wpa_supplicant fails to preauthenticate

[Paresh Sawant]

Hi,
           I'm trying to make wpa_supplicant ( on windows XP with
CONFIG_USE_NDISUIO ) preauthenticate with ap2 while it is already associated
with ap1. Following are the network blocks I've specified in .conf -

network={
    ssid="ap1"
    key_mgmt=WPA-PSK
    proto=WPA2
    pairwise=CCMP
    group=CCMP
    psk=<some_passphrase>
}

network={
    ssid="ap2"
    key_mgmt=WPA-EAP
    priority=0
    identity="user"
    proto=WPA2
    pairwise=CCMP
    group=CCMP
    eap=TLS
    ca_cert=<path_to_ca.der>
    client_cert=<path_to_client.der>
    private_key=<path_to_clientkey.der>
}

          when I send command "preauthenticate <bssid_of_ap2> from wpa_cli,
it fails to pre-authenticate. I could see EAP identitity request coming to
wpa_supplicant, but there is no response to that.  wpa_supplicant shows
following debug messages -

RX ctrl_iface - hexdump_ascii(len=25):
     50 52 45 41 55 54 48 20 30 30 3a 31 36 3a 62 36   PREAUTH
<bssid_of_ap2>
     3a 63 36 3a 62 63 3a 36 32
CTRL_IFACE PREAUTH <bssid_of_ap2>
RSN: starting pre-authentication with <bssid_of_ap2>
EAPOL: SUPP_PAE entering state DISCONNECTED
EAPOL: KEY_RX entering state NO_KEY_RECEIVE
EAPOL: SUPP_BE entering state INITIALIZE
EAP: EAP entering state DISABLED
EAPOL: External notification - portValid=1
EAPOL: External notification - portEnabled=1
EAPOL: SUPP_PAE entering state CONNECTING
EAPOL: SUPP_BE entering state IDLE
EAP: EAP entering state INITIALIZE
EAP: EAP entering state IDLE
CTRL: Overlapped write started for 00B96578
CTRL: Overlapped write completed: dst=00B96578 err=0 bytes=3
CTRL: Overlapped read started for 00B96578
RX pre-auth from <bssid_of_ap2>
RX pre-auth - hexdump(len=46): 02 00 00 05 01 0b 00 05 01 00 00 00 00 00 00
00 0
0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
63
51 72 20
EAPOL: Received EAP-Packet frame
EAPOL: SUPP_PAE entering state RESTART
EAP: EAP entering state INITIALIZE
EAP: EAP entering state IDLE
EAPOL: SUPP_PAE entering state AUTHENTICATING
EAPOL: SUPP_BE entering state REQUEST
EAPOL: getSuppRsp
EAP: EAP entering state RECEIVED
EAP: Received EAP-Request id=11 method=1 vendor=0 vendorMethod=0
EAP: EAP entering state IDENTITY
CTRL-EVENT-EAP-STARTED EAP authentication started
CTRL_IFACE monitor send 00B96578
EAP: EAP-Request Identity data - hexdump_ascii(len=0):
EAP: using real identity - hexdump_ascii(len=0): [NULL]
EAP: buildIdentity: identity configuration was not available
CTRL-REQ-IDENTITY-1:Identity needed for SSID <ap1>
CTRL_IFACE monitor send 00B96578
EAP: EAP entering state SEND_RESPONSE
EAP: EAP entering state IDLE
EAPOL: startWhen --> 0
RX pre-auth from <bssid_of_ap2>
RX pre-auth - hexdump(len=46): 02 00 00 05 01 0b 00 05 01 00 00 00 00 00 00
00 0
0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
63
51 72 20
EAPOL: Received EAP-Packet frame
RSN: pre-authentication with <bssid_of_ap2> timed out





Cheers
- Paresh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20071203/0666cd08/attachment.htm