<div> Hi Ambedkar,</div> <div> </div> <div> I want to run a test of 802.1X with wpa_supplicant running on Windows and integrated EAP server on hostapd. Any method can be used but I prefer the simplest one (MD5???). I just want to see how the 802.1X works. </div> <div> </div> <div> I wonder if there's any constraints in my test case. The README-Windows file of wpa_supplucant says that IEEE802.1X with dynamics WEP keys was tested. Does it mean EAP-MD5 is not supported for WIndows version please.</div> <div> </div> <div> I am beginer beginer of security domain, I dont know match about the different methods. For the short term, I just want to look at 802.1X port-control system.</div> <div> </div> <div> Thanks a lot for your help,</div> <div> Best regards,</div> <div> </div> <div>Dinh Tran<BR><BR><B><I>Ambedkar R <ambedkar_r@yahoo.com></I></B> wrote:</div> <BLOCKQUOTE class=replbq
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid"> <DIV>Hi Dinh,</DIV> <DIV> </DIV> <DIV>Your configuration file is little confuse.Can you tell me that which authentication method you want to use.If you want to use IEEE802.1X with dynamic wep keys,you should use certificates.(For EAP-TLS,we should use client and root certificate) </DIV> <DIV>In the case of WPA-PSK.no need certificates.</DIV> <DIV> </DIV> <DIV>-Ambedkar.R<BR><BR><B><I>Tran Thanh Dinh <dinh107@yahoo.com></I></B> wrote:</DIV> <BLOCKQUOTE class=replbq style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">Hi,<BR><BR>Here is the config file for eap_psk on hostapd side:<BR>eap_psk.conf<BR>driver=madwifi<BR>interface=ath0<BR>bridge=br0<BR>eap_server=1<BR>ssid=eap_psk_test<BR>ieee8021x=1<BR>eap_user_file=/etc/hostapd.eap_user<BR>logger_stdout=-1<BR>logger_stdout_level=0<BR><BR>then I got the following log after lauching
hostapd<BR>[root@localhost hostapd-0.4.9]# hostapd -d<BR>eap_psk.conf<BR>Configuration file: eap_psk.conf<BR>Configure bridge br0 for EAPOL traffic.<BR>Using interface ath0 with hwaddr 00:17:9a:0c:0a:fb and<BR>ssid <BR>'eap_psk_test'<BR>Flushing old station entries<BR>madwifi_sta_deauth: addr=ff:ff:ff:ff:ff:ff<BR>reason_code=3<BR>Deauthenticate all stations<BR>l2_packet_receive - recvfrom: Network is down<BR>Signal 2 received - terminating<BR>Flushing old station entries<BR>madwifi_sta_deauth: addr=ff:ff:ff:ff:ff:ff<BR>reason_code=3<BR>Deauthenticate all stations<BR>madwifi_set_privacy: enabled=0<BR>[root@localhost hostapd-0.4.9]#<BR><BR>On wpa_supplicant side, the config file used is: <BR>eap_psk.conf<BR>ap_scan=1<BR>network={<BR>ssid="eap_psk_test"<BR>key_mgmt=IEEE8021X<BR>eap=MD5<BR>identity="psk"<BR>eappsk=0123456789abcdef0123456789abcdef<BR>}<BR><BR>and the obtained
