Imported Upstream version 1.38
[platform/upstream/connman.git] / src / service.c
index cbca669..2f497d1 100644 (file)
 #include <connman/setting.h>
 #include <connman/agent.h>
 
+#include "src/shared/util.h"
+
 #include "connman.h"
 
 #define CONNECT_TIMEOUT                120
 
+#define VPN_AUTOCONNECT_TIMEOUT_DEFAULT 1
+#define VPN_AUTOCONNECT_TIMEOUT_STEP 30
+#define VPN_AUTOCONNECT_TIMEOUT_ATTEMPTS_THRESHOLD 270
+
 static DBusConnection *connection = NULL;
 
 static GList *service_list = NULL;
 static GHashTable *service_hash = NULL;
 static GSList *counter_list = NULL;
-static unsigned int autoconnect_timeout = 0;
-static unsigned int vpn_autoconnect_timeout = 0;
+static unsigned int autoconnect_id = 0;
+static unsigned int vpn_autoconnect_id = 0;
 static struct connman_service *current_default = NULL;
 static bool services_dirty = false;
 
@@ -80,7 +86,7 @@ struct connman_service {
        bool hidden;
        bool ignore;
        bool autoconnect;
-       GTimeVal modified;
+       struct timeval modified;
        unsigned int order;
        char *name;
        char *passphrase;
@@ -92,7 +98,10 @@ struct connman_service {
        char **nameservers;
        char **nameservers_config;
        char **nameservers_auto;
+       int nameservers_timeout;
        char **domains;
+       bool mdns;
+       bool mdns_config;
        char *hostname;
        char *domainname;
        char **timeservers;
@@ -100,8 +109,13 @@ struct connman_service {
        /* 802.1x settings from the config files */
        char *eap;
        char *identity;
+       char *anonymous_identity;
        char *agent_identity;
        char *ca_cert_file;
+       char *subject_match;
+       char *altsubject_match;
+       char *domain_suffix_match;
+       char *domain_match;
        char *client_cert_file;
        char *private_key_file;
        char *private_key_passphrase;
@@ -118,7 +132,10 @@ struct connman_service {
        char **excludes;
        char *pac;
        bool wps;
-       int online_check_count;
+       bool wps_advertizing;
+       guint online_timeout;
+       int online_check_interval_ipv4;
+       int online_check_interval_ipv6;
        bool do_split_routing;
        bool new_service;
        bool hidden_service;
@@ -132,7 +149,8 @@ static struct connman_ipconfig *create_ip4config(struct connman_service *service
                int index, enum connman_ipconfig_method method);
 static struct connman_ipconfig *create_ip6config(struct connman_service *service,
                int index);
-
+static void dns_changed(struct connman_service *service);
+static void vpn_auto_connect(void);
 
 struct find_data {
        const char *path;
@@ -234,6 +252,23 @@ enum connman_service_type __connman_service_string2type(const char *str)
        return CONNMAN_SERVICE_TYPE_UNKNOWN;
 }
 
+enum connman_service_security __connman_service_string2security(const char *str)
+{
+       if (!str)
+               return CONNMAN_SERVICE_SECURITY_UNKNOWN;
+
+       if (!strcmp(str, "psk"))
+               return CONNMAN_SERVICE_SECURITY_PSK;
+       if (!strcmp(str, "ieee8021x") || !strcmp(str, "8021x"))
+               return CONNMAN_SERVICE_SECURITY_8021X;
+       if (!strcmp(str, "none") || !strcmp(str, "open"))
+               return CONNMAN_SERVICE_SECURITY_NONE;
+       if (!strcmp(str, "wep"))
+               return CONNMAN_SERVICE_SECURITY_WEP;
+
+       return CONNMAN_SERVICE_SECURITY_UNKNOWN;
+}
+
 static const char *security2string(enum connman_service_security security)
 {
        switch (security) {
@@ -297,23 +332,13 @@ static const char *error2string(enum connman_service_error error)
                return "auth-failed";
        case CONNMAN_SERVICE_ERROR_INVALID_KEY:
                return "invalid-key";
+       case CONNMAN_SERVICE_ERROR_BLOCKED:
+               return "blocked";
        }
 
        return NULL;
 }
 
-static enum connman_service_error string2error(const char *error)
-{
-       if (g_strcmp0(error, "dhcp-failed") == 0)
-               return CONNMAN_SERVICE_ERROR_DHCP_FAILED;
-       else if (g_strcmp0(error, "pin-missing") == 0)
-               return CONNMAN_SERVICE_ERROR_PIN_MISSING;
-       else if (g_strcmp0(error, "invalid-key") == 0)
-               return CONNMAN_SERVICE_ERROR_INVALID_KEY;
-
-       return CONNMAN_SERVICE_ERROR_UNKNOWN;
-}
-
 static const char *proxymethod2string(enum connman_service_proxy_method method)
 {
        switch (method) {
@@ -342,6 +367,19 @@ static enum connman_service_proxy_method string2proxymethod(const char *method)
                return CONNMAN_SERVICE_PROXY_METHOD_UNKNOWN;
 }
 
+static void set_split_routing(struct connman_service *service, bool value)
+{
+       if (service->type != CONNMAN_SERVICE_TYPE_VPN)
+               return;
+
+       service->do_split_routing = value;
+
+       if (service->do_split_routing)
+               service->order = 0;
+       else
+               service->order = 10;
+}
+
 int __connman_service_load_modifiable(struct connman_service *service)
 {
        GKeyFile *keyfile;
@@ -362,8 +400,10 @@ int __connman_service_load_modifiable(struct connman_service *service)
        case CONNMAN_SERVICE_TYPE_P2P:
                break;
        case CONNMAN_SERVICE_TYPE_VPN:
-               service->do_split_routing = g_key_file_get_boolean(keyfile,
-                               service->identifier, "SplitRouting", NULL);
+               set_split_routing(service, g_key_file_get_boolean(keyfile,
+                                                       service->identifier,
+                                                       "SplitRouting", NULL));
+
                /* fall through */
        case CONNMAN_SERVICE_TYPE_WIFI:
        case CONNMAN_SERVICE_TYPE_GADGET:
@@ -381,7 +421,7 @@ int __connman_service_load_modifiable(struct connman_service *service)
        str = g_key_file_get_string(keyfile,
                                service->identifier, "Modified", NULL);
        if (str) {
-               g_time_val_from_iso8601(str, &service->modified);
+               util_iso8601_to_timeval(str, &service->modified);
                g_free(str);
        }
 
@@ -416,8 +456,10 @@ static int service_load(struct connman_service *service)
        case CONNMAN_SERVICE_TYPE_P2P:
                break;
        case CONNMAN_SERVICE_TYPE_VPN:
-               service->do_split_routing = g_key_file_get_boolean(keyfile,
-                               service->identifier, "SplitRouting", NULL);
+               set_split_routing(service, g_key_file_get_boolean(keyfile,
+                                                       service->identifier,
+                                                       "SplitRouting", NULL));
+
                autoconnect = g_key_file_get_boolean(keyfile,
                                service->identifier, "AutoConnect", &error);
                if (!error)
@@ -468,6 +510,8 @@ static int service_load(struct connman_service *service)
 
                                connman_network_set_blob(service->network,
                                        "WiFi.SSID", ssid, hex_ssid_len / 2);
+
+                               g_free(ssid);
                        }
 
                        g_free(hex_ssid);
@@ -480,15 +524,6 @@ static int service_load(struct connman_service *service)
                service->favorite = g_key_file_get_boolean(keyfile,
                                service->identifier, "Favorite", NULL);
 
-               str = g_key_file_get_string(keyfile,
-                               service->identifier, "Failure", NULL);
-               if (str) {
-                       if (!service->favorite)
-                               service->state_ipv4 = service->state_ipv6 =
-                                       CONNMAN_SERVICE_STATE_FAILURE;
-                       service->error = string2error(str);
-                       g_free(str);
-               }
                /* fall through */
 
        case CONNMAN_SERVICE_TYPE_ETHERNET:
@@ -503,7 +538,7 @@ static int service_load(struct connman_service *service)
        str = g_key_file_get_string(keyfile,
                                service->identifier, "Modified", NULL);
        if (str) {
-               g_time_val_from_iso8601(str, &service->modified);
+               util_iso8601_to_timeval(str, &service->modified);
                g_free(str);
        }
 
@@ -571,6 +606,9 @@ static int service_load(struct connman_service *service)
                service->pac = str;
        }
 
+       service->mdns_config = g_key_file_get_boolean(keyfile,
+                               service->identifier, "mDNS", NULL);
+
        service->hidden_service = g_key_file_get_boolean(keyfile,
                                        service->identifier, "Hidden", NULL);
 
@@ -593,7 +631,7 @@ static int service_save(struct connman_service *service)
        if (service->new_service)
                return -ESRCH;
 
-       keyfile = __connman_storage_open_service(service->identifier);
+       keyfile = g_key_file_new();
        if (!keyfile)
                return -EIO;
 
@@ -655,17 +693,6 @@ static int service_save(struct connman_service *service)
                g_key_file_set_boolean(keyfile, service->identifier,
                                        "Favorite", service->favorite);
 
-               if (service->state_ipv4 == CONNMAN_SERVICE_STATE_FAILURE ||
-                       service->state_ipv6 == CONNMAN_SERVICE_STATE_FAILURE) {
-                       const char *failure = error2string(service->error);
-                       if (failure)
-                               g_key_file_set_string(keyfile,
-                                                       service->identifier,
-                                                       "Failure", failure);
-               } else {
-                       g_key_file_remove_key(keyfile, service->identifier,
-                                                       "Failure", NULL);
-               }
                /* fall through */
 
        case CONNMAN_SERVICE_TYPE_ETHERNET:
@@ -675,57 +702,48 @@ static int service_save(struct connman_service *service)
                break;
        }
 
-       str = g_time_val_to_iso8601(&service->modified);
+       str = util_timeval_to_iso8601(&service->modified);
        if (str) {
                g_key_file_set_string(keyfile, service->identifier,
-                                                       "Modified", str);
+                               "Modified", str);
                g_free(str);
        }
 
        if (service->passphrase && strlen(service->passphrase) > 0)
                g_key_file_set_string(keyfile, service->identifier,
-                                       "Passphrase", service->passphrase);
-       else
-               g_key_file_remove_key(keyfile, service->identifier,
-                                                       "Passphrase", NULL);
+                               "Passphrase", service->passphrase);
 
        if (service->ipconfig_ipv4)
                __connman_ipconfig_save(service->ipconfig_ipv4, keyfile,
-                                       service->identifier, "IPv4.");
+                               service->identifier, "IPv4.");
 
        if (service->ipconfig_ipv6)
                __connman_ipconfig_save(service->ipconfig_ipv6, keyfile,
-                                               service->identifier, "IPv6.");
+                               service->identifier, "IPv6.");
 
        if (service->nameservers_config) {
                guint len = g_strv_length(service->nameservers_config);
 
                g_key_file_set_string_list(keyfile, service->identifier,
-                                                               "Nameservers",
+                               "Nameservers",
                                (const gchar **) service->nameservers_config, len);
-       } else
-       g_key_file_remove_key(keyfile, service->identifier,
-                                                       "Nameservers", NULL);
+       }
 
        if (service->timeservers_config) {
                guint len = g_strv_length(service->timeservers_config);
 
                g_key_file_set_string_list(keyfile, service->identifier,
-                                                               "Timeservers",
+                               "Timeservers",
                                (const gchar **) service->timeservers_config, len);
-       } else
-               g_key_file_remove_key(keyfile, service->identifier,
-                                                       "Timeservers", NULL);
+       }
 
        if (service->domains) {
                guint len = g_strv_length(service->domains);
 
                g_key_file_set_string_list(keyfile, service->identifier,
-                                                               "Domains",
+                               "Domains",
                                (const gchar **) service->domains, len);
-       } else
-               g_key_file_remove_key(keyfile, service->identifier,
-                                                       "Domains", NULL);
+       }
 
        cst_str = proxymethod2string(service->proxy_config);
        if (cst_str)
@@ -738,9 +756,7 @@ static int service_save(struct connman_service *service)
                g_key_file_set_string_list(keyfile, service->identifier,
                                "Proxy.Servers",
                                (const gchar **) service->proxies, len);
-       } else
-               g_key_file_remove_key(keyfile, service->identifier,
-                                               "Proxy.Servers", NULL);
+       }
 
        if (service->excludes) {
                guint len = g_strv_length(service->excludes);
@@ -748,27 +764,25 @@ static int service_save(struct connman_service *service)
                g_key_file_set_string_list(keyfile, service->identifier,
                                "Proxy.Excludes",
                                (const gchar **) service->excludes, len);
-       } else
-               g_key_file_remove_key(keyfile, service->identifier,
-                                               "Proxy.Excludes", NULL);
+       }
 
        if (service->pac && strlen(service->pac) > 0)
                g_key_file_set_string(keyfile, service->identifier,
-                                       "Proxy.URL", service->pac);
-       else
-               g_key_file_remove_key(keyfile, service->identifier,
-                                                       "Proxy.URL", NULL);
+                               "Proxy.URL", service->pac);
+
+       if (service->mdns_config)
+               g_key_file_set_boolean(keyfile, service->identifier,
+                               "mDNS", TRUE);
 
        if (service->hidden_service)
-               g_key_file_set_boolean(keyfile, service->identifier, "Hidden",
-                                                                       TRUE);
+               g_key_file_set_boolean(keyfile, service->identifier,
+                               "Hidden", TRUE);
 
        if (service->config_file && strlen(service->config_file) > 0)
                g_key_file_set_string(keyfile, service->identifier,
                                "Config.file", service->config_file);
 
-       if (service->config_entry &&
-                                       strlen(service->config_entry) > 0)
+       if (service->config_entry && strlen(service->config_entry) > 0)
                g_key_file_set_string(keyfile, service->identifier,
                                "Config.ident", service->config_entry);
 
@@ -875,15 +889,12 @@ done:
        return result;
 }
 
-static bool is_connecting_state(struct connman_service *service,
-                                       enum connman_service_state state)
+static bool is_connecting(enum connman_service_state state)
 {
        switch (state) {
        case CONNMAN_SERVICE_STATE_UNKNOWN:
        case CONNMAN_SERVICE_STATE_IDLE:
        case CONNMAN_SERVICE_STATE_FAILURE:
-               if (service->network)
-                       return connman_network_get_connecting(service->network);
        case CONNMAN_SERVICE_STATE_DISCONNECT:
        case CONNMAN_SERVICE_STATE_READY:
        case CONNMAN_SERVICE_STATE_ONLINE:
@@ -896,8 +907,7 @@ static bool is_connecting_state(struct connman_service *service,
        return false;
 }
 
-static bool is_connected_state(const struct connman_service *service,
-                                       enum connman_service_state state)
+static bool is_connected(enum connman_service_state state)
 {
        switch (state) {
        case CONNMAN_SERVICE_STATE_UNKNOWN:
@@ -915,175 +925,212 @@ static bool is_connected_state(const struct connman_service *service,
        return false;
 }
 
-static bool is_idle_state(const struct connman_service *service,
-                               enum connman_service_state state)
+static bool is_idle(enum connman_service_state state)
 {
        switch (state) {
+       case CONNMAN_SERVICE_STATE_IDLE:
+       case CONNMAN_SERVICE_STATE_DISCONNECT:
+       case CONNMAN_SERVICE_STATE_FAILURE:
+               return true;
        case CONNMAN_SERVICE_STATE_UNKNOWN:
        case CONNMAN_SERVICE_STATE_ASSOCIATION:
        case CONNMAN_SERVICE_STATE_CONFIGURATION:
        case CONNMAN_SERVICE_STATE_READY:
        case CONNMAN_SERVICE_STATE_ONLINE:
-       case CONNMAN_SERVICE_STATE_DISCONNECT:
-       case CONNMAN_SERVICE_STATE_FAILURE:
                break;
-       case CONNMAN_SERVICE_STATE_IDLE:
-               return true;
        }
 
        return false;
 }
 
-static bool is_connecting(struct connman_service *service)
+static int nameservers_changed_cb(void *user_data)
 {
-       return is_connecting_state(service, service->state);
+       struct connman_service *service = user_data;
+
+       DBG("service %p", service);
+
+       service->nameservers_timeout = 0;
+       if ((is_idle(service->state) && !service->nameservers) ||
+                       is_connected(service->state))
+               dns_changed(service);
+
+       return FALSE;
 }
 
-static bool is_connected(struct connman_service *service)
+static void nameservers_changed(struct connman_service *service)
 {
-       return is_connected_state(service, service->state);
+       if (!service->nameservers_timeout)
+               service->nameservers_timeout = g_idle_add(nameservers_changed_cb,
+                                                       service);
 }
 
