CONNMAN_SERVICE_SECURITY_WPA:
                case CONNMAN_SERVICE_SECURITY_RSN:
-                       if (service->passphrase == NULL)
-                               return -ENOKEY;
+                       if (service->passphrase == NULL) {
+                               if (service->network == NULL)
+                                       return -EOPNOTSUPP;
+
+                               if (service->wps == FALSE ||
+                                       connman_network_get_bool(
+                                                       service->network,
+                                                       "WiFi.UseWPS") == FALSE)
+                                       return -ENOKEY;
+                       }
                        break;
                case CONNMAN_SERVICE_SECURITY_8021X:
+                       if (service->eap == NULL)
+                               return -EINVAL;
+
+                       /*
+                        * never request credentials if using EAP-TLS
+                        * (EAP-TLS networks need to be fully provisioned)
+                        */
+                       if (g_str_equal(service->eap, "tls") == TRUE)
+                               break;
+
+                       /*
+                        * Return -ENOKEY if either identity or passphrase is
+                        * missing. Agent provided credentials can be used as
+                        * fallback if needed.
+                        */
+                       if ((service->identity == NULL &&
+                                       service->agent_identity == NULL) ||
+                                       (service->passphrase == NULL &&
+                                       service->agent_passphrase == NULL))
+                               return -ENOKEY;
+
                        break;
                }
                break;
@@ -3433,7 +4044,7 @@ int __connman_service_connect(struct connman_service *service)
 {
        int err;
 
-       DBG("service %p", service);
+       DBG("service %p state %s", service, state2string(service->state));
 
        if (is_connected(service) == TRUE)
                return -EISCONN;
@@ -3455,20 +4066,35 @@ int __connman_service_connect(struct connman_service *service)
                return 0;
 
        if (err == -EINPROGRESS) {
-               service->timeout = g_timeout_add_seconds(CONNECT_TIMEOUT,
-                                               connect_timeout, service);
+               if (service->timeout == 0)
+                       service->timeout = g_timeout_add_seconds(
+                               CONNECT_TIMEOUT, connect_timeout, service);
 
                return -EINPROGRESS;
        }
 
-       if (err == -ENOKEY)
-               return -ENOKEY;
+       __connman_service_ipconfig_indicate_state(service,
+                                       CONNMAN_SERVICE_STATE_FAILURE,
+                                       CONNMAN_IPCONFIG_TYPE_IPV4);
+       __connman_service_ipconfig_indicate_state(service,
+                                       CONNMAN_SERVICE_STATE_FAILURE,
+                                       CONNMAN_IPCONFIG_TYPE_IPV6);
 
-       if (service->userconnect == TRUE)
-               reply_pending(service, err);
+       if (service->network != NULL)
+               __connman_network_disconnect(service->network);
+       else if (service->type == CONNMAN_SERVICE_TYPE_VPN &&
+                               service->provider != NULL)
+                       __connman_provider_disconnect(service->provider);
 
-       __connman_service_indicate_state(service,
-                               CONNMAN_SERVICE_STATE_FAILURE);
+       if (service->userconnect == TRUE) {
+               if (err == -ENOKEY) {
+                       if (__connman_agent_request_input(service,
+                                                       request_input_cb,
+                                                       NULL) == -EIO)
+                               return -EINPROGRESS;
+               }
+               reply_pending(service, err);
+       }
 
        return err;
 }
@@ -3490,6 +4116,8 @@ int __connman_service_disconnect(struct connman_service *service)
        if (err < 0 && err != -EINPROGRESS)
                return err;
 
+       __connman_6to4_remove(service->ipconfig_ipv4);
+
        if (service->ipconfig_ipv4)
                __connman_ipconfig_set_proxy_autoconfig(service->ipconfig_ipv4,
                                                        NULL);
@@ -3497,8 +4125,8 @@ int __connman_service_disconnect(struct connman_service *service)
                __connman_ipconfig_set_proxy_autoconfig(service->ipconfig_ipv6,
                                                        NULL);
 
-       __connman_ipconfig_clear_address(service->ipconfig_ipv4);
-       __connman_ipconfig_clear_address(service->ipconfig_ipv6);
+       __connman_ipconfig_address_remove(service->ipconfig_ipv4);
+       __connman_ipconfig_address_remove(service->ipconfig_ipv6);
 
