RADIUS WIFI

par **albatore** » 05 Jan 2004 11:20

Bonjour, Je fais mon TFE (Travail de fin d'etude) sur les failles et la sécurisation des reseaux WIRELESS. Donc nous avons fait une identification par radius. Mais de peur de mal m'exprimer je joins un document qui explique toute la manipulation que j'ai suivi. C'est un document que j'ai trouve sur internet. <a href="http://www.koumoula.com/wifi/eap-tls/eap-tls.htm" target="_blank">http://www.koumoula.com/wifi/eap-tls/eap-tls.htm</a> Mon probleme est le suivant, j'ai bien fait le dcpromo, le serveur Radius comme il l'explique dans le document. Mais lorsque je me connecte via un porable sans fils sur le point d'acces, il me met -Validation de l'identité -> je choisi mon certificat et il reste sur validation de l'identité avec "?" sur la connexion. Pourriez vous m'aider ou me guider sur une maniere d'operer ou de resoudre mon probleme ? Merci de vos reponse. Moi <IMG SRC="images/smiles/icon_confused.gif">

par **albatore** » 05 Jan 2004 11:21

Hier j'ai refait la manip, en fait dans le document il est indiqué d'activer le wep et de laisser la valeur par défaut 0000000..... et il faut configurer l'authentification sur le point d'accès en Open System. Ce que j'ai fait...... J'ai activé les LOG sur le 2003 serveur par les commandes : netsh ras set tracing eapol enabled et netsh ras set tracing rastls enabled je vous envoi une copie d'une partie de celui - çi est ce que quelqu'un peut m'indiquer ce qui cloche et m'expliquer en gros ce log <IMG SRC="images/smiles/icon_smile.gif"> -->RASTLS.LOG [3000] 17:58:25:337: EapTlsBegin(WIRELESSjerome) [3000] 17:58:25:337: SetupMachineChangeNotification [3000] 17:58:25:337: State change to Initial [3000] 17:58:25:337: MaxTLSMessageLength is now 16384 [3000] 17:58:25:337: CRYPT_E_NO_REVOCATION_CHECK will not be ignored [3000] 17:58:25:337: CRYPT_E_REVOCATION_OFFLINE will not be ignored [3000] 17:58:25:337: The root cert will not be checked for revocation [3000] 17:58:25:337: The cert will be checked for revocation [3000] 17:58:25:337: [3000] 17:58:25:337: EapTlsMakeMessage(wirelessjerome) [3000] 17:58:25:337: >> Received Response (Code: 2) packet: Id: 61, Length: 24, Type: 0, TLS blob length: 0. Flags: [3000] 17:58:25:337: EapTlsSMakeMessage [3000] 17:58:25:337: EapTlsReset [3000] 17:58:25:337: State change to Initial [3000] 17:58:25:337: GetCredentials [3000] 17:58:25:337: Flag is Server and Store is local Machine [3000] 17:58:25:337: GetCachedCredentials Flags = 0x61 [3000] 17:58:25:337: GetCachedCredentials: Using Cached Credentials [3000] 17:58:25:337: GetCachedCredentials: Hash of the cert in the cache is 4 3 A E 5 8 9 F 4 F D 8 7 B 0 3 5 A C 3 B 0 4 D 3 C 4 8 6 B 1 7 | C . X . O . { . Z . . M < H k . | 7 1 8 D 0 B B E 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 | q . . . . . . . . . . . . . . . | [3000] 17:58:25:337: BuildPacket [3000] 17:58:25:337: << Sending Request (Code: 1) packet: Id: 62, Length: 6, Type: 13, TLS blob length: 0. Flags: S [3000] 17:58:25:337: State change to SentStart [3000] 17:58:25:337: EapTlsEnd [3000] 17:58:25:337: EapTlsEnd(wirelessjerome) [3564] 17:58:25:387: [3564] 17:58:25:387: EapTlsMakeMessage(wirelessjerome) [3564] 17:58:25:387: >> Received Response (Code: 2) packet: Id: 62, Length: 80, Type: 13, TLS blob length: 70. Flags: L [3564] 17:58:25:387: EapTlsSMakeMessage [3564] 17:58:25:387: MakeReplyMessage [3564] 17:58:25:387: Reallocating input TLS blob buffer [3564] 17:58:25:387: SecurityContextFunction [3564] 17:58:25:387: AcceptSecurityContext returned 0x90312 [3564] 17:58:25:387: State change to SentHello [3564] 17:58:25:387: BuildPacket [3564] 17:58:25:387: << Sending Request (Code: 1) packet: Id: 63, Length: 1376, Type: 13, TLS blob length: 4717. Flags: LM [3000] 17:58:25:387: [3000] 17:58:25:387: EapTlsMakeMessage(wirelessjerome) [3000] 17:58:25:387: >> Received Response (Code: 2) packet: Id: 63, Length: 6, Type: 13, TLS blob length: 0. Flags: [3000] 17:58:25:387: EapTlsSMakeMessage [3000] 17:58:25:387: BuildPacket [3000] 17:58:25:387: << Sending Request (Code: 1) packet: Id: 64, Length: 1376, Type: 13, TLS blob