wpa auth.xp stuck on login

30 Aug 2006

      Good day to you all,

I'm kinda stuck with authenticating a windows xp sp2 laptop to a wlan - ap
that uses wpa.

i followed the 802.1X port based auth howto from tldp.org but no luck.
the idea is to use ms-chapv2,eap,tls,peap
in the log file i can see the user auth. come by, but no errors or 
problems showed up.
the other day, a friend tried is with his mac i-book, and he did get in!?
but now my xp machine doesn't..  dunno where it goes wrong..

starting  radiusd -XX gives alot of output, but no error's shown either.
here is a small dump..
---------
rad_recv: Access-Request packet from host 10.0.0.20:3072, id=0, length=125
        User-Name = "collen"
        NAS-IP-Address = 10.0.0.20
        Called-Station-Id = "0016b69e59c3"
        Calling-Station-Id = "00166f980e78"
        NAS-Identifier = "0016b69e59c3"
        NAS-Port = 46
        Framed-MTU = 1400
        NAS-Port-Type = Wireless-802.11
        EAP-Message = 0x0200000b01636f6c6c656e
        Message-Authenticator = 0xe97abfadc688db9d412503fc8a0e283f
Wed Aug 30 15:53:02 2006 : Debug:   Processing the authorize section of 
radiusd.conf
Wed Aug 30 15:53:02 2006 : Debug: modcall: entering group authorize for 
request 0
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: calling 
preprocess (rlm_preprocess) for request 0
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: returned from 
preprocess (rlm_preprocess) for request 0
Wed Aug 30 15:53:02 2006 : Debug:   modcall[authorize]: module 
"preprocess" returns ok for request 0
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: calling 
auth_log (rlm_detail) for request 0
Wed Aug 30 15:53:02 2006 : Debug: radius_xlat:  
'/usr/local/freeradius/var/log/radius/radacct/10.0.0.20/auth-detail-20060830'
Wed Aug 30 15:53:02 2006 : Debug: rlm_detail: 
/usr/local/freeradius/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d 
expands to 
/usr/local/freeradius/var/log/radius/radacct/10.0.0.20/auth-detail-20060830
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: returned from 
auth_log (rlm_detail) for request 0
Wed Aug 30 15:53:02 2006 : Debug:   modcall[authorize]: module 
"auth_log" returns ok for request 0
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: calling mschap 
(rlm_mschap) for request 0
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: returned from 
mschap (rlm_mschap) for request 0
Wed Aug 30 15:53:02 2006 : Debug:   modcall[authorize]: module "mschap" 
returns noop for request 0
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: calling eap 
(rlm_eap) for request 0
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap: EAP packet type response id 
0 length 11
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap: No EAP Start, assuming it's 
an on-going EAP conversation
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: returned from 
eap (rlm_eap) for request 0
Wed Aug 30 15:53:02 2006 : Debug:   modcall[authorize]: module "eap" 
returns updated for request 0
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: calling files 
(rlm_files) for request 0
Wed Aug 30 15:53:02 2006 : Debug:     users: Matched entry collen at 
line 217
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: returned from 
files (rlm_files) for request 0
Wed Aug 30 15:53:02 2006 : Debug:   modcall[authorize]: module "files" 
returns ok for request 0
Wed Aug 30 15:53:02 2006 : Debug: modcall: leaving group authorize 
(returns updated) for request 0
Wed Aug 30 15:53:02 2006 : Debug:   rad_check_password:  Found Auth-Type EAP
Wed Aug 30 15:53:02 2006 : Debug: auth: type "EAP"
Wed Aug 30 15:53:02 2006 : Debug:   Processing the authenticate section 
of radiusd.conf
Wed Aug 30 15:53:02 2006 : Debug: modcall: entering group authenticate 
for request 0
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authenticate]: calling eap 
(rlm_eap) for request 0
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap: EAP Identity
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap: processing type tls
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap_tls: Initiate
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap_tls: Start returned 1
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authenticate]: returned 
from eap (rlm_eap) for request 0
Wed Aug 30 15:53:02 2006 : Debug:   modcall[authenticate]: module "eap" 
returns handled for request 0
Wed Aug 30 15:53:02 2006 : Debug: modcall: leaving group authenticate 
(returns handled) for request 0
Sending Access-Challenge of id 0 to 10.0.0.20 port 3072
        Reply-Message = "Go and See your system administrator"
        EAP-Message = 0x010100061920
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x514be7fc208b2ee1df2cc191b5282f3a
Wed Aug 30 15:53:02 2006 : Debug: Finished request 0
Wed Aug 30 15:53:02 2006 : Debug: Going to the next request
Wed Aug 30 15:53:02 2006 : Debug: --- Walking the entire request list ---
Wed Aug 30 15:53:02 2006 : Debug: Waking up in 6 seconds...
rad_recv: Access-Request packet from host 10.0.0.20:3072, id=0, length=212
        User-Name = "collen"
        NAS-IP-Address = 10.0.0.20
        Called-Station-Id = "0016b69e59c3"
        Calling-Station-Id = "00166f980e78"
        NAS-Identifier = "0016b69e59c3"
        NAS-Port = 46
        Framed-MTU = 1400
        State = 0x514be7fc208b2ee1df2cc191b5282f3a
        NAS-Port-Type = Wireless-802.11
        EAP-Message = 
0x0201005019800000004616030100410100003d030144f67859f94017b05e178d502a2f37b42e86f6cb6d6d13bd90a07398bdb3115900001600040005000a000900640062000300060013001200630100
        Message-Authenticator = 0x0fb306b26777d99c2b78ac78fcbbcf85
Wed Aug 30 15:53:02 2006 : Debug:   Processing the authorize section of 
radiusd.conf
