On 01/12/2011 08:10 PM, Rob Yamry wrote:
We have a stangle problem going on with the Apple iTouches in the district here. This started since they were upgraded to iOS v.4.x....so it seems. What is happening is that the user will put in their credentials and get prompted to accept the certificate as it says its untrusted. The user clicks accept, all looks good and then it says it failed to connected. So they hit dismiss on that message, click join again, accept the certificate again and then they are accepted onto the network. But, sometimes they have to hit Dismiss/Join up to 15-20 times until it will accept it.
I have a very vague recollection we faced something similar to this, and dealt with it by (massively) increasing the EAPOL timeout on our wireless controllers. IIRC the problem is that you have to hit "accept" fast enough that the original EAP conversation is still in-play. This is a function of both FreeRadius (timeout of EAP conversations) as well as your wireless platform. But I might be mistaken - it's a very hazy recollection.