MadWiFi/Internal EAP server/PEAP/MSCHAPv2 w/ WinXP Supplicant again!

[thomas schorpp]

Ivan S. Dubrov wrote:
> Hello, 
> 
> Does anybody have the configuration mentioned in the subject working? 

eap-tls with xp >sp2 clients

> 
> I find some discussion with the similar problem in this mailing list, but
> didn't
> find any helpful information - some links do not work now, I cannot
> download
> attachements. :(

ive seen this before, search for my posting around may 2005 and jouni
malinen's answers.

> 
> The problem is it just does not work! Here is the snippet from the log
> file:
> 
> SSL: (where=0x2002 ret=0xffffffff)
> SSL: SSL_accept:error in SSLv3 read client certificate A
> SSL: 0 bytes pending from ssl_out
> SSL: No data to be sent out
> EAP: EAP entering state METHOD_REQUEST
> EAP: building EAP-Request: Identifier 119
> EAP: EAP entering state SEND_REQUEST
> EAP: eapReqData -> EAPOL - hexdump(len=6): 01 77 00 06 19 00
> EAP: EAP entering state IDLE
> IEEE 802.1X: 00:11:95:14:3b:33 BE_AUTH entering state REQUEST
> IEEE 802.1X: Sending EAP Packet to 00:11:95:14:3b:33 (identifier 119)
> TX EAPOL - hexdump(len=24): 00 11 95 14 3b 33 00 0f b5 23 02 7c 88 8e 02 00
> 00 06 01 77 00 06 19 00
> IEEE 802.1X: 00:11:95:14:3b:33 REAUTH_TIMER entering state INITIALIZE
> IEEE 802.1X: 00:11:95:14:3b:33 REAUTH_TIMER entering state INITIALIZE
> IEEE 802.1X: 00:11:95:14:3b:33 REAUTH_TIMER entering state INITIALIZE
> 
> The last message is repeated many times. May be someone experienced can
> point me to the possible source of problem? I just do not have any idea.
> The working configuration would be helpful, too.

the client doesnt answer - so no conf problem.

uptodate winxp supplicant, uptodate and compatible windos card driver/hw?

> 
> I have Hostapd version 0.4.4 and MadWiFi from the Kanotix (CVS snapshot
> from the
> 20050816). 

should be ok.

> 
> I've attached configuration, log file and eap_user.
> 
> WBR,
> Ivan Dubrov
> 

y
tom