        __connman_ipconfig_disable(service->ipconfig_ipv4);
        __connman_ipconfig_disable(service->ipconfig_ipv6);
@@ -3508,6 +4136,30 @@ int __connman_service_disconnect(struct connman_service *service)
        return err;
 }
 
+int __connman_service_disconnect_all(void)
+{
+       GSequenceIter *iter;
+
+       DBG("");
+
+       iter = g_sequence_get_begin_iter(service_list);
+
+       while (g_sequence_iter_is_end(iter) == FALSE) {
+               struct connman_service *service = g_sequence_get(iter);
+
+               service->ignore = TRUE;
+
+               set_reconnect_state(service, FALSE);
+
+               __connman_service_disconnect(service);
+
+               iter = g_sequence_iter_next(iter);
+       }
+
+       return 0;
+
+}
+
 /**
  * __connman_service_lookup:
  * @pattern: search pattern
@@ -3554,7 +4206,8 @@ static struct connman_service *lookup_by_identifier(const char *identifier)
 }
 
 static struct connman_network *create_hidden_wifi(struct connman_device *device,
-               const char *ssid, const char *mode, const char *security)
+               const char *ssid, const char *mode, const char *security,
+               const char *group)
 {
        struct connman_network *network;
        char *name;
@@ -3565,7 +4218,7 @@ static struct connman_network *create_hidden_wifi(struct connman_device *device,
        if (ssid_len < 1)
                return NULL;
 
-       network = connman_network_create(NULL, CONNMAN_NETWORK_TYPE_WIFI);
+       network = connman_network_create(group, CONNMAN_NETWORK_TYPE_WIFI);
        if (network == NULL)
                return NULL;
 
@@ -3616,7 +4269,6 @@ int __connman_service_create_and_connect(DBusMessage *msg)
        unsigned int ssid_len = 0;
        const char *ident;
        char *name, *group;
-       gboolean created = FALSE;
        int err;
 
        dbus_message_iter_init(msg, &iter);
@@ -3674,7 +4326,7 @@ int __connman_service_create_and_connect(DBusMessage *msg)
                                g_strcmp0(security, "ieee8021x") != 0)
                return -EINVAL;
 
-       device = __connman_element_find_device(CONNMAN_SERVICE_TYPE_WIFI);
+       device = __connman_device_find_device(CONNMAN_SERVICE_TYPE_WIFI);
        if (device == NULL)
                return -EOPNOTSUPP;
 
@@ -3689,7 +4341,7 @@ int __connman_service_create_and_connect(DBusMessage *msg)
        else
                group_security = security;
 
-       group = connman_wifi_build_group_name((unsigned char *) ssid,
+       group = wifi_build_group_name((unsigned char *) ssid,
                                                ssid_len, mode, group_security);
        if (group == NULL)
                return -EINVAL;
@@ -3701,11 +4353,9 @@ int __connman_service_create_and_connect(DBusMessage *msg)
        if (service != NULL)
                goto done;
 
-       network = create_hidden_wifi(device, ssid, mode, security);
-       if (network != NULL) {
+       network = create_hidden_wifi(device, ssid, mode, security, group);
+       if (network != NULL)
                connman_network_set_group(network, group);
-               created = TRUE;
-       }
 
        service = lookup_by_identifier(name);
 
@@ -3718,6 +4368,8 @@ done:
                goto failed;
        }
 
+       service->network_created = TRUE;
+
        if (is_connected(service) == TRUE) {
                err = -EISCONN;
                goto failed;
@@ -3743,14 +4395,12 @@ done:
        if (err < 0 && err != -EINPROGRESS)
                goto failed;
 
