X-Git-Url: http://review.tizen.org/git/?a=blobdiff_plain;f=src%2Fprovider.c;h=3f4bb1ccc84cfc5ec038d0cd618b0a7c39452220;hb=6c8213f23b60fb46e6cd2572a6adc7ce4da13691;hp=81c7b4dc02ce3fad855fedc8e82b0469b0e82e9a;hpb=9e0c50af585c167eaf7768802b4d015a502108a6;p=framework%2Fconnectivity%2Fconnman.git

diff --git a/src/provider.c b/src/provider.c
index 81c7b4d..3f4bb1c 100644
--- a/src/provider.c
+++ b/src/provider.c
@@ -2,7 +2,7 @@
  *
  *  Connection Manager
  *
- *  Copyright (C) 2007-2010  Intel Corporation. All rights reserved.
+ *  Copyright (C) 2007-2012  Intel Corporation. All rights reserved.
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License version 2 as
@@ -23,8 +23,10 @@
 #include <config.h>
 #endif
 
+#include <errno.h>
 #include <stdio.h>
 #include <string.h>
+#include <stdlib.h>
 #include <gdbus.h>
 
 #include "connman.h"
@@ -35,120 +37,236 @@ static GHashTable *provider_hash = NULL;
 
 static GSList *driver_list = NULL;
 
+struct connman_route {
+	int family;
+	char *host;
+	char *netmask;
+	char *gateway;
+};
+
 struct connman_provider {
-	struct connman_element element;
+	int refcount;
+	struct connman_service *vpn_service;
+	int index;
 	char *identifier;
-	char *path;
-	enum connman_provider_state state;
-	enum connman_provider_error error;
 	char *name;
 	char *type;
-	char *dns;
+	char *host;
 	char *domain;
-	DBusMessage *pending;
-	guint timeout;
+	int family;
+	GHashTable *routes;
 	struct connman_provider_driver *driver;
 	void *driver_data;
+	GHashTable *setting_strings;
+	GHashTable *user_routes;
+	gchar **user_networks;
+	gsize num_user_networks;
 };
 
-static const char *state2string(enum connman_provider_state state)
+void __connman_provider_append_properties(struct connman_provider *provider,
+							DBusMessageIter *iter)
 {
-	switch (state) {
-	case CONNMAN_PROVIDER_STATE_UNKNOWN:
-		break;
-	case CONNMAN_PROVIDER_STATE_IDLE:
-		return "idle";
-	case CONNMAN_PROVIDER_STATE_CONNECT:
-		return "connect";
-	case CONNMAN_PROVIDER_STATE_READY:
-		return "ready";
-	case CONNMAN_PROVIDER_STATE_DISCONNECT:
-		return "disconnect";
-	case CONNMAN_PROVIDER_STATE_FAILURE:
-		return "failure";
-	}
-	return NULL;
-}
+	if (provider->host != NULL)
+		connman_dbus_dict_append_basic(iter, "Host",
+					DBUS_TYPE_STRING, &provider->host);
 
-static const char *error2string(enum connman_provider_error error)
-{
-	switch (error) {
-	case CONNMAN_PROVIDER_ERROR_UNKNOWN:
-		break;
-	case CONNMAN_PROVIDER_ERROR_CONNECT_FAILED:
-		return "connect-failed";
-	}
+	if (provider->domain != NULL)
+		connman_dbus_dict_append_basic(iter, "Domain",
+					DBUS_TYPE_STRING, &provider->domain);
 
-	return NULL;
+	if (provider->type != NULL)
+		connman_dbus_dict_append_basic(iter, "Type", DBUS_TYPE_STRING,
+						 &provider->type);
 }
 
-static void append_path(gpointer key, gpointer value, gpointer user_data)
+int __connman_provider_append_user_route(struct connman_provider *provider,
+			int family, const char *network, const char *netmask)
 {
-	struct connman_provider *provider = value;
-	DBusMessageIter *iter = user_data;
+	struct connman_route *route;
+	char *key = g_strdup_printf("%d/%s/%s", family, network, netmask);
 
-	DBG("add provider path");
-	if (provider->path == NULL)
-		return;
+	DBG("family %d network %s netmask %s", family, network, netmask);
 
-	dbus_message_iter_append_basic(iter, DBUS_TYPE_OBJECT_PATH,
-					&provider->path);
-}
+	route = g_hash_table_lookup(provider->user_routes, key);
+	if (route == NULL) {
+		route = g_try_new0(struct connman_route, 1);
+		if (route == NULL) {
+			connman_error("out of memory");
+			return -ENOMEM;
+		}
 
-void __connman_provider_list(DBusMessageIter *iter, void *user_data)
-{
-	g_hash_table_foreach(provider_hash, append_path, iter);
+		route->family = family;
+		route->host = g_strdup(network);
+		route->netmask = g_strdup(netmask);
+
+		g_hash_table_replace(provider->user_routes, key, route);
+	} else
+		g_free(key);
+
+	return 0;
 }
 
-static struct connman_provider *connman_provider_lookup(const char *identifier)
+static void set_user_networks(struct connman_provider *provider,
+							char **networks)
 {
-	struct connman_provider *provider = NULL;
+	int i = 0;
 
-	provider = g_hash_table_lookup(provider_hash, identifier);
+	while (networks[i] != NULL) {
+		char **elems = g_strsplit(networks[i], "/", 0);
+		char *network, *netmask;
+		int family = PF_UNSPEC, ret;
 
-	return provider;
+		if (elems == NULL)
+			break;
+
+		network = elems[0];
+		if (network == NULL || *network == '\0') {
+			DBG("no network/netmask set");
+			g_strfreev(elems);
+			break;
+		}
+
+		netmask = elems[1];
+		if (netmask != NULL && *netmask == '\0') {
+			DBG("no netmask set");
+			g_strfreev(elems);
+			break;
+		}
+
+		if (g_strrstr(network, ":") != NULL)
+			family = AF_INET6;
+		else if (g_strrstr(network, ".") != NULL) {
+			family = AF_INET;
+
+			if (g_strrstr(netmask, ".") == NULL) {
+				/* We have netmask length */
+				in_addr_t addr;
+				struct in_addr netmask_in;
+				unsigned char prefix_len = 32;
+
+				if (netmask != NULL)
+					prefix_len = atoi(netmask);
+
+				addr = 0xffffffff << (32 - prefix_len);
+				netmask_in.s_addr = htonl(addr);
+				netmask = inet_ntoa(netmask_in);
+
+				DBG("network %s netmask %s", network, netmask);
+			}
+		}
+
+		ret = __connman_provider_append_user_route(provider,
+						family, network, netmask);
+		g_strfreev(elems);
+
+		if (ret != 0)
+			break;
+
+		i++;
+	}
 }
 