-static int nameserver_get_index(struct connman_service *service)
+static bool nameserver_available(struct connman_service *service,
+                               enum connman_ipconfig_type type,
+                               const char *ns)
 {
-       switch (combine_state(service->state_ipv4, service->state_ipv6)) {
-       case CONNMAN_SERVICE_STATE_UNKNOWN:
-       case CONNMAN_SERVICE_STATE_IDLE:
-       case CONNMAN_SERVICE_STATE_ASSOCIATION:
-       case CONNMAN_SERVICE_STATE_CONFIGURATION:
-       case CONNMAN_SERVICE_STATE_FAILURE:
-       case CONNMAN_SERVICE_STATE_DISCONNECT:
-               return -1;
-       case CONNMAN_SERVICE_STATE_READY:
-       case CONNMAN_SERVICE_STATE_ONLINE:
-               break;
+       int family;
+
+       family = connman_inet_check_ipaddress(ns);
+
+       if (family == AF_INET) {
+               if (type == CONNMAN_IPCONFIG_TYPE_IPV6)
+                       return false;
+
+               return is_connected(service->state_ipv4);
+       }
+
+       if (family == AF_INET6) {
+               if (type == CONNMAN_IPCONFIG_TYPE_IPV4)
+                       return false;
+
+               return is_connected(service->state_ipv6);
        }
 
-       return __connman_service_get_index(service);
+       return false;
 }
 
-static void remove_nameservers(struct connman_service *service,
-               int index, char **ns)
+static int searchdomain_add_all(struct connman_service *service)
 {
-       int i;
+       int index, i = 0;
 
-       if (!ns)
-               return;
+       if (!is_connected(service->state))
+               return -ENOTCONN;
 
+       index = __connman_service_get_index(service);
        if (index < 0)
-               index = nameserver_get_index(service);
+               return -ENXIO;
 
-       if (index < 0)
-                       return;
+       if (service->domains) {
+               while (service->domains[i]) {
+                       connman_resolver_append(index, service->domains[i],
+                                               NULL);
+                       i++;
+               }
+
+               return 0;
+       }
+
+       if (service->domainname)
+               connman_resolver_append(index, service->domainname, NULL);
+
+       return 0;
 
-       for (i = 0; ns[i]; i++)
-               connman_resolver_remove(index, NULL, ns[i]);
 }
 
-static void remove_searchdomains(struct connman_service *service,
-               int index, char **sd)
+static int searchdomain_remove_all(struct connman_service *service)
 {
-       int i;
+       int index, i = 0;
 
-       if (!sd)
-               return;
+       if (!is_connected(service->state))
+               return -ENOTCONN;
 
+       index = __connman_service_get_index(service);
        if (index < 0)
-               index = nameserver_get_index(service);
+               return -ENXIO;
 
-       if (index < 0)
-               return;
+       while (service->domains && service->domains[i]) {
+               connman_resolver_remove(index, service->domains[i], NULL);
+               i++;
+       }
 
-       for (i = 0; sd[i]; i++)
-               connman_resolver_remove(index, sd[i], NULL);
+       if (service->domainname)
+               connman_resolver_remove(index, service->domainname, NULL);
+
+       return 0;
 }
 
-static bool nameserver_available(struct connman_service *service, char *ns)
+static int nameserver_add(struct connman_service *service,
+                       enum connman_ipconfig_type type,
+                       const char *nameserver)
 {
-       int family;
+       int index, ret;
 
-       family = connman_inet_check_ipaddress(ns);
+       if (!nameserver_available(service, type, nameserver))
+               return 0;
 
-       if (family == AF_INET)
-               return is_connected_state(service, service->state_ipv4);
+       index = __connman_service_get_index(service);
+       if (index < 0)
+               return -ENXIO;
 
-       if (family == AF_INET6)
-               return is_connected_state(service, service->state_ipv6);
+       ret = connman_resolver_append(index, NULL, nameserver);
+       if (ret >= 0)
+               nameservers_changed(service);
 
-       return false;
+       return ret;
 }
 
-static void update_nameservers(struct connman_service *service)
+static int nameserver_add_all(struct connman_service *service,
+                       enum connman_ipconfig_type type)
 {
-       int index;
-       char *ns;
-
-       index = __connman_service_get_index(service);
-       if (index < 0)
-               return;
+       int i = 0;
 
-       switch (combine_state(service->state_ipv4, service->state_ipv6)) {
-       case CONNMAN_SERVICE_STATE_UNKNOWN:
-       case CONNMAN_SERVICE_STATE_IDLE:
-       case CONNMAN_SERVICE_STATE_ASSOCIATION:
-       case CONNMAN_SERVICE_STATE_CONFIGURATION:
-               return;
-       case CONNMAN_SERVICE_STATE_FAILURE:
-       case CONNMAN_SERVICE_STATE_DISCONNECT:
-               connman_resolver_remove_all(index);
-               return;
-       case CONNMAN_SERVICE_STATE_READY:
-       case CONNMAN_SERVICE_STATE_ONLINE:
-               break;
+       if (service->nameservers_config) {
+               while (service->nameservers_config[i]) {
+                       nameserver_add(service, type,
+                               service->nameservers_config[i]);
+                       i++;
+               }
+       } else if (service->nameservers) {
+               while (service->nameservers[i]) {
+                       nameserver_add(service, type,
+                               service->nameservers[i]);
+                       i++;
+               }
        }
 
-       if (service->nameservers_config) {
-               int i;
+       if (!i)
+               __connman_resolver_append_fallback_nameservers();
+
+       searchdomain_add_all(service);
 
-               remove_nameservers(service, index, service->nameservers);
+       return 0;
+}
 
-               i = g_strv_length(service->nameservers_config);
-               while (i != 0) {
-                       i--;
+static int nameserver_remove(struct connman_service *service,
+                       enum connman_ipconfig_type type,
+                       const char *nameserver)
+{
+       int index, ret;
 
-                       ns = service->nameservers_config[i];
+       if (!nameserver_available(service, type, nameserver))
+               return 0;
 
-                       if (nameserver_available(service, ns))
-                               connman_resolver_append(index, NULL, ns);
-               }
-       } else if (service->nameservers) {
-               int i;
+       index = __connman_service_get_index(service);
+       if (index < 0)
+               return -ENXIO;
 
-               remove_nameservers(service, index, service->nameservers);
+       ret = connman_resolver_remove(index, NULL, nameserver);
+       if (ret >= 0)
+               nameservers_changed(service);
 
-               i = g_strv_length(service->nameservers);
-               while (i != 0) {
-                       i--;
+       return ret;
+}
 
-                       ns = service->nameservers[i];
+static int nameserver_remove_all(struct connman_service *service,
+                               enum connman_ipconfig_type type)
+{
+       int index, i = 0;
 
-                       if (nameserver_available(service, ns))
-                               connman_resolver_append(index, NULL, ns);
-               }
-       }
+       index = __connman_service_get_index(service);
+       if (index < 0)
+               return -ENXIO;
 
-       if (service->domains) {
-               char *searchdomains[2] = {NULL, NULL};
-               int i;
+       while (service->nameservers_config && service->nameservers_config[i]) {
 
-               searchdomains[0] = service->domainname;
-               remove_searchdomains(service, index, searchdomains);
+               nameserver_remove(service, type,
+                               service->nameservers_config[i]);
+               i++;
+       }
 
-               i = g_strv_length(service->domains);
-               while (i != 0) {
-                       i--;
-                       connman_resolver_append(index, service->domains[i],
-                                               NULL);
-               }
-       } else if (service->domainname)
-               connman_resolver_append(index, service->domainname, NULL);
+       i = 0;
+       while (service->nameservers && service->nameservers[i]) {
+               nameserver_remove(service, type, service->nameservers[i]);
+               i++;
+       }
 
-       connman_resolver_flush();
+       searchdomain_remove_all(service);
+
+       return 0;
 }
 
 /*
@@ -1107,11 +1154,12 @@ int __connman_service_nameserver_append(struct connman_service *service,
        else
                nameservers = service->nameservers;
 
-       for (i = 0; nameservers && nameservers[i]; i++)
-               if (g_strcmp0(nameservers[i], nameserver) == 0)
-                       return -EEXIST;
-
        if (nameservers) {
+               for (i = 0; nameservers[i]; i++) {
+                       if (g_strcmp0(nameservers[i], nameserver) == 0)
+                               return -EEXIST;
+               }
+
                len = g_strv_length(nameservers);
                nameservers = g_try_renew(char *, nameservers, len + 2);
        } else {
@@ -1123,18 +1171,19 @@ int __connman_service_nameserver_append(struct connman_service *service,
                return -ENOMEM;
 
        nameservers[len] = g_strdup(nameserver);
-       if (!nameservers[len])
-               return -ENOMEM;
-
        nameservers[len + 1] = NULL;
 
        if (is_auto) {
                service->nameservers_auto = nameservers;
        } else {
                service->nameservers = nameservers;
-               update_nameservers(service);
+               nameserver_add(service, CONNMAN_IPCONFIG_TYPE_ALL, nameserver);
        }
 
+       nameservers_changed(service);
+
+       searchdomain_add_all(service);
+
        return 0;
 }
 
@@ -1158,7 +1207,7 @@ int __connman_service_nameserver_remove(struct connman_service *service,
        if (!nameservers)
                return 0;
 
-       for (i = 0; nameservers && nameservers[i]; i++)
+       for (i = 0; nameservers[i]; i++)
                if (g_strcmp0(nameservers[i], nameserver) == 0) {
                        found = true;
                        break;
@@ -1170,13 +1219,8 @@ int __connman_service_nameserver_remove(struct connman_service *service,
        len = g_strv_length(nameservers);
 
        if (len == 1) {
-               g_strfreev(nameservers);
-               if (is_auto)
-                       service->nameservers_auto = NULL;
-               else
-                       service->nameservers = NULL;
-
-               return 0;
+               servers = NULL;
+               goto set_servers;
        }
 
        servers = g_try_new0(char *, len);
@@ -1184,15 +1228,17 @@ int __connman_service_nameserver_remove(struct connman_service *service,
                return -ENOMEM;
 
        for (i = 0, j = 0; i < len; i++) {
-               if (g_strcmp0(nameservers[i], nameserver) != 0) {
-                       servers[j] = g_strdup(nameservers[i]);
-                       if (!servers[j])
-                               return -ENOMEM;
+               if (g_strcmp0(nameservers[i], nameserver)) {
+                       servers[j] = nameservers[i];
                        j++;
-               }
+               } else
+                       g_free(nameservers[i]);
+
+               nameservers[i] = NULL;
        }
        servers[len - 1] = NULL;
 
+set_servers:
        g_strfreev(nameservers);
        nameservers = servers;
 
@@ -1200,7 +1246,8 @@ int __connman_service_nameserver_remove(struct connman_service *service,
                service->nameservers_auto = nameservers;
        } else {
                service->nameservers = nameservers;
-               update_nameservers(service);
+               nameserver_remove(service, CONNMAN_IPCONFIG_TYPE_ALL,
+                               nameserver);
        }
 
        return 0;
@@ -1208,10 +1255,12 @@ int __connman_service_nameserver_remove(struct connman_service *service,
 
 void __connman_service_nameserver_clear(struct connman_service *service)
 {
+       nameserver_remove_all(service, CONNMAN_IPCONFIG_TYPE_ALL);
+
        g_strfreev(service->nameservers);
        service->nameservers = NULL;
 
-       update_nameservers(service);
+       nameserver_add_all(service, CONNMAN_IPCONFIG_TYPE_ALL);
 }
 
 static void add_nameserver_route(int family, int index, char *nameserver,
@@ -1239,14 +1288,18 @@ static void add_nameserver_route(int family, int index, char *nameserver,
 static void nameserver_add_routes(int index, char **nameservers,
                                        const char *gw)
 {
-       int i, family;
+       int i, ns_family, gw_family;
+
+       gw_family = connman_inet_check_ipaddress(gw);
+       if (gw_family < 0)
+               return;
 
        for (i = 0; nameservers[i]; i++) {
-               family = connman_inet_check_ipaddress(nameservers[i]);
-               if (family < 0)
+               ns_family = connman_inet_check_ipaddress(nameservers[i]);
+               if (ns_family < 0 || ns_family != gw_family)
                        continue;
 
-               add_nameserver_route(family, index, nameservers[i], gw);
+               add_nameserver_route(ns_family, index, nameservers[i], gw);
        }
 }
 
@@ -1320,6 +1373,69 @@ void __connman_service_nameserver_del_routes(struct connman_service *service,
                nameserver_del_routes(index, service->nameservers, type);
 }
 
+static bool check_proxy_setup(struct connman_service *service)
+{
+       /*
+        * We start WPAD if we haven't got a PAC URL from DHCP and
+        * if our proxy manual configuration is either empty or set
+        * to AUTO with an empty URL.
+        */
+
+       if (service->proxy != CONNMAN_SERVICE_PROXY_METHOD_UNKNOWN)
+               return true;
+
+       if (service->proxy_config != CONNMAN_SERVICE_PROXY_METHOD_UNKNOWN &&
+               (service->proxy_config != CONNMAN_SERVICE_PROXY_METHOD_AUTO ||
+                       service->pac))
+               return true;
+
+       if (__connman_wpad_start(service) < 0) {
+               service->proxy = CONNMAN_SERVICE_PROXY_METHOD_DIRECT;
+               __connman_notifier_proxy_changed(service);
+               return true;
+       }
+
+       return false;
+}
+
+static void cancel_online_check(struct connman_service *service)
+{
+       if (service->online_timeout == 0)
+               return;
+
+       g_source_remove(service->online_timeout);
+       service->online_timeout = 0;
+       connman_service_unref(service);
+}
+
+static void start_online_check(struct connman_service *service,
+                               enum connman_ipconfig_type type)
+{
+       if (!connman_setting_get_bool("EnableOnlineCheck")) {
+               connman_info("Online check disabled. "
+                       "Default service remains in READY state.");
+               return;
+       }
+
+       if (type != CONNMAN_IPCONFIG_TYPE_IPV4 || check_proxy_setup(service)) {
+               cancel_online_check(service);
+               __connman_service_wispr_start(service, type);
+       }
+}
+
+static void address_updated(struct connman_service *service,
+                       enum connman_ipconfig_type type)
+{
+       if (is_connected(service->state) &&
+                       service == connman_service_get_default()) {
+               nameserver_remove_all(service, type);
+               nameserver_add_all(service, type);
+               start_online_check(service, type);
+
+               __connman_timeserver_sync(service);
+       }
+}
+
 static struct connman_stats *stats_get(struct connman_service *service)
 {
        if (service->roaming)
@@ -1408,7 +1524,7 @@ static void reset_stats(struct connman_service *service)
        g_timer_reset(service->stats_roaming.timer);
 }
 
-struct connman_service *__connman_service_get_default(void)
+struct connman_service *connman_service_get_default(void)
 {
        struct connman_service *service;
 
@@ -1417,7 +1533,7 @@ struct connman_service *__connman_service_get_default(void)
 
        service = service_list->data;
 
-       if (!is_connected(service))
+       if (!is_connected(service->state))
                return NULL;
 
        return service;
@@ -1430,14 +1546,14 @@ bool __connman_service_index_is_default(int index)
        if (index < 0)
                return false;
 
-       service = __connman_service_get_default();
+       service = connman_service_get_default();
 
        return __connman_service_get_index(service) == index;
 }
 
 static void default_changed(void)
 {
-       struct connman_service *service = __connman_service_get_default();
+       struct connman_service *service = connman_service_get_default();
 
        if (service == current_default)
                return;
@@ -1455,8 +1571,19 @@ static void default_changed(void)
                                connman_setting_get_bool("AllowHostnameUpdates"))
                        __connman_utsname_set_hostname(service->hostname);
 
-               if (service->domainname)
+               if (service->domainname &&
+                               connman_setting_get_bool("AllowDomainnameUpdates"))
                        __connman_utsname_set_domainname(service->domainname);
+
+               /*
+                * Connect VPN automatically when new default service
+                * is set and connected, unless new default is VPN
+                */
+               if (is_connected(service->state) &&
+                               service->type != CONNMAN_SERVICE_TYPE_VPN) {
+                       DBG("running vpn_auto_connect");
+                       vpn_auto_connect();
+               }
        }
 
        __connman_notifier_default_changed(service);
@@ -1557,6 +1684,18 @@ static void autoconnect_changed(struct connman_service *service)
                                DBUS_TYPE_BOOLEAN, &autoconnect);
 }
 
+bool connman_service_set_autoconnect(struct connman_service *service,
+                                                       bool autoconnect)
+{
+       if (service->autoconnect == autoconnect)
+               return false;
+
+       service->autoconnect = autoconnect;
+       autoconnect_changed(service);
+
+       return true;
+}
+
 static void append_security(DBusMessageIter *iter, void *user_data)
 {
        struct connman_service *service = user_data;
@@ -1587,8 +1726,27 @@ static void append_security(DBusMessageIter *iter, void *user_data)
                case CONNMAN_SERVICE_SECURITY_8021X:
                        break;
                }
-       }
-}
+
+               if (service->wps_advertizing) {
+                       str = "wps_advertising";
+                       dbus_message_iter_append_basic(iter,
+                                               DBUS_TYPE_STRING, &str);
+               }
+       }
+}
+
+static void security_changed(struct connman_service *service)
+{
+       if (!service->path)
+               return;
+
+       if (!allow_property_changed(service))
+               return;
+
+       connman_dbus_property_changed_array(service->path,
+                               CONNMAN_SERVICE_INTERFACE, "Security",
+                               DBUS_TYPE_STRING, append_security, service);
+}
 
 static void append_ethernet(DBusMessageIter *iter, void *user_data)
 {
@@ -1606,7 +1764,7 @@ static void append_ipv4(DBusMessageIter *iter, void *user_data)
 {
        struct connman_service *service = user_data;
 
