Hi guys I am from the Microsoft EAP team, and we have not seen this issue. Can you please send the following logs to me for investigating at aman.arneja@microsoft.com
From an elevated command prompt :
Netsh ras set tr * en <run scenario> Netsh ras set tr * di Also, you can consider me a Microsoft contact for authentication related issues. Thanx Aman Arneja Sent from my Windows Phone From: Francois Gaudreault Sent: 06-Mar-12 3:59 AM To: freeradius-users@lists.freeradius.org Subject: Re: Windows 7 prompting several times Hi Andi, I did see the behavior, and it appears to be a bug with the windows supplicant. Apparently, the credentials are not even passed to the EAP module to initiate the session with the NAS... We do not have any kind of contact at Microsoft to open a bug, so I believe you are stuck with those issues :S On 12-03-05 11:16 AM, Morris, Andi wrote:
Hi all,
Apologies for being slightly off topic.
Does anyone else get a problem with Windows 7 clients prompting for the radius credentials 2 or 3 times before finally accepting them? No errors are shown on the radius side, and I’ve read that this is a problem with the operating system, but wondered whether anyone in this knowledgeable community had overcome this?
Cheers,
Andi
------------------------------------------------------------------------
From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December 2011, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. *Please could you ensure that all of your contact records and databases are updated to reflect this change.* Further information can be found on the website here. <http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Francois Gaudreault, ing. jr fgaudreault@inverse.ca :: +1.514.447.4918 (x130) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Sorry, forgot to add, I need the output stored under <Sytemdrive>\Windows\Tracing On Tue, Mar 6, 2012 at 8:48 AM, Aman Arneja <arneja.aman@gmail.com> wrote:
Hi guys I am from the Microsoft EAP team, and we have not seen this issue. Can you please send the following logs to me for investigating at aman.arneja@microsoft.com
From an elevated command prompt :
Netsh ras set tr * en <run scenario> Netsh ras set tr * di
Also, you can consider me a Microsoft contact for authentication related issues.
Thanx Aman Arneja
Sent from my Windows Phone From: Francois Gaudreault Sent: 06-Mar-12 3:59 AM To: freeradius-users@lists.freeradius.org Subject: Re: Windows 7 prompting several times Hi Andi,
I did see the behavior, and it appears to be a bug with the windows supplicant. Apparently, the credentials are not even passed to the EAP module to initiate the session with the NAS...
We do not have any kind of contact at Microsoft to open a bug, so I believe you are stuck with those issues :S
On 12-03-05 11:16 AM, Morris, Andi wrote:
Hi all,
Apologies for being slightly off topic.
Does anyone else get a problem with Windows 7 clients prompting for the radius credentials 2 or 3 times before finally accepting them? No errors are shown on the radius side, and I’ve read that this is a problem with the operating system, but wondered whether anyone in this knowledgeable community had overcome this?
Cheers,
Andi
------------------------------------------------------------------------
From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December 2011, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. *Please could you ensure that all of your contact records and databases are updated to reflect this change.* Further information can be found on the website here. <http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Francois Gaudreault, ing. jr fgaudreault@inverse.ca :: +1.514.447.4918 (x130) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks Aman, that could be a very big help if you could take a look. I've emailed you the log files to your Microsoft address. Francois, it's good to know that you've also seen this issue. Dave, I am running Cisco switches with dot1x timeouts, I wonder whether this could be causing the issue. I'll do some testing. Cheers all, you've been a big help this far. Cheers, Andi -----Original Message----- From: freeradius-users-bounces+amorris=cardiffmet.ac.uk@lists.freeradius.org [mailto:freeradius-users-bounces+amorris=cardiffmet.ac.uk@lists.freeradius.org] On Behalf Of Aman Arneja Sent: 06 March 2012 03:19 To: Francois Gaudreault; freeradius-users@lists.freeradius.org Subject: RE: Windows 7 prompting several times Hi guys I am from the Microsoft EAP team, and we have not seen this issue. Can you please send the following logs to me for investigating at aman.arneja@microsoft.com From an elevated command prompt : Netsh ras set tr * en <run scenario> Netsh ras set tr * di Also, you can consider me a Microsoft contact for authentication related issues. Thanx Aman Arneja Sent from my Windows Phone From: Francois Gaudreault Sent: 06-Mar-12 3:59 AM To: freeradius-users@lists.freeradius.org Subject: Re: Windows 7 prompting several times Hi Andi, I did see the behavior, and it appears to be a bug with the windows supplicant. Apparently, the credentials are not even passed to the EAP module to initiate the session with the NAS... We do not have any kind of contact at Microsoft to open a bug, so I believe you are stuck with those issues :S On 12-03-05 11:16 AM, Morris, Andi wrote:
Hi all,
Apologies for being slightly off topic.
Does anyone else get a problem with Windows 7 clients prompting for the radius credentials 2 or 3 times before finally accepting them? No errors are shown on the radius side, and I’ve read that this is a problem with the operating system, but wondered whether anyone in this knowledgeable community had overcome this?
Cheers,
Andi
---------------------------------------------------------------------- --
From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December 2011, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. *Please could you ensure that all of your contact records and databases are updated to reflect this change.* Further information can be found on the website here. <http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Francois Gaudreault, ing. jr fgaudreault@inverse.ca :: +1.514.447.4918 (x130) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ________________________________ From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December 2011, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. Please could you ensure that all of your contact records and databases are updated to reflect this change. Further information can be found on the website here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx> Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad e-bost sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr holl ebyst a ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu danfon o‘r cyfeiriad @cardiffmet.ac.uk newydd. Gwnewch yn siwr eich bod yn diweddaru eich cofnodion cyswllt a'ch cronfeydd data i adlewyrchu hyn. Gellir cael rhagor o wybodaeth ar y wefan yma.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>
On Tue, Mar 06, 2012 at 02:22:04PM +0000, Morris, Andi wrote:
Dave, I am running Cisco switches with dot1x timeouts, I wonder whether this could be causing the issue. I'll do some testing.
Turn off "Excessive 802.1X Authentication Failures" if you've got such a thing and it's enabled. We had it on, and if the first login had a bad password, the user would be locked out until they waited a minute or so to drop out of the client exclusion table. It's supposed to be three bad login attempts, but watching the client debug logs showed it tripping after just one due to the number of challenges/responses etc - I forget the exact details now. Maybe Windows did automatically retry a couple of times, which tripped it up. (This is Cisco wireless LAN controllers - switches may be similar.) We still see it with this off (see in other e-mail) but much less often. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Architect (UNIX and Networks), Network Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
participants (3)
-
Aman Arneja -
Matthew Newton -
Morris, Andi