-static void connman_provider_setup_vpn_ipv4(struct connman_provider *provider,
-						struct connman_element *element)
+static int provider_load_from_keyfile(struct connman_provider *provider,
+		GKeyFile *keyfile)
 {
-	if (element == NULL || provider == NULL)
-		return;
+	gsize idx = 0;
+	gchar **settings;
+	gchar *key, *value;
+	gsize length;
+
+	settings = g_key_file_get_keys(keyfile, provider->identifier, &length,
+				NULL);
+	if (settings == NULL) {
+		g_key_file_free(keyfile);
+		return -ENOENT;
+	}
 
-	DBG("set vpn type %d", element->type);
+	while (idx < length) {
+		key = settings[idx];
+		if (key != NULL) {
+			if (g_str_equal(key, "Networks") == TRUE) {
+				g_strfreev(provider->user_networks);
+				provider->user_networks =
+					g_key_file_get_string_list(keyfile,
+						provider->identifier,
+						key,
+						&provider->num_user_networks,
+						NULL);
+			} else {
+				value = g_key_file_get_string(keyfile,
+							provider->identifier,
+							key, NULL);
+				connman_provider_set_string(provider, key,
+							value);
+				g_free(value);
+			}
+		}
+		idx += 1;
+	}
+	g_strfreev(settings);
 
-	if (provider == NULL)
-		return;
+	if (provider->user_networks != NULL)
+		set_user_networks(provider, provider->user_networks);
 
-	g_free(element->ipv4.address);
-	element->ipv4.address = g_strdup(provider->element.ipv4.address);
+	return 0;
+}
 
-	g_free(element->ipv4.netmask);
-	element->ipv4.netmask = g_strdup(provider->element.ipv4.netmask);
+static int connman_provider_load(struct connman_provider *provider)
+{
+	GKeyFile *keyfile;
 
-	g_free(element->ipv4.gateway);
-	element->ipv4.gateway = g_strdup(provider->element.ipv4.gateway);
+	DBG("provider %p", provider);
 
-	g_free(element->ipv4.broadcast);
-	element->ipv4.broadcast = g_strdup(provider->element.ipv4.broadcast);
+	keyfile = __connman_storage_load_provider(provider->identifier);
+	if (keyfile == NULL)
+		return -ENOENT;
 
-	g_free(element->ipv4.pac);
-	element->ipv4.pac = g_strdup(provider->element.ipv4.pac);
+	provider_load_from_keyfile(provider, keyfile);
 
-	DBG("VPN exist");
+	g_key_file_free(keyfile);
+	return 0;
 }
 
-struct connman_provider *connman_provider_ref(struct connman_provider *provider)
+static int connman_provider_save(struct connman_provider *provider)
 {
-	if (connman_element_ref(&provider->element) == NULL)
-		return NULL;
+	GKeyFile *keyfile;
 
-	return provider;
+	DBG("provider %p", provider);
+
+	keyfile = g_key_file_new();
+	if (keyfile == NULL)
+		return -ENOMEM;
+
+	g_key_file_set_string(keyfile, provider->identifier,
+			"Name", provider->name);
+	g_key_file_set_string(keyfile, provider->identifier,
+			"Type", provider->type);
+	g_key_file_set_string(keyfile, provider->identifier,
+			"Host", provider->host);
+	g_key_file_set_string(keyfile, provider->identifier,
+			"VPN.Domain", provider->domain);
+	if (provider->user_networks != NULL)
+		g_key_file_set_string_list(keyfile, provider->identifier,
+				"Networks",
+				(const gchar **)provider->user_networks,
+				provider->num_user_networks);
+
+	if (provider->driver != NULL && provider->driver->save != NULL)
+		provider->driver->save(provider, keyfile);
+
+	__connman_storage_save_provider(keyfile, provider->identifier);
+        g_key_file_free(keyfile);
+
+	return 0;
 }
 
-void connman_provider_unref(struct connman_provider *provider)
+static struct connman_provider *connman_provider_lookup(const char *identifier)
 {
-	connman_element_unref(&provider->element);
+	struct connman_provider *provider = NULL;
+
+	provider = g_hash_table_lookup(provider_hash, identifier);
+
+	return provider;
 }
 
 static gboolean match_driver(struct connman_provider *provider,
@@ -189,188 +307,109 @@ static int provider_probe(struct connman_provider *provider)
 	return 0;
 }
 
-static void state_changed(struct connman_provider *provider)
+static void provider_remove(struct connman_provider *provider)
 {
-	const char *str;
-
-	str = state2string(provider->state);
-	if (str == NULL)
-		return;
+	if (provider->driver != NULL) {
+		provider->driver->remove(provider);
+		provider->driver = NULL;
+	}
+}
 
-	connman_dbus_property_changed_basic(provider->path,
-				CONNMAN_PROVIDER_INTERFACE, "State",
-						DBUS_TYPE_STRING, &str); 
+static int provider_register(struct connman_provider *provider)
+{
+	return provider_probe(provider);
 }
 
-static void reply_pending(struct connman_provider *provider, int error)
+static void provider_unregister(struct connman_provider *provider)
 {
-	if (provider->timeout > 0) {
-		g_source_remove(provider->timeout);
-		provider->timeout = 0;
-	}
+	provider_remove(provider);
+}
 
-	if (provider->pending != NULL) {
-		if (error > 0) {
-			DBusMessage *reply;
+struct connman_provider *
+connman_provider_ref_debug(struct connman_provider *provider,
+			const char *file, int line, const char *caller)
+{
+	DBG("%p ref %d by %s:%d:%s()", provider, provider->refcount + 1,
+		file, line, caller);
 
-			reply = __connman_error_failed(provider->pending,
-								error);
-			if (reply != NULL)
-				g_dbus_send_message(connection, reply);
-		} else
-			g_dbus_send_reply(connection, provider->pending,
-							DBUS_TYPE_INVALID);
+	__sync_fetch_and_add(&provider->refcount, 1);
 
-		dbus_message_unref(provider->pending);
-		provider->pending = NULL;
-	}
+	return provider;
 }
 
-static int connman_provider_disconnect(struct connman_provider *provider)
+static void provider_destruct(struct connman_provider *provider)
 {
-	int err;
-
 	DBG("provider %p", provider);
 
-	reply_pending(provider, ECONNABORTED);
-
-	if (provider->driver != NULL && provider->driver->disconnect != NULL)
-		err = provider->driver->disconnect(provider);
-	else
-		return -EOPNOTSUPP;
-
-	__connman_provider_indicate_state(provider,
-					CONNMAN_PROVIDER_STATE_DISCONNECT);
-	if (err < 0) {
-		if (err != -EINPROGRESS)
-			return err;
-
-		return -EINPROGRESS;
-	}
-
-	return 0;
+	g_free(provider->name);
+	g_free(provider->type);
+	g_free(provider->host);
+	g_free(provider->domain);
+	g_free(provider->identifier);
+	g_strfreev(provider->user_networks);
+	g_hash_table_destroy(provider->routes);
+	g_hash_table_destroy(provider->user_routes);
+	g_hash_table_destroy(provider->setting_strings);
+	g_free(provider);
 }
 
