Authentication Problem

Joachim Wickman jwickman at tawi.fi
Fri Jun 6 01:08:22 EDT 2003


Hi,

I'm having some problems with Message-Authenticator when using radius as
MAC-ACL.
Running hostapd-0.0.3, mysql-3.23.56 and freeradius-0.8.1 on the same
machine (gentoo).
It works for some clients, but not all.. below is some output when a Linux
Orinoco tries to connect.

How could I get this to work for ALL clients???

// Joachim


radiusd -X -A gives
---------
rad_recv: Access-Request packet from host 127.0.0.1:1148, id=0, length=154
Received packet from 127.0.0.1 with invalid Message-Authenticator!
Server rejecting request 0.
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
rad_recv: Access-Request packet from host 127.0.0.1:1148, id=0, length=154
Sending Access-Reject of id 0 to 127.0.0.1:1148
rl_next:  returning NULL
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 4 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 0 with timestamp 3edeee5a
Nothing to do.  Sleeping until we see a request.
-----------


and hostapd -dd gives
---------------
mgmt::auth
authentication: STA=00:02:2d:40:7d:c1 auth_alg=0 auth_transaction=1
status_code=0 wep=0
Sending RADIUS message to authentication server
Authentication frame from 00:02:2d:40:7d:c1 waiting for an external
authentication
Resending RADIUS message (id=0)
Received 20 bytes from RADIUS server
Received RADIUS message
Found matching Access-Request for RADIUS message (id=0)
Response Authenticator invalid!
Incoming RADIUS packet did not have correct authenticator - dropped
IEEE 802.1X: Could not find matching station for this RADIUS message
No RADIUS RX handler found (type=0 code=3 id=0) - dropping packet
--------------


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20030606/66db869a/attachment.htm 


More information about the HostAP mailing list