-       g_dbus_send_reply(connection, msg,
-                               DBUS_TYPE_OBJECT_PATH, &service->path,
-                                                       DBUS_TYPE_INVALID);
+       service->pending = dbus_message_ref(msg);
 
        return 0;
 
 failed:
-       if (service != NULL && created == TRUE) {
+       if (service != NULL && service->network_created == TRUE) {
                struct connman_network *network = service->network;
 
                if (network != NULL) {
@@ -3763,6 +4413,78 @@ failed:
        return err;
 }
 
+static void provision_changed(gpointer value, gpointer user_data)
+{
+       struct connman_service *service = value;
+       char *path = user_data;
+
+       __connman_config_provision_service_ident(service, path);
+}
+
+void __connman_service_provision_changed(const char *ident)
+{
+       g_sequence_foreach(service_list, provision_changed, (void *)ident);
+}
+
+int __connman_service_provision(DBusMessage *msg)
+{
+       GKeyFile *keyfile = NULL;
+       const char *config_str = NULL;
+       char *group = NULL, *ident = NULL;
+       int err = 0;
+       struct connman_service *service;
+
+       DBG("");
+
+       dbus_message_get_args(msg, NULL, DBUS_TYPE_STRING, &config_str,
+                                                       DBUS_TYPE_INVALID);
+
+       if (config_str == NULL || strlen(config_str) == 0)
+               return -EINVAL;
+
+       keyfile = g_key_file_new();
+
+       /* populate GKeyFile with config_str */
+       if (g_key_file_load_from_data(keyfile, config_str,
+                                       strlen(config_str), 0, NULL) == FALSE) {
+               err = -EINVAL;
+               goto done;
+       }
+
+       /*
+        * read only one group of settings (only one service supported, no
+        * global settings)
+        */
+       group = g_key_file_get_start_group(keyfile);
+
+       if (group == NULL || g_str_has_prefix(group, "service_") == FALSE) {
+               err = -EINVAL;
+               goto done;
+       }
+
+       err = __connman_config_load_service(keyfile, group, TRUE);
+       if (err < 0)
+               goto done;
+
+       ident = group + strlen("service_");
+
+       /* trigger service provisioning if service exists */
+       service = lookup_by_identifier(ident);
+       if (service != NULL)
+               __connman_config_provision_service(service);
+
+       g_dbus_send_reply(connection, msg, DBUS_TYPE_INVALID);
+
+done:
+       if (group != NULL)
+               g_free(group);
+
+       if (keyfile != NULL)
+               g_key_file_free(keyfile);
+
+       return err;
+}
+
 /**
  * __connman_service_get:
  * @identifier: service identifier
@@ -3836,7 +4558,7 @@ static void service_up(struct connman_ipconfig *ipconfig)
 {
        struct connman_service *service = connman_ipconfig_get_data(ipconfig);
 
-       connman_info("%s up", connman_ipconfig_get_ifname(ipconfig));
+       DBG("%s up", connman_ipconfig_get_ifname(ipconfig));
 
        link_changed(service);
 
@@ -3846,14 +4568,14 @@ static void service_up(struct connman_ipconfig *ipconfig)
 
 static void service_down(struct connman_ipconfig *ipconfig)
 {
-       connman_info("%s down", connman_ipconfig_get_ifname(ipconfig));
+       DBG("%s down", connman_ipconfig_get_ifname(ipconfig));
 }
 
 static void service_lower_up(struct connman_ipconfig *ipconfig)
 {
        struct connman_service *service = connman_ipconfig_get_data(ipconfig);
 
-       connman_info("%s lower up", connman_ipconfig_get_ifname(ipconfig));
+       DBG("%s lower up", connman_ipconfig_get_ifname(ipconfig));
 
        stats_start(service);
 }
@@ -3862,7 +4584,7 @@ static void service_lower_down(struct connman_ipconfig *ipconfig)
 {
        struct connman_service *service = connman_ipconfig_get_data(ipconfig);
 
-       connman_info("%s lower down", connman_ipconfig_get_ifname(ipconfig));
+       DBG("%s lower down", connman_ipconfig_get_ifname(ipconfig));
 
        stats_stop(service);
        __connman_storage_save_service(service);
@@ -3871,19 +4593,53 @@ static void service_lower_down(struct connman_ipconfig *ipconfig)
 static void service_ip_bound(struct connman_ipconfig *ipconfig)
 {
        struct connman_service *service = connman_ipconfig_get_data(ipconfig);
+       enum connman_ipconfig_method method = CONNMAN_IPCONFIG_METHOD_UNKNOWN;
+       enum connman_ipconfig_type type = CONNMAN_IPCONFIG_TYPE_UNKNOWN;
+
+       DBG("%s ip bound", connman_ipconfig_get_ifname(ipconfig));
+
+       type = __connman_ipconfig_get_config_type(ipconfig);
+       method = __connman_ipconfig_get_method(ipconfig);
 