-int __connman_provider_indicate_state(struct connman_provider *provider,
-					enum connman_provider_state state)
+void connman_provider_unref_debug(struct connman_provider *provider,
+				const char *file, int line, const char *caller)
 {
-	DBG("provider %p state %d", provider, state);
-
-	if (provider == NULL)
-		return -EINVAL;
-
-	if (provider->state == state)
-		return -EALREADY;
-
-	if (provider->state == CONNMAN_PROVIDER_STATE_FAILURE &&
-				state == CONNMAN_PROVIDER_STATE_IDLE)
-		return -EINVAL;
-
-	if (provider->state == CONNMAN_PROVIDER_STATE_IDLE &&
-				state == CONNMAN_PROVIDER_STATE_DISCONNECT)
-		return -EINVAL;
-
-	if (state == CONNMAN_PROVIDER_STATE_IDLE &&
-			provider->state != CONNMAN_PROVIDER_STATE_DISCONNECT) {
-		provider->state = CONNMAN_PROVIDER_STATE_DISCONNECT;
-		state_changed(provider);
-
-		connman_provider_disconnect(provider);
-	}
+	DBG("%p ref %d by %s:%d:%s()", provider, provider->refcount - 1,
+		file, line, caller);
 
-	provider->state = state;
-	state_changed(provider);
-
-	if (state == CONNMAN_PROVIDER_STATE_READY)
-		reply_pending(provider, 0);
+	if (__sync_fetch_and_sub(&provider->refcount, 1) != 1)
+		return;
 
-	if (state == CONNMAN_PROVIDER_STATE_FAILURE)
-		reply_pending(provider, EIO);
-	else
-		provider->error = CONNMAN_PROVIDER_ERROR_UNKNOWN;
+	provider_remove(provider);
 
-	return 0;
+	provider_destruct(provider);
 }
 
-int __connman_provider_indicate_error(struct connman_provider *provider,
-				      enum connman_provider_error error)
+static int provider_indicate_state(struct connman_provider *provider,
+					enum connman_service_state state)
 {
-	DBG("provider %p error %d", provider, error);
+	DBG("state %d", state);
 
-	if (provider == NULL)
-		return -EINVAL;
+	__connman_service_ipconfig_indicate_state(provider->vpn_service, state,
+					CONNMAN_IPCONFIG_TYPE_IPV4);
 
-	provider->error = error;
-
-	return __connman_provider_indicate_state(provider,
-					CONNMAN_PROVIDER_STATE_FAILURE);
+	return __connman_service_ipconfig_indicate_state(provider->vpn_service,
+					state, CONNMAN_IPCONFIG_TYPE_IPV6);
 }
 
-static gboolean connect_timeout(gpointer user_data)
+int __connman_provider_disconnect(struct connman_provider *provider)
 {
-	struct connman_provider *provider = user_data;
+	int err;
 
 	DBG("provider %p", provider);
 
-	provider->timeout = 0;
-
-	if (provider->pending != NULL) {
-		DBusMessage *reply;
-
-		reply = __connman_error_operation_timeout(provider->pending);
-		if (reply != NULL)
-			g_dbus_send_message(connection, reply);
-
-		dbus_message_unref(provider->pending);
-		provider->pending = NULL;
-	}
+	if (provider->driver != NULL && provider->driver->disconnect != NULL)
+		err = provider->driver->disconnect(provider);
+	else
+		return -EOPNOTSUPP;
 
-	__connman_provider_indicate_error(provider,
-				CONNMAN_PROVIDER_ERROR_CONNECT_FAILED);
+	if (provider->vpn_service != NULL)
+		provider_indicate_state(provider,
+					CONNMAN_SERVICE_STATE_DISCONNECT);
 
-	return FALSE;
-}
+	if (err < 0) {
+		if (err != -EINPROGRESS)
+			return err;
 
-static connman_bool_t is_connecting(struct connman_provider *provider)
-{
-	switch (provider->state) {
-	case CONNMAN_PROVIDER_STATE_UNKNOWN:
-	case CONNMAN_PROVIDER_STATE_IDLE:
-	case CONNMAN_PROVIDER_STATE_FAILURE:
-	case CONNMAN_PROVIDER_STATE_DISCONNECT:
-	case CONNMAN_PROVIDER_STATE_READY:
-		break;
-	case CONNMAN_PROVIDER_STATE_CONNECT:
-		return TRUE;
+		return -EINPROGRESS;
 	}
 
-	return FALSE;
+	return 0;
 }
 
-static int connman_provider_connect(struct connman_provider *provider)
+int __connman_provider_connect(struct connman_provider *provider)
 {
 	int err;
 
 	DBG("provider %p", provider);
 
-	if (provider->state == CONNMAN_PROVIDER_STATE_READY)
-		return -EISCONN;
-
-	if (is_connecting(provider) == TRUE)
-		return -EALREADY;
-
-	g_free(provider->element.ipv4.address);
-	g_free(provider->element.ipv4.netmask);
-	g_free(provider->element.ipv4.gateway);
-	g_free(provider->element.ipv4.broadcast);
-	g_free(provider->element.ipv4.pac);
-
-	provider->element.ipv4.address = NULL;
-	provider->element.ipv4.netmask = NULL;
-	provider->element.ipv4.gateway = NULL;
-	provider->element.ipv4.broadcast = NULL;
-	provider->element.ipv4.pac = NULL;
-
 	if (provider->driver != NULL && provider->driver->connect != NULL)
 		err = provider->driver->connect(provider);
 	else
@@ -380,11 +419,9 @@ static int connman_provider_connect(struct connman_provider *provider)
 		if (err != -EINPROGRESS)
 			return err;
 
-		provider->timeout = g_timeout_add_seconds(60,
-					connect_timeout, provider);
+		provider_indicate_state(provider,
+					CONNMAN_SERVICE_STATE_ASSOCIATION);
 
-		__connman_provider_indicate_state(provider,
-					CONNMAN_PROVIDER_STATE_CONNECT);
 		return -EINPROGRESS;
 	}
 
@@ -394,200 +431,189 @@ static int connman_provider_connect(struct connman_provider *provider)
 int __connman_provider_remove(const char *path)
 {
 	struct connman_provider *provider;
+	GHashTableIter iter;
+	gpointer value, key;
 
 	DBG("path %s", path);
 
-	provider = g_hash_table_lookup(provider_hash, path);
-	if (provider == NULL) {
-		DBG("patch %s not found", path);
-		return -ENXIO;
-	}
+	g_hash_table_iter_init(&iter, provider_hash);
+	while (g_hash_table_iter_next(&iter, &key, &value) == TRUE) {
+		const char *srv_path;
+		provider = value;
 
-	g_hash_table_remove(provider_hash, path);
+		if (provider->vpn_service == NULL)
+			continue;
 
-	return 0;
+		srv_path = __connman_service_get_path(provider->vpn_service);
+
+		if (g_strcmp0(srv_path, path) == 0) {
+			DBG("Removing VPN %s", provider->identifier);
+
+			provider_unregister(provider);
+			g_hash_table_remove(provider_hash,
+						provider->identifier);
+			return 0;
+		}
+	}
+
+	return -ENXIO;
 }
 
