Hi friends,<br>I want to deploy freeradius authentication in my wireless lan.<br>I m using EAP-TLS with Windows XP SP2 inbuilt supplicant.<br>Everything works fine till the freeradius server and hostapd is initialized.But then i think authentication fails.It shows a list of "REAUTH_TIMER entering state INITIALIZE" message.For more details i m pasting he hostapd output.Plz help.<br><br> hostapd -dd hostapd.conf<br>Configuration file: hostapd.conf<br>ctrl_interface_group=0<br>madwifi_set_iface_flags: dev_up=0<br>Using interface ath0 with hwaddr 00:15:6d:50:02:53 and ssid 'Havanet-EDS'<br>ath0: RADIUS Authentication server 192.168.2.224:1812<br>ath0: RADIUS Accounting server 192.168.2.224:1813<br>madwifi_set_ieee8021x: enabled=1<br>madwifi_configure_wpa: group key cipher=1<br>madwifi_configure_wpa: pairwise key ciphers=0xa<br>madwifi_configure_wpa: key management algorithms=0x1<br>madwifi_configure_wpa: rsn capabilities=0x0<br>madwifi_configure_wpa: enable WPA=
0x1<br>madwifi_set_iface_flags: dev_up=1<br>WPA: group state machine entering state GTK_INIT<br>GMK - hexdump(len=32): [REMOVED]<br>GTK - hexdump(len=32): [REMOVED]<br>WPA: group state machine entering state SETKEYSDONE<br>madwifi_set_key: alg=TKIP addr=00:00:00:00:00:00 key_idx=1<br>madwifi_set_privacy: enabled=1<br>ath0: RADIUS Sending RADIUS message to accounting server<br>ath0: RADIUS Next RADIUS client retransmit in 3 seconds<br><br>SIOCGIWRANGE: WE(compiled)=19 WE(source)=13 enc_capa=0xf<br>Flushing old station entries<br>madwifi_sta_deauth: addr=ff:ff:ff:ff:ff:ff reason_code=3<br>Deauthenticate all stations<br>l2_packet_receive - recvfrom: Network is down<br>Wireless event: cmd=0x8c03 len=20<br>ath0: STA 00:16:b6:99:81:13 IEEE 802.11: associated<br> New STA<br>ath0: STA 00:16:b6:99:81:13 WPA: event 1 notification<br>madwifi_del_key: addr=00:16:b6:99:81:13 key_idx=0<br>ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: start authentication<br>IEEE 802.1X:
00:16:b6:99:81:13 AUTH_PAE entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 AUTH_KEY_TX entering state NO_KEY_TRANSMIT<br>IEEE 802.1X: 00:16:b6:99:81:13 KEY_RX entering state NO_KEY_RECEIVE<br>IEEE 802.1X: 00:16:b6:99:81:13 CTRL_DIR entering state IN_OR_BOTH<br>IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state IDLE<br>IEEE 802.1X: 00:16:b6:99:81:13 KEY_RX entering state NO_KEY_RECEIVE<br>IEEE 802.1X: 00:16:b6:99:81:13 CTRL_DIR entering state FORCE_BOTH<br>IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 KEY_RX entering state NO_KEY_RECEIVE<br>ath0: STA 00:16:b6:99:81:13 WPA: start authentication<br>WPA: 00:16:b6:99:81:13 WPA_PTK entering state INITIALIZE<br>madwifi_del_key: addr=00:16:b6:99:81:13
key_idx=0<br>WPA: 00:16:b6:99:81:13 WPA_PTK_GROUP entering state IDLE<br>WPA: 00:16:b6:99:81:13 WPA_PTK entering state AUTHENTICATION<br>WPA: 00:16:b6:99:81:13 WPA_PTK entering state AUTHENTICATION2<br>IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state DISCONNECTED<br>ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: unauthorizing port<br>madwifi_set_sta_authorized: addr=00:16:b6:99:81:13 authorized=0<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state RESTART<br>IEEE 802.1X: station 00:16:b6:99:81:13 - new auth session, clearing State<br>IEEE 802.1X: Generated EAP Request-Identity for 00:16:b6:99:81:13 (identifier 0, timeout 30)<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state CONNECTING<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state
AUTHENTICATING<br>IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state REQUEST<br>IEEE 802.1X: Sending EAP Packet to 00:16:b6:99:81:13 (identifier 0)<br>TX EAPOL - hexdump(len=42): 00 16 b6 99 81 13 00 15 6d 50 02 53 88 8e 01 00 00 18 01 00 00 18 01 57 65 6c 63 6f 6d 65 54 6f 48 61 76 61 6e 65 74 57 44 53<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 15 bytes from 00:16:b6:99:81:13<br> IEEE 802.1X: version=1 type=0 length=11<br> EAP: code=2 identifier=0 length=11 (response)<br>ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: received EAP packet (code=2 id=0 len=11) from STA: EAP Response-Identity (1)<br>ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: STA identity 'client'<br>IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state RESPONSE<br>Encapsulating EAP message into a RADIUS packet<br>ath0: RADIUS Sending RADIUS message to authentication