log:<BR>C:\cygwin\home\root\wpa_supplicant-0.4.9>wpa_supplicant.exe<BR>-i\Device\NPF_{8FE40<BR>90E-D22B-4769-B270-441A9F06B8B2} -c eap_psk.conf -d<BR>Initializing interface<BR>'\Device\NPF_{8FE4090E-D22B-4769-B270-441A9F06B8B2}'<BR>conf<BR>'eap_psk.conf' driver 'default' ctrl_interface 'N/A'<BR>Configuration file 'eap_psk.conf' -><BR>'C:\cygwin\home\root\wpa_supplicant-0.4.9/e<BR>ap_psk.conf'<BR>Reading configuration file<BR>'C:\cygwin\home\root\wpa_supplicant-0.4.9/eap_psk.con<BR>f'<BR>ap_scan=1<BR>Priority group 0<BR>id=0 ssid='eap_psk_test'<BR>Initializing interface (2)<BR>'\Device\NPF_{8FE4090E-D22B-4769-B270-441A9F06B8B2}'<BR>EAPOL: SUPP_PAE entering state DISCONNECTED<BR>EAPOL: KEY_RX entering state NO_KEY_RECEIVE<BR>EAPOL: SUPP_BE entering state INITIALIZE<BR>EAP: EAP entering state DISABLED<BR>EAPOL: External notification - portEnabled=0<BR>EAPOL: External notification - portValid=0<BR>NDIS: Packet.dll version: 3, 1, 0, 27<BR>NDIS: 3 adapter names
found<BR>NDIS: 3 adapter descriptions found<BR>NDIS: 0 - \Device\NPF_GenericDialupAdapter - Generic<BR>dialup adapter<BR>NDIS: 1 -<BR>\Device\NPF_{8FE4090E-D22B-4769-B270-441A9F06B8B2} -<BR>Intel(R) PRO/Wire<BR>less 2200BG Network Connection (Microsoft's Packet<BR>Scheduler)<BR>NDIS: 2 -<BR>\Device\NPF_{63468DCC-BAAF-45CA-9684-5E7E0725A406} -<BR>Broadcom NetXtrem<BR>e Gigabit Ethernet Driver (Microsoft's Packet<BR>Scheduler)<BR>NDIS: Adapter description prefix 'Intel'<BR>NDIS: Driver supports OID_802_11_CAPABILITY -<BR>NoOfPMKIDs 4 NoOfAuthEncrPairs 12<BR>NDIS: driver capabilities: key_mgmt 0xf enc 0xf auth<BR>0x3<BR>Own MAC address: 00:16:6f:25:8a:fe<BR>wpa_driver_ndis_set_wpa: enabled=1<BR>ndis_get_oid: oid=0xd010101 len (6) failed<BR>ndis_get_oid: oid=0xd010101 len (6) failed<BR>ndis_get_oid: oid=0xd010101 len (6) failed<BR>ndis_get_oid: oid=0xd010101 len (6) failed<BR>Setting scan request: 0 sec 100000 usec<BR>Added
interface<BR>\Device\NPF_{8FE4090E-D22B-4769-B270-441A9F06B8B2}<BR>State: DISCONNECTED -> SCANNING<BR>Starting AP scan (broadcast SSID)<BR>NDIS: turning radio on before the first scan<BR>ndis_get_oid: oid=0xd010101 len (6) failed<BR>ndis_get_oid: oid=0xd010101 len (6) failed<BR>ndis_get_oid: oid=0xd010101 len (6) failed<BR>Scan timeout - try to get results<BR>Scan results: 2<BR>Selecting BSS from priority group 0<BR>0: 00:0f:f8:58:58:cd ssid='wpa_test' wpa_ie_len=24<BR>rsn_ie_len=0 caps=0x10<BR>skip - SSID mismatch<BR>1: 00:17:9a:0c:0a:fb ssid='eap_psk_test' wpa_ie_len=0<BR>rsn_ie_len=0 caps=0x0<BR>skip - no WPA/RSN IE<BR>No suitable AP found.<BR>Setting scan request: 5 sec 0 usec<BR>ndis_get_oid: oid=0xd010101 len (6) failed<BR>ndis_get_oid: oid=0xd010101 len (6) failed<BR>CTRL-EVENT-TERMINATING - signal 2 received<BR>Removing interface<BR>\Device\NPF_{8FE4090E-D22B-4769-B270-441A9F06B8B2}<BR>State: SCANNING -> DISCONNECTED<BR>No keys have been configured - skip key