-       connman_info("%s ip bound", connman_ipconfig_get_ifname(ipconfig));
+       DBG("service %p ipconfig %p type %d method %d", service, ipconfig,
+                                                       type, method);
 
-       settings_changed(service);
+       if (type == CONNMAN_IPCONFIG_TYPE_IPV6 &&
+                       method == CONNMAN_IPCONFIG_METHOD_AUTO)
+               __connman_service_ipconfig_indicate_state(service,
+                                               CONNMAN_SERVICE_STATE_READY,
+                                               CONNMAN_IPCONFIG_TYPE_IPV6);
+
+       settings_changed(service, ipconfig);
 }
 
 static void service_ip_release(struct connman_ipconfig *ipconfig)
 {
        struct connman_service *service = connman_ipconfig_get_data(ipconfig);
+       enum connman_ipconfig_method method = CONNMAN_IPCONFIG_METHOD_UNKNOWN;
+       enum connman_ipconfig_type type = CONNMAN_IPCONFIG_TYPE_UNKNOWN;
+
+       DBG("%s ip release", connman_ipconfig_get_ifname(ipconfig));
+
+       type = __connman_ipconfig_get_config_type(ipconfig);
+       method = __connman_ipconfig_get_method(ipconfig);
 
-       connman_info("%s ip release", connman_ipconfig_get_ifname(ipconfig));
+       DBG("service %p ipconfig %p type %d method %d", service, ipconfig,
+                                                       type, method);
 
-       settings_changed(service);
+       if (type == CONNMAN_IPCONFIG_TYPE_IPV6 &&
+                       method == CONNMAN_IPCONFIG_METHOD_OFF)
+               __connman_service_ipconfig_indicate_state(service,
+                                       CONNMAN_SERVICE_STATE_DISCONNECT,
+                                       CONNMAN_IPCONFIG_TYPE_IPV6);
+
+       if (type == CONNMAN_IPCONFIG_TYPE_IPV4 &&
+                       method == CONNMAN_IPCONFIG_METHOD_OFF)
+               __connman_service_ipconfig_indicate_state(service,
+                                       CONNMAN_SERVICE_STATE_DISCONNECT,
+                                       CONNMAN_IPCONFIG_TYPE_IPV4);
+
+       settings_changed(service, ipconfig);
 }
 
 static const struct connman_ipconfig_ops service_ops = {
@@ -3895,7 +4651,8 @@ static const struct connman_ipconfig_ops service_ops = {
        .ip_release     = service_ip_release,
 };
 
-static void setup_ip4config(struct connman_service *service, int index)
+static void setup_ip4config(struct connman_service *service, int index,
+                       enum connman_ipconfig_method method)
 {
        if (index < 0)
                return;
@@ -3905,8 +4662,7 @@ static void setup_ip4config(struct connman_service *service, int index)
        if (service->ipconfig_ipv4 == NULL)
                return;
 
-       connman_ipconfig_set_method(service->ipconfig_ipv4,
-                                       CONNMAN_IPCONFIG_METHOD_DHCP);
+       connman_ipconfig_set_method(service->ipconfig_ipv4, method);
 
        connman_ipconfig_set_data(service->ipconfig_ipv4, service);
 
@@ -3928,59 +4684,72 @@ static void setup_ip6config(struct connman_service *service, int index)
        connman_ipconfig_set_ops(service->ipconfig_ipv6, &service_ops);
 }
 
-void __connman_service_create_ip4config(struct connman_service *service,
-                                                               int index)
+void __connman_service_read_ip4config(struct connman_service *service)
 {
        const char *ident = service->profile;
        GKeyFile *keyfile;
 
-       DBG("ipv4 %p", service->ipconfig_ipv4);
-
-       if (service->ipconfig_ipv4 != NULL)
+       if (ident == NULL)
                return;
 
-       setup_ip4config(service, index);
-
-       if (ident == NULL)
+       if (service->ipconfig_ipv4 == NULL)
                return;
 
        keyfile = __connman_storage_open_profile(ident);
        if (keyfile == NULL)
                return;
 
