EAP-FAST With Cisco ACS version 5.1 problem

Jouni Malinen j
Fri Dec 17 05:16:53 PST 2010


On Fri, Dec 10, 2010 at 04:27:52AM -0000, manik basha wrote:
> I have been using the wpa_supplicant 0.6.9 to establish EAP-FAST connection with Cisco ACS 5.1 server.
> 
> Since the PAC on the client is stale and in-band provisioning is enabled
>  on client and ACS 5.1 P0 provisioning happened successfully and 
> wpa_supplicant stored it to the file.
> 
> When the connection establishment is restarted wpa_supplicant loaded the
>  stored file but couldn't use the PAC because pac_type is missing in the
>  PAC loaded so (note that the A-ID in the EAP-FAST start message is matching) it fails to get a PAC from eap_fast_get_pac() function 
> resulting in P0 happening again.

Would you be able to provide a wpa_supplicant debug output showing this
behavior? I do not have Cisco ACS 5.1 server, so I cannot easily test
this myself.

-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list