Hi,<br> I'm trying to make wpa_supplicant ( on windows XP with CONFIG_USE_NDISUIO ) preauthenticate with ap2 while it is already associated with ap1. Following are the network blocks I've specified in .conf -
<br><br>network={<br>
ssid="ap1"<br>
key_mgmt=WPA-PSK<br>
proto=WPA2<br>
pairwise=CCMP<br>
group=CCMP<br>
psk=<some_passphrase><br>}<br>
<br>network={<br> ssid="ap2"<br> key_mgmt=WPA-EAP<br> priority=0<br> identity="user"<br> proto=WPA2<br> pairwise=CCMP<br> group=CCMP<br> eap=TLS<br> ca_cert=<path_to_ca.der>
<br> client_cert=<path_to_client.der><br> private_key=<path_to_clientkey.der><br>}<br><br> when I send command "preauthenticate <bssid_of_ap2> from wpa_cli, it fails to pre-authenticate. I could see EAP identitity request coming to wpa_supplicant, but there is no response to that. wpa_supplicant shows following debug messages -
<br><br>RX ctrl_iface - hexdump_ascii(len=25):<br> 50 52 45 41 55 54 48 20 30 30 3a 31 36 3a 62 36 PREAUTH <bssid_of_ap2><br> 3a 63 36 3a 62 63 3a 36 32 <br>CTRL_IFACE PREAUTH <bssid_of_ap2>
<br>RSN: starting pre-authentication with <bssid_of_ap2><br>EAPOL: SUPP_PAE entering state DISCONNECTED<br>EAPOL: KEY_RX entering state NO_KEY_RECEIVE<br>EAPOL: SUPP_BE entering state INITIALIZE<br>EAP: EAP entering state DISABLED
<br>EAPOL: External notification - portValid=1<br>EAPOL: External notification - portEnabled=1<br>EAPOL: SUPP_PAE entering state CONNECTING<br>EAPOL: SUPP_BE entering state IDLE<br>EAP: EAP entering state INITIALIZE<br>EAP: EAP entering state IDLE
<br>CTRL: Overlapped write started for 00B96578<br>CTRL: Overlapped write completed: dst=00B96578 err=0 bytes=3<br>CTRL: Overlapped read started for 00B96578<br>RX pre-auth from <bssid_of_ap2><br>RX pre-auth - hexdump(len=46): 02 00 00 05 01 0b 00 05 01 00 00 00 00 00 00 00 0
<br>0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 63<br>51 72 20<br>EAPOL: Received EAP-Packet frame<br>EAPOL: SUPP_PAE entering state RESTART<br>EAP: EAP entering state INITIALIZE<br>EAP: EAP entering state IDLE
<br>EAPOL: SUPP_PAE entering state AUTHENTICATING<br>EAPOL: SUPP_BE entering state REQUEST<br>EAPOL: getSuppRsp<br>EAP: EAP entering state RECEIVED<br>EAP: Received EAP-Request id=11 method=1 vendor=0 vendorMethod=0<br>EAP: EAP entering state IDENTITY
<br>CTRL-EVENT-EAP-STARTED EAP authentication started<br>CTRL_IFACE monitor send 00B96578<br>EAP: EAP-Request Identity data - hexdump_ascii(len=0):<br>EAP: using real identity - hexdump_ascii(len=0): [NULL]<br>EAP: buildIdentity: identity configuration was not available
<br>CTRL-REQ-IDENTITY-1:Identity needed for SSID <ap1><br>CTRL_IFACE monitor send 00B96578<br>EAP: EAP entering state SEND_RESPONSE<br>EAP: EAP entering state IDLE<br>EAPOL: startWhen --> 0<br>RX pre-auth from <bssid_of_ap2>
<br>RX pre-auth - hexdump(len=46): 02 00 00 05 01 0b 00 05 01 00 00 00 00 00 00 00 0<br>0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 63<br>51 72 20<br>EAPOL: Received EAP-Packet frame<br>RSN: pre-authentication with <bssid_of_ap2> timed out
<br><br><br><br><br><br>Cheers<br>- Paresh<br>