-       if (service->ipconfig_ipv4)
-               __connman_ipconfig_load(service->ipconfig_ipv4, keyfile,
-                                       service->identifier, "IPv4.");
+       __connman_ipconfig_load(service->ipconfig_ipv4, keyfile,
+                               service->identifier, "IPv4.");
+
        g_key_file_free(keyfile);
 }
 
-void __connman_service_create_ip6config(struct connman_service *service,
-                                                               int index)
+void __connman_service_create_ip4config(struct connman_service *service,
+                                       int index)
 {
-       const char *ident = service->profile;
-       GKeyFile *keyfile;
-
-       DBG("ipv6 %p", service->ipconfig_ipv6);
+       DBG("ipv4 %p", service->ipconfig_ipv4);
 
-       if (service->ipconfig_ipv6 != NULL)
+       if (service->ipconfig_ipv4 != NULL)
                return;
 
-       setup_ip6config(service, index);
+       setup_ip4config(service, index, CONNMAN_IPCONFIG_METHOD_DHCP);
+       __connman_service_read_ip4config(service);
+}
+
+void __connman_service_read_ip6config(struct connman_service *service)
+{
+       const char *ident = service->profile;
+       GKeyFile *keyfile;
 
        if (ident == NULL)
                return;
+       if (service->ipconfig_ipv6 == NULL)
+               return;
 
        keyfile = __connman_storage_open_profile(ident);
+
        if (keyfile == NULL)
                return;
 
-       if (service->ipconfig_ipv6 != NULL)
-               __connman_ipconfig_load(service->ipconfig_ipv6, keyfile,
-                                       service->identifier, "IPv6.");
+       __connman_ipconfig_load(service->ipconfig_ipv6, keyfile,
+                               service->identifier, "IPv6.");
 
        g_key_file_free(keyfile);
 }
 
+void __connman_service_create_ip6config(struct connman_service *service,
+                                                               int index)
+{
+       DBG("ipv6 %p", service->ipconfig_ipv6);
+
+       if (service->ipconfig_ipv6 != NULL)
+               return;
+
+       setup_ip6config(service, index);
+       __connman_service_read_ip6config(service);
+}
+
 /**
  * __connman_service_lookup_from_network:
  * @network: network structure
@@ -4095,18 +4864,6 @@ static enum connman_service_type convert_network_type(struct connman_network *ne
        return CONNMAN_SERVICE_TYPE_UNKNOWN;
 }
 
-static enum connman_service_mode convert_wifi_mode(const char *mode)
-{
-       if (mode == NULL)
-               return CONNMAN_SERVICE_MODE_UNKNOWN;
-       else if (g_str_equal(mode, "managed") == TRUE)
-               return CONNMAN_SERVICE_MODE_MANAGED;
-       else if (g_str_equal(mode, "adhoc") == TRUE)
-               return CONNMAN_SERVICE_MODE_ADHOC;
-       else
-               return CONNMAN_SERVICE_MODE_UNKNOWN;
-}
-
 static enum connman_service_security convert_wifi_security(const char *security)
 {
        if (security == NULL)
@@ -4127,24 +4884,6 @@ static enum connman_service_security convert_wifi_security(const char *security)
                return CONNMAN_SERVICE_SECURITY_UNKNOWN;
 }
 
-static enum connman_service_mode convert_cellular_mode(connman_uint8_t mode)
-{
-       switch (mode) {
-       case 0:
-       case 1:
-               return CONNMAN_SERVICE_MODE_GPRS;
-       case 3:
-               return CONNMAN_SERVICE_MODE_EDGE;
-       case 2:
-       case 4:
-       case 5:
-       case 6:
-               return CONNMAN_SERVICE_MODE_UMTS;
-       }
-
-       return CONNMAN_SERVICE_MODE_UNKNOWN;
-}
-
 static void update_from_network(struct connman_service *service,
                                        struct connman_network *network)
 {
@@ -4171,7 +4910,7 @@ static void update_from_network(struct connman_service *service,
                service->hidden = TRUE;
        }
 
-       service->strength = connman_network_get_uint8(network, "Strength");
+       service->strength = connman_network_get_strength(network);
        service->roaming = connman_network_get_bool(network, "Roaming");
 
        if (service->strength == 0) {
@@ -4182,37 +4921,20 @@ static void update_from_network(struct connman_service *service,
                service->strength = strength;
        }
 
