[ Re: eap-ttls failing]
-------- Original Message -------- Subject: Re: eap-ttls failing Date: Tue, 27 Jan 2009 11:58:54 -0500 From: Josh Hiner <josh@remc1.org> To: Josh Hiner <josh@remc1.org> References: <O6ukdVry.1233065929.9664600.tnt@kalik.net> <497F230B.1050103@remc1.org> <497F237C.7020306@remc1.org> Josh Hiner wrote:
Josh Hiner wrote:
tnt@kalik.net wrote:
Whoops, I thought I solved this but I didnt. I tried setting up eap-tls on a few different laptops each using windows xp to configure eap-tls (not the wireless card client). I get the same results there. I have nothing in my /etc/raddb/users file. I tried putting: josh Auth-Type := eap Auth-Type := Accept
Don't do that. Don't force Auth-Type. It's not going to help and it will break everything else.
On the XP client I also notice that even though I have the Certificate Authority installed, the client certificate reports: Windows does not have enough information to verify this certificate.
I figured that the certificate chain was broken. As a test, I imported the server certificate and stuck it in the Trusted root authorities section. This completed the chain (since the client cert was signed off the server cert which is what the make client does in /etc/raddb/certs). But, of course, the server cert is not meant to be a cert authority so windows xp complains about this.
That is the problem. Windows won't recongnize server certificate as intermediate ca any more. The "cure" is to try signing client certificates with ca certificate instead. I have posted to the list an altered Makefile with make caclient.pem command added a few days ago. If you can't find it I will post another one this evening.
Ivan Kalik Kalik Informatika ISP
I did find the Makefile. Thanks! I tried to do a make caclient.pem but it threw this error:
openssl req -new -out caclient.csr -keyout caclient.key -config ./client.cnf Generating a 2048 bit RSA private key ...........+++ .......+++ writing new private key to 'caclient.key' ----- openssl ca -batch -keyfile ca.key -cert ca.pem -in caclient.csr -key `grep output_password ca.cnf | sed 's/.*=//;s/^ *//'` -out caclient.crt -extensions xpclient_ext -extfile xpextensions -config ./client.cnf Using configuration from ./client.cnf wrong number of fields on line 1 (looking for field 6, got 1, '' left) make: *** [caclient.crt] Error 1
I dont need to re-do my CA and server cert prior to making the client certs do I? Ha, never mind. My index.txt file was messed up. -josh
Ok, made new client cert and now it shows valid and displays "Provides your identity to a remote Computer" as the intended purpose and on the Details tab displays the correct info etc... The Certification Path displays valid. Still same problem though (exact same problem) of just sitting there at "Attempting to authenticate". Here is what just loops over and over: Ready to process requests. rad_recv: Access-Request packet from host 172.17.10.108 port 1027, id=66, length=172 User-Name = "josh" NAS-IP-Address = 172.17.10.108 NAS-Identifier = "00:1f:41:3a:82:f9" NAS-Port = 1 Called-Station-Id = "00-1F-41-3A-82-F9:CCISD-REMC1" Calling-Station-Id = "00-16-B6-5C-AC-DD" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x02050009016a6f7368 Message-Authenticator = 0x864461492a35fa412e30d0f27ea0cbf3 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "josh", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [ntdomain] No '\' in User-Name = "josh", looking up realm NULL [ntdomain] No such realm "NULL" ++[ntdomain] returns noop [eap] EAP packet type response id 5 length 9 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns updated ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop [pap] Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] EAP Identity [eap] processing type tls [tls] Requiring client certificate [tls] Initiate [tls] Start returned 1 ++[eap] returns handled Sending Access-Challenge of id 66 to 172.17.10.108 port 1027 EAP-Message = 0x010600060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xca0fec0fca09e1323ddcba98066d48ce Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 172.17.10.108 port 1027, id=67, length=261 User-Name = "josh" NAS-IP-Address = 172.17.10.108 NAS-Identifier = "00:1f:41:3a:82:f9" NAS-Port = 1 Called-Station-Id = "00-1F-41-3A-82-F9:CCISD-REMC1" Calling-Station-Id = "00-16-B6-5C-AC-DD" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x020600500d800000004616030100410100003d0301497f27683f3a7573ff79fcadddfc58dc798d58ccc564e5c7b41ce43a496553e400001600040005000a000900640062000300060013001200630100 State = 0xca0fec0fca09e1323ddcba98066d48ce Message-Authenticator = 0x05b1b4bffe53467521d36730cbdcb0c5 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "josh", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [ntdomain] No '\' in User-Name = "josh", looking up realm NULL [ntdomain] No such realm "NULL" ++[ntdomain] returns noop [eap] EAP packet type response id 6 length 80 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns updated ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop [pap] Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS TLS Length 70 [tls] Length Included [tls] eaptls_verify returned 11 [tls] (other): before/accept initialization [tls] TLS_accept: before/accept initialization [tls] <<< TLS 1.0 Handshake [length 0041], ClientHello [tls] TLS_accept: SSLv3 read client hello A [tls] >>> TLS 1.0 Handshake [length 002a], ServerHello [tls] TLS_accept: SSLv3 write server hello A [tls] >>> TLS 1.0 Handshake [length 0846], Certificate [tls] TLS_accept: SSLv3 write certificate A [tls] >>> TLS 1.0 Handshake [length 00a3], CertificateRequest [tls] TLS_accept: SSLv3 write certificate request A [tls] TLS_accept: SSLv3 flush data [tls] TLS_accept: Need to read more data: SSLv3 read client certificate A In SSL Handshake Phase In SSL Accept mode [tls] eaptls_process returned 13 ++[eap] returns handled Sending Access-Challenge of id 67 to 172.17.10.108 port 1027 EAP-Message = 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 EAP-Message = 0x170d3039303132373034313133385a170d3239303132323034313133385a307c310b30090603550406130255533111300f060355040813084d6963686967616e310e300c060355040a130552454d4331312830260603550403131f52454d433120526164697573205365727665722043657274696669636174653120301e06092a864886f70d0109011611737570706f72744072656d63312e6e657430820122300d06092a864886f70d01010105000382010f003082010a0282010100df5db79ac92e13bb06dd2458db371fa0c22ebd220440aa0747e98a13d64027fa10720c69b224d607bfd2a7b2836c224cefca5113d0c56cf7d97d25703bb05f8b EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x820379a00302010202010030 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xca0fec0fcb08e1323ddcba98066d48ce Finished request 1. