802.1X Auth sometime broken the sequence..

[Jouni Malinen]

On Tue, Apr 08, 2003 at 03:19:44PM +0900, ?vBXXZcX0-? wrote:

> When I try to hostap 802.1X authentication using AGEIS Server and Client (it can use for 15 days trial version from 
> www.mtghouse.com site)  some time the hostap authentication state machine's identifier number looks broken or twist.. 

Could you please re-test with the latest CVS version? I have modified
DISCONNECTED state handling not to send canned EAP failure message when
entering that state from INITIALIZE state. This may have removed the
case you are seeing here.

> Please look at this specially identifier number ... 

> IEEE 802.1X: Sending EAP Request-Identity to 00:90:4b:0e:a3:c6 (identifier 3)
> IEEE 802.1X: Sending canned EAP packet FAILURE to 00:90:4b:0e:a3:c6 (identifier 3)
> IEEE 802.1X: Sending EAP Request-Identity to 00:90:4b:0e:a3:c6 (identifier 4)

> IEEE 802.1X: 46 bytes from 00:90:4b:0e:a3:c6
> EAP Identifier of the Response-Identity from 00:90:4b:0e:a3:c6 does not match (was 3, expected 4)

Supplicant is replying to the first Request-Identity and Authenticator
drops the packet since it is not a reply to the last request.

-- 
Jouni Malinen                                            PGP id EFC895FA