-static DBusMessage *get_properties(DBusConnection *conn,
-					DBusMessage *msg, void *user_data)
+static void provider_append_routes(gpointer key, gpointer value,
+					gpointer user_data)
 {
+	struct connman_route *route = value;
 	struct connman_provider *provider = user_data;
-	DBusMessage *reply;
-	DBusMessageIter array, dict;
-	dbus_bool_t required;
-	const char *str;
+	int index = provider->index;
 
-	DBG("provider %p", provider);
+	if (route->family == AF_INET6) {
+		unsigned char prefix_len = atoi(route->netmask);
 
-	reply = dbus_message_new_method_return(msg);
-	if (reply == NULL)
-		return NULL;
+		connman_inet_add_ipv6_network_route(index, route->host,
+							route->gateway,
+							prefix_len);
+	} else {
+		connman_inet_add_network_route(index, route->host,
+						route->gateway,
+						route->netmask);
+	}
+}
 
-	dbus_message_iter_init_append(reply, &array);
+static int set_connected(struct connman_provider *provider,
+					connman_bool_t connected)
+{
+	struct connman_service *service = provider->vpn_service;
+	struct connman_ipconfig *ipconfig;
 
-	connman_dbus_dict_open(&array, &dict);
+	if (service == NULL)
+		return -ENODEV;
 
-	if (provider->name != NULL)
-		connman_dbus_dict_append_basic(&dict, "Name",
-					DBUS_TYPE_STRING, &provider->name);
+	ipconfig = __connman_service_get_ipconfig(service, provider->family);
 
-	if (str != NULL)
-		connman_dbus_dict_append_basic(&dict, "Type",
-						 DBUS_TYPE_STRING,
-						 &provider->type);
+	if (connected == TRUE) {
+		if (ipconfig == NULL) {
+			provider_indicate_state(provider,
+						CONNMAN_SERVICE_STATE_FAILURE);
+			return -EIO;
+		}
 
-	str = state2string(provider->state);
-	if (str != NULL)
-		connman_dbus_dict_append_basic(&dict, "State",
-						 DBUS_TYPE_STRING, &str);
+		__connman_ipconfig_address_add(ipconfig);
+		__connman_ipconfig_gateway_add(ipconfig);
 
-	str = error2string(provider->error);
-	if (str != NULL)
-		connman_dbus_dict_append_basic(&dict, "Error",
-						 DBUS_TYPE_STRING, &str);
+		provider_indicate_state(provider,
+					CONNMAN_SERVICE_STATE_READY);
 
-	required = TRUE;
-	connman_dbus_dict_append_basic(&dict, "PassphraseRequired",
-					 DBUS_TYPE_BOOLEAN, &required);
+		g_hash_table_foreach(provider->routes, provider_append_routes,
+					provider);
 
-	connman_dbus_dict_close(&array, &dict);
+		g_hash_table_foreach(provider->user_routes, provider_append_routes,
+					provider);
 
-	return reply;
-}
+	} else {
+		if (ipconfig != NULL) {
+			provider_indicate_state(provider,
+					CONNMAN_SERVICE_STATE_DISCONNECT);
+			__connman_ipconfig_gateway_remove(ipconfig);
+		}
 
-static GDBusMethodTable provider_methods[] = {
-	{ "GetProperties", "", "a{sv}", get_properties },
-	{ },
-};
+		provider_indicate_state(provider,
+					CONNMAN_SERVICE_STATE_IDLE);
+	}
 
-static GDBusSignalTable provider_signals[] = {
-	{ "PropertyChanged", "sv" },
-	{ },
-};
+	return 0;
+}
 
-int connman_provider_set_connected(struct connman_provider *provider,
-						connman_bool_t connected)
+int connman_provider_set_state(struct connman_provider *provider,
+					enum connman_provider_state state)
 {
-	if (connected == TRUE) {
-		enum connman_element_type type = CONNMAN_ELEMENT_TYPE_UNKNOWN;
-		struct connman_element *element;
-
-		type = CONNMAN_ELEMENT_TYPE_IPV4;
-
-		element = connman_element_create(NULL);
-		if (element != NULL) {
-			element->type  = type;
-			element->index = provider->element.index;
-
-			connman_provider_setup_vpn_ipv4(provider, element);
-
-			if (connman_element_register(element,
-					&provider->element) < 0)
-				connman_element_unref(element);
-			else {
-				char *nameservers = NULL;
-				const char *value;
-				char *name = NULL;
-
-				DBG("set dns");
-				nameservers = g_strdup(provider->dns);
-				value = nameservers;
-				name = connman_inet_ifname(
-						provider->element.index);
-				while (value) {
-					char *next = strchr(value, ' ');
-					if (next)
-						*(next++) = 0;
-
-					connman_resolver_append(name,
-							provider->domain,
-							value);
-					value = next;
-				}
-				DBG("free extra");
-				g_free(nameservers);
-				g_free(name);
-			}
+	if (provider == NULL || provider->vpn_service == NULL)
+		return -EINVAL;
 
-		}
-		__connman_provider_indicate_state(provider,
-						  CONNMAN_PROVIDER_STATE_READY);
-	} else {
-		reply_pending(provider, ECONNABORTED);
-		connman_element_unregister_children(&provider->element);
-		__connman_provider_indicate_state(provider,
-					CONNMAN_PROVIDER_STATE_DISCONNECT);
+	switch (state) {
+	case CONNMAN_PROVIDER_STATE_UNKNOWN:
+		return -EINVAL;
+	case CONNMAN_PROVIDER_STATE_IDLE:
+		return set_connected(provider, FALSE);
+	case CONNMAN_PROVIDER_STATE_CONNECT:
+		return provider_indicate_state(provider,
+					CONNMAN_SERVICE_STATE_ASSOCIATION);
+	case CONNMAN_PROVIDER_STATE_READY:
+		return set_connected(provider, TRUE);
+	case CONNMAN_PROVIDER_STATE_DISCONNECT:
+		return provider_indicate_state(provider,
+					CONNMAN_SERVICE_STATE_DISCONNECT);
+	case CONNMAN_PROVIDER_STATE_FAILURE:
+		return provider_indicate_state(provider,
+					CONNMAN_SERVICE_STATE_FAILURE);
 	}
 
-	return 0;
+	return -EINVAL;
 }
 
-static void provider_free(gpointer user_data)
+int connman_provider_indicate_error(struct connman_provider *provider,
+					enum connman_provider_error error)
 {
-	struct connman_provider *provider = user_data;
-	char *path = provider->path;
-
-	DBG("provider %p", provider);
-
-	reply_pending(provider, ENOENT);
-	provider->path = NULL;
+	enum connman_service_error service_error;
 