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 172.17.10.108 port 1027, id=68, length=187 User-Name = "josh" NAS-IP-Address = 172.17.10.108 NAS-Identifier = "00:1f:41:3a:82:f9" NAS-Port = 1 Called-Station-Id = "00-1F-41-3A-82-F9:CCISD-REMC1" Calling-Station-Id = "00-16-B6-5C-AC-DD" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x020700060d00 State = 0xca0fec0fcb08e1323ddcba98066d48ce Message-Authenticator = 0x9799f67311b1f6aef50af33fc748ba4e +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "josh", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [ntdomain] No '\' in User-Name = "josh", looking up realm NULL [ntdomain] No such realm "NULL" ++[ntdomain] returns noop [eap] EAP packet type response id 7 length 6 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns updated ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop [pap] Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] Received TLS ACK [tls] ACK handshake fragment handler [tls] eaptls_verify returned 1 [tls] eaptls_process returned 13 ++[eap] returns handled Sending Access-Challenge of id 68 to 172.17.10.108 port 1027 EAP-Message = 0x010804000dc0000009220d06092a864886f70d0101040500308191310b30090603550406130255533111300f060355040813084d6963686967616e3110300e0603550407130748616e636f636b310e300c060355040a130552454d43313120301e06092a864886f70d0109011611737570706f72744072656d63312e6e6574312b30290603550403132252454d43312052616469757320436572746966696361746520417574686f72697479301e170d3039303132373034313131325a170d3239303132323034313131325a308191310b30090603550406130255533111300f060355040813084d6963686967616e3110300e0603550407130748616e EAP-Message = 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 EAP-Message = 0x2316add0dfd36901ec2b2da655be187efe786c36cd9c9a09a51a065333dff65e991e3b88bd826f9f07b5c7bf0366dfaf1fd44870e4c8df99a987dab4d955c104ea5fb3a0dedaed2e758a75508b4a5bb88f06c9f80c5d4633057f6624247230a9ff3bf64adc9853f366f9d7c487825be1b0b5137b85a8ee4b07af87b6cfb8341fe5ff4b7780677d0203010001a381f13081ee301d0603551d0e04160414b0af659819810e066c1fae3a2f9a9fc3377af5693081be0603551d230481b63081b38014b0af659819810e066c1fae3a2f9a9fc3377af569a18197a48194308191310b30090603550406130255533111300f060355040813084d696368696761 EAP-Message = 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 EAP-Message = 0xcbdf5f73170cd3ed1a52364e Message-Authenticator = 0x00000000000000000000000000000000 State = 0xca0fec0fc807e1323ddcba98066d48ce Finished request 2. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 172.17.10.108 port 1027, id=69, length=187 User-Name = "josh" NAS-IP-Address = 172.17.10.108 NAS-Identifier = "00:1f:41:3a:82:f9" NAS-Port = 1 Called-Station-Id = "00-1F-41-3A-82-F9:CCISD-REMC1" Calling-Station-Id = "00-16-B6-5C-AC-DD" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x020800060d00 State = 0xca0fec0fc807e1323ddcba98066d48ce Message-Authenticator = 0x07dba943335930dd66ff91cc53f3a302 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "josh", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [ntdomain] No '\' in User-Name = "josh", looking up realm NULL [ntdomain] No such realm "NULL" ++[ntdomain] returns noop [eap] EAP packet type response id 8 length 6 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns updated ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop [pap] Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] Received TLS ACK [tls] ACK handshake fragment handler [tls] eaptls_verify returned 1 [tls] eaptls_process returned 13 ++[eap] returns handled Sending Access-Challenge of id 69 to 172.17.10.108 port 1027 EAP-Message = 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 EAP-Message = 0x11737570706f72744072656d63312e6e6574312b30290603550403132252454d43312052616469757320436572746966696361746520417574686f726974790e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xca0fec0fc906e1323ddcba98066d48ce Finished request 3. Going to the next request Waking up in 4.9 seconds. Cleaning up request 0 ID 66 with timestamp +18 Cleaning up request 1 ID 67 with timestamp +18 Cleaning up request 2 ID 68 with timestamp +18 Cleaning up request 3 ID 69 with timestamp +18 Ready to process requests.
Ok, made new client cert and now it shows valid and displays "Provides your identity to a remote Computer" as the intended purpose and on the Details tab displays the correct info etc... The Certification Path displays valid. Still same problem though (exact same problem) of just sitting there at "Attempting to authenticate".
Have you deleted the old certificate from the certificate store? What does eapol.log say now. Ivan Kalik Kalik Informatika ISP
tnt@kalik.net wrote:
Ok, made new client cert and now it shows valid and displays "Provides your identity to a remote Computer" as the intended purpose and on the Details tab displays the correct info etc... The Certification Path displays valid. Still same problem though (exact same problem) of just sitting there at "Attempting to authenticate".
