PEAP IEEE802.1x authentication on CE4.2

I have two problems with IEEE802.1X authentication (PEAP) on Windows
CE 4.2:

1) After a successful authentication to an access point with PEAP, if
I try to connect again to the AP (without disconnecting) the platform
doesn't authenticate again to the radius server: (Authenticating ...
Reauthenticating ... reauthenticating ... with no successful
authentication) and the result is the same if i try to connect again.
If i watch with a sniffer to the trame exchanged between the AP and
the platform, the following sequence occurs:
a) the platform tries to start an EAP session
b) the AP acknowledge the platform request
c) the platform sends his identity
d) the AP acknowledge the platform request
e) the transaction stops here !
Note: if i connect to another AP with no IEEE802.1X authentication
when the problems occurs, there is generally no problem to reconnect
to the PEAP AP after.

2) Exceptionnaly, after a boot of the platform or a enable/disable of
the wireless card, the connection failed like in 1) but finish after a
few time to be established (3 minutes seems to be generally good)

I don't know if my two problems are linked, but it is the 2) problem
that makes me discover the 1) problem.


The platform is an x86 based platform.
All the QFE has been applied before building the platform.

Best Regards,
R=E9mi

80
Tue Jul 10 01:30:18 CDT 2007

Hi,

I face a similar issue here.

What authetication method is being used. MS CHAP v2 ?

Are you using WPA or WPA2 ?

rmoessner
Tue Jul 10 02:39:39 CDT 2007

Hi,

I use MS CHAP v2.
The wifi configuration is WEP/OPN with IEEE802.1X PEAP authentication.

On 10 juil, 08:30, 80.ri...@gmail.com wrote:
> Hi,
>
> I face a similar issue here.
>
> What authetication method is being used. MS CHAP v2 ?
>
> Are you using WPA or WPA2 ?

rmoessner
Tue Jul 10 04:17:47 CDT 2007

Hi,

I think our two problems are different: my connection generally
succeeds but never work if I try to Connect to the AP again without
disconnection (<=3D> connecting to another network without IEEE802.1x
authentication for example)

R=E9mi

On 10 juil, 09:39, R=E9mi Moessner <rmoess...@gmail.com> wrote:
> Hi,
>
> I use MS CHAP v2.
> The wifi configuration is WEP/OPN with IEEE802.1X PEAP authentication.
>
> On 10 juil, 08:30, 80.ri...@gmail.com wrote:
>
> > Hi,
>
> > I face a similar issue here.
>
> > What authetication method is being used. MS CHAP v2 ?
>
> > Are you using WPA or WPA2 ?

rmoessner
Tue Jul 10 06:06:47 CDT 2007

When we debug the platform with kitl (with kernel debugger), when the
authentication works, EAPTLS.DLL and EAPCHAP.DLL are loaded.
When we try to reconnect (with the error of permanent
reauthenticating), eapchap.dll is not loaded.

It seems like according to packet sniffing that eaptls.dll cannot be
initialized correctly (no TLS packet are sent to the AP (eaptls is
loaded but not well initialized ?) although the AP acknowledge the
identity packet) and so no CHAP session (eapchap.dll is not loaded)
starts.

BR,
R=E9mi


On 10 juil, 11:17, R=E9mi Moessner <rmoess...@gmail.com> wrote:
> Hi,
>
> I think our two problems are different: my connection generally
> succeeds but never work if I try to Connect to the AP again without
> disconnection (<=3D> connecting to another network without IEEE802.1x
> authentication for example)
>
> R=E9mi
>
> On 10 juil, 09:39, R=E9mi Moessner <rmoess...@gmail.com> wrote:
>
> > Hi,
>
> > I use MS CHAP v2.
> > The wifi configuration is WEP/OPN with IEEE802.1X PEAP authentication.
>
> > On 10 juil, 08:30, 80.ri...@gmail.com wrote:
>
> > > Hi,
>
> > > I face a similar issue here.
>
> > > What authetication method is being used. MS CHAP v2 ?
>
> > > Are you using WPA or WPA2 ?

80
Tue Jul 10 22:44:57 CDT 2007

Hello Remi,

I have a question.

When I see my debug output(attached here below) I see "888E 18 bytes
to DestMAC=001A30B812C7" transmitted. But the popup immediately comes
back again. When I click ok I see "888E 18 bytes to
DestMAC=001A30B812C7" transmitted.

>From the debug output I see this too. "WZCSVC:: NIO:: WARNING -
Discarding EAPOL packet length 69 from 001A30B812C7, EAPOL processing
currently disabled".

It looks like to me that AP is sending back something, but my device
discards it bcos it is not received within the proper time. If that is
the case, where should I increase the timeout for popup to reappear ?

Request you to advise me.

