<br><br><div class="gmail_quote">On Fri, Jan 22, 2010 at 12:13 AM, Huckle Berry <span dir="ltr"><<a href="mailto:huck.berry@gmail.com">huck.berry@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<font face="arial,helvetica,sans-serif"></font> Will report later.<br></blockquote><div><br>I installed the new certs (I checked in the details tab on windows that both the server and client have the correct xpextentions) however the client still fails to respond. Just to be sure, I hopped over to my desktop, which runs linux, and set up Wicd for EAP-TLS and same results... Seems like it isn't a Windoze issue (as much as I'd liek it to be)<br>
<br>Here's the relevant part of the log:<br><span style="font-family: courier new,monospace;">rad_recv: Access-Request packet from host 192.168.1.1 port 3090, id=0, length=148</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Cleaning up request 58 ID 0 with timestamp +233</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> User-Name = "<a href="mailto:user@example.com">user@example.com</a>"</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> NAS-IP-Address = 192.168.1.1</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> Called-Station-Id = "0016b6e2cc20"</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> Calling-Station-Id = "0016b659f0d7"</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> NAS-Identifier = "0016b6e2cc20"</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> NAS-Port = 62</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> Framed-MTU = 1400</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> State = 0x2c846de62e8760f57fd0c142afa7b978</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> NAS-Port-Type = Wireless-802.11</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> EAP-Message = 0x020300060d00</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> Message-Authenticator = 0x86dfb6f2b9a4a4a219ea59887d5563cc</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">+- entering group authorize {...}</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">++[preprocess] returns ok</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">++[chap] returns noop</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">++[mschap] returns noop</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">[suffix] Looking up realm "<a href="http://example.com">example.com</a>" for User-Name = "<a href="mailto:user@example.com">user@example.com</a>"</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">[suffix] Found realm "<a href="http://example.com">example.com</a>"</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">[suffix] Adding Realm = "<a href="http://example.com">example.com</a>"</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">[suffix] Proxying request from user user to realm <a href="http://example.com">example.com</a></span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">[suffix] Preparing to proxy authentication request to realm "<a href="http://example.com">example.com</a>" </span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">++[suffix] returns updated</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">[eap] Request is supposed to be proxied to Realm <a href="http://example.com">example.com</a>. Not doing EAP.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">++[eap] returns noop</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">++[unix] returns notfound</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">[files] users: Matched entry <a href="mailto:user@example.com">user@example.com</a> at line 51</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">[files] expand: Hello, %{User-Name} -> Hello, <a href="mailto:user@example.com">user@example.com</a></span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">++[files] returns ok</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">++[expiration] returns noop</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">++[logintime] returns noop</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">[pap] Found existing Auth-Type, not changing it.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">++[pap] returns noop</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Found Auth-Type = EAP</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">+- entering group authenticate {...}</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">[eap] Request found, released from the list</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">[eap] EAP/tls</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">[eap] processing type tls</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">[tls] Authenticate</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">[tls] processing EAP-TLS</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">[tls] Received TLS ACK</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">[tls] ACK handshake fragment handler</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">[tls] eaptls_verify returned 1 </span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">[tls] eaptls_process returned 13 </span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">++[eap] returns handled</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Sending Access-Challenge of id 0 to 192.168.1.1 port 3090</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> Reply-Message = "Hello, <a href="mailto:user@example.com">user@example.com</a>"</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> EAP-Message = 0x010404000dc000000b5703020102020900b66e36fdf4f33312300d06092...</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> EAP-Message = 0x75733112301006035504071309536f6d657768657265311530130603550...</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> EAP-Message = 0xeda0d0b5fe688a3f31d0d2569b4cf4d7f61a2196822bb2acee9a3ad4149...</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> EAP-Message = 0x4652310f300d06035504081306526164697573311230100603550407130...</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> EAP-Message = 0xd3c56640e3b3ce4de1c63af3</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> Message-Authenticator = 0x00000000000000000000000000000000</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> State = 0x2c846de62f8060f57fd0c142afa7b978</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Finished request 59.</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">Going to the next request</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">Waking up in 4.9 seconds.</span><br><br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<font color="#888888">
<br>~Huckle Berry<br>
</font></blockquote></div><br>