Have you deleted the old certificate from the certificate store? What does eapol.log say now.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Yep, I have deleted the old certificate =D. Here is what epol.log says. I see the part where the card goes into authenticate mode over and over again but I dont see a critical error. Search for this line where authentication just starts over and over? This appears on all laptops with different wireless cards but all use windows xp to setup eap-tls: [1712] 13:41:51:028: ProcessReceivedPacket: EAPOLSTATE_AUTHENTICATING There is an error about updating a registry key or something but that error should be normal as I've seen it on many machines that are able to connect via peap and ttls. Notice at the end it reports a disconnect, that is me finally clicking disconnect to stop the authentication loop. <start of log> [1208] 13:41:01:687: ElSessionChangeHandler: CONNECT for session = (0) [1224] 13:41:01:687: ElUserLogonCallback: UserloggedOn = 0 [1224] 13:41:01:777: ElCheckUserModuleReady: No user logged on [1224] 13:41:01:787: ElEapEnd entered [1224] 13:41:01:787: FSMLogoff entered for port Intel(R) PRO/100 VE Network Connection #2 - Packet Scheduler Miniport [1224] 13:41:01:787: ElEapEnd entered [1224] 13:41:01:787: Setting state LOGOFF for port Intel(R) PRO/100 VE Network Connection #2 - Packet Scheduler Miniport [1224] 13:41:01:787: FSMLogoff completed for port Intel(R) PRO/100 VE Network Connection #2 - Packet Scheduler Miniport [1224] 13:41:01:787: ElReStartPort: Entered: pPCB=<000DEBE0>, pZCConnectInfo=<00000000>, Refcnt=<2>, EapFlags=<c0000000>, Notification=<a> [1224] 13:41:01:787: ElRestartPortLocked: Entered: pPCB=<000DEBE0>, pZCConnectInfo=<00000000>, Refcnt=<2>, EapFlags=<c0000000>, Notification=<a> [1224] 13:41:01:787: ElGetInterfaceNdisStatistics: pwszDeviceInterfaceName = (\Device\{3C90646A-0A9A-43B5-BFCC-7FE335265032}) [1224] 13:41:01:787: ElRestartPortLocked: Resetting Credentials for Intel(R) PRO/100 VE Network Connection #2 - Packet Scheduler Miniport [1224] 13:41:01:787: ElReadPerPortRegistryParams: Setting dwEapFlags=<c0000000> [1224] 13:41:01:797: ElReadPerPortRegistryParams: dwTotalMaxAuthFailCount = (3) [1224] 13:41:01:797: DisconnectedPCB: Media is already disconnected <<IGNORE>> [1224] 13:41:01:797: ElUserLogonCallback: completed with error 0 [1208] 13:41:02:699: ElSessionChangeHandler: LOGON for session = (0) [1504] 13:41:02:709: ElUserLogonCallback: UserloggedOn = 1 [1504] 13:41:02:709: ElUserLogonCallback: User logon already detected, returning without processing [1504] 13:41:02:709: ElUserLogonCallback: completed with error 0 [3828] 13:41:25:892: EAPOLQueryGUIDNCSState: For Port Intel(R) PRO/100 VE Network Connection #2 - Packet Scheduler Miniport returning S_FALSE [3828] 13:41:25:952: EAPOLQueryGUIDNCSState: 802.1X Port Inexistant for {FD7F1225-FD60-480C-8857-1DF3ECBC9C18}. Returning S_OK [3828] 13:41:28:926: EAPOLTrayIconReady: Advise username = PINKY\jdhiner [1504] 13:41:28:937: EAPOLTrayIconReadyWorker: Advise username = PINKY\jdhiner [1504] 13:41:29:938: ElGetLoggedOnUserName: Got User Name PINKY\jdhiner [1504] 13:41:29:938: EAPOLTrayIconReadyWorker: Tray icon ready for username PINKY\jdhiner [1180] 13:41:35:887: ElGetInterfaceParams: SsidLength=<11>, Found EapTypeId=<13>, SSIDLen=<11> [1180] 13:41:35:887: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<13>, Offset=<52/106>, dwAuthData=<42> [1180] 13:41:35:887: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<13>, Offset=<52/106>, dwAuthData=<42> [1180] 13:41:35:887: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<25>, Offset=<52/106>, dwAuthData=<0> [1548] 13:41:35:897: ElGetInterfaceParams: SsidLength=<11>, Found EapTypeId=<13>, SSIDLen=<11> [1180] 13:41:35:897: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<13>, Offset=<52/106>, dwAuthData=<42> [1180] 13:41:35:897: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<13>, Offset=<52/106>, dwAuthData=<42> [1180] 13:41:35:897: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<25>, Offset=<52/106>, dwAuthData=<0> [1180] 13:41:35:897: ElGetInterfaceParams: SsidLength=<13>, Found EapTypeId=<13>, SSIDLen=<13> [1548] 13:41:35:897: ElGetCustomAuthData: SSIDLen=<13>, EapTypeId=<13>, Offset=<52/104>, dwAuthData=<40> [1548] 13:41:35:897: ElGetCustomAuthData: SSIDLen=<13>, EapTypeId=<13>, Offset=<52/104>, dwAuthData=<40> [1548] 13:41:35:897: ElGetCustomAuthData: SSIDLen=<13>, EapTypeId=<25>, Offset=<52/104>, dwAuthData=<0> [1180] 13:41:43:598: ElSetCustomAuthData: EapTypeId=<13>, SSIDLength=<11>, InfoLength=<42> [1180] 13:41:43:598: ElSetCustomAuthData: Set value succeeded, fFound=<1>, dwEapBlob=<106>, dwSizeOfSSID=<11> [1180] 13:41:43:598: ElSetCustomAuthData: EapTypeId=<25>, SSIDLength=<11>, InfoLength=<0> [1180] 13:41:43:598: ElSetCustomAuthData: Set value succeeded, fFound=<1>, dwEapBlob=<106>, dwSizeOfSSID=<11> [1180] 13:41:43:598: ElSetInterfaceParams: EapTypeId=<13> SSIDLen=<11> [1180] 13:41:43:598: Setting stuff in registry for {B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1180] 13:41:43:598: ElSetInterfaceParams: Succeeded, EapTypeId=<13> fFound=<1>, SSIDLen=<11> [1180] 13:41:43:598: ElPostEapConfigChanged: SSIDLength=<11> [1548] 13:41:43:598: ElWZCCfgUpdateSettings: Error in RegOpenKeyEx for base key, 2 [1548] 13:41:43:598: ElWZCCfgChangeHandler: ElWZCCfgUpdateSettings HKCU failed with error (2) [1504] 13:41:43:608: ElGetInterfaceParams: SsidLength=<11>, Found EapTypeId=<13>, SSIDLen=<11> [1504] 13:41:43:608: ElProcessEapConfigChange: PCB not started, enabled, starting PCB [1504] 13:41:43:608: ElZeroConfigNotify: Handle=(0), failcount=(0), lastauthtype=(0) [1504] 13:41:46:702: ElEnumAndOpenInterfaces: DeviceDesc = , GUID = {B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:41:46:702: ElNdisuioEnumerateInterfaces: Opening handle [1504] 13:41:46:702: NdisuioEnumerateInterfaces: NDISUIO bound to: (0) \DEVICE\{3C90646A-0A9A-43B5-BFCC-7FE335265032} - Intel(R) PRO/100 VE Network Connection #2 - Packet Scheduler Miniport [1504] 13:41:46:702: NdisuioEnumerateInterfaces: NDISUIO bound to: (1) \DEVICE\{B123A337-9DAB-45CD-B148-7A2E8A53AAED} - Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:41:46:702: ElNdisuioEnumerateInterfaces: DeviceIoControl IOCTL_NDISUIO_QUERY_BINDING has no more entries [1504] 13:41:46:702: Device: \DEVICE\{3C90646A-0A9A-43B5-BFCC-7FE335265032} [1504] 13:41:46:702: Description: Intel(R) PRO/100 VE Network Connection #2 - Packet Scheduler Miniport [1504] 13:41:46:702: Device: \DEVICE\{B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:41:46:702: Description: Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:41:46:702: ElEnumAndOpenInterfaces: Found interface after enumeration \DEVICE\{B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:41:46:702: ElEnumAndOpenInterfaces: Did NOT find PCB already existing for interface [1504] 13:41:46:702: ElOpenInterfaceHandle: Opening handle for \DEVICE\{B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:41:46:702: ElOpenInterfaceHandle: Trying to access NDIS Device: \DEVICE\{B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:41:46:702: ElOpenInterfaceHandle: OpenIntfHandle(\DEVICE\{B123A337-9DAB-45CD-B148-7A2E8A53AAED}) = 1243504 [1504] 13:41:46:702: ElOpenInterfaceHandle: Opened handle 0012F970 with dwRetCode 0 [1504] 13:41:46:702: ElCreatePort: Entered for Handle=(0012F970), GUID=({B123A337-9DAB-45CD-B148-7A2E8A53AAED}), Name=(Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport), ZCId=(0), UserData=(00000000) Notification=<3> [1504] 13:41:46:702: ElCreatePort: No PCB found for {B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:41:46:702: ElGetInterfaceNdisStatistics: pwszDeviceInterfaceName = (\Device\{B123A337-9DAB-45CD-B148-7A2E8A53AAED}) [1504] 13:41:46:702: ElCreatePort: Ignoring WLAN indications for pZCConnectInfo == NULL [1504] 13:41:46:702: ElEnumAndOpenInterfaces: Error in CreatePort = 13 [1504] 13:41:46:702: ElCloseInterfaceHandle(0x12f970,{B123A337-9DAB-45CD-B148-7A2E8A53AAED}) entered [1504] 13:41:46:702: ElEnumAndOpenInterfaces: Completed with retcode = 0 [1504] 13:41:46:702: ElProcessEapConfigChange: Finished with error 0 [1712] 13:41:49:947: EAPOLQueryGUIDNCSState: 802.1X Port Inexistant for {B123A337-9DAB-45CD-B148-7A2E8A53AAED}. Returning S_OK [1504] 13:41:49:957: ElMediaEventsHandler entered -- EventType=<7> [1504] 13:41:49:957: ElMediaEventsHandler: Calling ElZeroConfigEvent [1504] 13:41:49:957: ElGetInterfaceParams: SsidLength=<11>, Found EapTypeId=<13>, SSIDLen=<11> [1504] 13:41:49:957: ElEnumAndOpenInterfaces: DeviceDesc = , GUID = {B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:41:49:957: ElNdisuioEnumerateInterfaces: Opening handle [1504] 13:41:49:957: NdisuioEnumerateInterfaces: NDISUIO bound to: (0) \DEVICE\{3C90646A-0A9A-43B5-BFCC-7FE335265032} - Intel(R) PRO/100 VE Network Connection #2 - Packet Scheduler Miniport [1504] 13:41:49:957: NdisuioEnumerateInterfaces: NDISUIO bound to: (1) \DEVICE\{B123A337-9DAB-45CD-B148-7A2E8A53AAED} - Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:41:49:957: ElNdisuioEnumerateInterfaces: DeviceIoControl IOCTL_NDISUIO_QUERY_BINDING has no more entries [1504] 13:41:49:957: Device: \DEVICE\{3C90646A-0A9A-43B5-BFCC-7FE335265032} [1504] 13:41:49:957: Description: Intel(R) PRO/100 VE Network Connection #2 - Packet Scheduler Miniport [1504] 13:41:49:957: Device: \DEVICE\{B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:41:49:957: Description: Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:41:49:957: ElEnumAndOpenInterfaces: Found interface after enumeration \DEVICE\{B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:41:49:957: ElEnumAndOpenInterfaces: Did NOT find PCB already existing for interface [1504] 13:41:49:957: ElOpenInterfaceHandle: Opening handle for \DEVICE\{B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:41:49:957: ElOpenInterfaceHandle: Trying to access NDIS Device: \DEVICE\{B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:41:49:957: ElOpenInterfaceHandle: OpenIntfHandle(\DEVICE\{B123A337-9DAB-45CD-B148-7A2E8A53AAED}) = 1243504 [1504] 13:41:49:957: ElOpenInterfaceHandle: Opened handle 0012F970 with dwRetCode 0 [1504] 13:41:49:957: ElCreatePort: Entered for Handle=(0012F970), GUID=({B123A337-9DAB-45CD-B148-7A2E8A53AAED}), Name=(Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport), ZCId=(127), UserData=(0299BB88) Notification=<4> [1504] 13:41:49:957: ElCreatePort: No PCB found for {B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:41:49:957: ElGetInterfaceNdisStatistics: pwszDeviceInterfaceName = (\Device\{B123A337-9DAB-45CD-B148-7A2E8A53AAED}) [1504] 13:41:49:977: ElCreatePort: ElNdisuioQueryOIDValue for OID_802_3_CURRENT_ADDRESS successful [1504] 13:41:49:977: 00 16 B6 5C AC DD 00 00 00 00 00 00 00 00 00 00 |...\............| [1504] 13:41:49:977: ElCreatePort: ElNdisuioQueryOIDValue for OID_802_11_INFRASTRUCTURE_MODE successful, Mode = (1) [1504] 13:41:49:977: ElCreatePort: ElNdisuioQueryOIDValue for OID_802_11_BSSID successful [1504] 13:41:49:977: 00 1F 41 3A 82 F9 00 00 00 00 00 00 00 00 00 00 |..A:............| [1504] 13:41:49:977: ElCreatePort: prdUserData not valid [1504] 13:41:49:977: ElCreatePort: Port Network Identifier: [1504] 13:41:49:977: 43 43 49 53 44 2D 52 45 4D 43 31 00 00 00 00 00 |CCISD-REMC1.....