wpa supplicat in credentials get cached

Paul Stewart pstew at google.com
Fri May 4 19:55:33 EDT 2012


wpa_supplicant does PMKSA caching.  Unless you use a recent wpa_supplicant
(which flushed the PMKSA cache when network blocks are removed), and have a
connection manager that removes networks blocks when you disconnect /
change credentials, wpa_supplicant will used it's cached credentials
instead of re-doing authentication from scratch each time you connect to an
802.1x network.  The effect is as you described: the RADIUS server is not
involved in PMKSA-cache-based authentication.

--
Paul

On Fri, May 4, 2012 at 8:21 AM, Antonio Quartulli <ordex at autistici.org>wrote:

> On Fri, May 04, 2012 at 08:43:57 +0530, dhanushka ranasinghe wrote:
> > Hi guys,
> >
> > i have ubuntu machine that uses wpa_supplicant, issue is seems like
> > wpa_supplicat caching the credentials, following are the steps that i
> > follow,
> >
> > [1] log in with wrong username and password to the my WIFI network,,
> > and Radius log shows access denied due to wrong credentials,
> >
> > [2] Then i login to the WIFI network by using correct username and
> > password  , Radius log shows access granted
> >
> > [3] Then i again try to connect with wrong username and password,
> > Radius log did'nt display any thing and WIFI got connected...
>
> Where do you get this RADIUS output from? where are you typing your
> credential
> in?
>
> Cheers,
>
>
> --
> Antonio Quartulli
>
> ..each of us alone is worth nothing..
> Ernesto "Che" Guevara
>
> _______________________________________________
> HostAP mailing list
> HostAP at lists.shmoo.com
> http://lists.shmoo.com/mailman/listinfo/hostap
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20120504/fda4eca5/attachment.htm 


More information about the HostAP mailing list