length: 0. Flags: M [3564] 17:58:25:397: [3564] 17:58:25:397: EapTlsMakeMessage(wirelessjerome) [3564] 17:58:25:397: >> Received Response (Code: 2) packet: Id: 64, Length: 6, Type: 13, TLS blob length: 0. Flags: [3564] 17:58:25:397: EapTlsSMakeMessage [3564] 17:58:25:397: BuildPacket [3564] 17:58:25:397: << Sending Request (Code: 1) packet: Id: 65, Length: 1376, Type: 13, TLS blob length: 0. Flags: M [3000] 17:58:25:407: [3000] 17:58:25:407: EapTlsMakeMessage(wirelessjerome) [3000] 17:58:25:407: >> Received Response (Code: 2) packet: Id: 65, Length: 6, Type: 13, TLS blob length: 0. Flags: [3000] 17:58:25:407: EapTlsSMakeMessage [3000] 17:58:25:407: BuildPacket [3000] 17:58:25:407: << Sending Request (Code: 1) packet: Id: 66, Length: 617, Type: 13, TLS blob length: 0. Flags: [3000] 17:58:55:471: [3000] 17:58:55:471: EapTlsBegin(WIRELESSjerome) [3000] 17:58:55:471: SetupMachineChangeNotification [3000] 17:58:55:471: State change to Initial [3000] 17:58:55:471: MaxTLSMessageLength is now 16384 [3000] 17:58:55:471: CRYPT_E_NO_REVOCATION_CHECK will not be ignored [3000] 17:58:55:471: CRYPT_E_REVOCATION_OFFLINE will not be ignored [3000] 17:58:55:471: The root cert will not be checked for revocation [3000] 17:58:55:471: The cert will be checked for revocation [3000] 17:58:55:471: [3000] 17:58:55:471: EapTlsMakeMessage(wirelessjerome) [3000] 17:58:55:471: >> Received Response (Code: 2) packet: Id: 67, Length: 24, Type: 0, TLS blob length: 0. Flags: [3000] 17:58:55:471: EapTlsSMakeMessage [3000] 17:58:55:471: EapTlsReset [3000] 17:58:55:471: State change to Initial [3000] 17:58:55:471: GetCredentials [3000] 17:58:55:471: Flag is Server and Store is local Machine [3000] 17:58:55:471: GetCachedCredentials Flags = 0x61 [3000] 17:58:55:471: GetCachedCredentials: Using Cached Credentials [3000] 17:58:55:471: GetCachedCredentials: Hash of the cert in the cache is 4 3 A E 5 8 9 F 4 F D 8 7 B 0 3 5 A C 3 B 0 4 D 3 C 4 8 6 B 1 7 | C . X . O . { . Z . . M < H k . | 7 1 8 D 0 B B E 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 | q . . . . . . . . . . . . . . . | [3000] 17:58:55:471: BuildPacket [3000] 17:58:55:471: << Sending Request (Code: 1) packet: Id: 68, Length: 6, Type: 13, TLS blob length: 0. Flags: S [3000] 17:58:55:471: State change to SentStart [3000] 17:58:55:471: EapTlsEnd [3000] 17:58:55:471: EapTlsEnd(wirelessjerome) [3564] 17:58:55:671: [3564] 17:58:55:671: EapTlsMakeMessage(wirelessjerome) [3564] 17:58:55:671: >> Received Response (Code: 2) packet: Id: 68, Length: 80, Type: 13, TLS blob length: 70. Flags: L [3564] 17:58:55:671: EapTlsSMakeMessage [3564] 17:58:55:671: MakeReplyMessage [3564] 17:58:55:671: Reallocating input TLS blob buffer [3564] 17:58:55:671: SecurityContextFunction [3564] 17:58:55:671: AcceptSecurityContext returned 0x90312 [3564] 17:58:55:671: State change to SentHello [3564] 17:58:55:671: BuildPacket [3564] 17:58:55:671: << Sending Request (Code: 1) packet: Id: 69, Length: 1376, Type: 13, TLS blob length: 4717. Flags: LM [3000] 17:58:55:681: [3000] 17:58:55:681: EapTlsMakeMessage(wirelessjerome) [3000] 17:58:55:681: >> Received Response (Code: 2) packet: Id: 69, Length: 6, Type: 13, TLS blob length: 0. Flags: [3000] 17:58:55:681: EapTlsSMakeMessage [3000] 17:58:55:681: BuildPacket [3000] 17:58:55:681: << Sending Request (Code: 1) packet: Id: 70, Length: 1376, Type: 13, TLS blob length: 0. Flags: M [3564] 17:58:55:691: [3564] 17:58:55:691: EapTlsMakeMessage(wirelessjerome) [3564] 17:58:55:691: >> Received Response (Code: 2) packet: Id: 70, Length: 6, Type: 13, TLS blob length: 0. Flags: [3564] 17:58:55:691: EapTlsSMakeMessage [3564] 17:58:55:691: BuildPacket [3564] 17:58:55:691: << Sending Request (Code: 1) packet: Id: 71, Length: 1376, Type: 13, TLS blob length: 0. Flags: M [3000] 17:58:55:691: [3000] 17:58:55:691: EapTlsMakeMessage(wirelessjerome) [3000] 17:58:55:691: >> Received Response (Code: 2) packet: Id: 71, Length: 6, Type: 13, TLS blob length: 0. Flags: [3000] 17:58:55:691: EapTlsSMakeMessage [3000] 17:58:55:691: BuildPacket [3000] 17:58:55:691: << Sending Request (Code: 1) packet: Id: 72, Length: 617, Type: 