clearing<BR>EAPOL: External notification - portEnabled=0<BR>EAPOL: External notification - portValid=0<BR>wpa_driver_ndis_set_wpa: enabled=0<BR>No keys have been configured - skip key clearing<BR>Cancelling scan request<BR><BR>C:\cygwin\home\root\wpa_supplicant-0.4.9><BR><BR>wpa_supplicant sees the network eap_psk_test but it<BR>doesnt take it as a suitable AP<BR><BR>I tried also with eap_leap. On hostapd side, I edited<BR>the /etc/hostapd.eap_user file as follow<BR><BR>"leap" LEAP "leap"<BR><BR>[root@localhost hostapd-0.4.9]# hostapd -d<BR>eap_leap.conf<BR>Configuration file: eap_leap.conf<BR>Unsupported EAP type 'LEAP' on line 33 in<BR>'/etc/hostapd.eap_user'<BR>1 errors found in configuration file 'eap_leap.conf'<BR>[root@localhost hostapd-0.4.9]#<BR><BR>It seems that the EAP integrated server doesnt support<BR>LEAP method.<BR><BR>Thanks for your help,<BR>Best regards,<BR><BR>Dinh Tran<BR>--- Ambedkar R <AMBEDKAR_R@YAHOO.COM>wrote:<BR><BR>> Hi Dinh,<BR>>
<BR>> Can you send me your logs with -ddK option and<BR>> include your config file also.<BR>> <BR>> Regards<BR>> Ambedkar.R<BR>> --------------------<BR>> Create something before destroying,because<BR>> destruction can't be ultimate aim.<BR>> <BR>> <BR>> Tran Thanh Dinh <DINH107@YAHOO.COM>wrote:<BR>> Hi,<BR>> <BR>> I want to have a test with wpa_supplicant running on<BR>> Windows XP, and hostapd with integrated EAP server<BR>> for<BR>> 802.1X but thanks for confirming me if it's possible<BR>> please?<BR>> <BR>> I tested succesfully for WPA_PSK, but once I changed<BR>> to 802.1X, I always get error: No suitable AP found.<BR>> <BR>> In the README file of wpa_supplicant for Windows, it<BR>> says that 802.1X with dynamic WEP keys was tested.<BR>> Does it mean the other methods are not yet possible<BR>> for WIndows version please?<BR>> <BR>> On hostapd side, I tried to configure for LEAP<BR>>
(dynamic WEP keys?) but the method LEAP was not<BR>> recognized by integrated server.<BR>> <BR>> Could you please help me out to have a test for<BR>> 802.1X with wpa_supplicant on Windows and integrated<BR>> EAP server used (any methods)?<BR>> <BR>> Thanks for your help,<BR>> Best regards,<BR>> <BR>> Dinh Tran<BR>> <BR>> <BR>> <BR>> <BR>> <BR>> <BR>> <BR>> __________________________________________________<BR>> Do You Yahoo!?<BR>> Tired of spam? Yahoo! Mail has the best spam<BR>> protection around <BR>> http://mail.yahoo.com <BR>> _______________________________________________<BR>> HostAP mailing list<BR>> HostAP@shmoo.com<BR>> http://lists.shmoo.com/mailman/listinfo/hostap<BR>> <BR>> <BR>> <BR>> ---------------------------------<BR>> Want to be your own boss? Learn how on Yahoo! Small<BR>> Business.
<BR><BR><BR><BR><BR><BR><BR>__________________________________________________<BR>Do You Yahoo!?<BR>Tired of spam? Yahoo! Mail has the best spam protection around <BR>http://mail.yahoo.com <BR></BLOCKQUOTE><BR> <div> <HR SIZE=1> Want to be your own boss? Learn how on <A href="http://us.rd.yahoo.com/evt=41244/*http://smallbusiness.yahoo.com/r-index">Yahoo! Small Business.</A> </BLOCKQUOTE><BR><BR><BR><DIV>
<DIV> </DIV></DIV><p> 
        
        
                <hr size=1>Want to be your own boss? Learn how on <a href="http://us.rd.yahoo.com/evt=41244/*http://smallbusiness.yahoo.com/r-index"> Yahoo! Small Business.</a>