WPA2-PEAP problems

Harshal Chhaya harshal at gmail.com
Mon May 9 23:15:07 EDT 2011


Hello,

First off, thanks for a great package that allows me to replace a dedicated
AP with a network processor.

I am working on a system that uses hostapd to implement an integrated access
point to replace an existing product that uses an off-the-shelf access point
with freeRADIUS as the authentication server.

The clients use WPA2-PEAP (with username and passwords) to authenticate with
the AP and RADIUS server.

The username and password are stored in an 'eap_user' file.

The clients that can connect with the freeRADIUS-based system can't connect
to the hostapd-powered system.


The (verbose) hostapd log messages filtered for the specific client are:

 Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.11: authentication OK (open system)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
MLME: MLME-AUTHENTICATE.indication(00:09:37:09:03:87, OPEN_SYSTEM)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
MLME: MLME-DELETEKEYS.request(00:09:37:09:03:87)

Jan  1 00:02:22 OpenWrt user.info hostapd: wlan0: STA 00:09:37:09:03:87 IEEE
802.11: authenticated

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.11: association OK (aid 13)

Jan  1 00:02:22 OpenWrt user.info hostapd: wlan0: STA 00:09:37:09:03:87 IEEE
802.11: associated (aid 13)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
MLME: MLME-ASSOCIATE.indication(00:09:37:09:03:87)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
MLME: MLME-DELETEKEYS.request(00:09:37:09:03:87)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
WPA: event 1 notification

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: start authentication

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
WPA: start authentication

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: unauthorizing port

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: Sending EAP Packet (identifier 84)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: received EAPOL-Start from STA

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
WPA: event 5 notification

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: aborting authentication

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: Sending EAP Packet (identifier 236)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: received EAPOL-Start from STA

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
WPA: event 5 notification

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: aborting authentication

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: unauthorizing port

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: Sending EAP Packet (identifier 219)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: received EAP packet (code=2 id=84 len=21) from STA: EAP
Response-Identity (1)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: received EAP packet (code=2 id=236 len=21) from STA: EAP
Response-Identity (1)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: received EAP packet (code=2 id=219 len=21) from STA: EAP
Response-Identity (1)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: Sending EAP Packet (identifier 220)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: received EAP packet (code=2 id=220 len=86) from STA: EAP
Response-PEAP (25)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: Sending EAP Packet (identifier 221)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: received EAP packet (code=2 id=221 len=200) from STA: EAP
Response-PEAP (25)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: Sending EAP Packet (identifier 222)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: received EAP packet (code=2 id=222 len=6) from STA: EAP
Response-PEAP (25)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: Sending EAP Packet (identifier 223)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: received EAP packet (code=2 id=223 len=59) from STA: EAP
Response-PEAP (25)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: Sending EAP Packet (identifier 224)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: received EAP packet (code=2 id=224 len=107) from STA: EAP
Response-PEAP (25)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: Sending EAP Packet (identifier 225)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: received EAP packet (code=2 id=225 len=43) from STA: EAP
Response-PEAP (25)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: Sending EAP Packet (identifier 225)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.1X: unauthorizing port

Jan  1 00:02:22 OpenWrt user.warn hostapd: wlan0: STA 00:09:37:09:03:87 IEEE
802.1X: authentication failed - EAP type: 0 ((null))

Jan  1 00:02:22 OpenWrt user.info hostapd: wlan0: STA 00:09:37:09:03:87 IEEE
802.1X: Supplicant used different EAP type: 25 (PEAP)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
WPA: event 2 notification

Jan  1 00:02:22 OpenWrt user.info hostapd: wlan0: STA 00:09:37:09:03:87 IEEE
802.11: disassociated

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
MLME: MLME-DISASSOCIATE.indication(00:09:37:09:03:87, 8)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
MLME: MLME-DELETEKEYS.request(00:09:37:09:03:87)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
WPA: event 3 notification

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
IEEE 802.11: deauthenticated

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
MLME: MLME-DEAUTHENTICATE.indication(00:09:37:09:03:87, 3)

Jan  1 00:02:22 OpenWrt user.debug hostapd: wlan0: STA 00:09:37:09:03:87
MLME: MLME-DELETEKEYS.request(00:09:37:09:03:87)



(apologies for the verbose messages but I wanted to make sure I included all
relevant information)


My config file is:

=====================
logger_syslog=-1
logger_syslog_level=0
logger_stdout=-1
logger_stdout_level=2

# Dump file for state information (on SIGUSR1)
dump_file=/tmp/hostapd.dump

ctrl_interface=/var/run/hostapd-phy0
driver=nl80211
hw_mode=g
interface=wlan0
eapol_version=2
#auth_algs=1
wpa=2
#ignore_broadcast_ssid=0
wpa_key_mgmt=WPA-EAP
wpa_pairwise=CCMP
wpa_group_rekey=300
wpa_gmk_rekey=640

ieee8021x=1
eapol_key_index_workaround=0
eap_server=1
eap_user_file=/localconf/eap_user
ca_cert=/etc/hostapd/ca.crt
server_cert=/etc/hostapd/ca.crt
private_key=/etc/hostapd/ca.key

ssid=mytest
channel=11

=====================

Setting "eapol_version" to 1 did not make a difference.


Any suggestions on any config settings to help my clients connect? Please
let me know if you need any additional information.

Thanks in advance,
- Harshal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20110509/f10ed4b7/attachment.htm 


More information about the HostAP mailing list