-       if (!is_connected_state(service, service->state_ipv4))
+       if (!is_connected(service->state_ipv4))
                return;
 
        if (service->ipconfig_ipv4)
@@ -1617,7 +1775,7 @@ static void append_ipv6(DBusMessageIter *iter, void *user_data)
 {
        struct connman_service *service = user_data;
 
-       if (!is_connected_state(service, service->state_ipv6))
+       if (!is_connected(service->state_ipv6))
                return;
 
        if (service->ipconfig_ipv6)
@@ -1651,9 +1809,9 @@ static void append_nameservers(DBusMessageIter *iter,
 
        for (i = 0; servers[i]; i++) {
                if (service)
-                       available = nameserver_available(service, servers[i]);
-
-               DBG("servers[%d] %s available %d", i, servers[i], available);
+                       available = nameserver_available(service,
+                                               CONNMAN_IPCONFIG_TYPE_ALL,
+                                               servers[i]);
 
                if (available)
                        dbus_message_iter_append_basic(iter,
@@ -1665,7 +1823,7 @@ static void append_dns(DBusMessageIter *iter, void *user_data)
 {
        struct connman_service *service = user_data;
 
-       if (!is_connected(service))
+       if (!is_connected(service->state))
                return;
 
        if (service->nameservers_config) {
@@ -1749,8 +1907,8 @@ static void append_domain(DBusMessageIter *iter, void *user_data)
 {
        struct connman_service *service = user_data;
 
-       if (!is_connected(service) &&
-                               !is_connecting(service))
+       if (!is_connected(service->state) &&
+                               !is_connecting(service->state))
                return;
 
        if (service->domains)
@@ -1794,7 +1952,7 @@ static void append_proxy(DBusMessageIter *iter, void *user_data)
        const char *method = proxymethod2string(
                CONNMAN_SERVICE_PROXY_METHOD_DIRECT);
 
-       if (!is_connected(service))
+       if (!is_connected(service->state))
                return;
 
        proxy = connman_service_get_proxy_method(service);
@@ -1881,7 +2039,7 @@ static void append_provider(DBusMessageIter *iter, void *user_data)
 {
        struct connman_service *service = user_data;
 
-       if (!is_connected(service))
+       if (!is_connected(service->state))
                return;
 
        if (service->provider)
@@ -1894,11 +2052,13 @@ static void settings_changed(struct connman_service *service,
 {
        enum connman_ipconfig_type type;
 
+       type = __connman_ipconfig_get_config_type(ipconfig);
+
+       __connman_notifier_ipconfig_changed(service, ipconfig);
+
        if (!allow_property_changed(service))
                return;
 
-       type = __connman_ipconfig_get_config_type(ipconfig);
-
        if (type == CONNMAN_IPCONFIG_TYPE_IPV4)
                connman_dbus_property_changed_dict(service->path,
                                        CONNMAN_SERVICE_INTERFACE, "IPv4",
@@ -1907,8 +2067,6 @@ static void settings_changed(struct connman_service *service,
                connman_dbus_property_changed_dict(service->path,
                                        CONNMAN_SERVICE_INTERFACE, "IPv6",
                                        append_ipv6, service);
-
-       __connman_notifier_ipconfig_changed(service, ipconfig);
 }
 
 static void ipv4_configuration_changed(struct connman_service *service)
@@ -1923,6 +2081,15 @@ static void ipv4_configuration_changed(struct connman_service *service)
                                                        service);
 }
 
+void __connman_service_notify_ipv4_configuration(
+                                       struct connman_service *service)
+{
+       if (!service)
+               return;
+
+       ipv4_configuration_changed(service);
+}
+
 static void ipv6_configuration_changed(struct connman_service *service)
 {
        if (!allow_property_changed(service))
@@ -2001,6 +2168,48 @@ static void proxy_configuration_changed(struct connman_service *service)
        proxy_changed(service);
 }
 
+static void mdns_changed(struct connman_service *service)
+{
+       dbus_bool_t mdns = service->mdns;
+
+       if (!allow_property_changed(service))
+               return;
+
+       connman_dbus_property_changed_basic(service->path,
+                       CONNMAN_SERVICE_INTERFACE, "mDNS", DBUS_TYPE_BOOLEAN,
+                       &mdns);
+}
+
+static void mdns_configuration_changed(struct connman_service *service)
+{
+       dbus_bool_t mdns_config = service->mdns_config;
+
+       if (!allow_property_changed(service))
+               return;
+
+       connman_dbus_property_changed_basic(service->path,
+                       CONNMAN_SERVICE_INTERFACE, "mDNS.Configuration",
+                       DBUS_TYPE_BOOLEAN, &mdns_config);
+}
+
+static int set_mdns(struct connman_service *service,
+                       bool enabled)
+{
+       int result;
+
+       result = __connman_resolver_set_mdns(
+                       __connman_service_get_index(service), enabled);
+
+       if (result == 0) {
+               if (service->mdns != enabled) {
+                       service->mdns = enabled;
+                       mdns_changed(service);
+               }
+       }
+
+       return result;
+}
+
 static void timeservers_configuration_changed(struct connman_service *service)
 {
        if (!allow_property_changed(service))
@@ -2184,7 +2393,7 @@ void __connman_service_notify(struct connman_service *service,
        if (!service)
                return;
 
-       if (!is_connected(service))
+       if (!is_connected(service->state))
                return;
 
        stats_update(service,
@@ -2251,17 +2460,16 @@ void __connman_service_counter_unregister(const char *counter)
        counter_list = g_slist_remove(counter_list, counter);
 }
 
-int __connman_service_iterate_services(service_iterate_cb cb, void *user_data)
+int connman_service_iterate_services(connman_service_iterate_cb cb,
+                                                       void *user_data)
 {
        GList *list;
+       int ret = 0;
 
-       for (list = service_list; list; list = list->next) {
-               struct connman_service *service = list->data;
-
-               cb(service, user_data);
-       }
+       for (list = service_list; list && ret == 0; list = list->next)
+               ret = cb((struct connman_service *)list->data, user_data);
 
-       return 0;
+       return ret;
 }
 
 static void append_properties(DBusMessageIter *dict, dbus_bool_t limited,
@@ -2378,8 +2586,19 @@ static void append_properties(DBusMessageIter *dict, dbus_bool_t limited,
        connman_dbus_dict_append_dict(dict, "Proxy.Configuration",
                                                append_proxyconfig, service);
 
+       val = service->mdns;
+       connman_dbus_dict_append_basic(dict, "mDNS", DBUS_TYPE_BOOLEAN,
+                               &val);
+
+       val = service->mdns_config;
+       connman_dbus_dict_append_basic(dict, "mDNS.Configuration",
+                               DBUS_TYPE_BOOLEAN, &val);
+
        connman_dbus_dict_append_dict(dict, "Provider",
                                                append_provider, service);
+
+       if (service->network)
+               connman_network_append_acddbus(dict, service->network);
 }
 
 static void append_struct_service(DBusMessageIter *iter,
@@ -2477,7 +2696,10 @@ void __connman_service_set_hostname(struct connman_service *service,
                return;
 
        g_free(service->hostname);
-       service->hostname = g_strdup(hostname);
+       service->hostname = NULL;
+
+       if (hostname && g_str_is_ascii(hostname))
+               service->hostname = g_strdup(hostname);
 }
 
 const char *__connman_service_get_hostname(struct connman_service *service)
@@ -2495,7 +2717,10 @@ void __connman_service_set_domainname(struct connman_service *service,
                return;
 
        g_free(service->domainname);
-       service->domainname = g_strdup(domainname);
+       service->domainname = NULL;
+
+       if (domainname && g_str_is_ascii(domainname))
+               service->domainname = g_strdup(domainname);
 
        domain_changed(service);
 }
@@ -2511,6 +2736,14 @@ const char *connman_service_get_domainname(struct connman_service *service)
                return service->domainname;
 }
 
+const char *connman_service_get_dbuspath(struct connman_service *service)
+{
+       if (!service)
+               return NULL;
+
+       return service->path;
+}
+
 char **connman_service_get_nameservers(struct connman_service *service)
 {
        if (!service)
@@ -2790,6 +3023,81 @@ void __connman_service_set_identity(struct connman_service *service,
                                        service->identity);
 }
 
+void __connman_service_set_anonymous_identity(struct connman_service *service,
+                                               const char *anonymous_identity)
+{
+       if (service->immutable || service->hidden)
+               return;
+
+       g_free(service->anonymous_identity);
+       service->anonymous_identity = g_strdup(anonymous_identity);
+
+       if (service->network)
+               connman_network_set_string(service->network,
+                                       "WiFi.AnonymousIdentity",
+                                       service->anonymous_identity);
+}
+
+void __connman_service_set_subject_match(struct connman_service *service,
+                                               const char *subject_match)
+{
+       if (service->immutable || service->hidden)
+               return;
+
+       g_free(service->subject_match);
+       service->subject_match = g_strdup(subject_match);
+
+       if (service->network)
+               connman_network_set_string(service->network,
+                                       "WiFi.SubjectMatch",
+                                       service->subject_match);
+}
+
+void __connman_service_set_altsubject_match(struct connman_service *service,
+                                               const char *altsubject_match)
+{
+       if (service->immutable || service->hidden)
+               return;
+
+       g_free(service->altsubject_match);
+       service->altsubject_match = g_strdup(altsubject_match);
+
+       if (service->network)
+               connman_network_set_string(service->network,
+                                       "WiFi.AltSubjectMatch",
+                                       service->altsubject_match);
+}
+
+void __connman_service_set_domain_suffix_match(struct connman_service *service,
+                                               const char *domain_suffix_match)
+{
+       if (service->immutable || service->hidden)
+               return;
+
+       g_free(service->domain_suffix_match);
+       service->domain_suffix_match = g_strdup(domain_suffix_match);
+
+       if (service->network)
+               connman_network_set_string(service->network,
+                                       "WiFi.DomainSuffixMatch",
+                                       service->domain_suffix_match);
+}
+
+void __connman_service_set_domain_match(struct connman_service *service,
+                                               const char *domain_match)
+{
+       if (service->immutable || service->hidden)
+               return;
+
+       g_free(service->domain_match);
+       service->domain_match = g_strdup(domain_match);
+
+       if (service->network)
+               connman_network_set_string(service->network,
+                                       "WiFi.DomainMatch",
+                                       service->domain_match);
+}
+
 void __connman_service_set_agent_identity(struct connman_service *service,
                                                const char *agent_identity)
 {
@@ -2804,30 +3112,29 @@ void __connman_service_set_agent_identity(struct connman_service *service,
                                        service->agent_identity);
 }
 
-static int check_passphrase(struct connman_service *service,
-                               enum connman_service_security security,
-                               const char *passphrase)
+int __connman_service_check_passphrase(enum connman_service_security security,
+               const char *passphrase)
 {
        guint i;
        gsize length;
 
-       if (!passphrase) {
-               /*
-                * This will prevent __connman_service_set_passphrase() to
-                * wipe the passphrase out in case of -ENOKEY error for a
-                * favorite service. */
-               if (service->favorite)
-                       return 1;
-               else
-                       return 0;
-       }
+       if (!passphrase)
+               return 0;
 
        length = strlen(passphrase);
 
        switch (security) {
-       case CONNMAN_SERVICE_SECURITY_PSK:
+       case CONNMAN_SERVICE_SECURITY_UNKNOWN:
+       case CONNMAN_SERVICE_SECURITY_NONE:
        case CONNMAN_SERVICE_SECURITY_WPA:
        case CONNMAN_SERVICE_SECURITY_RSN:
+
+               DBG("service security '%s' (%d) not handled",
+                               security2string(security), security);
+
+               return -EOPNOTSUPP;
+
+       case CONNMAN_SERVICE_SECURITY_PSK:
                /* A raw key is always 64 bytes length,
                 * its content is in hex representation.
                 * A PSK key must be between [8..63].
@@ -2852,8 +3159,7 @@ static int check_passphrase(struct connman_service *service,
                } else if (length != 5 && length != 13)
                        return -ENOKEY;
                break;
-       case CONNMAN_SERVICE_SECURITY_UNKNOWN:
-       case CONNMAN_SERVICE_SECURITY_NONE:
+
        case CONNMAN_SERVICE_SECURITY_8021X:
                break;
        }
@@ -2864,25 +3170,28 @@ static int check_passphrase(struct connman_service *service,
 int __connman_service_set_passphrase(struct connman_service *service,
                                        const char *passphrase)
 {
-       int err = 0;
+       int err;
 
-       if (service->immutable || service->hidden)
+       if (service->hidden)
                return -EINVAL;
 
-       err = check_passphrase(service, service->security, passphrase);
+       if (service->immutable &&
+                       service->security != CONNMAN_SERVICE_SECURITY_8021X)
+               return -EINVAL;
 
-       if (err == 0) {
-               g_free(service->passphrase);
-               service->passphrase = g_strdup(passphrase);
+       err = __connman_service_check_passphrase(service->security, passphrase);
 
-               if (service->network)
-                       connman_network_set_string(service->network,
-                                                       "WiFi.Passphrase",
-                                                       service->passphrase);
-               service_save(service);
-       }
+       if (err < 0)
+               return err;
 
-       return err;
+       g_free(service->passphrase);
+       service->passphrase = g_strdup(passphrase);
+
+       if (service->network)
+               connman_network_set_string(service->network, "WiFi.Passphrase",
+                               service->passphrase);
+
+       return 0;
 }
 
 const char *__connman_service_get_passphrase(struct connman_service *service)
@@ -2900,8 +3209,6 @@ static DBusMessage *get_properties(DBusConnection *conn,
        DBusMessage *reply;
        DBusMessageIter array, dict;
 
-       DBG("service %p", service);
-
        reply = dbus_message_new_method_return(msg);
        if (!reply)
                return NULL;
@@ -2915,6 +3222,23 @@ static DBusMessage *get_properties(DBusConnection *conn,
        return reply;
 }
 
+static char **remove_empty_strings(char **strv)
+{
+       int index = 0;
+       char **iter = strv;
+
+       while (*iter) {
+               if (**iter)
+                       strv[index++] = *iter;
+               else
+                       g_free(*iter);
+               iter++;
+       }
+
+       strv[index] = NULL;
+       return strv;
+}
+
 static int update_proxy_configuration(struct connman_service *service,
                                DBusMessageIter *array)
 {
@@ -3028,20 +3352,24 @@ static int update_proxy_configuration(struct connman_service *service,
                if (servers_str) {
                        g_strfreev(service->proxies);
 
-                       if (servers_str->len > 0)
-                               service->proxies = g_strsplit_set(
+                       if (servers_str->len > 0) {
+                               char **proxies = g_strsplit_set(
                                        servers_str->str, " ", 0);
-                       else
+                               proxies = remove_empty_strings(proxies);
+                               service->proxies = proxies;
+                       } else
                                service->proxies = NULL;
                }
 
                if (excludes_str) {
                        g_strfreev(service->excludes);
 
-                       if (excludes_str->len > 0)
-                               service->excludes = g_strsplit_set(
+                       if (excludes_str->len > 0) {
+                               char **excludes = g_strsplit_set(
                                        excludes_str->str, " ", 0);
-                       else
+                               excludes = remove_empty_strings(excludes);
+                               service->excludes = excludes;
+                       } else
                                service->excludes = NULL;
                }
 
@@ -3053,7 +3381,7 @@ static int update_proxy_configuration(struct connman_service *service,
                g_free(service->pac);
 
                if (url && strlen(url) > 0)
-                       service->pac = g_strdup(url);
+                       service->pac = g_strstrip(g_strdup(url));
                else
                        service->pac = NULL;
 
@@ -3088,6 +3416,31 @@ error:
        return -EINVAL;
 }
 
+static void do_auto_connect(struct connman_service *service,
+       enum connman_service_connect_reason reason)
+{
+       /*
+        * CONNMAN_SERVICE_CONNECT_REASON_NONE must be ignored for VPNs. VPNs
+        * always have reason CONNMAN_SERVICE_CONNECT_REASON_USER/AUTO.
+        */
+       if (!service || (service->type == CONNMAN_SERVICE_TYPE_VPN &&
+                               reason == CONNMAN_SERVICE_CONNECT_REASON_NONE))
+               return;
+
+       /*
+        * Run service auto connect for other than VPN services. Afterwards
+        * start also VPN auto connect process.
+        */
+       if (service->type != CONNMAN_SERVICE_TYPE_VPN)
+               __connman_service_auto_connect(reason);
+       /* Only user interaction should get VPN connected in failure state. */
+       else if (service->state == CONNMAN_SERVICE_STATE_FAILURE &&
+                               reason != CONNMAN_SERVICE_CONNECT_REASON_USER)
+               return;
+
+       vpn_auto_connect();
+}
+
 int __connman_service_reset_ipconfig(struct connman_service *service,
                enum connman_ipconfig_type type, DBusMessageIter *array,
                enum connman_service_state *new_state)
@@ -3130,9 +3483,9 @@ int __connman_service_reset_ipconfig(struct connman_service *service,
                new_method = __connman_ipconfig_get_method(new_ipconfig);
        }
 