| [1504] 13:41:49:977: ElCreatePort: pPCB=<000E7E38>, AuthenticationMode=<3>, EncyptionStatus=<6>, usKeyDescription=<0> [1504] 13:41:49:977: TIMER: Create PCB Time: 2097148 [1504] 13:41:49:977: ElInitRegPortData: ElGetCustomAuthData returned error 603 [1504] 13:41:49:977: ElInitRegPortData: completed with error 0 [1504] 13:41:49:977: ElGetInterfaceParams: SsidLength=<11>, Found EapTypeId=<13>, SSIDLen=<11> [1504] 13:41:49:977: ElReadPerPortRegistryParams: Setting dwEapFlags=<80000000> [1504] 13:41:49:977: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<13>, Offset=<52/106>, dwAuthData=<42> [1504] 13:41:49:977: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<13>, Offset=<52/106>, dwAuthData=<42> [1504] 13:41:49:977: ElReadPerPortRegistryParams: dwTotalMaxAuthFailCount = (3) [1504] 13:41:49:977: TIMER: Create PMKCACHE Time: 2097148 [1504] 13:41:49:977: ElQueryBinaryOID(Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport, 0xd010122) [1504] 13:41:49:977: Device Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport supports 4 PMKIDs in its cache [1504] 13:41:49:977: TIMER: Create PREAUTH Time: 2097148 [1712] 13:41:49:977: EAPOLQueryGUIDNCSState: For Port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport returning S_FALSE [1504] 13:41:49:977: ElReadFromPort entered, pPCB = 000E7E38 [1504] 13:41:49:977: ElReadFromPort: pPCB = 000E7E38, RefCnt = 3 [1504] 13:41:49:977: FSMConnecting entered for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:41:50:027: Current Mode is NOT WPA2. PreAuth disabled [1504] 13:41:50:047: TIMER: Restart PCB Time: 60 [1504] 13:41:50:047: Sending EAPOL-Start frame on the interface Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:41:50:047: ElWriteToPort entered: Pkt Length = 7 [1504] 13:41:50:047: ElWriteToPort: pPCB = 000E7E38, RefCnt = 5 [1504] 13:41:50:047: ElWriteToInterface entered [1504] 13:41:50:047: ElWriteToInterface completed, RetCode = 0 [1504] 13:41:50:047: Setting state CONNECTING for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:41:50:047: FSMConnecting completed for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1712] 13:41:50:047: EAPOLQueryGUIDNCSState: For Port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport returning S_FALSE [1504] 13:41:50:047: ElCreatePort: Completed for GUID= {B123A337-9DAB-45CD-B148-7A2E8A53AAED}, Name = Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:41:50:047: ElEnumAndOpenInterfaces: CreatePort successful [1504] 13:41:50:047: ElCreateInterfaceEntry: Added to hash table GUID= {B123A337-9DAB-45CD-B148-7A2E8A53AAED} : Desc= Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport at Index=0 [1504] 13:41:50:047: ElEnumAndOpenInterfaces: Completed with retcode = 0 [1504] 13:41:50:047: ElWriteCompletionRoutine sent out 19 bytes with error 0 [1504] 13:41:50:047: ElWriteCompletionRoutine: pPCB= 000E7E38, RefCnt = 3 [1504] 13:41:50:047: EapolReceiveDataPacket: receive 55 bytes [1504] 13:41:50:047: ProcessReceivedPacket entered, length = 51 [1504] 13:41:50:047: ProcessReceivedPacket: EAP_Packet [1504] 13:41:50:047: ProcessReceivedPacket: EAPOLSTATE_CONNECTING [1504] 13:41:50:047: TIMER: Restart PCB Time: 2097148 [1504] 13:41:50:047: FSMAcquired entered for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:41:50:047: TIMER: Restart PCB Time: 30 [1504] 13:41:50:047: ElEapEnd entered [1504] 13:41:50:047: ElEapBegin entered [1504] 13:41:50:047: ElEapBegin done [1504] 13:41:50:047: ElEapWork: EapolPkt created at 000E3E40 [1504] 13:41:50:047: ElEapMakeMessage entered [1504] 13:41:50:047: ElParseIdentityString: DisplayString = Please enter your login name [1504] 13:41:50:047: ElParseIdentityString: LocalIdString = [1504] 13:41:50:047: ElParseIdentityString: LocalIdString Length = 28 [1504] 13:41:50:047: ElParseIdentityString: Identity string does not contain tuples [1504] 13:41:50:047: ElGetIdentity: Userlogged, Prev !Machine auth [1504] 13:41:50:047: ElGetIdentity: Userlogged, <Maxauth, Prev !Machine auth: !MD5 [1504] 13:41:50:047: ElGetUserIdentity entered [1504] 13:41:50:057: ElGetEapUserInfo: Error in RegOpenKeyEx for base key, 2 [1504] 13:41:50:057: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<13>, Offset=<52/106>, dwAuthData=<42> [1504] 13:41:50:057: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<13>, Offset=<52/106>, dwAuthData=<42> [1504] 13:41:50:518: ElGetUserIdentityOptimized: Got identity = josh [1504] 13:41:50:518: ElGetUserIdentity: ElGetUserIdentityOptimized got identity without user module intervention [1504] 13:41:50:518: ElGetUserIdentity completed with error 0 [1504] 13:41:50:518: ElGetIdentity: Userlogged, <Maxauth, Prev !Machine auth: No Error: User Auth fine [1504] 13:41:50:518: Identity sent out = josh [1504] 13:41:50:518: ElWriteToPort entered: Pkt Length = 15 [1504] 13:41:50:518: ElWriteToPort: pPCB = 000E7E38, RefCnt = 4 [1504] 13:41:50:518: ElWriteToInterface entered [1504] 13:41:50:518: ElWriteToInterface completed, RetCode = 0 [1504] 13:41:50:518: Authentication Started on port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport using User credentials [1504] 13:41:50:518: Setting state ACQUIRED for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:41:50:528: FSMAcquired completed for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:41:50:528: ProcessReceivedPacket: Reposting buffer on port {B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:41:50:528: ElReadFromPort entered, pPCB = 000E7E38 [1504] 13:41:50:528: ElReadFromPort: pPCB = 000E7E38, RefCnt = 5 [1712] 13:41:50:528: EAPOLQueryGUIDNCSState: For Port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport returning 12 [1504] 13:41:50:528: ProcessReceivedPacket: pPCB= 000E7E38, RefCnt = 4 [1504] 13:41:50:528: ProcessReceivedPacket exit [1504] 13:41:50:528: ElWriteCompletionRoutine sent out 27 bytes with error 0 [1504] 13:41:50:528: ElWriteCompletionRoutine: pPCB= 000E7E38, RefCnt = 3 [1504] 13:41:50:528: EapolReceiveDataPacket: receive 28 bytes [1504] 13:41:50:528: ProcessReceivedPacket entered, length = 24 [1504] 13:41:50:528: ProcessReceivedPacket: EAP_Packet [1504] 13:41:50:528: ProcessReceivedPacket: EAPOLSTATE_ACQUIRED [1504] 13:41:50:528: TIMER: Restart PCB Time: 2097148 [1504] 13:41:50:528: FSMAuthenticating entered for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:41:50:528: TIMER: Restart PCB Time: 30 [1504] 13:41:50:528: ElEapWork: EapolPkt created at 000E3E40 [1504] 13:41:50:528: ElEapMakeMessage entered [1504] 13:41:50:528: ElMakeSupplicantMessage entered [1504] 13:41:50:528: EAPSTATE_Initial [1504] 13:41:50:528: ElEapDllBegin called for EAP Type 13 [1504] 13:41:50:528: ElEapDllBegin: Not Setting GUEST flag [1504] 13:41:50:528: EAPSTATE_Working [1504] 13:41:50:528: ElEapDllWork called for EAP Type 13 [1504] 13:41:50:958: EAP Dll returned Action=EAPACTION_Send [1504] 13:41:50:958: ElEapDllWork