Freeradius-2.0.5 and Vista SP2

[M.K. tenNapel]

Hi,

I have protected my wireless network with Freeradius-2.0.5, running on
my Gentoo server. All the clients have to authenticate themselves with
an SSL-certificate, before access to the wireless network is granted.

This has always worked fine for Linux (Ubuntu 9.0.4) windows-XP (SP3)
and windows-Vista (SP1) However, since I upgraded 2 Vista laptops to
SP2, they won't connect to my wirelessnetwork anymore.

This is what Freeradius in debug-mode says:
Ready to process requests.
rad_recv: Access-Request packet from host 192.168.1.123 port 2049, id=2, length=133
    User-Name = "Pietje Puk"
    NAS-IP-Address = 192.168.1.123
    Called-Station-Id = "00226b8676fb"
    Calling-Station-Id = "00215c2dd5ef"
    NAS-Identifier = "00226b8676fb"
    NAS-Port = 23
    Framed-MTU = 1400
    NAS-Port-Type = Wireless-802.11
    EAP-Message = 0x0200000f014e656c6c79204f6f7374
    Message-Authenticator = 0x3ef0b2f9fac3b12b6476a230651a27f2
+- entering group authorize
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
    rlm_realm: No '@' in User-Name = "Pietje Puk", looking up realm NULL
    rlm_realm: No such realm "NULL"
++[suffix] returns noop
  rlm_eap: EAP packet type response id 0 length 15
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
++[unix] returns notfound
    users: Matched entry Pietje Puk at line 18
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop
rlm_pap: WARNING! No "known good" password found for the user.  Authentication may fail because of this.
++[pap] returns noop
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
+- entering group authenticate
  rlm_eap: EAP Identity
  rlm_eap: processing type tls
 rlm_eap_tls: Requiring client certificate
  rlm_eap_tls: Initiate
  rlm_eap_tls: Start returned 1
++[eap] returns handled
Sending Access-Challenge of id 2 to 192.168.1.123 port 2049
    EAP-Message = 0x010100060d20
    Message-Authenticator = 0x00000000000000000000000000000000
    State = 0x2ef5a31f2ef4aea21b4d93bd7a29a8b3
Finished request 0.

Going to the next request
Waking up in 4.9 seconds.

rad_recv: Access-Request packet from host 192.168.1.123 port 2049, id=2, length=142
Cleaning up request 0 ID 2 with timestamp +17
    User-Name = "Pietje Puk"
    NAS-IP-Address = 192.168.1.123
    Called-Station-Id = "00226b8676fb"
    Calling-Station-Id = "00215c2dd5ef"
    NAS-Identifier = "00226b8676fb"
    NAS-Port = 23
    Framed-MTU = 1400
    State = 0x2ef5a31f2ef4aea21b4d93bd7a29a8b3
    NAS-Port-Type = Wireless-802.11
    EAP-Message = 0x020100060319
    Message-Authenticator = 0x9840aa9e1d5478eb7e05a8184aad0e91
+- entering group authorize
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
    rlm_realm: No '@' in User-Name = "Pietje Puk", looking up realm NULL
    rlm_realm: No such realm "NULL"
++[suffix] returns noop
  rlm_eap: EAP packet type response id 1 length 6
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
++[unix] returns notfound
    users: Matched entry Pietje Puk at line 18
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop
rlm_pap: WARNING! No "known good" password found for the user.  Authentication may fail because of this.
++[pap] returns noop
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
+- entering group authenticate
  rlm_eap: Request found, released from the list
  rlm_eap: EAP NAK
 rlm_eap: NAK asked for unsupported type 25
 rlm_eap: No common EAP types found.
  rlm_eap: Failed in EAP select
++[eap] returns invalid
auth: Failed to validate the user.
Login incorrect: [Pietje Puk/<via Auth-Type = EAP>] (from client AP_Radius_Beneden port 23 cli 00215c2dd5ef)
  Found Post-Auth-Type Reject
+- entering group REJECT
    expand: %{User-Name} -> Pietje Puk
 attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Sending Access-Reject of id 2 to 192.168.1.123 port 2049
    EAP-Message = 0x04010004
    Message-Authenticator = 0x00000000000000000000000000000000
Finished request 1.
Going to the next request
Waking up in 4.9 seconds.
Cleaning up request 1 ID 2 with timestamp +17
Ready to process requests.

I suppose this is where it goes wrong:
rlm_eap: No common EAP types found.
rlm_eap: Failed in EAP select
etc

Does someone else have trouble with Vista SP2? Or am I the only one?
Perhaps someone knows how to fix this?

Kind regards,
Marinus