<div style="line-height:1.7;color:#000000;font-size:14px;font-family:arial">Hi Jouni,<div><br></div><div>Yes, I think the problem may lie in the certificate.</div><div><br></div><div>I made the certificate by the steps stated in my first email. The "identity" field of wpa_supplicant.conf is computer name "host/ubuntu.nps.test", while the certificate only contains information about the "testadmin" user. The information sent to NPS server is mismatch, I think, but I don't know what's the correct thing to do a computer name authentication.<br><pre><br>At&nbsp;2013-03-29&nbsp;15:19:28,"Jouni&nbsp;Malinen"&nbsp;&lt;j@w1.fi&gt;&nbsp;wrote:
&gt;On&nbsp;Fri,&nbsp;Mar&nbsp;29,&nbsp;2013&nbsp;at&nbsp;09:30:36AM&nbsp;+0800,&nbsp;McArthor&nbsp;Lee&nbsp;wrote:
&gt;&gt;&nbsp;I'm&nbsp;not&nbsp;using&nbsp;NM&nbsp;to&nbsp;configure&nbsp;802.1x.&nbsp;I'm&nbsp;configuring&nbsp;802.1x&nbsp;with&nbsp;wpa_supplicant&nbsp;directly.&nbsp;And&nbsp;I'm&nbsp;trying&nbsp;to&nbsp;do&nbsp;a&nbsp;computer&nbsp;name&nbsp;authentication.&nbsp;I&nbsp;wonder&nbsp;if&nbsp;wpa_supplicant&nbsp;supports&nbsp;such&nbsp;authentication,&nbsp;and&nbsp;how&nbsp;to&nbsp;do&nbsp;it.
&gt;
&gt;In&nbsp;most&nbsp;cases,&nbsp;I'd&nbsp;expect&nbsp;this&nbsp;to&nbsp;be&nbsp;just&nbsp;a&nbsp;configuration&nbsp;question,
&gt;i.e.,&nbsp;to&nbsp;set&nbsp;the&nbsp;identity&nbsp;and&nbsp;certificate&nbsp;parameters&nbsp;that&nbsp;the&nbsp;server
&gt;side&nbsp;expects.&nbsp;I'm&nbsp;not&nbsp;sure&nbsp;what&nbsp;the&nbsp;exact&nbsp;NPS&nbsp;requirements&nbsp;here&nbsp;are,&nbsp;so
&gt;it&nbsp;is&nbsp;a&nbsp;bit&nbsp;difficult&nbsp;to&nbsp;comment&nbsp;on&nbsp;what&nbsp;could&nbsp;be&nbsp;missing&nbsp;or&nbsp;incorrect.
&gt;Anyway,&nbsp;the&nbsp;reason&nbsp;for&nbsp;denying&nbsp;authentication&nbsp;was&nbsp;"Authentication&nbsp;failed
&gt;due&nbsp;to&nbsp;a&nbsp;user&nbsp;credentials&nbsp;mismatch.&nbsp;Either&nbsp;the&nbsp;user&nbsp;name&nbsp;provided&nbsp;does
&gt;not&nbsp;map&nbsp;to&nbsp;an&nbsp;existing&nbsp;user&nbsp;account&nbsp;or&nbsp;the&nbsp;password&nbsp;was&nbsp;incorrect."
&gt;which&nbsp;does&nbsp;not&nbsp;more&nbsp;like&nbsp;something&nbsp;being&nbsp;different&nbsp;in&nbsp;identities&nbsp;rather
&gt;than&nbsp;something&nbsp;missing&nbsp;from&nbsp;implementation.
&gt;
&gt;--&nbsp;
&gt;Jouni&nbsp;Malinen&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;PGP&nbsp;id&nbsp;EFC895FA
&gt;_______________________________________________
&gt;HostAP&nbsp;mailing&nbsp;list
&gt;HostAP@lists.shmoo.com
&gt;http://lists.shmoo.com/mailman/listinfo/hostap
</pre></div></div><br><br><span title="neteasefooter"><span id="netease_mail_footer"></span></span>