-	if (path != NULL) {
-		g_dbus_unregister_interface(connection, path,
-						CONNMAN_PROVIDER_INTERFACE);
-		g_free(path);
+	switch (error) {
+	case CONNMAN_PROVIDER_ERROR_LOGIN_FAILED:
+		service_error = CONNMAN_SERVICE_ERROR_LOGIN_FAILED;
+		break;
+	case CONNMAN_PROVIDER_ERROR_AUTH_FAILED:
+		service_error = CONNMAN_SERVICE_ERROR_AUTH_FAILED;
+		break;
+	case CONNMAN_PROVIDER_ERROR_CONNECT_FAILED:
+		service_error = CONNMAN_SERVICE_ERROR_CONNECT_FAILED;
+		break;
+	default:
+		service_error = CONNMAN_SERVICE_ERROR_UNKNOWN;
+		break;
 	}
 
-	g_free(provider->name);
-	g_free(provider->type);
-	g_free(provider->domain);
-	g_free(provider->identifier);
-	g_free(provider->dns);
+	return __connman_service_indicate_error(provider->vpn_service,
+							service_error);
 }
 
 static void unregister_provider(gpointer data)
 {
 	struct connman_provider *provider = data;
 
-	DBG("provider %p", provider);
+	DBG("provider %p service %p", provider, provider->vpn_service);
 
-	connman_provider_disconnect(provider);
+	if (provider->vpn_service != NULL) {
+		connman_service_unref(provider->vpn_service);
+		provider->vpn_service = NULL;
+	}
 
-	connman_element_unregister(&provider->element);
 	connman_provider_unref(provider);
 }
 
-static void provider_destruct(struct connman_element *element)
+static void destroy_route(gpointer user_data)
 {
-	struct connman_provider *provider = element->private;
+	struct connman_route *route = user_data;
 
-	provider_free(provider);
+	g_free(route->host);
+	g_free(route->netmask);
+	g_free(route->gateway);
+	g_free(route);
 }
 
-static void __connman_provider_initialize(struct connman_provider *provider)
+static void provider_initialize(struct connman_provider *provider)
 {
 	DBG("provider %p", provider);
 
-	provider->state = CONNMAN_PROVIDER_STATE_UNKNOWN;
-
-	__connman_element_initialize(&provider->element);
-
-	provider->element.private = provider;
-	provider->element.destruct = provider_destruct;
-
-	provider->element.ipv4.address = NULL;
-	provider->element.ipv4.netmask = NULL;
-	provider->element.ipv4.gateway = NULL;
-	provider->element.ipv4.broadcast = NULL;
-	provider->element.ipv4.pac = NULL;
-
+	provider->index = 0;
 	provider->name = NULL;
 	provider->type = NULL;
-	provider->dns = NULL;
 	provider->domain = NULL;
 	provider->identifier = NULL;
-	provider->path = NULL;
-	provider->pending = NULL;
+	provider->user_networks = NULL;
+	provider->routes = g_hash_table_new_full(g_direct_hash, g_direct_equal,
+					NULL, destroy_route);
+	provider->user_routes = g_hash_table_new_full(g_str_hash, g_str_equal,
+					g_free, destroy_route);
+	provider->setting_strings = g_hash_table_new_full(g_str_hash, g_str_equal,
+							g_free, g_free);
 }
 
 static struct connman_provider *connman_provider_new(void)
@@ -598,31 +624,12 @@ static struct connman_provider *connman_provider_new(void)
 	if (provider == NULL)
 		return NULL;
 
-	DBG("provider %p", provider);
-	__connman_provider_initialize(provider);
-
-	return provider;
-}
-
-static int provider_register(struct connman_provider *provider)
-{
-	const char *path = "/provider";
+	provider->refcount = 1;
 
 	DBG("provider %p", provider);
+	provider_initialize(provider);
 
-	if (provider->path != NULL)
-		return -EALREADY;
-
-	provider->path = g_strdup_printf("%s/%s", path, provider->identifier);
-
-	DBG("path %s", provider->path);
-
-	g_dbus_register_interface(connection, provider->path,
-					CONNMAN_PROVIDER_INTERFACE,
-					provider_methods, provider_signals,
-					NULL, provider, NULL);
-
-	return 0;
+	return provider;
 }
 
 static struct connman_provider *connman_provider_get(const char *identifier)
@@ -643,37 +650,161 @@ static struct connman_provider *connman_provider_get(const char *identifier)
 
 	g_hash_table_insert(provider_hash, provider->identifier, provider);
 
-	provider->element.name = g_strdup(identifier);
-	connman_element_register(&provider->element, NULL);
-
 	return provider;
 }
 
-static struct connman_provider *connman_provider_create(const char *name)
+static void provider_dbus_ident(char *ident)
 {
-	struct connman_provider *provider;
+	int i, len = strlen(ident);
+
+	for (i = 0; i < len; i++) {
+		if (ident[i] >= '0' && ident[i] <= '9')
+			continue;
+		if (ident[i] >= 'a' && ident[i] <= 'z')
+			continue;
+		if (ident[i] >= 'A' && ident[i] <= 'Z')
+			continue;
+		ident[i] = '_';
+	}
+}
 
-	provider = connman_provider_get(name);
+static struct connman_provider *provider_create_from_keyfile(GKeyFile *keyfile,
+		const char *ident)
+{
+	struct connman_provider *provider;
 
-	if (provider == NULL)
+	if (keyfile == NULL || ident == NULL)
 		return NULL;
 
-	if (provider->path != NULL)
-		return provider;
+	provider = connman_provider_lookup(ident);
+	if (provider == NULL) {
+		provider = connman_provider_get(ident);
+		if (provider == NULL) {
+			DBG("can not create provider");
+			return NULL;
+		}
 
-	provider_register(provider);
+		provider_load_from_keyfile(provider, keyfile);
 
+		if (provider->name == NULL || provider->host == NULL ||
+				provider->domain == NULL) {
+			DBG("cannot get name, host or domain");
+			connman_provider_unref(provider);
+			return NULL;
+		}
+
+		provider_register(provider);
+	}
 	return provider;
 }
 