Thanks.
-----------------------------------------------------------------------------------------------


NIO: Send EAPOL packet type 888E 18 bytes to DestMAC=001A30B812C7
Tx:EAPOL To Target

HHAL:TARGET_DEAUTHENTICATED PHGHHAL_EVNT_DISCONNECT
PHGHHAL_EVNT_DISCONNECT: Attempting reconnection
PHGHHAL_EVNT_DISCONNECT: HostDrvHandleLossOfConnectionConnection lost:
indicated to NDISOID_802_11_SSID

RSSI=-200

ZCF:: LogEvent new list selected.. Close current EAPOL session for
[]..

HHAL:Target Join Req

HHAL:Target Join Cfm

HHAL:Target Auth Req

HHAL:Target Auth Cfm

HHAL:Target Assoc Req

HHAL:Target Assoc Cfm

PHGHHAL_EVNT_INIT_CONNECTMGMT_MLME_ASSOCIATE_CONFIRMu8NdisSetQueryPending=1mka:
Connection establishedSet current HW tx power values

TXPower:160

Volt:-1

CH:1

Temp:-120

WZCSVC:: NIO:: WARNING - Discarding EAPOL packet length 69 from
001A30B812C7, EAPOL processing currently disabled

NIO: Send EAPOL packet type 888E 18 bytes to DestMAC=001A30B812C7
Tx:EAPOL To Target


HHAL:TARGET_DEAUTHENTICATEDPHGHHAL_EVNT_DISCONNECTPHGHHAL_EVNT_DISCONNECT:
Attempting reconnectionPHGHHAL_EVNT_DISCONNECT:
HostDrvHandleLossOfConnectionConnection lost: indicated to
NDISOID_802_11_SSID
ZCF:: LogEvent new list selected.. Close current EAPOL session for
[]..

OID_802_11_SSID

HHAL:Target Join Req

HHAL:Target Join Cfm

HHAL:Target Auth Req

HHAL:Target Auth Cfm

HHAL:Target Assoc Req

HHAL:Target Assoc Cfm

PHGHHAL_EVNT_INIT_CONNECTMGMT_MLME_ASSOCIATE_CONFIRMu8NdisSetQueryPending=1mka:
Connection establishedSet current HW tx power values

TXPower:160

Volt:-1

CH:1

Temp:-120WZCSVC:: NIO:: WARNING - Discarding EAPOL packet length 69
from 001A30B812C7,

80
Wed Jul 11 06:52:35 CDT 2007

Forwarding it again.

PEAP Authentication. CE asks username and password.
Is there a timeout setting that determines when the popup should
reappear after I click ok button?

When I see my debug output of WZCSVC(attached here below) I see "888E
18 bytes
to DestMAC=3D001A30B812C7" transmitted after I click ok in credentials
UI. But the popup immediately comes
back again. When I click ok again I see "888E 18 bytes to
DestMAC=3D001A30B812C7" transmitted.

>From the debug output I see this too. "WZCSVC:: NIO:: WARNING -
Discarding EAPOL packet length 69 from 001A30B812C7, EAPOL processing
currently disabled".

It looks like to me that AP is sending back something, but my device
discards it bcos it is not received within the proper time. If that is
the case, where should I increase the timeout for popup to reappear ?

Request you to advise me.

Thanks.
---------------------------------------------------------------------------=
=AD--------------------

NIO: Send EAPOL packet type 888E 18 bytes to DestMAC=3D001A30B812C7
Tx:EAPOL To Target

HHAL:TARGET_DEAUTHENTICATED PHGHHAL_EVNT_DISCONNECT
PHGHHAL_EVNT_DISCONNECT: Attempting reconnection
PHGHHAL_EVNT_DISCONNECT: HostDrvHandleLossOfConnectionConnection lost:
indicated to NDISOID_802_11_SSID

RSSI=3D-200

ZCF:: LogEvent new list selected.. Close current EAPOL session for
[]..

HHAL:Target Join Req

HHAL:Target Join Cfm

HHAL:Target Auth Req

HHAL:Target Auth Cfm

HHAL:Target Assoc Req

HHAL:Target Assoc Cfm

PHGHHAL_EVNT_INIT_CONNECTMGMT_MLME_ASSOCIATE_CONFIRMu8NdisSetQueryPending=
=3D1=AD
mka:
Connection establishedSet current HW tx power values

TXPower:160

Volt:-1

CH:1

Temp:-120

WZCSVC:: NIO:: WARNING - Discarding EAPOL packet length 69 from
001A30B812C7, EAPOL processing currently disabled

NIO: Send EAPOL packet type 888E 18 bytes to DestMAC=3D001A30B812C7
Tx:EAPOL To Target

HHAL:TARGET_DEAUTHENTICATEDPHGHHAL_EVNT_DISCONNECTPHGHHAL_EVNT_DISCONNECT:
Attempting reconnectionPHGHHAL_EVNT_DISCONNECT:
HostDrvHandleLossOfConnectionConnection lost: indicated to
NDISOID_802_11_SSID
ZCF:: LogEvent new list selected.. Close current EAPOL session for
[]..