-       str = connman_network_get_string(network, "WiFi.Mode");
-       service->mode = convert_wifi_mode(str);
-
        str = connman_network_get_string(network, "WiFi.Security");
        service->security = convert_wifi_security(str);
 
-       str = connman_network_get_string(network, "Cellular.MCC");
-       g_free(service->mcc);
-       service->mcc = g_strdup(str);
-
-       str = connman_network_get_string(network, "Cellular.MNC");
-       g_free(service->mnc);
-       service->mnc = g_strdup(str);
-
-       if (service->type == CONNMAN_SERVICE_TYPE_CELLULAR) {
-               connman_uint8_t value = connman_network_get_uint8(network,
-                                                       "Cellular.Mode");
-
-               service->mode = convert_cellular_mode(value);
-       } else if (service->type == CONNMAN_SERVICE_TYPE_WIFI)
+       if (service->type == CONNMAN_SERVICE_TYPE_WIFI)
                service->wps = connman_network_get_bool(network, "WiFi.WPS");
 
        if (service->strength > strength && service->network != NULL) {
-               connman_network_unref(service->network);
-               service->network = connman_network_ref(network);
+               service->network = network;
 
                strength_changed(service);
        }
 
        if (service->network == NULL)
-               service->network = connman_network_ref(network);
+               service->network = network;
 
        iter = g_hash_table_lookup(service_hash, service->identifier);
        if (iter != NULL)
@@ -4279,14 +5001,15 @@ struct connman_service * __connman_service_create_from_network(struct connman_ne
                break;
        }
 
-       service->state = CONNMAN_SERVICE_STATE_IDLE;
+       service->state_ipv4 = service->state_ipv6 = CONNMAN_SERVICE_STATE_IDLE;
+       service->state = combine_state(service->state_ipv4, service->state_ipv6);
 
        update_from_network(service, network);
 
        index = connman_network_get_index(network);
 
        if (service->ipconfig_ipv4 == NULL)
-               setup_ip4config(service, index);
+               setup_ip4config(service, index, CONNMAN_IPCONFIG_METHOD_DHCP);
 
        if (service->ipconfig_ipv6 == NULL)
                setup_ip6config(service, index);
@@ -4299,14 +5022,15 @@ struct connman_service * __connman_service_create_from_network(struct connman_ne
                        __connman_service_auto_connect();
        }
 
+       __connman_notifier_service_add(service, service->name);
+
        return service;
 }
 
 void __connman_service_update_from_network(struct connman_network *network)
 {
        struct connman_service *service;
-       enum connman_service_mode mode;
-       connman_uint8_t strength, value;
+       connman_uint8_t strength;
        connman_bool_t roaming;
        GSequenceIter *iter;
        const char *name;
@@ -4333,7 +5057,7 @@ void __connman_service_update_from_network(struct connman_network *network)
        if (service->type == CONNMAN_SERVICE_TYPE_WIFI)
                service->wps = connman_network_get_bool(network, "WiFi.WPS");
 
-       strength = connman_network_get_uint8(service->network, "Strength");
+       strength = connman_network_get_strength(service->network);
        if (strength == service->strength)
                goto roaming;
 
@@ -4344,7 +5068,7 @@ void __connman_service_update_from_network(struct connman_network *network)
 roaming:
        roaming = connman_network_get_bool(service->network, "Roaming");
        if (roaming == service->roaming)
-               goto done;
+               return;
 
        stats_enable = stats_enabled(service);
        if (stats_enable == TRUE)
@@ -4360,20 +5084,6 @@ roaming:
        iter = g_hash_table_lookup(service_hash, service->identifier);
        if (iter != NULL)
                g_sequence_sort_changed(iter, service_compare, NULL);
-
-done:
-       if (service->type != CONNMAN_SERVICE_TYPE_CELLULAR)
-               return;
-
-       value = connman_network_get_uint8(service->network, "Cellular.Mode");
-       mode = convert_cellular_mode(value);
-
-       if (mode == service->mode)
-               return;
-
-       service->mode = mode;
-
-       mode_changed(service);
 }
 
 void __connman_service_remove_from_network(struct connman_network *network)
@@ -4420,7 +5130,7 @@ __connman_service_create_from_provider(struct connman_provider *provider)
        service->provider = connman_provider_ref(provider);
        service->autoconnect = FALSE;
 
