ich habe hier einen hp420 access point stehen, wo sich die benutzer mit zertifikat authentisieren (802.1x), in hintergrund ein freeradius server. unter windowsXP funktioniert das problemlos, unter debian leider noch nicht...
centrino ipw2200 chipsatz auf debian sarge
wpa mit psk hat bereits funktioniert, mit wpasupplicant
für 802.1x braucht man anscheinend "xsupplicant", den habe ich installiert, folgende config:
Code: Alles auswählen
network_list = all
default_netname = default
logfile = /var/log/xsupplicant.log
allow_interfaces = eth1
deny_interfaces = eth0,lo
default
{
type = wireless
allow_types = all
identity = <BEGIN_ID>testuser<END_ID>
#ssid = <BEGIN_SSID>radiustest<END_SSID>
eap_tls {
user_cert = /etc/xsupplicant/tls/wlan1-cert.pem
user_key = /etc/xsupplicant/tls/wlan1-key.pem
user_key_pass = <BEGIN_PASS>wlan2<END_PASS>
root_cert = /etc/xsupplicant/tls/radiusca-cacert.pem
#root_dir = /etc/xsupplicant/ca/
random_file = /etc/xsupplicant/tls/random
crl_dir = /etc/xsupplicant/tls
chunk_size = 1398
}
}
folgende fehlermeldung:
xsupplicant -d 4 -f -i eth1 -c /etc/xsupplicant/xsupplicant.conf
Code: Alles auswählen
network_list: all
Default network: "default"
Logfile: "/var/log/xsupplicant.log"
allow_interface_list: "eth1"
deny_interface_list: "eth0"
deny_interface_list: "lo"
deny_interface_list: "irda0"
network_list: all
Allow Types: ALL
ID: "risc-internal"
tls user cert: "/etc/xsupplicant/tls/wlan1-cert.pem"
tls user key: "/etc/xsupplicant/tls/wlan1-key.pem"
tls user pass: "wlan2"
tls root_cert: "/etc/xsupplicant/tls/radiusca-cacert.pem"
tls crl_dir: "/etc/xsupplicant/tls"
tls chunk: 1398
tls rand: "/etc/xsupplicant/tls/random"
bleibt einfach hängen
xsupplicant.log
Code: Alles auswählen
[INT] Called event_core_setup()!
[INT] Called cardif_linux_rtnetlink_init()!
[INT] ADDING INTERFACE : eth1
[INT] Flags are : 06
[INT] Initializing socket for interface eth1..
[INT] Index : 3
[INT] Allmulti mode is already enabled on this device!
Interface initalized!
[INT] Interface eth1 is wireless!
[INT] The card reported that the destination MAC address is now 00 00 00 00 00 00
[INT] Userdata is NULL!
[INT] All 0s for dest mac!
[INT] Userdata is NULL!
[INT] Working with ESSID : radiustest
[CONFIG] Working from config file /etc/xsupplicant/xsupplicant.conf.
No configuration information for network "radiustest" found. Using default.
[CONFIG] Opened socket descriptor #7
cmd_handler_exec(): no command set
[INT] All 0s for dest mac!
[INT] Encryption appears to be disabled. We will not reset keys on interface eth1!
[STATE] (global) -> DISCONNECTED
[INT] Encryption appears to be disabled. We will not reset keys on interface eth1!
[STATE] Processing DISCONNECTED state.
[STATE] DISCONNECTED -> CONNECTING
[INT] Got an RTM_NEWLINK!
[INT] Wireless event: cmd=0x8b15 len=20
[INT] New AP found!
[INT] All 0s for dest mac!
[INT] Encryption appears to be disabled. We will not reset keys on interface eth1!
[STATE] Processing CONNECTING state.
[STATE] Sending EAPOL-Start Frame.
[INT] All 0s for dest mac!
[INT] Encryption appears to be disabled. We will not reset keys on interface eth1!
[INT] All 0s for dest mac!
[INT] Encryption appears to be disabled. We will not reset keys on interface eth1!
[INT] All 0s for dest mac!
[INT] Encryption appears to be disabled. We will not reset keys on interface eth1!
[INT] All 0s for dest mac!
[INT] Encryption appears to be disabled. We will not reset keys on interface eth1!
Code: Alles auswählen
eth1 unassociated ESSID:"radiustest"
Mode:Managed Channel=0 Access Point: 00:00:00:00:00:00
Bit Rate=0 kb/s Tx-Power=20 dBm
RTS thr:off Fragment thr:off
Encryption key:0123-4356-7890-2321-3456-1234-56 Security mode:open
Power Management:off
Link Quality:0 Signal level:0 Noise level:0
Rx invalid nwid:0 Rx invalid crypt:8 Rx invalid frag:0
Tx excessive retries:0 Invalid misc:181 Missed beacon:0
Code: Alles auswählen
eth1 Link encap:Ethernet HWaddr 00:0E:45:AC:1F:D4
inet addr:192.158.0.1 Bcast:192.158.0.255 Mask:255.255.255.0
inet6 addr: fe80::20e:35ff:febc:1fd4/64 Scope:Link
UP BROADCAST ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:9 errors:12 dropped:193 overruns:0 frame:0
TX packets:3 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:408 (408.0 b)
Interrupt:11 Base address:0x2000 Memory:c0210000-c0210fff
er meldet sich überhaupt nicht am AP an, im radius log taucht nichts auf. komischerweise bemerkt xsupplicant nicht mal wenn die pfade zu den zertifikaten nicht existieren...
jemand eine idee?
danke
thorben