finished for EAP Type 13 with error 0 [1504] 13:41:50:958: ElWriteToPort entered: Pkt Length = 86 [1504] 13:41:50:958: ElWriteToPort: pPCB = 000E7E38, RefCnt = 3 [1504] 13:41:50:958: ElWriteToInterface entered [1504] 13:41:50:958: ElWriteToInterface completed, RetCode = 0 [1504] 13:41:50:958: Setting state AUTHENTICATING for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:41:50:958: WZCNetmanConnectionStatusChanged: Entered [1504] 13:41:50:958: QueueEvent: CoCreateInstance succeeded [1504] 13:41:50:958: ConnectionStatusChanged completed [1504] 13:41:50:958: FSMAuthenticating completed for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:41:50:958: ProcessReceivedPacket: Reposting buffer on port {B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:41:50:958: ElReadFromPort entered, pPCB = 000E7E38 [1504] 13:41:50:958: ElReadFromPort: pPCB = 000E7E38, RefCnt = 4 [1504] 13:41:50:958: ProcessReceivedPacket: pPCB= 000E7E38, RefCnt = 4 [1504] 13:41:50:958: ProcessReceivedPacket exit [1504] 13:41:50:958: ElWriteCompletionRoutine sent out 98 bytes with error 0 [1504] 13:41:50:958: ElWriteCompletionRoutine: pPCB= 000E7E38, RefCnt = 3 [1504] 13:41:50:968: EAPOLQueryGUIDNCSState: For Port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport returning 8 [1712] 13:41:50:988: EapolReceiveDataPacket: receive 1046 bytes [1712] 13:41:51:018: ProcessReceivedPacket entered, length = 1042 [1712] 13:41:51:018: ProcessReceivedPacket: EAP_Packet [1712] 13:41:51:018: ProcessReceivedPacket: EAPOLSTATE_AUTHENTICATING [1712] 13:41:51:018: TIMER: Restart PCB Time: 2097148 [1712] 13:41:51:018: FSMAuthenticating entered for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1712] 13:41:51:018: TIMER: Restart PCB Time: 30 [1712] 13:41:51:018: ElEapWork: EapolPkt created at 000E3E40 [1712] 13:41:51:018: ElEapMakeMessage entered [1712] 13:41:51:018: ElMakeSupplicantMessage entered [1712] 13:41:51:018: EAPSTATE_Working [1712] 13:41:51:018: ElEapDllWork called for EAP Type 13 [1712] 13:41:51:018: EAP Dll returned Action=EAPACTION_Send [1712] 13:41:51:018: ElEapDllWork finished for EAP Type 13 with error 0 [1712] 13:41:51:018: ElWriteToPort entered: Pkt Length = 12 [1712] 13:41:51:018: ElWriteToPort: pPCB = 000E7E38, RefCnt = 3 [1712] 13:41:51:018: ElWriteToInterface entered [1712] 13:41:51:018: ElWriteToInterface completed, RetCode = 0 [1712] 13:41:51:018: Setting state AUTHENTICATING for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1712] 13:41:51:018: FSMAuthenticating completed for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1712] 13:41:51:018: ProcessReceivedPacket: Reposting buffer on port {B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1712] 13:41:51:018: ElReadFromPort entered, pPCB = 000E7E38 [1712] 13:41:51:018: ElReadFromPort: pPCB = 000E7E38, RefCnt = 4 [1712] 13:41:51:018: ProcessReceivedPacket: pPCB= 000E7E38, RefCnt = 4 [1712] 13:41:51:018: ProcessReceivedPacket exit [1712] 13:41:51:018: ElWriteCompletionRoutine sent out 24 bytes with error 0 [1712] 13:41:51:018: ElWriteCompletionRoutine: pPCB= 000E7E38, RefCnt = 3 [1712] 13:41:51:028: EapolReceiveDataPacket: receive 1046 bytes [1712] 13:41:51:028: ProcessReceivedPacket entered, length = 1042 [1712] 13:41:51:028: ProcessReceivedPacket: EAP_Packet [1712] 13:41:51:028: ProcessReceivedPacket: EAPOLSTATE_AUTHENTICATING [1712] 13:41:51:028: TIMER: Restart PCB Time: 2097148 [1712] 13:41:51:028: FSMAuthenticating entered for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1712] 13:41:51:028: TIMER: Restart PCB Time: 30 [1712] 13:41:51:028: ElEapWork: EapolPkt created at 00184500 [1712] 13:41:51:028: ElEapMakeMessage entered [1712] 13:41:51:028: ElMakeSupplicantMessage entered [1712] 13:41:51:028: EAPSTATE_Working [1712] 13:41:51:028: ElEapDllWork called for EAP Type 13 [1712] 13:41:51:028: EAP Dll returned Action=EAPACTION_Send [1712] 13:41:51:028: ElEapDllWork finished for EAP Type 13 with error 0 [1712] 13:41:51:028: ElWriteToPort entered: Pkt Length = 12 [1712] 13:41:51:028: ElWriteToPort: pPCB = 000E7E38, RefCnt = 3 [1712] 13:41:51:028: ElWriteToInterface entered [1712] 13:41:51:028: ElWriteToInterface completed, RetCode = 0 [1712] 13:41:51:028: Setting state AUTHENTICATING for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1712] 13:41:51:028: FSMAuthenticating completed for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1712] 13:41:51:028: ProcessReceivedPacket: Reposting buffer on port {B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1712] 13:41:51:028: ElReadFromPort entered, pPCB = 000E7E38 [1712] 13:41:51:028: ElReadFromPort: pPCB = 000E7E38, RefCnt = 4 [1712] 13:41:51:028: ProcessReceivedPacket: pPCB= 000E7E38, RefCnt = 4 [1712] 13:41:51:028: ProcessReceivedPacket exit [1712] 13:41:51:028: ElWriteCompletionRoutine sent out 24 bytes with error 0 [1712] 13:41:51:028: ElWriteCompletionRoutine: pPCB= 000E7E38, RefCnt = 3 [1712] 13:41:51:038: EapolReceiveDataPacket: receive 342 bytes [1712] 13:41:51:038: ProcessReceivedPacket entered, length = 338 [1712] 13:41:51:038: ProcessReceivedPacket: EAP_Packet [1712] 13:41:51:038: ProcessReceivedPacket: EAPOLSTATE_AUTHENTICATING [1712] 13:41:51:038: TIMER: Restart PCB Time: 2097148 [1712] 13:41:51:038: FSMAuthenticating entered for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1712] 13:41:51:038: TIMER: Restart PCB Time: 30 [1712] 13:41:51:038: ElEapWork: EapolPkt created at 000E3E40 [1712] 13:41:51:038: ElEapMakeMessage entered [1712] 13:41:51:038: ElMakeSupplicantMessage entered [1712] 13:41:51:038: EAPSTATE_Working [1712] 13:41:51:038: ElEapDllWork called for EAP Type 13 [1712] 13:41:51:098: EAP Dll returned Action=EAPACTION_Send [1712] 13:41:51:098: ElEapDllWork finished for EAP Type 13 with error 0 [1712] 13:41:51:098: ElWriteToPort entered: Pkt Length = 1496 [1712] 13:41:51:098: ElWriteToPort: pPCB = 000E7E38, RefCnt = 3 [1712] 13:41:51:098: ElWriteToInterface entered [1712] 13:41:51:098: ElWriteToInterface completed, RetCode = 0 [1712] 13:41:51:098: Setting state AUTHENTICATING for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1712] 13:41:51:098: FSMAuthenticating completed for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1712] 13:41:51:098: ProcessReceivedPacket: Reposting buffer on port {B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1712] 13:41:51:098: ElReadFromPort entered, pPCB = 000E7E38 [1712] 13:41:51:098: ElReadFromPort: pPCB = 000E7E38, RefCnt = 4 [1712] 13:41:51:098: ProcessReceivedPacket: pPCB= 000E7E38, RefCnt = 4 [1712] 13:41:51:098: ProcessReceivedPacket exit [1712] 13:41:51:098: ElWriteCompletionRoutine sent out 1508 bytes with error 0 [1712] 13:41:51:098: ElWriteCompletionRoutine: pPCB= 000E7E38, RefCnt = 3 [1712] 13:41:53:352: EAPOLQueryGUIDNCSState: For Port Intel(R) PRO/100 VE Network Connection #2 - Packet Scheduler Miniport returning S_FALSE [1712] 13:41:53:382: EAPOLQueryGUIDNCSState: 802.1X Port Inexistant for {FD7F1225-FD60-480C-8857-1DF3ECBC9C18}. Returning S_OK [1712] 13:41:53:412: EAPOLQueryGUIDNCSState: For Port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport returning 8 [1180] 13:42:16:405: ElSetCustomAuthData: EapTypeId=<13>, SSIDLength=<11>, InfoLength=<42> [1180] 13:42:16:405: ElSetCustomAuthData: Set value succeeded, fFound=<1>, dwEapBlob=<106>, dwSizeOfSSID=<11> [1180] 13:42:16:405: ElSetCustomAuthData: EapTypeId=<25>, SSIDLength=<11>, InfoLength=<0> [1180] 13:42:16:415: ElSetCustomAuthData: Set value succeeded, fFound=<1>, dwEapBlob=<106>, dwSizeOfSSID=<11> [1180] 13:42:16:415: ElSetInterfaceParams: EapTypeId=<13> SSIDLen=<11> [1180] 13:42:16:415: Setting stuff in registry for {B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1180] 13:42:16:415: ElSetInterfaceParams: Succeeded, EapTypeId=<13> fFound=<1>, SSIDLen=<11> [1180] 13:42:16:415: ElPostEapConfigChanged: SSIDLength=<11> [2192] 13:42:16:415: ElGetInterfaceParams: SsidLength=<11>, Found EapTypeId=<13>, SSIDLen=<11> [2192] 13:42:16:415: ElProcessEapConfigChange: PCB ref and enabled, continue check [2192] 13:42:16:415: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<13>, Offset=<52/106>, dwAuthData=<42> [2192] 13:42:16:415: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<13>, Offset=<52/106>, dwAuthData=<42> [2192] 13:42:16:415: ElProcessEapConfigChange: Same SSID, EAPType, CustomAuth, No content change [2192] 13:42:16:415: ElProcessEapConfigChange: Finished with error 0 [1180] 13:42:16:415: ElWZCCfgUpdateSettings: Error in RegOpenKeyEx for base key, 2 [1180] 13:42:16:415: ElWZCCfgChangeHandler: ElWZCCfgUpdateSettings HKCU failed with error (2) [1504] 13:42:19:519: ElMediaEventsHandler entered -- EventType=<6> [1504] 13:42:19:519: ElMediaEventsHandler: Calling ElMediaSenseEventFromWZC [1504] 13:42:19:519: ElMediaSenseEventFromWZC: Entered [1504] 13:42:19:519: ElMediaSenseEventFromWZCWorker: For interface GUID ({B123A337-9DAB-45CD-B148-7A2E8A53AAED}) [1504] 13:42:19:519: ElMediaSenseEventFromWZCWorker: Callback for sense disconnect [1504] 13:42:19:519: Current Mode is NOT WPA2. PreAuth disabled [1504] 13:42:19:519: FSMDisconnected entered for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:42:19:519: Setting state DISCONNECTED for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:42:19:519: FSMDisconnected completed for port Wireless-G Notebook Adapter with RangeBooster - Packet Scheduler Miniport [1504] 13:42:19:519: ElMediaSenseEventFromWZCWorker: Port marked disconnected {B123A337-9DAB-45CD-B148-7A2E8A53AAED} [1504] 13:42:19:519: ElMediaSenseCallbackWorker: processed, RetCode = 0 [1504] 13:42:19:519: ElReadFromPort entered, pPCB = 000E7E38 [1504] 13:42:19:519: ElReadFromPort: pPCB = 000E7E38, RefCnt = 3 [1712] 13:42:19:700: EAPOLQueryGUIDNCSState: For Port Intel(R) PRO/100 VE Network Connection #2 - Packet Scheduler Miniport returning S_FALSE [1712] 13:42:19:740: EAPOLQueryGUIDNCSState: 802.1X Port Inexistant for {FD7F1225-FD60-480C-8857-1DF3ECBC9C18}. Returning S_OK [2192] 13:42:21:061: ElTimeoutCallbackRoutine entered [2192] 13:42:21:061: ElTimeoutCallbackRoutine: No action in Disconnected state [2192] 13:42:21:061: ElTimeoutCallbackRoutine completed [1180] 13:42:21:993: ElGetInterfaceParams: SsidLength=<11>, Found EapTypeId=<13>, SSIDLen=<11> [1548] 13:42:21:993: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<13>, Offset=<52/106>, dwAuthData=<42> [1180] 13:42:21:993: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<13>, Offset=<52/106>, dwAuthData=<42> [1180] 13:42:21:993: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<25>, Offset=<52/106>, dwAuthData=<0> [1548] 13:42:22:013: ElGetInterfaceParams: SsidLength=<11>, Found EapTypeId=<13>, SSIDLen=<11> [1548] 13:42:22:013: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<13>, Offset=<52/106>, dwAuthData=<42> [1548] 13:42:22:013: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<13>, Offset=<52/106>, dwAuthData=<42> [1548] 13:42:22:013: ElGetCustomAuthData: SSIDLen=<11>, EapTypeId=<25>, Offset=<52/106>, dwAuthData=<0> [1180] 13:42:22:023: ElGetInterfaceParams: SsidLength=<13>, Found EapTypeId=<13>, SSIDLen=<13> [1180] 13:42:22:023: ElGetCustomAuthData: SSIDLen=<13>, EapTypeId=<13>, Offset=<52/104>, dwAuthData=<40> [1180] 13:42:22:023: ElGetCustomAuthData: SSIDLen=<13>, EapTypeId=<13>, Offset=<52/104>, dwAuthData=<40> [1180] 13:42:22:033: ElGetCustomAuthData: SSIDLen=<13>, EapTypeId=<25>, Offset=<52/104>, dwAuthData=<0> [2192] 13:42:28:372: EAPOLQueryGUIDNCSState: For Port Intel(R) PRO/100 VE Network Connection #2 - Packet Scheduler Miniport returning S_FALSE [2192] 13:42:28:392: EAPOLQueryGUIDNCSState: 802.1X Port Inexistant for {FD7F1225-FD60-480C-8857-1DF3ECBC9C18}. Returning S_OK
Ok, made new client cert and now it shows valid and displays "Provides your identity to a remote Computer" as the intended purpose and on the Details tab displays the correct info etc... The Certification Path displays valid.
But "windows was unable to find a certificate to log you on ...." ..