-       service->state = CONNMAN_SERVICE_STATE_IDLE;
+       service->state_ipv4 = service->state_ipv6 = CONNMAN_SERVICE_STATE_IDLE;
 
        str = connman_provider_get_string(provider, "Name");
        if (str != NULL) {
@@ -4436,32 +5146,37 @@ __connman_service_create_from_provider(struct connman_provider *provider)
        service->strength = 0;
 
        if (service->ipconfig_ipv4 == NULL)
-               service->ipconfig_ipv4 = connman_ipconfig_create(index,
-                                               CONNMAN_IPCONFIG_TYPE_IPV4);
-       if (service->ipconfig_ipv4 == NULL)
-               return service;
-
-       connman_ipconfig_set_method(service->ipconfig_ipv4,
-                                       CONNMAN_IPCONFIG_METHOD_MANUAL);
-       connman_ipconfig_set_data(service->ipconfig_ipv4, service);
-       connman_ipconfig_set_ops(service->ipconfig_ipv4, &service_ops);
+               setup_ip4config(service, index, CONNMAN_IPCONFIG_METHOD_MANUAL);
 
        if (service->ipconfig_ipv6 == NULL)
-               service->ipconfig_ipv6 = connman_ipconfig_create(index,
-                                               CONNMAN_IPCONFIG_TYPE_IPV6);
-       if (service->ipconfig_ipv6 == NULL)
-               return service;
-
-       connman_ipconfig_set_method(service->ipconfig_ipv6,
-                                       CONNMAN_IPCONFIG_METHOD_OFF);
-       connman_ipconfig_set_data(service->ipconfig_ipv6, service);
-       connman_ipconfig_set_ops(service->ipconfig_ipv6, &service_ops);
+               setup_ip6config(service, index);
 
        service_register(service);
 
+       __connman_notifier_service_add(service, service->name);
+
        return service;
 }
 
+void __connman_service_downgrade_state(struct connman_service *service)
+{
+       if (service == NULL)
+               return;
+
+       DBG("service %p state4 %d state6 %d", service, service->state_ipv4,
+                                               service->state_ipv6);
+
+       if (service->state_ipv4 == CONNMAN_SERVICE_STATE_ONLINE)
+               __connman_service_ipconfig_indicate_state(service,
+                                               CONNMAN_SERVICE_STATE_READY,
+                                               CONNMAN_IPCONFIG_TYPE_IPV4);
+
+       if (service->state_ipv6 == CONNMAN_SERVICE_STATE_ONLINE)
+               __connman_service_ipconfig_indicate_state(service,
+                                               CONNMAN_SERVICE_STATE_READY,
+                                               CONNMAN_IPCONFIG_TYPE_IPV6);
+}
+
 static int service_load(struct connman_service *service)
 {
        const char *ident = service->profile;
@@ -4561,15 +5276,6 @@ static int service_load(struct connman_service *service)
        case CONNMAN_SERVICE_TYPE_WIMAX:
        case CONNMAN_SERVICE_TYPE_BLUETOOTH:
        case CONNMAN_SERVICE_TYPE_CELLULAR:
-               service->apn = g_key_file_get_string(keyfile,
-                                       service->identifier, "APN", NULL);
-
-               service->username = g_key_file_get_string(keyfile,
-                                       service->identifier, "Username", NULL);
-
-               service->password = g_key_file_get_string(keyfile,
-                                       service->identifier, "Password", NULL);
-
                service->favorite = g_key_file_get_boolean(keyfile,
                                service->identifier, "Favorite", NULL);
 
@@ -4583,7 +5289,8 @@ static int service_load(struct connman_service *service)
                                service->identifier, "Failure", NULL);
                if (str != NULL) {
                        if (service->favorite == FALSE)
-                               service->state = CONNMAN_SERVICE_STATE_FAILURE;
+                               service->state_ipv4 = service->state_ipv6 =
+                                       CONNMAN_SERVICE_STATE_FAILURE;
                        service->error = string2error(str);
                }
                break;
@@ -4611,11 +5318,11 @@ static int service_load(struct connman_service *service)
                __connman_ipconfig_load(service->ipconfig_ipv6, keyfile,
                                        service->identifier, "IPv6.");
 