OID_802_11_SSID

HHAL:Target Join Req

HHAL:Target Join Cfm

HHAL:Target Auth Req

HHAL:Target Auth Cfm

HHAL:Target Assoc Req

HHAL:Target Assoc Cfm

PHGHHAL_EVNT_INIT_CONNECTMGMT_MLME_ASSOCIATE_CONFIRMu8NdisSetQueryPending=
=3D1=AD
mka:
Connection establishedSet current HW tx power values

TXPower:160

Volt:-1

CH:1

Temp:-120WZCSVC:: NIO:: WARNING - Discarding EAPOL packet length 69
from 001A30B812C7,

rmoessner
Wed Jul 11 17:36:52 CDT 2007

Hello ???

>It looks like to me that AP is sending back something, but my device
>discards it bcos it is not received within the proper time. If that is
>the case, where should I increase the timeout for popup to reappear ?

I don't know if there is any configurable timing to increase the
timeout for popup to reappear.

The only timing configurable I know for wireless are set by the API
WzcSetContext but these timing are for general wireless association,
inquiry ...

Perhaps the timing are configurable in HKCU\Comm\EAPOL\<YourSSID>
\25\ConnexionData ?

On 11 juil, 13:52, 80.ri...@gmail.com wrote:
> Forwarding it again.
>
> PEAPAuthentication. CE asks username and password.
> Is there a timeout setting that determines when the popup should
> reappear after I click ok button?
>
> When I see my debug output of WZCSVC(attached here below) I see "888E
> 18 bytes
> to DestMAC=3D001A30B812C7" transmitted after I click ok in credentials
> UI. But the popup immediately comes
> back again. When I click ok again I see "888E 18 bytes to
> DestMAC=3D001A30B812C7" transmitted.
>
> >From the debug output I see this too. "WZCSVC:: NIO:: WARNING -
>
> Discarding EAPOL packet length 69 from 001A30B812C7, EAPOL processing
> currently disabled".
>
> It looks like to me that AP is sending back something, but my device
> discards it bcos it is not received within the proper time. If that is
> the case, where should I increase the timeout for popup to reappear ?
>
> Request you to advise me.
>
> Thanks.
> -------------------------------------------------------------------------=
--=AD--------------------
>
> NIO: Send EAPOL packet type 888E 18 bytes to DestMAC=3D001A30B812C7
> Tx:EAPOL To Target
>
> HHAL:TARGET_DEAUTHENTICATED PHGHHAL_EVNT_DISCONNECT
> PHGHHAL_EVNT_DISCONNECT: Attempting reconnection
> PHGHHAL_EVNT_DISCONNECT: HostDrvHandleLossOfConnectionConnection lost:
> indicated to NDISOID_802_11_SSID
>
> RSSI=3D-200
>
> ZCF:: LogEvent new list selected.. Close current EAPOL session for
> []..
>
> HHAL:Target Join Req
>
> HHAL:Target Join Cfm
>
> HHAL:Target Auth Req
>
> HHAL:Target Auth Cfm
>
> HHAL:Target Assoc Req
>
> HHAL:Target Assoc Cfm
>
> PHGHHAL_EVNT_INIT_CONNECTMGMT_MLME_ASSOCIATE_CONFIRMu8NdisSetQueryPending=
=3D1=AD
> mka:
> Connection establishedSet current HW tx power values
>
> TXPower:160
>
> Volt:-1
>
> CH:1
>
> Temp:-120
>
> WZCSVC:: NIO:: WARNING - Discarding EAPOL packet length 69 from
> 001A30B812C7, EAPOL processing currently disabled
>
> NIO: Send EAPOL packet type 888E 18 bytes to DestMAC=3D001A30B812C7
> Tx:EAPOL To Target
>
> HHAL:TARGET_DEAUTHENTICATEDPHGHHAL_EVNT_DISCONNECTPHGHHAL_EVNT_DISCONNECT:
> Attempting reconnectionPHGHHAL_EVNT_DISCONNECT:
> HostDrvHandleLossOfConnectionConnection lost: indicated to
> NDISOID_802_11_SSID
> ZCF:: LogEvent new list selected.. Close current EAPOL session for
> []..
>
> OID_802_11_SSID
>
> HHAL:Target Join Req
>
> HHAL:Target Join Cfm
>
> HHAL:Target Auth Req
>
> HHAL:Target Auth Cfm
>
> HHAL:Target Assoc Req
>
> HHAL:Target Assoc Cfm
>
> PHGHHAL_EVNT_INIT_CONNECTMGMT_MLME_ASSOCIATE_CONFIRMu8NdisSetQueryPending=
=3D1=AD
> mka:
> Connection establishedSet current HW tx power values
>
> TXPower:160
>
> Volt:-1
>
> CH:1
>
> Temp:-120WZCSVC:: NIO:: WARNING - Discarding EAPOL packet length 69
> from 001A30B812C7,