-       if (is_connecting_state(service, state) ||
-                                       is_connected_state(service, state))
+       if (is_connecting(state) || is_connected(state))
                __connman_network_clear_ipconfig(service->network, ipconfig);
+
        __connman_ipconfig_unref(ipconfig);
 
        if (type == CONNMAN_IPCONFIG_TYPE_IPV4)
@@ -3140,14 +3493,19 @@ int __connman_service_reset_ipconfig(struct connman_service *service,
        else if (type == CONNMAN_IPCONFIG_TYPE_IPV6)
                service->ipconfig_ipv6 = new_ipconfig;
 
-       __connman_ipconfig_enable(new_ipconfig);
+       if (is_connecting(state) || is_connected(state))
+               __connman_ipconfig_enable(new_ipconfig);
 
        if (new_state && new_method != old_method) {
                if (type == CONNMAN_IPCONFIG_TYPE_IPV4)
                        *new_state = service->state_ipv4;
                else
                        *new_state = service->state_ipv6;
-               __connman_service_auto_connect(CONNMAN_SERVICE_CONNECT_REASON_AUTO);
+
+               settings_changed(service, new_ipconfig);
+               address_updated(service, type);
+
+               do_auto_connect(service, CONNMAN_SERVICE_CONNECT_REASON_AUTO);
        }
 
        DBG("err %d ipconfig %p type %d method %d state %s", err,
@@ -3157,6 +3515,32 @@ int __connman_service_reset_ipconfig(struct connman_service *service,
        return err;
 }
 
+/*
+ * We set the timeout to 1 sec so that we have a chance to get
+ * necessary IPv6 router advertisement messages that might have
+ * DNS data etc.
+ */
+#define ONLINE_CHECK_INITIAL_INTERVAL 1
+#define ONLINE_CHECK_MAX_INTERVAL 12
+
+void __connman_service_wispr_start(struct connman_service *service,
+                                       enum connman_ipconfig_type type)
+{
+       DBG("service %p type %s", service, __connman_ipconfig_type2string(type));
+
+       if (type == CONNMAN_IPCONFIG_TYPE_IPV4)
+               service->online_check_interval_ipv4 =
+                                       ONLINE_CHECK_INITIAL_INTERVAL;
+       else
+               service->online_check_interval_ipv6 =
+                                       ONLINE_CHECK_INITIAL_INTERVAL;
+
+       __connman_wispr_start(service, type);
+}
+
+static void set_error(struct connman_service *service,
+                                       enum connman_service_error error);
+
 static DBusMessage *set_property(DBusConnection *conn,
                                        DBusMessage *msg, void *user_data)
 {
@@ -3194,17 +3578,26 @@ static DBusMessage *set_property(DBusConnection *conn,
 
                dbus_message_iter_get_basic(&value, &autoconnect);
 
-               if (service->autoconnect == autoconnect)
-                       return g_dbus_create_reply(msg, DBUS_TYPE_INVALID);
-
-               service->autoconnect = autoconnect;
-
-               autoconnect_changed(service);
+               if (autoconnect && service->type == CONNMAN_SERVICE_TYPE_VPN) {
+                       /*
+                        * Changing the autoconnect flag on VPN to "on" should
+                        * have the same effect as user connecting the VPN =
+                        * clear previous error and change state to idle.
+                        */
+                       set_error(service, CONNMAN_SERVICE_ERROR_UNKNOWN);
 
-               if (autoconnect)
-                       __connman_service_auto_connect(CONNMAN_SERVICE_CONNECT_REASON_AUTO);
+                       if (service->state == CONNMAN_SERVICE_STATE_FAILURE) {
+                               service->state = CONNMAN_SERVICE_STATE_IDLE;
+                               state_changed(service);
+                       }
+               }
 
-               service_save(service);
+               if (connman_service_set_autoconnect(service, autoconnect)) {
+                       service_save(service);
+                       if (autoconnect)
+                               do_auto_connect(service,
+                                       CONNMAN_SERVICE_CONNECT_REASON_AUTO);
+               }
        } else if (g_str_equal(name, "Nameservers.Configuration")) {
                DBusMessageIter entry;
                GString *str;
@@ -3236,20 +3629,30 @@ static DBusMessage *set_property(DBusConnection *conn,
                        const char *val;
                        dbus_message_iter_get_basic(&entry, &val);
                        dbus_message_iter_next(&entry);
-                       if (connman_inet_check_ipaddress(val) > 0) {
-                               if (str->len > 0)
-                                       g_string_append_printf(str, " %s", val);
-                               else
-                                       g_string_append(str, val);
-                       }
+
+                       if (!val[0])
+                               continue;
+
+                       if (str->len > 0)
+                               g_string_append_printf(str, " %s", val);
+                       else
+                               g_string_append(str, val);
                }
 
-               remove_nameservers(service, -1, service->nameservers_config);
+               nameserver_remove_all(service, CONNMAN_IPCONFIG_TYPE_ALL);
                g_strfreev(service->nameservers_config);
 
                if (str->len > 0) {
-                       service->nameservers_config =
-                               g_strsplit_set(str->str, " ", 0);
+                       char **nameservers, **iter;
+
+                       nameservers = g_strsplit_set(str->str, " ", 0);
+
+                       for (iter = nameservers; *iter; iter++)
+                               if (connman_inet_check_ipaddress(*iter) <= 0)
+                                       *iter[0] = '\0';
+
+                       nameservers = remove_empty_strings(nameservers);
+                       service->nameservers_config = nameservers;
                } else {
                        service->nameservers_config = NULL;
                }
@@ -3259,24 +3662,21 @@ static DBusMessage *set_property(DBusConnection *conn,
                if (gw && strlen(gw))
                        __connman_service_nameserver_add_routes(service, gw);
 
-               update_nameservers(service);
+               nameserver_add_all(service, CONNMAN_IPCONFIG_TYPE_ALL);
                dns_configuration_changed(service);
 
                if (__connman_service_is_connected_state(service,
                                                CONNMAN_IPCONFIG_TYPE_IPV4))
-                       __connman_wispr_start(service,
-                                               CONNMAN_IPCONFIG_TYPE_IPV4);
+                       __connman_service_wispr_start(service, CONNMAN_IPCONFIG_TYPE_IPV4);
 
                if (__connman_service_is_connected_state(service,
                                                CONNMAN_IPCONFIG_TYPE_IPV6))
-                       __connman_wispr_start(service,
-                                               CONNMAN_IPCONFIG_TYPE_IPV6);
+                       __connman_service_wispr_start(service, CONNMAN_IPCONFIG_TYPE_IPV6);
 
                service_save(service);
        } else if (g_str_equal(name, "Timeservers.Configuration")) {
                DBusMessageIter entry;
-               GSList *list = NULL;
-               int count = 0;
+               GString *str;
 
                if (service->immutable)
                        return __connman_error_not_supported(msg);
@@ -3284,40 +3684,41 @@ static DBusMessage *set_property(DBusConnection *conn,
                if (type != DBUS_TYPE_ARRAY)
                        return __connman_error_invalid_arguments(msg);
 
+               str = g_string_new(NULL);
+               if (!str)
+                       return __connman_error_invalid_arguments(msg);
+
                dbus_message_iter_recurse(&value, &entry);
 
                while (dbus_message_iter_get_arg_type(&entry) == DBUS_TYPE_STRING) {
                        const char *val;
-                       GSList *new_head;
-
                        dbus_message_iter_get_basic(&entry, &val);
+                       dbus_message_iter_next(&entry);
 
-                       new_head = __connman_timeserver_add_list(list, val);
-                       if (list != new_head) {
-                               count++;
-                               list = new_head;
-                       }
+                       if (!val[0])
+                               continue;
 
-                       dbus_message_iter_next(&entry);
+                       if (str->len > 0)
+                               g_string_append_printf(str, " %s", val);
+                       else
+                               g_string_append(str, val);
                }
 
                g_strfreev(service->timeservers_config);
                service->timeservers_config = NULL;
 
-               if (list) {
-                       service->timeservers_config = g_new0(char *, count+1);
-
-                       while (list) {
-                               count--;
-                               service->timeservers_config[count] = list->data;
-                               list = g_slist_delete_link(list, list);
-                       };
+               if (str->len > 0) {
+                       char **timeservers = g_strsplit_set(str->str, " ", 0);
+                       timeservers = remove_empty_strings(timeservers);
+                       service->timeservers_config = timeservers;
                }
 
+               g_string_free(str, TRUE);
+
                service_save(service);
                timeservers_configuration_changed(service);
 
-               if (service == __connman_service_get_default())
+               if (service == connman_service_get_default())
                        __connman_timeserver_sync(service);
 
        } else if (g_str_equal(name, "Domains.Configuration")) {
@@ -3340,23 +3741,29 @@ static DBusMessage *set_property(DBusConnection *conn,
                        const char *val;
                        dbus_message_iter_get_basic(&entry, &val);
                        dbus_message_iter_next(&entry);
+
+                       if (!val[0])
+                               continue;
+
                        if (str->len > 0)
                                g_string_append_printf(str, " %s", val);
                        else
                                g_string_append(str, val);
                }
 
-               remove_searchdomains(service, -1, service->domains);
+               searchdomain_remove_all(service);
                g_strfreev(service->domains);
 
-               if (str->len > 0)
-                       service->domains = g_strsplit_set(str->str, " ", 0);
-               else
+               if (str->len > 0) {
+                       char **domains = g_strsplit_set(str->str, " ", 0);
+                       domains = remove_empty_strings(domains);
+                       service->domains = domains;
+               } else
                        service->domains = NULL;
 
                g_string_free(str, TRUE);
 
-               update_nameservers(service);
+               searchdomain_add_all(service);
                domain_configuration_changed(service);
                domain_changed(service);
 
@@ -3380,6 +3787,23 @@ static DBusMessage *set_property(DBusConnection *conn,
                __connman_notifier_proxy_changed(service);
 
                service_save(service);
+       } else if (g_str_equal(name, "mDNS.Configuration")) {
+               dbus_bool_t val;
+
+               if (service->immutable)
+                       return __connman_error_not_supported(msg);
+
+               if (type != DBUS_TYPE_BOOLEAN)
+                       return __connman_error_invalid_arguments(msg);
+
+               dbus_message_iter_get_basic(&value, &val);
+               service->mdns_config = val;
+
+               mdns_configuration_changed(service);
+
+               set_mdns(service, service->mdns_config);
+
+               service_save(service);
        } else if (g_str_equal(name, "IPv4.Configuration") ||
                        g_str_equal(name, "IPv6.Configuration")) {
 
@@ -3408,11 +3832,15 @@ static DBusMessage *set_property(DBusConnection *conn,
                                                                &state);
 
                if (err < 0) {
-                       if (is_connected_state(service, state) ||
-                                       is_connecting_state(service, state))
-                               __connman_network_set_ipconfig(service->network,
-                                               service->ipconfig_ipv4,
-                                               service->ipconfig_ipv6);
+                       if (is_connected(state) || is_connecting(state)) {
+                               if (type == CONNMAN_IPCONFIG_TYPE_IPV4)
+                                       __connman_network_enable_ipconfig(service->network,
+                                                       service->ipconfig_ipv4);
+                               else
+                                       __connman_network_enable_ipconfig(service->network,
+                                                       service->ipconfig_ipv6);
+                       }
+
                        return __connman_error_failed(msg, -err);
                }
 
@@ -3421,10 +3849,15 @@ static DBusMessage *set_property(DBusConnection *conn,
                else
                        ipv6_configuration_changed(service);
 
-               if (is_connecting(service) || is_connected(service))
-                       __connman_network_set_ipconfig(service->network,
-                                       service->ipconfig_ipv4,
-                                       service->ipconfig_ipv6);
+               if (is_connecting(service->state) ||
+                               is_connected(service->state)) {
+                       if (type == CONNMAN_IPCONFIG_TYPE_IPV4)
+                               __connman_network_enable_ipconfig(service->network,
+                                                               service->ipconfig_ipv4);
+                       else
+                               __connman_network_enable_ipconfig(service->network,
+                                                               service->ipconfig_ipv6);
+               }
 
                service_save(service);
        } else
@@ -3446,19 +3879,54 @@ static void set_error(struct connman_service *service,
        if (!service->path)
                return;
 
+       if (!allow_property_changed(service))
+               return;
+
        str = error2string(service->error);
 
        if (!str)
                str = "";
 
-       if (!allow_property_changed(service))
-               return;
-
        connman_dbus_property_changed_basic(service->path,
                                CONNMAN_SERVICE_INTERFACE, "Error",
                                DBUS_TYPE_STRING, &str);
 }
 
+static void remove_timeout(struct connman_service *service)
+{
+       if (service->timeout > 0) {
+               g_source_remove(service->timeout);
+               service->timeout = 0;
+       }
+}
+
+static void reply_pending(struct connman_service *service, int error)
+{
+       remove_timeout(service);
+
+       if (service->pending) {
+               connman_dbus_reply_pending(service->pending, error, NULL);
+               service->pending = NULL;
+       }
+
+       if (service->provider_pending) {
+               connman_dbus_reply_pending(service->provider_pending,
+                               error, service->path);
+               service->provider_pending = NULL;
+       }
+}
+
+static void service_complete(struct connman_service *service)
+{
+       reply_pending(service, EIO);
+
+       if (service->connect_reason != CONNMAN_SERVICE_CONNECT_REASON_USER)
+               do_auto_connect(service, service->connect_reason);
+
+       gettimeofday(&service->modified, NULL);
+       service_save(service);
+}
+
 static DBusMessage *clear_property(DBusConnection *conn,
                                        DBusMessage *msg, void *user_data)
 {
@@ -3473,8 +3941,8 @@ static DBusMessage *clear_property(DBusConnection *conn,
        if (g_str_equal(name, "Error")) {
                set_error(service, CONNMAN_SERVICE_ERROR_UNKNOWN);
 
-               g_get_current_time(&service->modified);
-               service_save(service);
+               __connman_service_clear_error(service);
+               service_complete(service);
        } else
                return __connman_error_invalid_property(msg);
 
@@ -3495,7 +3963,8 @@ static bool is_ignore(struct connman_service *service)
        if (!service->autoconnect)
                return true;
 
-       if (service->roaming)
+       if (service->roaming &&
+               !connman_setting_get_bool("AutoConnectRoamingServices"))
                return true;
 
        if (service->ignore)
@@ -3529,6 +3998,7 @@ static void disconnect_on_last_session(enum connman_service_type type)
 }
 
 static int active_sessions[MAX_CONNMAN_SERVICE_TYPES] = {};
+static int always_connect[MAX_CONNMAN_SERVICE_TYPES] = {};
 static int active_count = 0;
 
 void __connman_service_set_active_session(bool enable, GSList *list)
@@ -3541,7 +4011,7 @@ void __connman_service_set_active_session(bool enable, GSList *list)
        else
                active_count--;
 
-       while (list != NULL) {
+       while (list) {
                enum connman_service_type type = GPOINTER_TO_INT(list->data);
 
                switch (type) {
@@ -3613,7 +4083,7 @@ static GList *preferred_tech_list_get(void)
                for (list = service_list; list; list = list->next) {
                        struct connman_service *service = list->data;
 
-                       if (!is_connected(service))
+                       if (!is_connected(service->state))
                                break;
 
                        if (service->connect_reason ==
@@ -3634,6 +4104,45 @@ static GList *preferred_tech_list_get(void)
        return tech_data.preferred_list;
 }
 
+static void set_always_connecting_technologies()
+{
+       unsigned int *always_connected_techs =
+               connman_setting_get_uint_list("AlwaysConnectedTechnologies");
+       int i;
+       for (i = 0; always_connected_techs && always_connected_techs[i]; i++)
+               always_connect[always_connected_techs[i]] = 1;
+}
+
+static bool autoconnect_no_session_active(struct connman_service *service)
+{
+       /*
+        * Test active_count to see if there are no sessions set up and
+        * stop autoconnecting, but continue connecting if the service
+        * belongs to a technology which should always autoconnect.
+        */
+       if (!active_count && !always_connect[service->type])
+               return true;
+
+       return false;
+}
+
+static bool autoconnect_already_connecting(struct connman_service *service,
+                                          bool autoconnecting)
+{
+       /*
+        * If another service is already connecting and this service type has
+        * not been marked as always connecting, stop the connecting procedure.
+        */
+       if (autoconnecting &&
+                       !active_sessions[service->type] &&
+                       !always_connect[service->type])
+               return true;
+
+       return false;
+}
+
+static int service_indicate_state(struct connman_service *service);
+
 static bool auto_connect_service(GList *services,
                                enum connman_service_connect_reason reason,
                                bool preferred)
@@ -3658,10 +4167,10 @@ static bool auto_connect_service(GList *services,
                }
 
                if (service->pending ||
-                               is_connecting(service) ||
-                               is_connected(service)) {
-                       if (!active_count)
-                               return true;
+                               is_connecting(service->state) ||
+                               is_connected(service->state)) {
+                       if (autoconnect_no_session_active(service))
+                                       return true;
 
