<DIV> When using freeradius with wpa_supplicant I have noticed freeradius does not bump the EAP id when sending back the Access-Accept packet. wpa_supplicant notices this and has a work around. Will the WPA drop this packet (it is important because it has the keys in the attributes). Has anyone reported this bug?
<DIV> The reason I ask is because after receiving the accept packet, wpa_supplicant goes into AUTHENTICATED state but cannot connect to the network, or associate. Any ideas?</DIV>
<DIV> </DIV>
<DIV>the wpa_supplicant (last part) trace:</DIV>
<DIV>WPA: Sending EAPOL-Key 2/4<BR>RX EAPOL from 00:0f:b5:7a:17:bc<BR>EAPOL: Ignoring WPA EAPOL-Key frame in EAPOL state machines<BR>IEEE 802.1X RX: version=1 type=3 length=119<BR> EAPOL-Key type=254<BR>WPA: RX message 3 of 4-Way Handshake from 00:0f:b5:7a:17:bc (ver=1)<BR>WPA: IE KeyData - hexdump(len=24): dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00<BR>50 f2 02 01 00 00 50 f2 01<BR>WPA: No WPA/RSN IE for this AP known. Trying to get from scan results<BR>WPA: Found the current AP from updated scan results<BR>WPA: Sending EAPOL-Key 4/4<BR>WPA: Installing PTK to the driver.<BR>WPA: RSC - hexdump(len=6): 00 00 00 00 00 00<BR>RX EAPOL from 00:0f:b5:7a:17:bc<BR>EAPOL: Ignoring WPA EAPOL-Key frame in EAPOL state machines<BR>IEEE 802.1X RX: version=1 type=3 length=127<BR> EAPOL-Key type=254<BR>WPA: RX message 1 of Group Key Handshake from 00:0f:b5:7a:17:bc (ver=1)<BR>WPA: Group Key - hexdump(len=32): [REMOVED]<BR>WPA: Installing GTK to the driver (keyidx=1 tx=0).<BR>WPA: RSC -
hexdump(len=6): 00 00 00 00 00 00<BR>WPA: Sending EAPOL-Key 2/2<BR>WPA: Key negotiation completed with 00:0f:b5:7a:17:bc [PTK=TKIP GTK=TKIP]<BR>Cancelling authentication timeout<BR>Removed BSSID 00:0f:b5:7a:17:bc from blacklist<BR>EAPOL: External notification - portValid=1<BR>EAPOL: SUPP_PAE entering state AUTHENTICATED<BR>Signal 2 received - terminating<BR>ndis_get_oid: oid=0xd010101 len (6) failed<BR>ndis_set_oid: oid=0xd010114 len (4) failed<BR>ndis_get_oid: oid=0xd010101 len (6) failed<BR>ndis_set_oid: oid=0xd010114 len (4) failed<BR>ndis_get_oid: oid=0xd010101 len (6) failed<BR>ndis_set_oid: oid=0xd010114 len (4) failed<BR>ndis_get_oid: oid=0xd010101 len (6) failed<BR>ndis_set_oid: oid=0xd010114 len (4) failed<BR>EAPOL: External notification - portEnabled=0<BR>EAPOL: SUPP_PAE entering state DISCONNECTED<BR>EAPOL: SUPP_BE entering state INITIALIZE<BR>EAP: EAP entering state DISABLED<BR>EAPOL: External notification - portValid=0<BR>wpa_driver_ndis_set_wpa: enabled=0<BR>No keys
have been configured - skip key clearing<BR>rmdir[ctrl_interface]: No such file or directory<BR>EAP: deinitialize previously used EAP method (25, PEAP) at EAP deinit<BR></DIV>
<DIV>the freeradius (last part trace):</DIV>
<DIV> </DIV>
<DIV>ending Access-Challenge of id 12 to 192.168.0.229:1075<BR> EAP-Message = 0x010c00501900170301002028f83aa4e802c2965c29685e7521a11ea189ad707d72f340478950afc820a3dd1703010020c159819f4919952b824a4c2e7d71d92338cfeb7e35842ecca2590d0ec5e9a91f<BR> Message-Authenticator = 0x00000000000000000000000000000000<BR> State = 0xed25ce47ac6c8028e663a2f6f53414e7<BR>rad_recv: Access-Request packet from host 192.168.0.229:1075, id=13, length=251 Message-Authenticator = 0x508b7cdf35912a2b07a9f6f461200076<BR> Service-Type = Framed-User<BR> User-Name = "dreamer"<BR> Framed-MTU = 1488<BR> State =
0xed25ce47ac6c8028e663a2f6f53414e7<BR> Called-Station-Id = "000FB57A17BC:NETGEAR"<BR> Calling-Station-Id = "00070EB38E2D"<BR> NAS-Port-Type = Wireless-802.11<BR> Connect-Info = "CONNECT 54Mbps 802.11g"<BR> EAP-Message = 0x020c005019001703010020d636529b1ced029a7bc635638d3d21e9e6eeff64ba0e2bbdae2f362655442a601703010020653e43e16142b6e7535d53a7306aad5bc40cf157a9fa7f38c067a870a649c184<BR> NAS-IP-Address = 192.168.0.229<BR> NAS-Port = 1<BR> NAS-Port-Id = "STA port # 1"<BR>Sending Access-Accept of id 13 to 192.168.0.229:1075<BR> MS-MPPE-Recv-Key =
0x2ae009c01dc4c8af6bbf63b3a03eae0bf36d5f74277cd979e0aab0c7c0208b00<BR> MS-MPPE-Send-Key = 0xed2e0e7f8242205404cecb7894a82d742f43a225b2f1ddae8231128e413f00ec<BR> EAP-Message = 0x030c0004<BR> Message-Authenticator = 0x00000000000000000000000000000000<BR> User-Name = "dreamer"</DIV></DIV>