server<br>ath0: RADIUS Next RADIUS client retransmit in 0 seconds<br><br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 5 bytes from 00:16:b6:99:81:13<br> IEEE 802.1X: version=1 type=1 length=0<br> ignoring 1 extra octets after IEEE 802.1X packet<br>ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: received EAPOL-Start from STA<br>ath0: STA 00:16:b6:99:81:13 WPA: event 5 notification<br>WPA: 00:16:b6:99:81:13 WPA_PTK entering state AUTHENTICATION2<br>IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state ABORTING<br>IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state INITIALIZE<br>ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: aborting authentication<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state RESTART<br>IEEE 802.1X: station 00:16:b6:99:81:13 - new auth session,
clearing State<br>IEEE 802.1X: Generated EAP Request-Identity for 00:16:b6:99:81:13 (identifier 1, timeout 30)<br>IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state IDLE<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state CONNECTING<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state AUTHENTICATING<br>IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state REQUEST<br>IEEE 802.1X: Sending EAP Packet to 00:16:b6:99:81:13 (identifier 1)<br>TX EAPOL - hexdump(len=42): 00 16 b6 99 81 13 00 15 6d 50 02 53 88 8e 01 00 00 18 01 01 00 18 01 57 65 6c 63 6f 6d 65 54 6f 48 61 76 61 6e 65 74 57 44 53<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 15 bytes from 00:16:b6:99:81:13<br> IEEE 802.1X: version=1
type=0 length=11<br> EAP: code=2 identifier=1 length=11 (response)<br>ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: received EAP packet (code=2 id=1 len=11) from STA: EAP Response-Identity (1)<br>ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: STA identity 'client'<br>IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state RESPONSE<br>Encapsulating EAP message into a RADIUS packet<br>ath0: RADIUS Sending RADIUS message to authentication server<br>ath0: RADIUS Next RADIUS client retransmit in 0 seconds<br><br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 15 bytes from 00:16:b6:99:81:13<br> IEEE 802.1X: version=1 type=0 length=11<br> EAP: code=2 identifier=0 length=11 (response)<br>ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: EAP Identifier of the Response-Identity does not match (was 0, expected 1) - ignored<br>IEEE 802.1X: 00:16:b6:99:81:13
REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 15 bytes from 00:16:b6:99:81:13<br> IEEE 802.1X: version=1 type=0 length=11<br> EAP: code=2 identifier=1 length=11 (response)<br>ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: received EAP packet (code=2 id=1 len=11) from STA: EAP Response-Identity (1)<br>ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: STA identity 'client'<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>ath0: STA 00:00:00:00:00:00 RADIUS: Resending RADIUS message (id=0)<br>ath0: RADIUS Next RADIUS client retransmit in 3 seconds<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X:
00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE<br>ath0: STA 00:16:b6:99:81:13 RADIUS: Resending RADIUS message (id=2)<br>ath0: STA 00:16:b6:99:81:13 RADIUS: Resending RADIUS message (id=1)<br>ath0: RADIUS Next RADIUS client retransmit in 3 seconds.<br><br>The authentication does not get successful and the wireless network notification icon on the windows XP side shows "validating" status for hours.<br>Plzzz help.<br><br><br><p>
<hr size=1>How low will we go? Check out Yahoo! Messenger’s low <a href="http://us.rd.yahoo.com/mail_us/taglines/postman8/*http://us.rd.yahoo.com/evt=39663/*http://voice.yahoo.com"> PC-to-Phone call rates.