                        ignore[service->type] = true;
                        autoconnecting = true;
@@ -3683,7 +4192,7 @@ static bool auto_connect_service(GList *services,
                                CONNMAN_SERVICE_STATE_IDLE)
                        continue;
 
-               if (autoconnecting && !active_sessions[service->type]) {
+               if (autoconnect_already_connecting(service, autoconnecting)) {
                        DBG("service %p type %s has no users", service,
                                __connman_service_type2string(service->type));
                        continue;
@@ -3692,9 +4201,10 @@ static bool auto_connect_service(GList *services,
                DBG("service %p %s %s", service, service->name,
                        (preferred) ? "preferred" : reason2string(reason));
 
-               __connman_service_connect(service, reason);
+               if (__connman_service_connect(service, reason) == 0)
+                       service_indicate_state(service);
 
-               if (!active_count)
+               if (autoconnect_no_session_active(service))
                        return true;
 
                ignore[service->type] = true;
@@ -3709,7 +4219,7 @@ static gboolean run_auto_connect(gpointer data)
        bool autoconnecting = false;
        GList *preferred_tech;
 
-       autoconnect_timeout = 0;
+       autoconnect_id = 0;
 
        DBG("");
 
@@ -3730,21 +4240,41 @@ void __connman_service_auto_connect(enum connman_service_connect_reason reason)
 {
        DBG("");
 
-       if (autoconnect_timeout != 0)
+       if (autoconnect_id != 0)
                return;
 
        if (!__connman_session_policy_autoconnect(reason))
                return;
 
-       autoconnect_timeout = g_timeout_add_seconds(0, run_auto_connect,
+       autoconnect_id = g_idle_add(run_auto_connect,
                                                GUINT_TO_POINTER(reason));
 }
 
 static gboolean run_vpn_auto_connect(gpointer data) {
        GList *list;
        bool need_split = false;
+       bool autoconnectable_vpns = false;
+       int attempts = 0;
+       int timeout = VPN_AUTOCONNECT_TIMEOUT_DEFAULT;
+       struct connman_service *def_service;
+
+       attempts = GPOINTER_TO_INT(data);
+       def_service = connman_service_get_default();
+
+       /*
+        * Stop auto connecting VPN if there is no transport service or the
+        * transport service is not connected or if the  current default service
+        * is a connected VPN (in ready state).
+        */
+       if (!def_service || !is_connected(def_service->state) ||
+               (def_service->type == CONNMAN_SERVICE_TYPE_VPN &&
+               is_connected(def_service->state))) {
 
-       vpn_autoconnect_timeout = 0;
+               DBG("stopped, default service %s connected %d",
+                       def_service ? def_service->identifier : "NULL",
+                       def_service ? is_connected(def_service->state) : -1);
+               goto out;
+       }
 
        for (list = service_list; list; list = list->next) {
                struct connman_service *service = list->data;
@@ -3753,9 +4283,18 @@ static gboolean run_vpn_auto_connect(gpointer data) {
                if (service->type != CONNMAN_SERVICE_TYPE_VPN)
                        continue;
 
-               if (is_connected(service) || is_connecting(service)) {
+               if (is_connected(service->state) ||
+                                       is_connecting(service->state)) {
                        if (!service->do_split_routing)
                                need_split = true;
+
+                       /*
+                        * If the service is connecting it must be accounted
+                        * for to keep the autoconnection in main loop.
+                        */
+                       if (is_connecting(service->state))
+                               autoconnectable_vpns = true;
+
                        continue;
                }
 
@@ -3773,80 +4312,67 @@ static gboolean run_vpn_auto_connect(gpointer data) {
 
                res = __connman_service_connect(service,
                                CONNMAN_SERVICE_CONNECT_REASON_AUTO);
-               if (res < 0 && res != -EINPROGRESS)
+
+               switch (res) {
+               case 0:
+                       service_indicate_state(service);
+                       /* fall through */
+               case -EINPROGRESS:
+                       autoconnectable_vpns = true;
+                       break;
+               default:
                        continue;
+               }
 
                if (!service->do_split_routing)
                        need_split = true;
        }
 
-       return FALSE;
-}
-
-static void vpn_auto_connect(void)
-{
-       if (vpn_autoconnect_timeout)
-               return;
-
-       vpn_autoconnect_timeout =
-               g_timeout_add_seconds(0, run_vpn_auto_connect, NULL);
-}
-
-static void remove_timeout(struct connman_service *service)
-{
-       if (service->timeout > 0) {
-               g_source_remove(service->timeout);
-               service->timeout = 0;
+       /* Stop if there is no VPN to automatically connect.*/
+       if (!autoconnectable_vpns) {
+               DBG("stopping, no autoconnectable VPNs found");
+               goto out;
        }
-}
 
-void __connman_service_reply_dbus_pending(DBusMessage *pending, int error,
-                                       const char *path)
-{
-       if (pending) {
-               if (error > 0) {
-                       DBusMessage *reply;
+       /* Increase the attempt count up to the threshold.*/
+       if (attempts < VPN_AUTOCONNECT_TIMEOUT_ATTEMPTS_THRESHOLD)
+               attempts++;
 
-                       reply = __connman_error_failed(pending, error);
-                       if (reply)
-                               g_dbus_send_message(connection, reply);
-               } else {
-                       const char *sender;
+       /*
+        * Timeout increases with 1s after VPN_AUTOCONNECT_TIMEOUT_STEP amount
+        * of attempts made. After VPN_AUTOCONNECT_TIMEOUT_ATTEMPTS_THRESHOLD is
+        * reached the delay does not increase.
+        */
+       timeout = timeout + (int)(attempts / VPN_AUTOCONNECT_TIMEOUT_STEP);
 
-                       sender = dbus_message_get_interface(pending);
-                       if (!path)
-                               path = dbus_message_get_path(pending);
+       /* Re add this to main loop */
+       vpn_autoconnect_id =
+               g_timeout_add_seconds(timeout, run_vpn_auto_connect,
+                       GINT_TO_POINTER(attempts));
 
-                       DBG("sender %s path %s", sender, path);
+       DBG("re-added to main loop, next VPN autoconnect in %d seconds (#%d)",
+               timeout, attempts);
 
-                       if (g_strcmp0(sender, CONNMAN_MANAGER_INTERFACE) == 0)
-                               g_dbus_send_reply(connection, pending,
-                                       DBUS_TYPE_OBJECT_PATH, &path,
-                                                       DBUS_TYPE_INVALID);
-                       else
-                               g_dbus_send_reply(connection, pending,
-                                                       DBUS_TYPE_INVALID);
-               }
+       return G_SOURCE_REMOVE;
 
-               dbus_message_unref(pending);
-       }
+out:
+       vpn_autoconnect_id = 0;
+       return G_SOURCE_REMOVE;
 }
 
-static void reply_pending(struct connman_service *service, int error)
+static void vpn_auto_connect(void)
 {
-       remove_timeout(service);
-
-       if (service->pending) {
-               __connman_service_reply_dbus_pending(service->pending, error,
-                                               NULL);
-               service->pending = NULL;
+       /*
+        * Remove existing autoconnect from main loop to reset the attempt
+        * counter in order to get VPN connected when there is a network change.
+        */
+       if (vpn_autoconnect_id) {
+               if (!g_source_remove(vpn_autoconnect_id))
+                       return;
        }
 
-       if (service->provider_pending) {
-               __connman_service_reply_dbus_pending(service->provider_pending,
-                                               error, service->path);
-               service->provider_pending = NULL;
-       }
+       vpn_autoconnect_id =
+               g_idle_add(run_vpn_auto_connect, NULL);
 }
 
 bool
@@ -3871,7 +4397,6 @@ void __connman_service_set_provider_pending(struct connman_service *service,
        }
 
        service->provider_pending = msg;
-       return;
 }
 
 static void check_pending_msg(struct connman_service *service)
@@ -3923,9 +4448,6 @@ static gboolean connect_timeout(gpointer user_data)
        else if (service->provider)
                connman_provider_disconnect(service->provider);
 
-       __connman_ipconfig_disable(service->ipconfig_ipv4);
-       __connman_ipconfig_disable(service->ipconfig_ipv6);
-
        __connman_stats_service_unregister(service);
 
        if (service->pending) {
@@ -3950,39 +4472,16 @@ static gboolean connect_timeout(gpointer user_data)
        if (autoconnect &&
                        service->connect_reason !=
                                CONNMAN_SERVICE_CONNECT_REASON_USER)
-               __connman_service_auto_connect(CONNMAN_SERVICE_CONNECT_REASON_AUTO);
+               do_auto_connect(service, CONNMAN_SERVICE_CONNECT_REASON_AUTO);
 
        return FALSE;
 }
 
-static bool is_interface_available(struct connman_service *service,
-                                       struct connman_service *other_service)
-{
-       unsigned int index = 0, other_index = 0;
-
-       if (service->ipconfig_ipv4)
-               index = __connman_ipconfig_get_index(service->ipconfig_ipv4);
-       else if (service->ipconfig_ipv6)
-               index = __connman_ipconfig_get_index(service->ipconfig_ipv6);
-
-       if (other_service->ipconfig_ipv4)
-               other_index = __connman_ipconfig_get_index(
-                                               other_service->ipconfig_ipv4);
-       else if (other_service->ipconfig_ipv6)
-               other_index = __connman_ipconfig_get_index(
-                                               other_service->ipconfig_ipv6);
-
-       if (index > 0 && other_index != index)
-               return true;
-
-       return false;
-}
-
 static DBusMessage *connect_service(DBusConnection *conn,
                                        DBusMessage *msg, void *user_data)
 {
        struct connman_service *service = user_data;
-       int err = 0;
+       int index, err = 0;
        GList *list;
 
        DBG("service %p", service);
@@ -3990,27 +4489,27 @@ static DBusMessage *connect_service(DBusConnection *conn,
        if (service->pending)
                return __connman_error_in_progress(msg);
 
+       index = __connman_service_get_index(service);
+
        for (list = service_list; list; list = list->next) {
                struct connman_service *temp = list->data;
 
-               /*
-                * We should allow connection if there are available
-                * interfaces for a given technology type (like having
-                * more than one wifi card).
-                */
-               if (!is_connecting(temp) && !is_connected(temp))
+               if (!is_connecting(temp->state) && !is_connected(temp->state))
                        break;
 
+               if (service == temp)
+                       continue;
+
                if (service->type != temp->type)
                        continue;
 
-               if(!is_interface_available(service, temp)) {
-                       if (__connman_service_disconnect(temp) == -EINPROGRESS)
-                               err = -EINPROGRESS;
-               }
+               if (__connman_service_get_index(temp) == index &&
+                               __connman_service_disconnect(temp) == -EINPROGRESS)
+                       err = -EINPROGRESS;
+
        }
        if (err == -EINPROGRESS)
-               return __connman_error_in_progress(msg);
+               return __connman_error_operation_timeout(msg);
 
        service->ignore = false;
 
@@ -4019,16 +4518,10 @@ static DBusMessage *connect_service(DBusConnection *conn,
        err = __connman_service_connect(service,
                        CONNMAN_SERVICE_CONNECT_REASON_USER);
 
-       if (err == -EINPROGRESS)
-               return NULL;
-
-       dbus_message_unref(service->pending);
-       service->pending = NULL;
-
-       if (err < 0)
-               return __connman_error_failed(msg, -err);
+       if (err != -EINPROGRESS)
+               reply_pending(service, -err);
 
-       return g_dbus_create_reply(msg, DBUS_TYPE_INVALID);
+       return NULL;
 }
 
 static DBusMessage *disconnect_service(DBusConnection *conn,
@@ -4042,10 +4535,8 @@ static DBusMessage *disconnect_service(DBusConnection *conn,
        service->ignore = true;
 
        err = __connman_service_disconnect(service);
-       if (err < 0) {
-               if (err != -EINPROGRESS)
-                       return __connman_error_failed(msg, -err);
-       }
+       if (err < 0 && err != -EINPROGRESS)
+               return __connman_error_failed(msg, -err);
 
        return g_dbus_create_reply(msg, DBUS_TYPE_INVALID);
 }
@@ -4060,8 +4551,7 @@ bool __connman_service_remove(struct connman_service *service)
                        __connman_provider_is_immutable(service->provider))
                return false;
 
-       if (!service->favorite && service->state !=
-                                               CONNMAN_SERVICE_STATE_FAILURE)
+       if (!service->favorite && !is_idle(service->state))
                return false;
 
        __connman_service_disconnect(service);
@@ -4072,6 +4562,21 @@ bool __connman_service_remove(struct connman_service *service)
        g_free(service->identity);
        service->identity = NULL;
 
+       g_free(service->anonymous_identity);
+       service->anonymous_identity = NULL;
+
+       g_free(service->subject_match);
+       service->subject_match = NULL;
+
+       g_free(service->altsubject_match);
+       service->altsubject_match = NULL;
+
+       g_free(service->domain_suffix_match);
+       service->domain_suffix_match = NULL;
+
+       g_free(service->domain_match);
+       service->domain_match = NULL;
+
        g_free(service->agent_identity);
        service->agent_identity = NULL;
 
@@ -4082,6 +4587,8 @@ bool __connman_service_remove(struct connman_service *service)
 
        __connman_service_set_favorite(service, false);
 
+       __connman_ipconfig_ipv6_reset_privacy(service->ipconfig_ipv6);
+
        service_save(service);
 
        return true;
@@ -4139,7 +4646,7 @@ static void apply_relevant_default_downgrade(struct connman_service *service)
 {
        struct connman_service *def_service;
 
-       def_service = __connman_service_get_default();
+       def_service = connman_service_get_default();
        if (!def_service)
                return;
 
@@ -4172,6 +4679,89 @@ static void switch_default_service(struct connman_service *default_service,
        downgrade_state(downgrade_service);
 }
 
+static struct _services_notify {
+       int id;
+       GHashTable *add;
+       GHashTable *remove;
+} *services_notify;
+
+
+static void service_append_added_foreach(gpointer data, gpointer user_data)
+{
+       struct connman_service *service = data;
+       DBusMessageIter *iter = user_data;
+
+       if (!service || !service->path) {
+               DBG("service %p or path is NULL", service);
+               return;
+       }
+
+       if (g_hash_table_lookup(services_notify->add, service->path)) {
+               DBG("new %s", service->path);
+
+               append_struct(service, iter);
+               g_hash_table_remove(services_notify->add, service->path);
+       } else {
+               DBG("changed %s", service->path);
+
+               append_struct_service(iter, NULL, service);
+       }
+}
+
+static void service_append_ordered(DBusMessageIter *iter, void *user_data)
+{
+       g_list_foreach(service_list, service_append_added_foreach, iter);
+}
+
+static void append_removed(gpointer key, gpointer value, gpointer user_data)
+{
+       char *objpath = key;
+       DBusMessageIter *iter = user_data;
+
+       DBG("removed %s", objpath);
+       dbus_message_iter_append_basic(iter, DBUS_TYPE_OBJECT_PATH, &objpath);
+}
+
+static void service_append_removed(DBusMessageIter *iter, void *user_data)
+{
+       g_hash_table_foreach(services_notify->remove, append_removed, iter);
+}
+
+static gboolean service_send_changed(gpointer data)
+{
+       DBusMessage *signal;
+
+       DBG("");
+
+       services_notify->id = 0;
+
+       signal = dbus_message_new_signal(CONNMAN_MANAGER_PATH,
+                       CONNMAN_MANAGER_INTERFACE, "ServicesChanged");
+       if (!signal)
+               return FALSE;
+
+       __connman_dbus_append_objpath_dict_array(signal,
+                                       service_append_ordered, NULL);
+       __connman_dbus_append_objpath_array(signal,
+                                       service_append_removed, NULL);
+
+       dbus_connection_send(connection, signal, NULL);
+       dbus_message_unref(signal);
+
+       g_hash_table_remove_all(services_notify->remove);
+       g_hash_table_remove_all(services_notify->add);
+
+       return FALSE;
+}
+
+static void service_schedule_changed(void)
+{
+       if (services_notify->id != 0)
+               return;
+
+       services_notify->id = g_timeout_add(100, service_send_changed, NULL);
+}
+
 static DBusMessage *move_service(DBusConnection *conn,
                                        DBusMessage *msg, void *user_data,
                                                                bool before)
@@ -4206,11 +4796,11 @@ static DBusMessage *move_service(DBusConnection *conn,
                        return __connman_error_invalid_service(msg);
                }
 
-               target->do_split_routing = true;
+               set_split_routing(target, true);
        } else
-               target->do_split_routing = false;
+               set_split_routing(target, false);
 