Wed Aug 30 15:53:02 2006 : Debug: modcall: entering group authorize for 
request 1
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: calling 
preprocess (rlm_preprocess) for request 1
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: returned from 
preprocess (rlm_preprocess) for request 1
Wed Aug 30 15:53:02 2006 : Debug:   modcall[authorize]: module 
"preprocess" returns ok for request 1
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: calling 
auth_log (rlm_detail) for request 1
Wed Aug 30 15:53:02 2006 : Debug: radius_xlat:  
'/usr/local/freeradius/var/log/radius/radacct/10.0.0.20/auth-detail-20060830'
Wed Aug 30 15:53:02 2006 : Debug: rlm_detail: 
/usr/local/freeradius/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d 
expands to 
/usr/local/freeradius/var/log/radius/radacct/10.0.0.20/auth-detail-20060830
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: returned from 
auth_log (rlm_detail) for request 1
Wed Aug 30 15:53:02 2006 : Debug:   modcall[authorize]: module 
"auth_log" returns ok for request 1
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: calling mschap 
(rlm_mschap) for request 1
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: returned from 
mschap (rlm_mschap) for request 1
Wed Aug 30 15:53:02 2006 : Debug:   modcall[authorize]: module "mschap" 
returns noop for request 1
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: calling eap 
(rlm_eap) for request 1
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap: EAP packet type response id 
1 length 80
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap: No EAP Start, assuming it's 
an on-going EAP conversation
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: returned from 
eap (rlm_eap) for request 1
Wed Aug 30 15:53:02 2006 : Debug:   modcall[authorize]: module "eap" 
returns updated for request 1
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: calling files 
(rlm_files) for request 1
Wed Aug 30 15:53:02 2006 : Debug:     users: Matched entry collen at 
line 217
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authorize]: returned from 
files (rlm_files) for request 1
Wed Aug 30 15:53:02 2006 : Debug:   modcall[authorize]: module "files" 
returns ok for request 1
Wed Aug 30 15:53:02 2006 : Debug: modcall: leaving group authorize 
(returns updated) for request 1
Wed Aug 30 15:53:02 2006 : Debug:   rad_check_password:  Found Auth-Type EAP
Wed Aug 30 15:53:02 2006 : Debug: auth: type "EAP"
Wed Aug 30 15:53:02 2006 : Debug:   Processing the authenticate section 
of radiusd.conf
Wed Aug 30 15:53:02 2006 : Debug: modcall: entering group authenticate 
for request 1
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authenticate]: calling eap 
(rlm_eap) for request 1
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap: Request found, released 
from the list
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap: EAP/peap
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap: processing type peap
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap_peap: Authenticate
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap_tls: processing TLS
Wed Aug 30 15:53:02 2006 : Debug: rlm_eap_tls:  Length Included
Wed Aug 30 15:53:02 2006 : Debug:   eaptls_verify returned 11
Wed Aug 30 15:53:02 2006 : Debug:     (other): before/accept initialization
Wed Aug 30 15:53:02 2006 : Debug:     TLS_accept: before/accept 
initialization
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap_tls: <<< TLS 1.0 Handshake 
[length 0041], ClientHello
Wed Aug 30 15:53:02 2006 : Debug:     TLS_accept: SSLv3 read client hello A
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap_tls: >>> TLS 1.0 Handshake 
[length 004a], ServerHello
Wed Aug 30 15:53:02 2006 : Debug:     TLS_accept: SSLv3 write server hello A
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap_tls: >>> TLS 1.0 Handshake 
[length 0694], Certificate
Wed Aug 30 15:53:02 2006 : Debug:     TLS_accept: SSLv3 write certificate A
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap_tls: >>> TLS 1.0 Handshake 
[length 0004], ServerHelloDone
Wed Aug 30 15:53:02 2006 : Debug:     TLS_accept: SSLv3 write server done A
Wed Aug 30 15:53:02 2006 : Debug:     TLS_accept: SSLv3 flush data
Wed Aug 30 15:53:02 2006 : Error:     TLS_accept:error in SSLv3 read 
client certificate A
Wed Aug 30 15:53:02 2006 : Error: rlm_eap: SSL error 
error:00000000:lib(0):func(0):reason(0)
Wed Aug 30 15:53:02 2006 : Debug: In SSL Handshake Phase
Wed Aug 30 15:53:02 2006 : Debug: In SSL Accept mode
Wed Aug 30 15:53:02 2006 : Debug:   eaptls_process returned 13
Wed Aug 30 15:53:02 2006 : Debug:   rlm_eap_peap: EAPTLS_HANDLED
Wed Aug 30 15:53:02 2006 : Debug:   modsingle[authenticate]: returned 
from eap (rlm_eap) for request 1
Wed Aug 30 15:53:02 2006 : Debug:   modcall[authenticate]: module "eap" 
returns handled for request 1
Wed Aug 30 15:53:02 2006 : Debug: modcall: leaving group authenticate 
(returns handled) for request 1
Sending Access-Challenge of id 0 to 10.0.0.20 port 3072
        Reply-Message = "Go and See your system administrator"
        EAP-Message = 
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
        EAP-Message = 
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
        EAP-Message = 
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
        EAP-Message = 
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
        EAP-Message = 0x652e636f6d301e170d3034303132353133323630375a
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x98cb9ce82b22aff87c8ddd218edbc40a
Wed Aug 30 15:53:02 2006 : Debug: Finished request 1
Wed Aug 30 15:53:02 2006 : Debug: Going to the next request
Wed Aug 30 15:53:02 2006 : Debug: rl_next:  returning NULL
---------------

Cheers

Collen..

Collen Blijenberg

tags

participants (1)