+static int provider_create_service(struct connman_provider *provider)
+{
+	if (provider->vpn_service != NULL)
+		return -EALREADY;
+
+	provider->vpn_service =
+		__connman_service_create_from_provider(provider);
+
+	if (provider->vpn_service == NULL)
+		return -EOPNOTSUPP;
+
+	return 0;
+}
+
+static void provider_create_all_from_type(const char *provider_type)
+{
+	unsigned int i;
+	char **providers;
+	char *id, *type;
+	GKeyFile *keyfile;
+	struct connman_provider *provider;
+
+	DBG("provider type %s", provider_type);
+
+	providers = __connman_storage_get_providers();
+
+	for (i = 0; providers[i] != NULL; i+=1) {
+
+		if (strncmp(providers[i], "provider_", 9) != 0)
+			continue;
+
+		id = providers[i] + 9;
+		keyfile = __connman_storage_load_provider(id);
+
+		if (keyfile == NULL)
+			continue;
+
+		type = g_key_file_get_string(keyfile, id, "Type", NULL);
+
+		DBG("keyfile %p id %s type %s", keyfile, id, type);
+
+		if (strcmp(provider_type, type) != 0) {
+			g_free(type);
+			g_key_file_free(keyfile);
+			continue;
+		}
+
+		provider = provider_create_from_keyfile(keyfile, id);
+		if (provider != NULL) {
+			if (provider_create_service(provider) == -EOPNOTSUPP) {
+				DBG("could not create service");
+				connman_provider_unref(provider);
+			}
+		}
+
+		g_free(type);
+		g_key_file_free(keyfile);
+	}
+	g_strfreev(providers);
+}
+
+static char **get_user_networks(DBusMessageIter *array, int *count)
+{
+	DBusMessageIter entry;
+	char **networks = NULL;
+	GSList *list = NULL, *l;
+	int len;
+
+	dbus_message_iter_recurse(array, &entry);
+
+	while (dbus_message_iter_get_arg_type(&entry) == DBUS_TYPE_STRING) {
+		const char *val;
+		dbus_message_iter_get_basic(&entry, &val);
+
+		list = g_slist_prepend(list, g_strdup(val));
+		dbus_message_iter_next(&entry);
+	}
+
+	len = g_slist_length(list);
+	if (len == 0)
+		goto out;
+
+	networks = g_try_new(char *, len + 1);
+	if (networks == NULL)
+		goto out;
+
+	*count = len;
+	networks[len] = 0;
+
+	for (l = list; l != NULL; l = g_slist_next(l))
+		networks[--len] = l->data;
+
+out:
+	g_slist_free(list);
+
+	return networks;
+}
+
 int __connman_provider_create_and_connect(DBusMessage *msg)
 {
 	struct connman_provider *provider;
 	DBusMessageIter iter, array;
-	const char *type = NULL, *name = NULL;
+	const char *type = NULL, *name = NULL, *service_path;
+	const char *host = NULL, *domain = NULL;
+	char **networks = NULL;
 	char *ident;
-	gboolean created = FALSE;
-	int err;
+	int err, count = 0;
 
 	dbus_message_iter_init(msg, &iter);
 	dbus_message_iter_recurse(&iter, &array);
@@ -694,40 +825,58 @@ int __connman_provider_create_and_connect(DBusMessage *msg)
 				dbus_message_iter_get_basic(&value, &type);
 			else if (g_str_equal(key, "Name") == TRUE)
 				dbus_message_iter_get_basic(&value, &name);
+			else if (g_str_equal(key, "Host") == TRUE)
+				dbus_message_iter_get_basic(&value, &host);
+			else if (g_str_equal(key, "VPN.Domain") == TRUE)
+				dbus_message_iter_get_basic(&value, &domain);
 			break;
-		}
-
-		if (type != NULL && name != NULL)
+		case DBUS_TYPE_ARRAY:
+			if (g_str_equal(key, "Networks") == TRUE)
+				networks = get_user_networks(&value, &count);
 			break;
+		}
 
 		dbus_message_iter_next(&array);
 	}
 
-	DBG("Type %s name %s", type, name);
+	if (host == NULL || domain == NULL)
+		return -EINVAL;
 
-	if (type == NULL || name == NULL) {
-		err = -EOPNOTSUPP;
-		goto failed;
-	}
+	DBG("Type %s name %s networks %p", type, name, networks);
 
-	ident = g_strdup_printf("%s_%s", type, name);
+	if (type == NULL || name == NULL)
+		return -EOPNOTSUPP;
 
-	provider = connman_provider_lookup(ident);
+	ident = g_strdup_printf("%s_%s", host, domain);
+	provider_dbus_ident(ident);
 
+	DBG("ident %s", ident);
+
+	provider = connman_provider_lookup(ident);
 	if (provider == NULL) {
-		created = TRUE;
-		provider = connman_provider_create(ident);
-		if (provider) {
-			provider->name = g_strdup(name);
-			provider->type = g_strdup(type);
+		provider = connman_provider_get(ident);
+		if (provider == NULL) {
+			DBG("can not create provider");
+			g_free(ident);
+			return -EOPNOTSUPP;
 		}
+
+		provider->host = g_strdup(host);
+		provider->domain = g_strdup(domain);
+		provider->name = g_strdup(name);
+		provider->type = g_strdup(type);
+
+		if (provider_register(provider) == 0)
+			connman_provider_load(provider);
 	}
 
-	if (provider == NULL) {
-		DBG("can not create provider");
-		err = -EOPNOTSUPP;
-		goto failed;
+	if (networks != NULL) {
+		g_strfreev(provider->user_networks);
+		provider->user_networks = networks;
+		provider->num_user_networks = count;
+		set_user_networks(provider, provider->user_networks);
 	}
+
 	dbus_message_iter_init(msg, &iter);
 	dbus_message_iter_recurse(&iter, &array);
 
@@ -753,32 +902,47 @@ int __connman_provider_create_and_connect(DBusMessage *msg)
 
 	g_free(ident);
 
-	if (provider == NULL) {
-		err = -EOPNOTSUPP;
-		goto failed;
-	}
-
-	if (created == TRUE)
-		provider_probe(provider);
+	err = provider_create_service(provider);
+	if (err == -EALREADY) {
+		DBG("provider already connected");
+	} else {
+		if (err == -EOPNOTSUPP) {
+			goto unref;
+		} else {
+			err = __connman_service_connect(provider->vpn_service);
 
-	err = connman_provider_connect(provider);
-	if (err < 0 && err != -EINPROGRESS)
-		goto failed;
+			if (err < 0 && err != -EINPROGRESS)
+				goto failed;
+		}
+	}
 
+	connman_provider_save(provider);
+	service_path = __connman_service_get_path(provider->vpn_service);
 	g_dbus_send_reply(connection, msg,
-				DBUS_TYPE_OBJECT_PATH, &provider->path,
+				DBUS_TYPE_OBJECT_PATH, &service_path,
 							DBUS_TYPE_INVALID);
 	return 0;
 
 failed:
-	if (provider != NULL && created == TRUE) {
-		DBG("can not connect delete provider");
-		connman_provider_unref(provider);
-	}
+	connman_service_unref(provider->vpn_service);
+	provider->vpn_service = NULL;
+
+unref:
+	DBG("can not connect, delete provider");
+
+	g_hash_table_remove(provider_hash, provider->identifier);
 