-       service->do_split_routing = false;
+       set_split_routing(service, false);
 
        target4 = __connman_ipconfig_get_method(target->ipconfig_ipv4);
        target6 = __connman_ipconfig_get_method(target->ipconfig_ipv6);
@@ -4261,7 +4851,7 @@ static DBusMessage *move_service(DBusConnection *conn,
                }
        }
 
-       g_get_current_time(&service->modified);
+       gettimeofday(&service->modified, NULL);
        service_save(service);
        service_save(target);
 
@@ -4278,6 +4868,8 @@ static DBusMessage *move_service(DBusConnection *conn,
 
        __connman_connection_update_gateway();
 
+       service_schedule_changed();
+
        return g_dbus_create_reply(msg, DBUS_TYPE_INVALID);
 }
 
@@ -4303,88 +4895,6 @@ static DBusMessage *reset_counters(DBusConnection *conn,
        return g_dbus_create_reply(msg, DBUS_TYPE_INVALID);
 }
 
-static struct _services_notify {
-       int id;
-       GHashTable *add;
-       GHashTable *remove;
-} *services_notify;
-
-static void service_append_added_foreach(gpointer data, gpointer user_data)
-{
-       struct connman_service *service = data;
-       DBusMessageIter *iter = user_data;
-
-       if (!service || !service->path) {
-               DBG("service %p or path is NULL", service);
-               return;
-       }
-
-       if (g_hash_table_lookup(services_notify->add, service->path)) {
-               DBG("new %s", service->path);
-
-               append_struct(service, iter);
-               g_hash_table_remove(services_notify->add, service->path);
-       } else {
-               DBG("changed %s", service->path);
-
-               append_struct_service(iter, NULL, service);
-       }
-}
-
-static void service_append_ordered(DBusMessageIter *iter, void *user_data)
-{
-       g_list_foreach(service_list, service_append_added_foreach, iter);
-}
-
-static void append_removed(gpointer key, gpointer value, gpointer user_data)
-{
-       char *objpath = key;
-       DBusMessageIter *iter = user_data;
-
-       DBG("removed %s", objpath);
-       dbus_message_iter_append_basic(iter, DBUS_TYPE_OBJECT_PATH, &objpath);
-}
-
-static void service_append_removed(DBusMessageIter *iter, void *user_data)
-{
-       g_hash_table_foreach(services_notify->remove, append_removed, iter);
-}
-
-static gboolean service_send_changed(gpointer data)
-{
-       DBusMessage *signal;
-
-       DBG("");
-
-       services_notify->id = 0;
-
-       signal = dbus_message_new_signal(CONNMAN_MANAGER_PATH,
-                       CONNMAN_MANAGER_INTERFACE, "ServicesChanged");
-       if (!signal)
-               return FALSE;
-
-       __connman_dbus_append_objpath_dict_array(signal,
-                                       service_append_ordered, NULL);
-       __connman_dbus_append_objpath_array(signal,
-                                       service_append_removed, NULL);
-
-       dbus_connection_send(connection, signal, NULL);
-       dbus_message_unref(signal);
-
-       g_hash_table_remove_all(services_notify->remove);
-       g_hash_table_remove_all(services_notify->add);
-
-       return FALSE;
-}
-
-static void service_schedule_changed(void)
-{
-       if (services_notify->id != 0)
-               return;
-
-       services_notify->id = g_timeout_add(100, service_send_changed, NULL);
-}
-
 static void service_schedule_added(struct connman_service *service)
 {
        DBG("service %p", service);
@@ -4397,13 +4907,13 @@ static void service_schedule_added(struct connman_service *service)
 
 static void service_schedule_removed(struct connman_service *service)
 {
-       DBG("service %p %s", service, service->path);
-
        if (!service || !service->path) {
                DBG("service %p or path is NULL", service);
                return;
        }
 
+       DBG("service %p %s", service, service->path);
+
        g_hash_table_remove(services_notify->add, service->path);
        g_hash_table_replace(services_notify->remove, g_strdup(service->path),
                        NULL);
@@ -4414,10 +4924,8 @@ static void service_schedule_removed(struct connman_service *service)
 static bool allow_property_changed(struct connman_service *service)
 {
        if (g_hash_table_lookup_extended(services_notify->add, service->path,
-                                       NULL, NULL)) {
-               DBG("no property updates for service %p", service);
+                                       NULL, NULL))
                return false;
-       }
 
        return true;
 }
@@ -4462,6 +4970,11 @@ static void service_free(gpointer user_data)
 
        reply_pending(service, ENOENT);
 
+       if (service->nameservers_timeout) {
+               g_source_remove(service->nameservers_timeout);
+               dns_changed(service);
+       }
+
        __connman_notifier_service_remove(service);
        service_schedule_removed(service);
 
@@ -4520,8 +5033,13 @@ static void service_free(gpointer user_data)
        g_free(service->identifier);
        g_free(service->eap);
        g_free(service->identity);
+       g_free(service->anonymous_identity);
        g_free(service->agent_identity);
        g_free(service->ca_cert_file);
+       g_free(service->subject_match);
+       g_free(service->altsubject_match);
+       g_free(service->domain_suffix_match);
+       g_free(service->domain_match);
        g_free(service->client_cert_file);
        g_free(service->private_key_file);
        g_free(service->private_key_passphrase);
@@ -4583,6 +5101,7 @@ static void service_initialize(struct connman_service *service)
        service->provider = NULL;
 
        service->wps = false;
+       service->wps_advertizing = false;
 }
 
 /**
@@ -4681,8 +5200,8 @@ static gint service_compare(gconstpointer a, gconstpointer b)
 
        state_a = service_a->state;
        state_b = service_b->state;
-       a_connected = is_connected(service_a);
-       b_connected = is_connected(service_b);
+       a_connected = is_connected(state_a);
+       b_connected = is_connected(state_b);
 
        if (a_connected && b_connected) {
                if (service_a->order > service_b->order)
@@ -4707,9 +5226,9 @@ static gint service_compare(gconstpointer a, gconstpointer b)
                if (b_connected)
                        return 1;
 
-               if (is_connecting(service_a))
+               if (is_connecting(state_a))
                        return -1;
-               if (is_connecting(service_b))
+               if (is_connecting(state_b))
                        return 1;
        }
 
@@ -4720,6 +5239,20 @@ static gint service_compare(gconstpointer a, gconstpointer b)
                return 1;
 
        if (service_a->type != service_b->type) {
+               unsigned int *tech_array;
+               int i;
+
+               tech_array = connman_setting_get_uint_list(
+                                               "PreferredTechnologies");
+               if (tech_array) {
+                       for (i = 0; tech_array[i]; i++) {
+                               if (tech_array[i] == service_a->type)
+                                       return -1;
+
+                               if (tech_array[i] == service_b->type)
+                                       return 1;
+                       }
+               }
 
                if (service_a->type == CONNMAN_SERVICE_TYPE_ETHERNET)
                        return -1;
@@ -4767,6 +5300,12 @@ static void service_list_sort(void)
        }
 }
 
+int __connman_service_compare(const struct connman_service *a,
+                                       const struct connman_service *b)
+{
+       return service_compare(a, b);
+}
+
 /**
  * connman_service_get_type:
  * @service: service structure
@@ -4854,9 +5393,12 @@ bool __connman_service_is_connected_state(struct connman_service *service,
        case CONNMAN_IPCONFIG_TYPE_UNKNOWN:
                break;
        case CONNMAN_IPCONFIG_TYPE_IPV4:
-               return is_connected_state(service, service->state_ipv4);
+               return is_connected(service->state_ipv4);
        case CONNMAN_IPCONFIG_TYPE_IPV6:
-               return is_connected_state(service, service->state_ipv6);
+               return is_connected(service->state_ipv6);
+       case CONNMAN_IPCONFIG_TYPE_ALL:
+               return is_connected(service->state_ipv4) &&
+                       is_connected(service->state_ipv6);
        }
 
        return false;
@@ -4911,9 +5453,6 @@ int __connman_service_set_favorite_delayed(struct connman_service *service,
 
        service->favorite = favorite;
 
-       if (!delay_ordering)
-               __connman_service_get_order(service);
-
        favorite_changed(service);
 
        if (!delay_ordering) {
@@ -4988,9 +5527,24 @@ void __connman_service_set_string(struct connman_service *service,
        } else if (g_str_equal(key, "Identity")) {
                g_free(service->identity);
                service->identity = g_strdup(value);
+       } else if (g_str_equal(key, "AnonymousIdentity")) {
+               g_free(service->anonymous_identity);
+               service->anonymous_identity = g_strdup(value);
        } else if (g_str_equal(key, "CACertFile")) {
                g_free(service->ca_cert_file);
                service->ca_cert_file = g_strdup(value);
+       } else if (g_str_equal(key, "SubjectMatch")) {
+               g_free(service->subject_match);
+               service->subject_match = g_strdup(value);
+       } else if (g_str_equal(key, "AltSubjectMatch")) {
+               g_free(service->altsubject_match);
+               service->altsubject_match = g_strdup(value);
+       } else if (g_str_equal(key, "DomainSuffixMatch")) {
+               g_free(service->domain_suffix_match);
+               service->domain_suffix_match = g_strdup(value);
+       } else if (g_str_equal(key, "DomainMatch")) {
+               g_free(service->domain_match);
+               service->domain_match = g_strdup(value);
        } else if (g_str_equal(key, "ClientCertFile")) {
                g_free(service->client_cert_file);
                service->client_cert_file = g_strdup(value);
@@ -5003,52 +5557,29 @@ void __connman_service_set_string(struct connman_service *service,
        } else if (g_str_equal(key, "Phase2")) {
                g_free(service->phase2);
                service->phase2 = g_strdup(value);
-       } else if (g_str_equal(key, "Passphrase")) {
-               g_free(service->passphrase);
-               service->passphrase = g_strdup(value);
-       }
+       } else if (g_str_equal(key, "Passphrase"))
+               __connman_service_set_passphrase(service, value);
 }
 
 void __connman_service_set_search_domains(struct connman_service *service,
                                        char **domains)
 {
-       int index;
-
-       index = __connman_service_get_index(service);
-       if (index < 0)
-               return;
+       searchdomain_remove_all(service);
 
-       if (service->domains) {
-               remove_searchdomains(service, index, service->domains);
+       if (service->domains)
                g_strfreev(service->domains);
 
-               service->domains = g_strdupv(domains);
-
-               update_nameservers(service);
-       }
-}
-
-/*
- * This variant is used when domain search list is updated via
- * dhcp and in that case the service is not yet fully connected so
- * we cannot do same things as what the set() variant is doing.
- */
-void __connman_service_update_search_domains(struct connman_service *service,
-                                       char **domains)
-{
-       g_strfreev(service->domains);
        service->domains = g_strdupv(domains);
+
+       searchdomain_add_all(service);
 }
 
-static void service_complete(struct connman_service *service)
+int __connman_service_set_mdns(struct connman_service *service,
+                       bool enabled)
 {
-       reply_pending(service, EIO);
+       service->mdns_config = enabled;
 
-       if (service->connect_reason != CONNMAN_SERVICE_CONNECT_REASON_USER)
-               __connman_service_auto_connect(service->connect_reason);
-
-       g_get_current_time(&service->modified);
-       service_save(service);
+       return set_mdns(service, enabled);
 }
 
 static void report_error_cb(void *user_context, bool retry,
@@ -5062,38 +5593,13 @@ static void report_error_cb(void *user_context, bool retry,
        else {
                /* It is not relevant to stay on Failure state
                 * when failing is due to wrong user input */
-               service->state = CONNMAN_SERVICE_STATE_IDLE;
+               __connman_service_clear_error(service);
 
                service_complete(service);
                __connman_connection_update_gateway();
        }
 }
 
-int __connman_service_add_passphrase(struct connman_service *service,
-                               const gchar *passphrase)
-{
-       int err = 0;
-
-       switch (service->security) {
-       case CONNMAN_SERVICE_SECURITY_WEP:
-       case CONNMAN_SERVICE_SECURITY_PSK:
-       case CONNMAN_SERVICE_SECURITY_8021X:
-               err = __connman_service_set_passphrase(service, passphrase);
-               break;
-
-       case CONNMAN_SERVICE_SECURITY_UNKNOWN:
-       case CONNMAN_SERVICE_SECURITY_NONE:
-       case CONNMAN_SERVICE_SECURITY_WPA:
-       case CONNMAN_SERVICE_SECURITY_RSN:
-               DBG("service security '%s' (%d) not handled",
-                               security2string(service->security),
-                               service->security);
-               break;
-       }
-
-       return err;
-}
-
 static int check_wpspin(struct connman_service *service, const char *wpspin)
 {
        int length;
@@ -5144,17 +5650,21 @@ static void request_input_cb(struct connman_service *service,
 
                if (g_strcmp0(error,
                                "net.connman.Agent.Error.Canceled") == 0) {
-                       err = -EINVAL;
+                       err = -ECONNABORTED;
 
                        if (service->hidden)
                                __connman_service_return_error(service,
-                                                       ECANCELED, user_data);
-                       goto done;
+                                                       ECONNABORTED,
+                                                       user_data);
                } else {
+                       err = -ETIMEDOUT;
+
                        if (service->hidden)
                                __connman_service_return_error(service,
                                                        ETIMEDOUT, user_data);
                }
+
+               goto done;
        }
 
        if (service->hidden && name_len > 0 && name_len <= 32) {
@@ -5187,7 +5697,7 @@ static void request_input_cb(struct connman_service *service,
                __connman_service_set_agent_identity(service, identity);
 
        if (passphrase)
-               err = __connman_service_add_passphrase(service, passphrase);
+               err = __connman_service_set_passphrase(service, passphrase);
 
  done:
        if (err >= 0) {
@@ -5229,7 +5739,7 @@ static void downgrade_connected_services(void)
        for (list = service_list; list; list = list->next) {
                up_service = list->data;
 
-               if (!is_connected(up_service))
+               if (!is_connected(up_service->state))
                        continue;
 
                if (up_service->state == CONNMAN_SERVICE_STATE_ONLINE)
@@ -5280,7 +5790,7 @@ static void single_connected_tech(struct connman_service *allowed)
        for (iter = service_list; iter; iter = iter->next) {
                service = iter->data;
 
-               if (!is_connected(service))
+               if (!is_connected(service->state))
                        break;
 
                if (service == allowed)
@@ -5311,6 +5821,7 @@ static int service_indicate_state(struct connman_service *service)
 {
        enum connman_service_state old_state, new_state;
        struct connman_service *def_service;
+       enum connman_ipconfig_method method;
        int result;
 
        if (!service)
@@ -5329,7 +5840,7 @@ static int service_indicate_state(struct connman_service *service)
        if (old_state == new_state)
                return -EALREADY;
 
-       def_service = __connman_service_get_default();
+       def_service = connman_service_get_default();
 
        if (new_state == CONNMAN_SERVICE_STATE_ONLINE) {
                result = service_update_preferred_order(def_service,
@@ -5341,16 +5852,31 @@ static int service_indicate_state(struct connman_service *service)
        if (old_state == CONNMAN_SERVICE_STATE_ONLINE)
                __connman_notifier_leave_online(service->type);
 
+       if (is_connected(old_state) && !is_connected(new_state))
+               searchdomain_remove_all(service);
+
        service->state = new_state;
        state_changed(service);
 
-       if (new_state == CONNMAN_SERVICE_STATE_IDLE &&
-                       old_state != CONNMAN_SERVICE_STATE_DISCONNECT) {
+       if (!is_connected(old_state) && is_connected(new_state))
+               searchdomain_add_all(service);
 
-               __connman_service_disconnect(service);
-       }
+       switch(new_state) {
+       case CONNMAN_SERVICE_STATE_UNKNOWN:
+
+               break;
+
+       case CONNMAN_SERVICE_STATE_IDLE:
+               if (old_state != CONNMAN_SERVICE_STATE_DISCONNECT)
+                       __connman_service_disconnect(service);
 
-       if (new_state == CONNMAN_SERVICE_STATE_CONFIGURATION) {
+               break;
+
+       case CONNMAN_SERVICE_STATE_ASSOCIATION:
+
+               break;
+
+       case CONNMAN_SERVICE_STATE_CONFIGURATION:
                if (!service->new_service &&
                                __connman_stats_service_register(service) == 0) {
                        /*
@@ -5362,10 +5888,11 @@ static int service_indicate_state(struct connman_service *service)
                        __connman_stats_get(service, true,
                                                &service->stats_roaming.data);
                }
-       }
 
-       if (new_state == CONNMAN_SERVICE_STATE_READY) {
-               enum connman_ipconfig_method method;
+               break;
+
+       case CONNMAN_SERVICE_STATE_READY:
+               set_error(service, CONNMAN_SERVICE_ERROR_UNKNOWN);
 
                if (service->new_service &&
                                __connman_stats_service_register(service) == 0) {
@@ -5384,7 +5911,7 @@ static int service_indicate_state(struct connman_service *service)
 
                default_changed();
 
-               def_service = __connman_service_get_default();
+               def_service = connman_service_get_default();
 
                service_update_preferred_order(def_service, service, new_state);
 
@@ -5392,16 +5919,6 @@ static int service_indicate_state(struct connman_service *service)
 
                reply_pending(service, 0);
 