-       service->nameservers = g_key_file_get_string_list(keyfile,
+       service->nameservers_config = g_key_file_get_string_list(keyfile,
                        service->identifier, "Nameservers", &length, NULL);
-       if (service->nameservers != NULL && length == 0) {
-               g_strfreev(service->nameservers);
-               service->nameservers = NULL;
+       if (service->nameservers_config != NULL && length == 0) {
+               g_strfreev(service->nameservers_config);
+               service->nameservers_config = NULL;
        }
 
        service->domains = g_key_file_get_string_list(keyfile,
@@ -4738,18 +5445,6 @@ update:
        case CONNMAN_SERVICE_TYPE_WIMAX:
        case CONNMAN_SERVICE_TYPE_BLUETOOTH:
        case CONNMAN_SERVICE_TYPE_CELLULAR:
-               if (service->apn != NULL)
-                       g_key_file_set_string(keyfile, service->identifier,
-                                                       "APN", service->apn);
-
-               if (service->username != NULL)
-                       g_key_file_set_string(keyfile, service->identifier,
-                                               "Username", service->username);
-
-               if (service->password != NULL)
-                       g_key_file_set_string(keyfile, service->identifier,
-                                               "Password", service->password);
-
                g_key_file_set_boolean(keyfile, service->identifier,
                                        "Favorite", service->favorite);
 
@@ -4757,7 +5452,8 @@ update:
                        g_key_file_set_boolean(keyfile, service->identifier,
                                        "AutoConnect", service->autoconnect);
 
-               if (service->state == CONNMAN_SERVICE_STATE_FAILURE) {
+               if (service->state_ipv4 == CONNMAN_SERVICE_STATE_FAILURE ||
+                       service->state_ipv6 == CONNMAN_SERVICE_STATE_FAILURE) {
                        const char *failure = error2string(service->error);
                        if (failure != NULL)
                                g_key_file_set_string(keyfile,
@@ -4784,20 +5480,33 @@ update:
                g_key_file_remove_key(keyfile, service->identifier,
                                                        "Passphrase", NULL);
 
-       if (service->ipconfig_ipv4 != NULL)
-               __connman_ipconfig_save(service->ipconfig_ipv4, keyfile,
-                                       service->identifier, "IPv4.");
-
-       if (service->ipconfig_ipv6 != NULL)
-               __connman_ipconfig_save(service->ipconfig_ipv6, keyfile,
-                                               service->identifier, "IPv6.");
+       switch (service->state) {
+       case CONNMAN_SERVICE_STATE_UNKNOWN:
+       case CONNMAN_SERVICE_STATE_IDLE:
+       case CONNMAN_SERVICE_STATE_ASSOCIATION:
+               break;
+       case CONNMAN_SERVICE_STATE_CONFIGURATION:
+       case CONNMAN_SERVICE_STATE_READY:
+       case CONNMAN_SERVICE_STATE_ONLINE:
+       case CONNMAN_SERVICE_STATE_DISCONNECT:
+       case CONNMAN_SERVICE_STATE_FAILURE:
+               if (service->ipconfig_ipv4 != NULL)
+                       __connman_ipconfig_save(service->ipconfig_ipv4,
+                                               keyfile, service->identifier,
+                                               "IPv4.");
+
+               if (service->ipconfig_ipv6 != NULL)
+                       __connman_ipconfig_save(service->ipconfig_ipv6,
+                                               keyfile, service->identifier,
+                                               "IPv6.");
+       }
 
-       if (service->nameservers != NULL) {
-               guint len = g_strv_length(service->nameservers);
+       if (service->nameservers_config != NULL) {
+               guint len = g_strv_length(service->nameservers_config);
 
                g_key_file_set_string_list(keyfile, service->identifier,
                                                                "Nameservers",
-                               (const gchar **) service->nameservers, len);
+                               (const gchar **) service->nameservers_config, len);
        } else
                g_key_file_remove_key(keyfile, service->identifier,
                                                        "Nameservers", NULL);
@@ -4885,10 +5594,13 @@ int __connman_service_init(void)
 
 void __connman_service_cleanup(void)
 {
+       GSequence *list;
+
        DBG("");
 
-       g_sequence_free(service_list);
+       list = service_list;
        service_list = NULL;
+       g_sequence_free(list);
 
        g_hash_table_destroy(service_hash);
        service_hash = NULL;