I've seen this from time to time on some machines, even with the built in Windows supplicant. If the 802.1x state timers on the RADIUS server timeout before the user enters his credentials, then the next EAP exchange following the user entering his credentials will result in the RADIUS server refusing the authentication. This will cause the supplicant to try to authenticate again, usually resulting in the user being presented with the password prompt again.

I can't see I've ever seen an instance, though, where it's the fault of the supplicant itself that things aren't happening quickly enough. Usually, its a user not paying attention to the little popup balloon asking him to enter his credentials that results in the auth timeout.

--Mike

On Feb 2, 2007, at 11:14 AM, Matt Ashfield wrote:

Hi All

This kind of has to do with a thread that has been ongoing, except we do not
use Active Directory or Novell in our situation.

We're currently trying to do some testing with 802.1x username/ password authentication. Basically a user connects to an SSID, and gets prompted for credentials via a dialog box, credentials are entered, compared against LDAP via Radius and then they get connected. This does work, but we're seeing
some oddness between laptops.

The main problem seems to be on laptops which use wireless vendor
configuration utilities such as Dell or IBM ThinkVantage, etc.. In some of those, it seems like the user is not prompted for credentials quick enough. And once they are prompted, it either doesn't work, or they get prompted
again, and eventually they will work and connect.

I'm just wondering if anyone else ran into this or a similar type problem
and if so, what did you do to correct it?

Any info is greatly appreciated.

Matt Ashfield
[EMAIL PROTECTED]

**********
Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http:// www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Reply via email to