 	return err;
 }
 
+const char * __connman_provider_get_ident(struct connman_provider *provider)
+{
+	if (provider == NULL)
+		return NULL;
+
+	return provider->identifier;
+}
+
 int connman_provider_set_string(struct connman_provider *provider,
 					const char *key, const char *value)
 {
@@ -790,27 +954,16 @@ int connman_provider_set_string(struct connman_provider *provider,
 	} else if (g_str_equal(key, "Name") == TRUE) {
 		g_free(provider->name);
 		provider->name = g_strdup(value);
-	} else if (g_str_equal(key, "Gateway") == TRUE) {
-		g_free(provider->element.ipv4.gateway);
-		provider->element.ipv4.gateway = g_strdup(value);
-	} else if (g_str_equal(key, "Address") == TRUE) {
-		g_free(provider->element.ipv4.address);
-		provider->element.ipv4.address = g_strdup(value);
-	} else if (g_str_equal(key, "Netmask") == TRUE) {
-		g_free(provider->element.ipv4.netmask);
-		provider->element.ipv4.netmask = g_strdup(value);
-	} else if (g_str_equal(key, "PAC") == TRUE) {
-		g_free(provider->element.ipv4.pac);
-		provider->element.ipv4.pac = g_strdup(value);
-	} else if (g_str_equal(key, "DNS") == TRUE) {
-		g_free(provider->dns);
-		provider->dns = g_strdup(value);
-	} else if (g_str_equal(key, "Domain") == TRUE) {
+	} else if (g_str_equal(key, "Host") == TRUE) {
+		g_free(provider->host);
+		provider->host = g_strdup(value);
+	} else if (g_str_equal(key, "VPN.Domain") == TRUE) {
 		g_free(provider->domain);
 		provider->domain = g_strdup(value);
-	}
-
-	return connman_element_set_string(&provider->element, key, value);
+	} else
+		g_hash_table_replace(provider->setting_strings,
+				g_strdup(key), g_strdup(value));
+	return 0;
 }
 
 const char *connman_provider_get_string(struct connman_provider *provider,
@@ -822,8 +975,29 @@ const char *connman_provider_get_string(struct connman_provider *provider,
 		return provider->type;
 	else if (g_str_equal(key, "Name") == TRUE)
 		return provider->name;
+	else if (g_str_equal(key, "Host") == TRUE)
+		return provider->host;
+	else if (g_str_equal(key, "VPN.Domain") == TRUE)
+		return provider->domain;
 
-	return connman_element_get_string(&provider->element, key);
+	return g_hash_table_lookup(provider->setting_strings, key);
+}
+
+connman_bool_t
+__connman_provider_check_routes(struct connman_provider *provider)
+{
+	if (provider == NULL)
+		return FALSE;
+
+	if (provider->user_routes != NULL &&
+			g_hash_table_size(provider->user_routes) > 0)
+		return TRUE;
+
+	if (provider->routes != NULL &&
+			g_hash_table_size(provider->routes) > 0)
+		return TRUE;
+
+	return FALSE;
 }
 
 void *connman_provider_get_data(struct connman_provider *provider)
@@ -838,12 +1012,239 @@ void connman_provider_set_data(struct connman_provider *provider, void *data)
 
 void connman_provider_set_index(struct connman_provider *provider, int index)
 {
-	provider->element.index = index;
+	struct connman_service *service = provider->vpn_service;
+	struct connman_ipconfig *ipconfig;
+
+	DBG("");
+
+	if (service == NULL)
+		return;
+
+	ipconfig = __connman_service_get_ip4config(service);
+
+	if (ipconfig == NULL) {
+		__connman_service_create_ip4config(service, index);
+
+		ipconfig = __connman_service_get_ip4config(service);
+		if (ipconfig == NULL) {
+			DBG("Couldnt create ipconfig");
+			goto done;
+		}
+	}
+
+	__connman_ipconfig_set_method(ipconfig, CONNMAN_IPCONFIG_METHOD_FIXED);
+	__connman_ipconfig_set_index(ipconfig, index);
+
+
+	ipconfig = __connman_service_get_ip6config(service);
+
+	if (ipconfig == NULL) {
+		__connman_service_create_ip6config(service, index);
+
+		ipconfig = __connman_service_get_ip6config(service);
+		if (ipconfig == NULL) {
+			DBG("Couldnt create ipconfig for IPv6");
+			goto done;
+		}
+	}
+
+	__connman_ipconfig_set_method(ipconfig, CONNMAN_IPCONFIG_METHOD_OFF);
+	__connman_ipconfig_set_index(ipconfig, index);
+
+done:
+	provider->index = index;
 }
 
