Hostapd + WPA PEAP + Win XP SP2 supplicant

[Vincent Maurin]

Hi,

 

I have set up an access point WPA-PEAP TKIP.

I can connect with Intel PROSet supplicant, and Windows XP SP2 Supplicant.

But with the Windows one, the connection takes more than one minute, and
during this minute,

the supplicant seems to do nothing and I get this kind of debug message from
hostapd

 

IEEE 802.1X: Generated EAP Request-Identity for 00:0c:f1:50:b1:32
(identifier 0, timeout 30)

IEEE 802.1X: 00:0c:f1:50:b1:32 REAUTH_TIMER entering state INITIALIZE

IEEE 802.1X: 00:0c:f1:50:b1:32 AUTH_PAE entering state CONNECTING

IEEE 802.1X: 00:0c:f1:50:b1:32 REAUTH_TIMER entering state INITIALIZE

IEEE 802.1X: 00:0c:f1:50:b1:32 AUTH_PAE entering state AUTHENTICATING

IEEE 802.1X: 00:0c:f1:50:b1:32 BE_AUTH entering state REQUEST

IEEE 802.1X: Sending EAP Packet to 00:0c:f1:50:b1:32 (identifier 0)

IEEE 802.1X: 00:0c:f1:50:b1:32 REAUTH_TIMER entering state INITIALIZE

IEEE 802.1X: 00:0c:f1:50:b1:32 REAUTH_TIMER entering state INITIALIZE

IEEE 802.1X: 00:0c:f1:50:b1:32 REAUTH_TIMER entering state INITIALIZE

IEEE 802.1X: 00:0c:f1:50:b1:32 REAUTH_TIMER entering state INITIALIZE

 

.. And 30 s later .

 

ath0: STA 00:0c:f1:50:b1:32 IEEE 802.1X: EAP timeout

 

It loops on this during one minute and after that, the supplicant finally
does somethings

 

IEEE 802.1X: 00:0c:f1:50:b1:32 REAUTH_TIMER entering state INITIALIZE

IEEE 802.1X: 5 bytes from 00:0c:f1:50:b1:32

   IEEE 802.1X: version=1 type=1 length=0

   ignoring 1 extra octets after IEEE 802.1X packet

ath0: STA 00:0c:f1:50:b1:32 IEEE 802.1X: received EAPOL-Start from STA

ath0: STA 00:0c:f1:50:b1:32 WPA: event 5 notification

WPA: 00:0c:f1:50:b1:32 WPA_PTK entering state AUTHENTICATION2

IEEE 802.1X: 00:0c:f1:50:b1:32 AUTH_PAE entering state ABORTING

IEEE 802.1X: 00:0c:f1:50:b1:32 BE_AUTH entering state INITIALIZE

ath0: STA 00:0c:f1:50:b1:32 IEEE 802.1X: aborting authentication

IEEE 802.1X: 00:0c:f1:50:b1:32 REAUTH_TIMER entering state INITIALIZE

IEEE 802.1X: 00:0c:f1:50:b1:32 AUTH_PAE entering state RESTART

IEEE 802.1X: station 00:0c:f1:50:b1:32 - new auth session, clearing State

IEEE 802.1X: Generated EAP Request-Identity for 00:0c:f1:50:b1:32
(identifier 4, timeout 30)

IEEE 802.1X: 00:0c:f1:50:b1:32 BE_AUTH entering state IDLE

IEEE 802.1X: 00:0c:f1:50:b1:32 REAUTH_TIMER entering state INITIALIZE

IEEE 802.1X: 00:0c:f1:50:b1:32 AUTH_PAE entering state CONNECTING

IEEE 802.1X: 00:0c:f1:50:b1:32 REAUTH_TIMER entering state INITIALIZE

IEEE 802.1X: 00:0c:f1:50:b1:32 AUTH_PAE entering state AUTHENTICATING

IEEE 802.1X: 00:0c:f1:50:b1:32 BE_AUTH entering state REQUEST

IEEE 802.1X: Sending EAP Packet to 00:0c:f1:50:b1:32 (identifier 4)

IEEE 802.1X: 00:0c:f1:50:b1:32 REAUTH_TIMER entering state INITIALIZE

IEEE 802.1X: 00:0c:f1:50:b1:32 REAUTH_TIMER entering state INITIALIZE

IEEE 802.1X: 00:0c:f1:50:b1:32 REAUTH_TIMER entering state INITIALIZE

IEEE 802.1X: 15 bytes from 00:0c:f1:50:b1:32

   IEEE 802.1X: version=1 type=0 length=11

   EAP: code=2 identifier=1 length=11 (response)

ath0: STA 00:0c:f1:50:b1:32 IEEE 802.1X: EAP Identifier of the
Response-Identity does not match (was 1, expected 4) - ignored

IEEE 802.1X: 00:0c:f1:50:b1:32 REAUTH_TIMER entering state INITIALIZE

IEEE 802.1X: 15 bytes from 00:0c:f1:50:b1:32

   IEEE 802.1X: version=1 type=0 length=11

   EAP: code=2 identifier=3 length=11 (response)

 

. the log continues with < normal > trace

 

 

It is clearly a supplicant problem, but I didn't find anything in the
windows support for SP2 (some issues for SP1, but corrected in SP2)

Has someone already had this kind of problem ?

 

 

Thanks

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20060725/1acdbc35/attachment.htm