rmoessner
Wed Jul 11 17:40:27 CDT 2007

Hi again,

I find some registry value in MSDN(http://msdn2.microsoft.com/En-US/
library/aa921081.aspx) that can be interesting for you:
HKEY_LOCAL_MACHINE\Comm\EAPOL
=3D=3D> AuthPeriodSeconds
=3D=3D> HeldPeriodSeconds
=3D=3D> MaxStart
=3D=3D> StartPeriodSeconds

R=E9mi


On 11 juil, 13:52, 80.ri...@gmail.com wrote:
> Forwarding it again.
>
> PEAPAuthentication. CE asks username and password.
> Is there a timeout setting that determines when the popup should
> reappear after I click ok button?
>
> When I see my debug output of WZCSVC(attached here below) I see "888E
> 18 bytes
> to DestMAC=3D001A30B812C7" transmitted after I click ok in credentials
> UI. But the popup immediately comes
> back again. When I click ok again I see "888E 18 bytes to
> DestMAC=3D001A30B812C7" transmitted.
>
> >From the debug output I see this too. "WZCSVC:: NIO:: WARNING -
>
> Discarding EAPOL packet length 69 from 001A30B812C7, EAPOL processing
> currently disabled".
>
> It looks like to me that AP is sending back something, but my device
> discards it bcos it is not received within the proper time. If that is
> the case, where should I increase the timeout for popup to reappear ?
>
> Request you to advise me.
>
> Thanks.
> -------------------------------------------------------------------------=
--=AD--------------------
>
> NIO: Send EAPOL packet type 888E 18 bytes to DestMAC=3D001A30B812C7
> Tx:EAPOL To Target
>
> HHAL:TARGET_DEAUTHENTICATED PHGHHAL_EVNT_DISCONNECT
> PHGHHAL_EVNT_DISCONNECT: Attempting reconnection
> PHGHHAL_EVNT_DISCONNECT: HostDrvHandleLossOfConnectionConnection lost:
> indicated to NDISOID_802_11_SSID
>
> RSSI=3D-200
>
> ZCF:: LogEvent new list selected.. Close current EAPOL session for
> []..
>
> HHAL:Target Join Req
>
> HHAL:Target Join Cfm
>
> HHAL:Target Auth Req
>
> HHAL:Target Auth Cfm
>
> HHAL:Target Assoc Req
>
> HHAL:Target Assoc Cfm
>
> PHGHHAL_EVNT_INIT_CONNECTMGMT_MLME_ASSOCIATE_CONFIRMu8NdisSetQueryPending=
=3D1=AD
> mka:
> Connection establishedSet current HW tx power values
>
> TXPower:160
>
> Volt:-1
>
> CH:1
>
> Temp:-120
>
> WZCSVC:: NIO:: WARNING - Discarding EAPOL packet length 69 from
> 001A30B812C7, EAPOL processing currently disabled
>
> NIO: Send EAPOL packet type 888E 18 bytes to DestMAC=3D001A30B812C7
> Tx:EAPOL To Target
>
> HHAL:TARGET_DEAUTHENTICATEDPHGHHAL_EVNT_DISCONNECTPHGHHAL_EVNT_DISCONNECT:
> Attempting reconnectionPHGHHAL_EVNT_DISCONNECT:
> HostDrvHandleLossOfConnectionConnection lost: indicated to
> NDISOID_802_11_SSID
> ZCF:: LogEvent new list selected.. Close current EAPOL session for
> []..
>
> OID_802_11_SSID
>
> HHAL:Target Join Req
>
> HHAL:Target Join Cfm
>
> HHAL:Target Auth Req
>
> HHAL:Target Auth Cfm
>
> HHAL:Target Assoc Req
>
> HHAL:Target Assoc Cfm
>
> PHGHHAL_EVNT_INIT_CONNECTMGMT_MLME_ASSOCIATE_CONFIRMu8NdisSetQueryPending=
=3D1=AD
> mka:
> Connection establishedSet current HW tx power values
>
> TXPower:160
>
> Volt:-1
>
> CH:1
>
> Temp:-120WZCSVC:: NIO:: WARNING - Discarding EAPOL packet length 69
> from 001A30B812C7,