-               g_get_current_time(&service->modified);
-               service_save(service);
-
-               dns_changed(service);
-               domain_changed(service);
-               proxy_changed(service);
-
-               if (old_state != CONNMAN_SERVICE_STATE_ONLINE)
-                       __connman_notifier_connect(service->type);
-
                if (service->type == CONNMAN_SERVICE_TYPE_WIFI &&
                        connman_network_get_bool(service->network,
                                                "WiFi.UseWPS")) {
@@ -5416,6 +5933,15 @@ static int service_indicate_state(struct connman_service *service)
                                                        "WiFi.UseWPS", false);
                }
 
+               gettimeofday(&service->modified, NULL);
+               service_save(service);
+
+               domain_changed(service);
+               proxy_changed(service);
+
+               if (old_state != CONNMAN_SERVICE_STATE_ONLINE)
+                       __connman_notifier_connect(service->type);
+
                method = __connman_ipconfig_get_method(service->ipconfig_ipv6);
                if (method == CONNMAN_IPCONFIG_METHOD_OFF)
                        __connman_ipconfig_disable_ipv6(
@@ -5426,13 +5952,16 @@ static int service_indicate_state(struct connman_service *service)
                else if (service->type != CONNMAN_SERVICE_TYPE_VPN)
                        vpn_auto_connect();
 
-       } else if (new_state == CONNMAN_SERVICE_STATE_DISCONNECT) {
-               def_service = __connman_service_get_default();
+               break;
+
+       case CONNMAN_SERVICE_STATE_ONLINE:
+
+               break;
+
+       case CONNMAN_SERVICE_STATE_DISCONNECT:
+               set_error(service, CONNMAN_SERVICE_ERROR_UNKNOWN);
 
-               if (!__connman_notifier_is_connected() &&
-                       def_service &&
-                               def_service->provider)
-                       connman_provider_disconnect(def_service->provider);
+               reply_pending(service, ECONNABORTED);
 
                default_changed();
 
@@ -5440,7 +5969,6 @@ static int service_indicate_state(struct connman_service *service)
 
                __connman_wpad_stop(service);
 
-               dns_changed(service);
                domain_changed(service);
                proxy_changed(service);
 
@@ -5451,21 +5979,20 @@ static int service_indicate_state(struct connman_service *service)
                 */
                downgrade_connected_services();
 
-               __connman_service_auto_connect(CONNMAN_SERVICE_CONNECT_REASON_AUTO);
-       }
-
-       if (new_state == CONNMAN_SERVICE_STATE_FAILURE) {
+               do_auto_connect(service, CONNMAN_SERVICE_CONNECT_REASON_AUTO);
+               break;
 
-               if (service->connect_reason == CONNMAN_SERVICE_CONNECT_REASON_USER &&
+       case CONNMAN_SERVICE_STATE_FAILURE:
+               if (service->connect_reason == CONNMAN_SERVICE_CONNECT_REASON_USER) {
                        connman_agent_report_error(service, service->path,
-                                       error2string(service->error),
-                                       report_error_cb,
-                                       get_dbus_sender(service),
-                                       NULL) == -EINPROGRESS)
-                       return 0;
+                                               error2string(service->error),
+                                               report_error_cb,
+                                               get_dbus_sender(service),
+                                               NULL);
+               }
                service_complete(service);
-       } else
-               set_error(service, CONNMAN_SERVICE_ERROR_UNKNOWN);
+               break;
+       }
 
        service_list_sort();
 
@@ -5494,17 +6021,10 @@ int __connman_service_indicate_error(struct connman_service *service,
        if (!service)
                return -EINVAL;
 
-       set_error(service, error);
-
-       /*
-        * Supplicant does not always return invalid key error for
-        * WPA-EAP so clear the credentials always.
-        */
-       if (service->error == CONNMAN_SERVICE_ERROR_INVALID_KEY ||
-                       service->security == CONNMAN_SERVICE_SECURITY_8021X)
-               __connman_service_set_passphrase(service, NULL);
+       if (service->state == CONNMAN_SERVICE_STATE_FAILURE)
+               return -EALREADY;
 
-       __connman_service_set_agent_identity(service, NULL);
+       set_error(service, error);
 
        __connman_service_ipconfig_indicate_state(service,
                                                CONNMAN_SERVICE_STATE_FAILURE,
@@ -5517,6 +6037,8 @@ int __connman_service_indicate_error(struct connman_service *service,
 
 int __connman_service_clear_error(struct connman_service *service)
 {
+       DBusMessage *pending, *provider_pending;
+
        DBG("service %p", service);
 
        if (!service)
@@ -5525,32 +6047,30 @@ int __connman_service_clear_error(struct connman_service *service)
        if (service->state != CONNMAN_SERVICE_STATE_FAILURE)
                return -EINVAL;
 
-       service->state_ipv4 = service->state_ipv6 =
-                                               CONNMAN_SERVICE_STATE_UNKNOWN;
-       set_error(service, CONNMAN_SERVICE_ERROR_UNKNOWN);
+       pending = service->pending;
+       service->pending = NULL;
+       provider_pending = service->provider_pending;
+       service->provider_pending = NULL;
 
        __connman_service_ipconfig_indicate_state(service,
-                                       CONNMAN_SERVICE_STATE_IDLE,
-                                       CONNMAN_IPCONFIG_TYPE_IPV6);
-
-       /*
-        * Toggling the IPv6 state to IDLE could trigger the auto connect
-        * machinery and consequently the IPv4 state.
-        */
-       if (service->state_ipv4 != CONNMAN_SERVICE_STATE_UNKNOWN &&
-                       service->state_ipv4 != CONNMAN_SERVICE_STATE_FAILURE)
-               return 0;
+                                               CONNMAN_SERVICE_STATE_IDLE,
+                                               CONNMAN_IPCONFIG_TYPE_IPV6);
 
-       return __connman_service_ipconfig_indicate_state(service,
+       __connman_service_ipconfig_indicate_state(service,
                                                CONNMAN_SERVICE_STATE_IDLE,
                                                CONNMAN_IPCONFIG_TYPE_IPV4);
+
+       service->pending = pending;
+       service->provider_pending = provider_pending;
+
+       return 0;
 }
 
 int __connman_service_indicate_default(struct connman_service *service)
 {
        DBG("service %p state %s", service, state2string(service->state));
 
-       if (!is_connected(service)) {
+       if (!is_connected(service->state)) {
                /*
                 * If service is not yet fully connected, then we must not
                 * change the default yet. The default gw will be changed
@@ -5580,34 +6100,6 @@ enum connman_service_state __connman_service_ipconfig_get_state(
        return CONNMAN_SERVICE_STATE_UNKNOWN;
 }
 
-static void check_proxy_setup(struct connman_service *service)
-{
-       /*
-        * We start WPAD if we haven't got a PAC URL from DHCP and
-        * if our proxy manual configuration is either empty or set
-        * to AUTO with an empty URL.
-        */
-
-       if (service->proxy != CONNMAN_SERVICE_PROXY_METHOD_UNKNOWN)
-               goto done;
-
-       if (service->proxy_config != CONNMAN_SERVICE_PROXY_METHOD_UNKNOWN &&
-               (service->proxy_config != CONNMAN_SERVICE_PROXY_METHOD_AUTO ||
-                       service->pac))
-               goto done;
-
-       if (__connman_wpad_start(service) < 0) {
-               service->proxy = CONNMAN_SERVICE_PROXY_METHOD_DIRECT;
-               __connman_notifier_proxy_changed(service);
-               goto done;
-       }
-
-       return;
-
-done:
-       __connman_wispr_start(service, CONNMAN_IPCONFIG_TYPE_IPV4);
-}
-
 /*
  * How many networks are connected at the same time. If more than 1,
  * then set the rp_filter setting properly (loose mode routing) so that network
@@ -5661,18 +6153,33 @@ static void service_rp_filter(struct connman_service *service,
                connected_networks_count, original_rp_filter);
 }
 
-static gboolean redo_wispr(gpointer user_data)
+static void redo_wispr(struct connman_service *service,
+                                       enum connman_ipconfig_type type)
+{
+       service->online_timeout = 0;
+       connman_service_unref(service);
+
+       DBG("Retrying %s WISPr for %p %s",
+               __connman_ipconfig_type2string(type),
+               service, service->name);
+
+       __connman_wispr_start(service, type);
+}
+
+static gboolean redo_wispr_ipv4(gpointer user_data)
 {
        struct connman_service *service = user_data;
-       int refcount = service->refcount - 1;
 
-       connman_service_unref(service);
-       if (refcount == 0) {
-               DBG("Service %p already removed", service);
-               return FALSE;
-       }
+       redo_wispr(service, CONNMAN_IPCONFIG_TYPE_IPV4);
+
+       return FALSE;
+}
 
-       __connman_wispr_start(service, CONNMAN_IPCONFIG_TYPE_IPV6);
+static gboolean redo_wispr_ipv6(gpointer user_data)
+{
+       struct connman_service *service = user_data;
+
+       redo_wispr(service, CONNMAN_IPCONFIG_TYPE_IPV6);
 
        return FALSE;
 }
@@ -5680,25 +6187,28 @@ static gboolean redo_wispr(gpointer user_data)
 int __connman_service_online_check_failed(struct connman_service *service,
                                        enum connman_ipconfig_type type)
 {
-       DBG("service %p type %d count %d", service, type,
-                                               service->online_check_count);
+       GSourceFunc redo_func;
+       int *interval;
 
-       /* currently we only retry IPv6 stuff */
-       if (type == CONNMAN_IPCONFIG_TYPE_IPV4 ||
-                       service->online_check_count != 1) {
-               connman_warn("Online check failed for %p %s", service,
-                       service->name);
-               return 0;
+       if (type == CONNMAN_IPCONFIG_TYPE_IPV4) {
+               interval = &service->online_check_interval_ipv4;
+               redo_func = redo_wispr_ipv4;
+       } else {
+               interval = &service->online_check_interval_ipv6;
+               redo_func = redo_wispr_ipv6;
        }
 
-       service->online_check_count = 0;
+       DBG("service %p type %s interval %d", service,
+               __connman_ipconfig_type2string(type), *interval);
 
-       /*
-        * We set the timeout to 1 sec so that we have a chance to get
-        * necessary IPv6 router advertisement messages that might have
-        * DNS data etc.
+       service->online_timeout = g_timeout_add_seconds(*interval * *interval,
+                               redo_func, connman_service_ref(service));
+
+       /* Increment the interval for the next time, set a maximum timeout of
+        * ONLINE_CHECK_MAX_INTERVAL * ONLINE_CHECK_MAX_INTERVAL seconds.
         */
-       g_timeout_add_seconds(1, redo_wispr, connman_service_ref(service));
+       if (*interval < ONLINE_CHECK_MAX_INTERVAL)
+               (*interval)++;
 
        return EAGAIN;
 }
@@ -5714,45 +6224,67 @@ int __connman_service_ipconfig_indicate_state(struct connman_service *service,
        if (!service)
                return -EINVAL;
 
-       if (type == CONNMAN_IPCONFIG_TYPE_IPV4) {
+       switch (type) {
+       case CONNMAN_IPCONFIG_TYPE_UNKNOWN:
+       case CONNMAN_IPCONFIG_TYPE_ALL:
+               return -EINVAL;
+
+       case CONNMAN_IPCONFIG_TYPE_IPV4:
                old_state = service->state_ipv4;
                ipconfig = service->ipconfig_ipv4;
-       } else if (type == CONNMAN_IPCONFIG_TYPE_IPV6) {
+
+               break;
+
+       case CONNMAN_IPCONFIG_TYPE_IPV6:
                old_state = service->state_ipv6;
                ipconfig = service->ipconfig_ipv6;
+
+               break;
        }
 
        if (!ipconfig)
                return -EINVAL;
 
+       method = __connman_ipconfig_get_method(ipconfig);
+
+       switch (method) {
+       case CONNMAN_IPCONFIG_METHOD_UNKNOWN:
+       case CONNMAN_IPCONFIG_METHOD_OFF:
+               if (new_state != CONNMAN_SERVICE_STATE_IDLE)
+                       connman_warn("ipconfig state %d ipconfig method %d",
+                               new_state, method);
+
+               new_state = CONNMAN_SERVICE_STATE_IDLE;
+               break;
+
+       case CONNMAN_IPCONFIG_METHOD_FIXED:
+       case CONNMAN_IPCONFIG_METHOD_MANUAL:
+       case CONNMAN_IPCONFIG_METHOD_DHCP:
+       case CONNMAN_IPCONFIG_METHOD_AUTO:
+               break;
+
+       }
+
        /* Any change? */
        if (old_state == new_state)
                return -EALREADY;
 
-       DBG("service %p (%s) state %d (%s) type %d (%s)",
+       DBG("service %p (%s) old state %d (%s) new state %d (%s) type %d (%s)",
                service, service ? service->identifier : NULL,
+               old_state, state2string(old_state),
                new_state, state2string(new_state),
                type, __connman_ipconfig_type2string(type));
 
        switch (new_state) {
        case CONNMAN_SERVICE_STATE_UNKNOWN:
-       case CONNMAN_SERVICE_STATE_IDLE:
-               if (service->state == CONNMAN_SERVICE_STATE_FAILURE)
-                       return -EINVAL;
-               break;
        case CONNMAN_SERVICE_STATE_ASSOCIATION:
                break;
        case CONNMAN_SERVICE_STATE_CONFIGURATION:
-               __connman_ipconfig_enable(ipconfig);
                break;
        case CONNMAN_SERVICE_STATE_READY:
-               if (type == CONNMAN_IPCONFIG_TYPE_IPV4) {
-                       check_proxy_setup(service);
+               if (type == CONNMAN_IPCONFIG_TYPE_IPV4)
                        service_rp_filter(service, true);
-               } else {
-                       service->online_check_count = 1;
-                       __connman_wispr_start(service, type);
-               }
+               set_mdns(service, service->mdns_config);
                break;
        case CONNMAN_SERVICE_STATE_ONLINE:
                break;
@@ -5764,34 +6296,28 @@ int __connman_service_ipconfig_indicate_state(struct connman_service *service,
                        service_rp_filter(service, false);
 
                break;
+
+       case CONNMAN_SERVICE_STATE_IDLE:
        case CONNMAN_SERVICE_STATE_FAILURE:
+               __connman_ipconfig_disable(ipconfig);
+
                break;
        }
 
-       /* Keep that state, but if the ipconfig method is OFF, then we set
-          the state to IDLE so that it will not affect the combined state
-          in the future.
-        */
-       if (type == CONNMAN_IPCONFIG_TYPE_IPV4) {
-               method = __connman_ipconfig_get_method(service->ipconfig_ipv4);
-
-               if (method == CONNMAN_IPCONFIG_METHOD_OFF ||
-                               method == CONNMAN_IPCONFIG_METHOD_UNKNOWN)
-                       new_state = CONNMAN_SERVICE_STATE_IDLE;
+       if (is_connected(old_state) && !is_connected(new_state)) {
+               nameserver_remove_all(service, type);
+               cancel_online_check(service);
+       }
 
+       if (type == CONNMAN_IPCONFIG_TYPE_IPV4)
                service->state_ipv4 = new_state;
-
-       } else if (type == CONNMAN_IPCONFIG_TYPE_IPV6) {
-               method = __connman_ipconfig_get_method(service->ipconfig_ipv6);
-
-               if (method == CONNMAN_IPCONFIG_METHOD_OFF ||
-                               method == CONNMAN_IPCONFIG_METHOD_UNKNOWN)
-                       new_state = CONNMAN_SERVICE_STATE_IDLE;
-
+       else
                service->state_ipv6 = new_state;
-       }
 
-       update_nameservers(service);
+       if (!is_connected(old_state) && is_connected(new_state))
+               nameserver_add_all(service, type);
+
+       __connman_timeserver_sync(service);
 
        return service_indicate_state(service);
 }
@@ -5837,10 +6363,31 @@ static void prepare_8021x(struct connman_service *service)
                connman_network_set_string(service->network, "WiFi.Identity",
                                                        service->identity);
 
+       if (service->anonymous_identity)
+               connman_network_set_string(service->network,
+                                               "WiFi.AnonymousIdentity",
+                                               service->anonymous_identity);
+
        if (service->ca_cert_file)
                connman_network_set_string(service->network, "WiFi.CACertFile",
                                                        service->ca_cert_file);
 
