It's even worse than that. Windows XP and Vista supplicants will respond to an EAP notification message (after dropping it on the ground) with the appropriate acknowledgement. The first release of WIndows 7 wouldn't even do that. So if an EAP server sent a Notification message, the state machine would grind to a halt. There was a hotfix, hopefully it was integrated into the patch stream by now. Dave. (former user of Notification messages) Quoting Arran Cudbard-Bell <a.cudbardb@freeradius.org>:
On Jun 27, 2011, at 7:55 AM, Christ Schlacta wrote:
is it at all possible to send a message to a windows 7 or windows vista client that the client is guaranteed to see when authentication is rejected?
Not using EAP no. There's a special EAP-Message type of EAP-Notification which is meant to contain a human interpreted message, but only a few supplicants will actually display it, and non of those are bundled Windows Supplicants.
-Arran
Arran Cudbard-Bell a.cudbardb@freeradius.org
RADIUS - Half the complexity of Diameter
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html