OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Bryan D. Payne (bdpaynecs.umd.edu)
Date: Thu Dec 20 2001 - 17:22:25 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    A friend and myself are working on an open source EAP-TLS implementation
    for linux. Our current setup looks like this:

    client -- linux with Cisco 342 card and recent aironet driver from cvs
    ap -- Cisco 340 series
    radius server -- Win2k IAS with EAP-TLS enabled

    At this point we can successfully authenticate with the IAS server (i.e.,
    we get to the point where the server sends us an EAP Success packet).
    However, since our code is all done in user space via libnet and libpcap,
    the driver is unaware that our association state has changed. Therefore,
    it continues sending out Probe Requests and the AP times out on our
    authentication, then sends us a disassociate message.

    From what we can tell, all that we need to do is tell the driver that we
    have now finished the authentication/association/eap-authentication states
    and are now ready to communicate. Unfortunatly, we don't know how to do
    this.

    Is this possible? And, if so, how can it be done?

    Thanks,
    bryan payne

    _______________________________________________
    Aironet mailing list - Aironetcsl.cse.ucsc.edu
    http://csl.cse.ucsc.edu/mailman/listinfo/aironet