 int connman_provider_get_index(struct connman_provider *provider)
 {
-	return provider->element.index;
+	return provider->index;
+}
+
+int connman_provider_set_ipaddress(struct connman_provider *provider,
+					struct connman_ipaddress *ipaddress)
+{
+	struct connman_ipconfig *ipconfig = NULL;
+
+	ipconfig = __connman_service_get_ipconfig(provider->vpn_service,
+							ipaddress->family);
+	if (ipconfig == NULL)
+		return -EINVAL;
+
+	provider->family = ipaddress->family;
+
+	__connman_ipconfig_set_local(ipconfig, ipaddress->local);
+	__connman_ipconfig_set_peer(ipconfig, ipaddress->peer);
+	__connman_ipconfig_set_broadcast(ipconfig, ipaddress->broadcast);
+	__connman_ipconfig_set_gateway(ipconfig, ipaddress->gateway);
+	__connman_ipconfig_set_prefixlen(ipconfig, ipaddress->prefixlen);
+
+	return 0;
+}
+
+int connman_provider_set_pac(struct connman_provider *provider, const char *pac)
+{
+	DBG("provider %p pac %s", provider, pac);
+
+	__connman_service_set_pac(provider->vpn_service, pac);
+
+	return 0;
+}
+
+
+int connman_provider_set_domain(struct connman_provider *provider,
+					const char *domain)
+{
+	DBG("provider %p domain %s", provider, domain);
+
+	g_free(provider->domain);
+	provider->domain = g_strdup(domain);
+
+	__connman_service_set_domainname(provider->vpn_service, domain);
+
+	return 0;
+}
+
+int connman_provider_set_nameservers(struct connman_provider *provider,
+					const char *nameservers)
+{
+	int i;
+	char **nameservers_array = NULL;
+
+	DBG("provider %p nameservers %s", provider, nameservers);
+
+	__connman_service_nameserver_clear(provider->vpn_service);
+
+	if (nameservers == NULL)
+		return 0;
+
+	nameservers_array = g_strsplit(nameservers, " ", 0);
+
+	for (i = 0; nameservers_array[i] != NULL; i++) {
+		__connman_service_nameserver_append(provider->vpn_service,
+						nameservers_array[i], FALSE);
+	}
+
+	g_strfreev(nameservers_array);
+
+	return 0;
+}
+
+enum provider_route_type {
+	PROVIDER_ROUTE_TYPE_NONE = 0,
+	PROVIDER_ROUTE_TYPE_MASK = 1,
+	PROVIDER_ROUTE_TYPE_ADDR = 2,
+	PROVIDER_ROUTE_TYPE_GW   = 3,
+};
+
+static int route_env_parse(struct connman_provider *provider, const char *key,
+				int *family, unsigned long *idx,
+				enum provider_route_type *type)
+{
+	char *end;
+	const char *start;
+
+	DBG("name %s", provider->name);
+
+	if (!strcmp(provider->type, "openvpn")) {
+		if (g_str_has_prefix(key, "route_network_") == TRUE) {
+			start = key + strlen("route_network_");
+			*type = PROVIDER_ROUTE_TYPE_ADDR;
+		} else if (g_str_has_prefix(key, "route_netmask_") == TRUE) {
+			start = key + strlen("route_netmask_");
+			*type = PROVIDER_ROUTE_TYPE_MASK;
+		} else if (g_str_has_prefix(key, "route_gateway_") == TRUE) {
+			start = key + strlen("route_gateway_");
+			*type = PROVIDER_ROUTE_TYPE_GW;
+		} else
+			return -EINVAL;
+
+		*family = AF_INET;
+		*idx = g_ascii_strtoull(start, &end, 10);
+
+	} else if (!strcmp(provider->type, "openconnect")) {
+		if (g_str_has_prefix(key, "CISCO_SPLIT_INC_") == TRUE) {
+			*family = AF_INET;
+			start = key + strlen("CISCO_SPLIT_INC_");
+		} else if (g_str_has_prefix(key, "CISCO_IPV6_SPLIT_INC_") == TRUE) {
+			*family = AF_INET6;
+			start = key + strlen("CISCO_IPV6_SPLIT_INC_");
+		} else
+			return -EINVAL;
+
+		*idx = g_ascii_strtoull(start, &end, 10);
+
+		if (strncmp(end, "_ADDR", 5) == 0)
+			*type = PROVIDER_ROUTE_TYPE_ADDR;
+		else if (strncmp(end, "_MASK", 5) == 0)
+			*type = PROVIDER_ROUTE_TYPE_MASK;
+		else if (strncmp(end, "_MASKLEN", 8) == 0 &&
+				*family == AF_INET6) {
+			*type = PROVIDER_ROUTE_TYPE_MASK;
+		} else
+			return -EINVAL;
+	}
+
+	return 0;
+}
+
+int connman_provider_append_route(struct connman_provider *provider,
+					const char *key, const char *value)
+{
+	struct connman_route *route;
+	int ret, family = 0;
+	unsigned long idx = 0;
+	enum provider_route_type type = PROVIDER_ROUTE_TYPE_NONE;
+
+	DBG("key %s value %s", key, value);
+
+	ret = route_env_parse(provider, key, &family, &idx, &type);
+	if (ret < 0)
+		return ret;
+
+	DBG("idx %lu family %d type %d", idx, family, type);
+
+	route = g_hash_table_lookup(provider->routes, GINT_TO_POINTER(idx));
+	if (route == NULL) {
+		route = g_try_new0(struct connman_route, 1);
+		if (route == NULL) {
+			connman_error("out of memory");
+			return -ENOMEM;
+		}
+
+		route->family = family;
+
+		g_hash_table_replace(provider->routes, GINT_TO_POINTER(idx),
+						route);
+	}
+
+	switch (type) {
+	case PROVIDER_ROUTE_TYPE_NONE:
+		break;
+	case PROVIDER_ROUTE_TYPE_MASK:
+		route->netmask = g_strdup(value);
+		break;
+	case PROVIDER_ROUTE_TYPE_ADDR:
+		route->host = g_strdup(value);
+		break;
+	case PROVIDER_ROUTE_TYPE_GW:
+		route->gateway = g_strdup(value);
+		break;
+	}
+
+	return 0;
+}
+
+const char *connman_provider_get_driver_name(struct connman_provider *provider)
+{
+	if (provider->driver == NULL)
+		return NULL;
+
+	return provider->driver->name;
+}
+
+const char *connman_provider_get_save_group(struct connman_provider *provider)
+{
+	return provider->identifier;
 }
 
 static gint compare_priority(gconstpointer a, gconstpointer b)
@@ -865,6 +1266,7 @@ int connman_provider_driver_register(struct connman_provider_driver *driver)
 
 	driver_list = g_slist_insert_sorted(driver_list, driver,
 							compare_priority);
+	provider_create_all_from_type(driver->name);
 	return 0;
 }
 
@@ -875,21 +1277,116 @@ void connman_provider_driver_unregister(struct connman_provider_driver *driver)
 	driver_list = g_slist_remove(driver_list, driver);
 }
 
+static void provider_remove_all(gpointer key, gpointer value,
+						gpointer user_data)
+{
+	struct connman_provider *provider = value;
+
+	__connman_provider_remove(provider->identifier);
+}
+
+static void provider_offline_mode(connman_bool_t enabled)
+{
+	DBG("enabled %d", enabled);
+
+	if (enabled == TRUE)
+		g_hash_table_foreach(provider_hash, provider_remove_all, NULL);
+
+}
+
+static struct connman_provider *provider_get(int index)
+{
+	GHashTableIter iter;
+	gpointer value, key;
+
+	g_hash_table_iter_init(&iter, provider_hash);
+
+	while (g_hash_table_iter_next(&iter, &key, &value) == TRUE) {
+		struct connman_provider *provider = value;
+
+		if (provider->index == index)
+			return provider;
+	}
+
+	return NULL;
+}
+
+static void provider_service_changed(struct connman_service *service,
+				enum connman_service_state state)
+{
+	struct connman_provider *provider;
+	int vpn_index, service_index;
+
+	if (service == NULL)
+		return;
+
+	switch (state) {
+	case CONNMAN_SERVICE_STATE_UNKNOWN:
+	case CONNMAN_SERVICE_STATE_IDLE:
+	case CONNMAN_SERVICE_STATE_ASSOCIATION:
+	case CONNMAN_SERVICE_STATE_CONFIGURATION:
+	case CONNMAN_SERVICE_STATE_READY:
+	case CONNMAN_SERVICE_STATE_ONLINE:
+		return;
+	case CONNMAN_SERVICE_STATE_DISCONNECT:
+	case CONNMAN_SERVICE_STATE_FAILURE:
+		break;
+	}
+
+	service_index = __connman_service_get_index(service);
+
+	vpn_index = __connman_connection_get_vpn_index(service_index);
+
+	DBG("service %p %s state %d index %d/%d", service,
+		__connman_service_get_ident(service),
+		state, service_index, vpn_index);
+
+	if (vpn_index < 0)
+		return;
+
+	provider = provider_get(vpn_index);
+	if (provider == NULL)
+		return;
+
+	DBG("disconnect %p index %d", provider, vpn_index);
+
+	__connman_provider_disconnect(provider);
+
+	return;
+}
+
+static struct connman_notifier provider_notifier = {
+	.name			= "provider",
+	.offline_mode		= provider_offline_mode,
+	.service_state_changed	= provider_service_changed,
+};
+
 int __connman_provider_init(void)
 {
+	int err;
+
 	DBG("");
 
 	connection = connman_dbus_get_connection();
 
 	provider_hash = g_hash_table_new_full(g_str_hash, g_str_equal,
 						NULL, unregister_provider);
-	return 0;
+
+	err = connman_notifier_register(&provider_notifier);
+	if (err < 0) {
+		g_hash_table_destroy(provider_hash);
+		dbus_connection_unref(connection);
+	}
+
+	return err;
 }
 
 void __connman_provider_cleanup(void)
 {
 	DBG("");
 
+	connman_notifier_unregister(&provider_notifier);
+
 	g_hash_table_foreach(provider_hash, clean_provider, NULL);
 
 	g_hash_table_destroy(provider_hash);