[1180] 13:42:16:415: ElWZCCfgUpdateSettings: Error in RegOpenKeyEx for base key, 2
[1180] 13:42:16:415: ElWZCCfgChangeHandler: ElWZCCfgUpdateSettings HKCU failed with error (2)
which you say is rubbish. Did you install .p12 version of client certificate? Ivan Kalik Kalik Informatika ISP
tnt@kalik.net wrote:
Ok, made new client cert and now it shows valid and displays "Provides your identity to a remote Computer" as the intended purpose and on the Details tab displays the correct info etc... The Certification Path displays valid.
But "windows was unable to find a certificate to log you on ...."
..
[1180] 13:42:16:415: ElWZCCfgUpdateSettings: Error in RegOpenKeyEx for base key, 2
[1180] 13:42:16:415: ElWZCCfgChangeHandler: ElWZCCfgUpdateSettings HKCU failed with error (2)
which you say is rubbish. Did you install .p12 version of client certificate?
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Yes the cert is there, does report the correct oid etc.. etc.. Attached is the client certificate I am using. I even went into the configuration and made it so XP asks me to select my certificate manually. I select the certificate manually and it still gives the same error as above (Error in RegOpenKeyEx for base key, 2) etc.. Maybe there is still a problem with the certificate but it all looks fine to me. Can you peak at the cert for me? This is happening on all machines so there must be a problem with it? When I install the cert it asks me for the cert password which I type in (I use the password I put in the client.cnf file). There should be an input and output password in client.cnf correct? I'm at a loss. Thanks -Josh
Yes the cert is there, does report the correct oid etc.. etc.. Attached is the client certificate I am using. I even went into the configuration and made it so XP asks me to select my certificate manually. I select the certificate manually and it still gives the same error as above (Error in RegOpenKeyEx for base key, 2) etc.. Maybe there is still a problem with the certificate but it all looks fine to me. Can you peak at the cert for me? This is happening on all machines so there must be a problem with it? When I install the cert it asks me for the cert password which I type in (I use the password I put in the client.cnf file). There should be an input and output password in client.cnf correct? I'm at a loss.
It is most likely a deliberate undermining of self-signed certificates. It looks wery much like this bug reported for machine certificates (user certificates weren't affected at the time). http://social.technet.microsoft.com/Forums/en-US/itproxpsp/thread/ceaf827d-3... Ivan Kalik Kalik Informatika ISP
On Tue, 2009-01-27 at 23:05 +0100, tnt@kalik.net wrote:
Yes the cert is there, does report the correct oid etc.. etc.. Attached is the client certificate I am using. I even went into the configuration and made it so XP asks me to select my certificate manually. I select the certificate manually and it still gives the same error as above (Error in RegOpenKeyEx for base key, 2) etc.. Maybe there is still a problem with the certificate but it all looks fine to me. Can you peak at the cert for me? This is happening on all machines so there must be a problem with it? When I install the cert it asks me for the cert password which I type in (I use the password I put in the client.cnf file). There should be an input and output password in client.cnf correct? I'm at a loss.
It is most likely a deliberate undermining of self-signed certificates. It looks wery much like this bug reported for machine certificates (user certificates weren't affected at the time).
http://social.technet.microsoft.com/Forums/en-US/itproxpsp/thread/ceaf827d-3...
Ivan Kalik Kalik Informatika ISP Ug! For such a problem, I am not seeing anything come across the mailing list. I would think that what I am doing is fairly popular? Why are more people not complaining? This is too bad and if true, very poor.
-Josh
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Tue, 2009-01-27 at 21:08 -0500, Josh Hiner wrote:
On Tue, 2009-01-27 at 23:05 +0100, tnt@kalik.net wrote:
Yes the cert is there, does report the correct oid etc.. etc.. Attached is the client certificate I am using. I even went into the configuration and made it so XP asks me to select my certificate manually. I select the certificate manually and it still gives the same error as above (Error in RegOpenKeyEx for base key, 2) etc.. Maybe there is still a problem with the certificate but it all looks fine to me. Can you peak at the cert for me? This is happening on all machines so there must be a problem with it? When I install the cert it asks me for the cert password which I type in (I use the password I put in the client.cnf file). There should be an input and output password in client.cnf correct? I'm at a loss.
It is most likely a deliberate undermining of self-signed certificates. It looks wery much like this bug reported for machine certificates (user certificates weren't affected at the time).
http://social.technet.microsoft.com/Forums/en-US/itproxpsp/thread/ceaf827d-3...
Ivan Kalik Kalik Informatika ISP Ug! For such a problem, I am not seeing anything come across the mailing list. I would think that what I am doing is fairly popular? Why are more people not complaining? This is too bad and if true, very poor.
I was complaining about it a few weeks ago (all my systems have been upgraded to SP3) and I was made to feel that it was just me. Craig
Craig White wrote:
I was complaining about it a few weeks ago (all my systems have been upgraded to SP3) and I was made to feel that it was just me.
The first reporter of an issue often gets told "it works for everyone else..." If this is a wide-spread problem with XP SP3, then we'll have to investigate ways to fix it, or to document it. Alan DeKok.
On Wed, 2009-01-28 at 09:27 +0100, Alan DeKok wrote:
Craig White wrote:
I was complaining about it a few weeks ago (all my systems have been upgraded to SP3) and I was made to feel that it was just me.
The first reporter of an issue often gets told "it works for everyone else..."
If this is a wide-spread problem with XP SP3, then we'll have to investigate ways to fix it, or to document it.
I understand and that's sort of why I'm monitoring because I am not convinced that it isn't me but I'm sort of thinking that it's something in SP3. Craig
list. I would think that what I am doing is fairly popular? Why are more people not complaining? This is too bad and if true, very poor.
Can you post the eapol.log and wzctrace.log for the same attempt. I'll dig through that and see if I can find what is going on. Ivan Kalik Kalik Informatika ISP
tnt@kalik.net wrote:
list. I would think that what I am doing is fairly popular? Why are more people not complaining? This is too bad and if true, very poor.
Can you post the eapol.log and wzctrace.log for the same attempt. I'll dig through that and see if I can find what is going on.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ivan, can I send the email directly to your email address. lists.freeradius.org is rejecting my email because the body of the message exceeds 100k (it is 536k with the log attachments). It says it is waiting for a moderator to approve the post but its been about 8 hours with no approval. Let me know, and thanks for your help! -josh
It's fine. Send it direct. Ivan Kalik Kalik Informatika ISP Dana 28/1/2009, "Josh Hiner" <josh@remc1.org> piše:
tnt@kalik.net wrote:
list. I would think that what I am doing is fairly popular? Why are more people not complaining? This is too bad and if true, very poor.
Can you post the eapol.log and wzctrace.log for the same attempt. I'll dig through that and see if I can find what is going on.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ivan, can I send the email directly to your email address. lists.freeradius.org is rejecting my email because the body of the message exceeds 100k (it is 536k with the log attachments). It says it is waiting for a moderator to approve the post but its been about 8 hours with no approval.
Let me know, and thanks for your help!
-josh - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
Craig White -
Josh Hiner -
tnt＠kalik.net