+       if (service->subject_match)
+               connman_network_set_string(service->network, "WiFi.SubjectMatch",
+                                                       service->subject_match);
+
+       if (service->altsubject_match)
+               connman_network_set_string(service->network, "WiFi.AltSubjectMatch",
+                                                       service->altsubject_match);
+
+       if (service->domain_suffix_match)
+               connman_network_set_string(service->network, "WiFi.DomainSuffixMatch",
+                                                       service->domain_suffix_match);
+
+       if (service->domain_match)
+               connman_network_set_string(service->network, "WiFi.DomainMatch",
+                                                       service->domain_match);
+
        if (service->client_cert_file)
                connman_network_set_string(service->network,
                                                "WiFi.ClientCertFile",
@@ -5889,6 +6436,9 @@ static int service_connect(struct connman_service *service)
                case CONNMAN_SERVICE_SECURITY_PSK:
                case CONNMAN_SERVICE_SECURITY_WPA:
                case CONNMAN_SERVICE_SECURITY_RSN:
+                       if (service->error == CONNMAN_SERVICE_ERROR_INVALID_KEY)
+                               return -ENOKEY;
+
                        if (!service->passphrase) {
                                if (!service->network)
                                        return -EOPNOTSUPP;
@@ -5896,13 +6446,19 @@ static int service_connect(struct connman_service *service)
                                if (!service->wps ||
                                        !connman_network_get_bool(service->network, "WiFi.UseWPS"))
                                        return -ENOKEY;
-                       } else if (service->error ==
-                                       CONNMAN_SERVICE_ERROR_INVALID_KEY)
-                               return -ENOKEY;
+                       }
                        break;
+
                case CONNMAN_SERVICE_SECURITY_8021X:
-                       if (!service->eap)
+                       if (!service->eap) {
+                               connman_warn("EAP type has not been found. "
+                                       "Most likely ConnMan is not able to "
+                                       "find a configuration for given "
+                                       "8021X network. "
+                                       "Check SSID or Name match with the "
+                                       "network name.");
                                return -EINVAL;
+                       }
 
                        /*
                         * never request credentials if using EAP-TLS
@@ -5916,9 +6472,10 @@ static int service_connect(struct connman_service *service)
                         * missing. Agent provided credentials can be used as
                         * fallback if needed.
                         */
-                       if ((!service->identity &&
+                       if (((!service->identity &&
                                        !service->agent_identity) ||
-                                       !service->passphrase)
+                                       !service->passphrase) ||
+                                       service->error == CONNMAN_SERVICE_ERROR_INVALID_KEY)
                                return -ENOKEY;
 
                        break;
@@ -5950,22 +6507,22 @@ static int service_connect(struct connman_service *service)
                                                &service->stats_roaming.data);
                }
 
-               if (service->ipconfig_ipv4)
-                       __connman_ipconfig_enable(service->ipconfig_ipv4);
-               if (service->ipconfig_ipv6)
-                       __connman_ipconfig_enable(service->ipconfig_ipv6);
-
                err = __connman_network_connect(service->network);
        } else if (service->type == CONNMAN_SERVICE_TYPE_VPN &&
                                        service->provider)
-               err = __connman_provider_connect(service->provider);
+               err = __connman_provider_connect(service->provider,
+                                               get_dbus_sender(service));
        else
                return -EOPNOTSUPP;
 
        if (err < 0) {
                if (err != -EINPROGRESS) {
-                       __connman_ipconfig_disable(service->ipconfig_ipv4);
-                       __connman_ipconfig_disable(service->ipconfig_ipv6);
+                       __connman_service_ipconfig_indicate_state(service,
+                                               CONNMAN_SERVICE_STATE_FAILURE,
+                                               CONNMAN_IPCONFIG_TYPE_IPV4);
+                       __connman_service_ipconfig_indicate_state(service,
+                                               CONNMAN_SERVICE_STATE_FAILURE,
+                                               CONNMAN_IPCONFIG_TYPE_IPV6);
                        __connman_stats_service_unregister(service);
                }
        }
@@ -5983,10 +6540,10 @@ int __connman_service_connect(struct connman_service *service,
                reason2string(service->connect_reason),
                reason2string(reason));
 
-       if (is_connected(service))
+       if (is_connected(service->state))
                return -EISCONN;
 
-       if (is_connecting(service))
+       if (is_connecting(service->state))
                return -EALREADY;
 
        switch (service->type) {
@@ -5995,24 +6552,35 @@ int __connman_service_connect(struct connman_service *service,
        case CONNMAN_SERVICE_TYPE_GPS:
        case CONNMAN_SERVICE_TYPE_P2P:
                return -EINVAL;
-       default:
-               if (!is_ipconfig_usable(service))
-                       return -ENOLINK;
 
-               err = service_connect(service);
+       case CONNMAN_SERVICE_TYPE_ETHERNET:
+       case CONNMAN_SERVICE_TYPE_GADGET:
+       case CONNMAN_SERVICE_TYPE_BLUETOOTH:
+       case CONNMAN_SERVICE_TYPE_CELLULAR:
+       case CONNMAN_SERVICE_TYPE_VPN:
+       case CONNMAN_SERVICE_TYPE_WIFI:
+               break;
        }
 
+       if (!is_ipconfig_usable(service))
+               return -ENOLINK;
+
+       __connman_service_clear_error(service);
+
+       err = service_connect(service);
+
+       DBG("service %p err %d", service, err);
+
        service->connect_reason = reason;
-       if (err >= 0) {
-               set_error(service, CONNMAN_SERVICE_ERROR_UNKNOWN);
+
+       if (err >= 0)
                return 0;
-       }
 
        if (err == -EINPROGRESS) {
                if (service->timeout == 0)
                        service->timeout = g_timeout_add_seconds(
                                CONNECT_TIMEOUT, connect_timeout, service);
-               set_error(service, CONNMAN_SERVICE_ERROR_UNKNOWN);
+
                return -EINPROGRESS;
        }
 
@@ -6025,6 +6593,7 @@ int __connman_service_connect(struct connman_service *service,
        if (service->connect_reason == CONNMAN_SERVICE_CONNECT_REASON_USER) {
                if (err == -ENOKEY || err == -EPERM) {
                        DBusMessage *pending = NULL;
+                       const char *dbus_sender = get_dbus_sender(service);
 
                        /*
                         * We steal the reply here. The idea is that the
@@ -6039,14 +6608,13 @@ int __connman_service_connect(struct connman_service *service,
 
                        err = __connman_agent_request_passphrase_input(service,
                                        request_input_cb,
-                                       get_dbus_sender(service),
+                                       dbus_sender,
                                        pending);
                        if (service->hidden && err != -EINPROGRESS)
                                service->pending = pending;
 
                        return err;
                }
-               reply_pending(service, -err);
        }
 
        return err;
@@ -6063,7 +6631,7 @@ int __connman_service_disconnect(struct connman_service *service)
 
        connman_agent_cancel(service);
 
-       reply_pending(service, ECONNABORTED);
+       __connman_stats_service_unregister(service);
 
        if (service->network) {
                err = __connman_network_disconnect(service->network);
@@ -6094,8 +6662,6 @@ int __connman_service_disconnect(struct connman_service *service)
        __connman_ipconfig_disable(service->ipconfig_ipv4);
        __connman_ipconfig_disable(service->ipconfig_ipv6);
 
-       __connman_stats_service_unregister(service);
-
        return err;
 }
 
@@ -6110,7 +6676,7 @@ int __connman_service_disconnect_all(void)
        for (iter = service_list; iter; iter = iter->next) {
                service = iter->data;
 
-               if (!is_connected(service))
+               if (!is_connected(service->state))
                        break;
 
                services = g_slist_prepend(services, service);
@@ -6140,6 +6706,11 @@ static struct connman_service *lookup_by_identifier(const char *identifier)
        return g_hash_table_lookup(service_hash, identifier);
 }
 
+struct connman_service *connman_service_lookup_from_identifier(const char* identifier)
+{
+       return identifier ? lookup_by_identifier(identifier) : NULL;
+}
+
 struct provision_user_data {
        const char *ident;
        int ret;
@@ -6290,12 +6861,6 @@ static void service_lower_down(struct connman_ipconfig *ipconfig,
 
        DBG("%s lower down", ifname);
 
-       if (!is_idle_state(service, service->state_ipv4))
-               __connman_ipconfig_disable(service->ipconfig_ipv4);
-
-       if (!is_idle_state(service, service->state_ipv6))
-               __connman_ipconfig_disable(service->ipconfig_ipv6);
-
        stats_stop(service);
        service_save(service);
 }
@@ -6322,6 +6887,7 @@ static void service_ip_bound(struct connman_ipconfig *ipconfig,
                                                CONNMAN_IPCONFIG_TYPE_IPV6);
 
        settings_changed(service, ipconfig);
+       address_updated(service, type);
 }
 
 static void service_ip_release(struct connman_ipconfig *ipconfig,
@@ -6522,14 +7088,9 @@ struct connman_service *__connman_service_lookup_from_index(int index)
        return NULL;
 }
 
-struct connman_service *__connman_service_lookup_from_ident(const char *identifier)
+const char *connman_service_get_identifier(struct connman_service *service)
 {
-       return lookup_by_identifier(identifier);
-}
-
-const char *__connman_service_get_ident(struct connman_service *service)
-{
-       return service->identifier;
+       return service ? service->identifier : NULL;
 }
 
 const char *__connman_service_get_path(struct connman_service *service)
@@ -6542,42 +7103,9 @@ const char *__connman_service_get_name(struct connman_service *service)
        return service->name;
 }
 
-enum connman_service_state __connman_service_get_state(struct connman_service *service)
-{
-       return service->state;
-}
-
-unsigned int __connman_service_get_order(struct connman_service *service)
-{
-       unsigned int order = 0;
-
-       if (!service)
-               return 0;
-
-       service->order = 0;
-
-       if (!service->favorite)
-               return 0;
-
-       if (service == service_list->data)
-               order = 1;
-
-       if (service->type == CONNMAN_SERVICE_TYPE_VPN &&
-                       !service->do_split_routing) {
-               service->order = 10;
-               order = 10;
-       }
-
-       DBG("service %p name %s order %d split %d", service, service->name,
-               order, service->do_split_routing);
-
-       return order;
-}
-
-void __connman_service_update_ordering(void)
+enum connman_service_state connman_service_get_state(struct connman_service *service)
 {
-       if (service_list && service_list->next)
-               service_list = g_list_sort(service_list, service_compare);
+       return service ? service->state : CONNMAN_SERVICE_STATE_UNKNOWN;
 }
 
 static enum connman_service_type convert_network_type(struct connman_network *network)
@@ -6624,6 +7152,21 @@ static enum connman_service_security convert_wifi_security(const char *security)
                return CONNMAN_SERVICE_SECURITY_UNKNOWN;
 }
 
+static void update_wps_values(struct connman_service *service,
+                               struct connman_network *network)
+{
+       bool wps = connman_network_get_bool(network, "WiFi.WPS");
+       bool wps_advertising = connman_network_get_bool(network,
+                                                       "WiFi.WPSAdvertising");
+
+       if (service->wps != wps ||
+                       service->wps_advertizing != wps_advertising) {
+               service->wps = wps;
+               service->wps_advertizing = wps_advertising;
+               security_changed(service);
+       }
+}
+
 static void update_from_network(struct connman_service *service,
                                        struct connman_network *network)
 {
@@ -6632,10 +7175,10 @@ static void update_from_network(struct connman_service *service,
 
        DBG("service %p network %p", service, network);
 
-       if (is_connected(service))
+       if (is_connected(service->state))
                return;
 
-       if (is_connecting(service))
+       if (is_connecting(service->state))
                return;
 
        str = connman_network_get_string(network, "Name");
@@ -6664,7 +7207,7 @@ static void update_from_network(struct connman_service *service,
        service->security = convert_wifi_security(str);
 
        if (service->type == CONNMAN_SERVICE_TYPE_WIFI)
-               service->wps = connman_network_get_bool(network, "WiFi.WPS");
+               update_wps_values(service, network);
 
        if (service->strength > strength && service->network) {
                connman_network_unref(service->network);
@@ -6691,7 +7234,7 @@ struct connman_service * __connman_service_create_from_network(struct connman_ne
        struct connman_device *device;
        const char *ident, *group;
        char *name;
-       unsigned int *auto_connect_types;
+       unsigned int *auto_connect_types, *favorite_types;
        int i, index;
 
        DBG("network %p", network);
@@ -6736,20 +7279,13 @@ struct connman_service * __connman_service_create_from_network(struct connman_ne
                }
        }
 
-       switch (service->type) {
-       case CONNMAN_SERVICE_TYPE_UNKNOWN:
-       case CONNMAN_SERVICE_TYPE_SYSTEM:
-       case CONNMAN_SERVICE_TYPE_BLUETOOTH:
-       case CONNMAN_SERVICE_TYPE_GPS:
-       case CONNMAN_SERVICE_TYPE_VPN:
-       case CONNMAN_SERVICE_TYPE_GADGET:
-       case CONNMAN_SERVICE_TYPE_WIFI:
-       case CONNMAN_SERVICE_TYPE_CELLULAR:
-       case CONNMAN_SERVICE_TYPE_P2P:
-               break;
-       case CONNMAN_SERVICE_TYPE_ETHERNET:
-               service->favorite = true;
-               break;
+       favorite_types = connman_setting_get_uint_list("DefaultFavoriteTechnologies");
+       service->favorite = false;
+       for (i = 0; favorite_types && favorite_types[i] != 0; i++) {
+               if (service->type == favorite_types[i]) {
+                       service->favorite = true;
+                       break;
+               }
        }
 
        service->state_ipv4 = service->state_ipv6 = CONNMAN_SERVICE_STATE_IDLE;
@@ -6767,15 +7303,41 @@ struct connman_service * __connman_service_create_from_network(struct connman_ne
                service->ipconfig_ipv6 = create_ip6config(service, index);
 
        service_register(service);
+       service_schedule_added(service);
 
        if (service->favorite) {
                device = connman_network_get_device(service->network);
-               if (device && !connman_device_get_scanning(device))
-                       __connman_service_auto_connect(CONNMAN_SERVICE_CONNECT_REASON_AUTO);
+               if (device && !connman_device_get_scanning(device,
+                                               CONNMAN_SERVICE_TYPE_UNKNOWN)) {
+
+                       switch (service->type) {
+                       case CONNMAN_SERVICE_TYPE_UNKNOWN:
+                       case CONNMAN_SERVICE_TYPE_SYSTEM:
+                       case CONNMAN_SERVICE_TYPE_P2P:
+                               break;
+
+                       case CONNMAN_SERVICE_TYPE_GADGET:
+                       case CONNMAN_SERVICE_TYPE_ETHERNET:
+                               if (service->autoconnect) {
+                                       __connman_service_connect(service,
+                                               CONNMAN_SERVICE_CONNECT_REASON_AUTO);
+                                       break;
+                               }
+
+                               /* fall through */
+                       case CONNMAN_SERVICE_TYPE_BLUETOOTH:
+                       case CONNMAN_SERVICE_TYPE_GPS:
+                       case CONNMAN_SERVICE_TYPE_VPN:
+                       case CONNMAN_SERVICE_TYPE_WIFI:
+                       case CONNMAN_SERVICE_TYPE_CELLULAR:
+                               do_auto_connect(service,
+                                       CONNMAN_SERVICE_CONNECT_REASON_AUTO);
+                               break;
+                       }
+               }
        }
 
        __connman_notifier_service_add(service, service->name);
-       service_schedule_added(service);
 
        return service;
 }
@@ -6808,7 +7370,7 @@ void __connman_service_update_from_network(struct connman_network *network)
        }
 
        if (service->type == CONNMAN_SERVICE_TYPE_WIFI)
-               service->wps = connman_network_get_bool(network, "WiFi.WPS");
+               update_wps_values(service, network);
 
        strength = connman_network_get_strength(service->network);
        if (strength == service->strength)
@@ -6889,6 +7451,7 @@ __connman_service_create_from_provider(struct connman_provider *provider)
                return NULL;
 
        service->type = CONNMAN_SERVICE_TYPE_VPN;
+       service->order = service->do_split_routing ? 0 : 10;
        service->provider = connman_provider_ref(provider);
        service->autoconnect = false;
        service->favorite = true;
@@ -7031,6 +7594,8 @@ int __connman_service_init(void)
                return err;
        }
 
+       set_always_connecting_technologies();
+
        connection = connman_dbus_get_connection();
 
        service_hash = g_hash_table_new_full(g_str_hash, g_str_equal,
@@ -7050,14 +7615,14 @@ void __connman_service_cleanup(void)
 {
        DBG("");
 
-       if (vpn_autoconnect_timeout) {
-               g_source_remove(vpn_autoconnect_timeout);
-               vpn_autoconnect_timeout = 0;
+       if (vpn_autoconnect_id) {
+               g_source_remove(vpn_autoconnect_id);
+               vpn_autoconnect_id = 0;
        }
 
-       if (autoconnect_timeout != 0) {
-               g_source_remove(autoconnect_timeout);
-               autoconnect_timeout = 0;
+       if (autoconnect_id != 0) {
+               g_source_remove(autoconnect_id);
+               autoconnect_id = 0;
        }
 
        connman_agent_driver_unregister(&agent_driver);
@@ -7074,9 +7639,10 @@ void __connman_service_cleanup(void)
        if (services_notify->id != 0) {
                g_source_remove(services_notify->id);
                service_send_changed(NULL);
-               g_hash_table_destroy(services_notify->remove);
-               g_hash_table_destroy(services_notify->add);
        }
+
+       g_hash_table_destroy(services_notify->remove);
+       g_hash_table_destroy(services_notify->add);
        g_free(services_notify);
 
        dbus_connection_unref(connection);