13, TLS blob length: 0. Flags: [2968] 17:59:19:686: EapTlsEnd [2968] 17:59:19:686: EapTlsEnd(wirelessjerome) [2968] 17:59:19:686: EapTlsEnd [2968] 17:59:19:686: EapTlsEnd(wirelessjerome) [2968] 17:59:19:686: EapTlsEnd [2968] 17:59:19:686: EapTlsEnd(wirelessjerome) [2968] 17:59:19:686: EapTlsEnd [2968] 17:59:19:686: EapTlsEnd(wirelessjerome) [4080] 17:59:20:417: MachineStoreChangeNotification [856] 17:59:21:478: EapTls[Un]Initialize2 --> EAPOL.LOG ElSessionChangeHandler: LOGOFF for session=(0) [892] 17:58:59: ElUserLogoffCallback: UserloggedOff = 0 [892] 17:58:59: ElEapEnd entered [892] 17:58:59: FSMLogoff entered for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:58:59: ElEapEnd entered [892] 17:58:59: Setting state LOGOFF for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:58:59: FSMLogoff completed for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:58:59: ElReStartPort: Entered: Refcnt = 2 [892] 17:58:59: ElGetInterfaceNdisStatistics: pwszDeviceInterfaceName = (Device{AE1DE463-3A28-466E-8832-92751E395E64}) [892] 17:58:59: ElReadPerPortRegistryParams: dwTotalMaxAuthFailCount = (3) [892] 17:58:59: FSMConnecting entered for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:58:59: TIMER: Restart PCB Time: 1 [892] 17:58:59: Setting state CONNECTING for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:58:59: FSMConnecting completed for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:58:59: ElUserLogoffCallback: completed [892] 17:59:00: ElTimeoutCallbackRoutine entered [892] 17:59:00: FSMConnecting entered for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:59:00: TIMER: Restart PCB Time: 1 [892] 17:59:00: Setting state CONNECTING for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:59:00: FSMConnecting completed for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:59:00: ElTimeoutCallbackRoutine completed [892] 17:59:01: ElTimeoutCallbackRoutine entered [892] 17:59:01: FSMConnecting entered for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:59:01: TIMER: Restart PCB Time: 1 [892] 17:59:01: Setting state CONNECTING for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:59:01: FSMConnecting completed for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:59:01: ElTimeoutCallbackRoutine completed [892] 17:59:02: ElTimeoutCallbackRoutine entered [892] 17:59:02: FSMConnecting entered for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:59:02: TIMER: Restart PCB Time: 2097148 [892] 17:59:02: FSMConnecting: Sent out maxStart with no response, Setting AUTHENTICATED state [892] 17:59:02: FSMAuthenticated entered for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:59:02: ElEapEnd entered [892] 17:59:02: Setting state AUTHENTICATED for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:59:02: FSMAuthenticated completed for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:59:02: FSMConnecting completed for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [892] 17:59:02: ElTimeoutCallbackRoutine completed [856] 17:59:20: ElMediaDeInit: Entered [856] 17:59:20: ElMediaDeInit: No worker threads alive, exiting [856] 17:59:20: ElMediaDeInit: (0) - (0) worker threads still alive [856] 17:59:20: ElEAPOLDeInit entered [856] 17:59:20: FSMLogoff entered for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [856] 17:59:20: ElEapEnd entered [856] 17:59:20: Setting state LOGOFF for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [856] 17:59:20: FSMLogoff completed for port Contrôleur Fast Ethernet intégré 3Com 3C918 (compatible 3C905B-TX) [856] 17:59:20: ElEapEnd entered [856] 17:59:20: ElEAPOLDeInit: DeleteTimer (000A0998), queue (00095F68) [856] 17:59:20: ElCloseInterfaceHandle(0x294,{AE1DE463-3A28-466E-8832-92751E395E64}) entered [856] 17:59:20: ElEAPOLDeInit: Waiting for 1 PCB contexts to terminate ... [168] 17:59:20: ElIoCompletionRoutine called, 0 bytes xferred [168] 17:59:20: ElReadCompletionRoutine entered, 0 bytes recvd [168] 17:59:20: ElReadCompletionRoutine: Error -1073741536 on port {AE1DE463-3A28-466E-8832-92751E395E64} [168] 17:59:20: ElReadCompletionRoutine: Port {AE1DE463-3A28-466E-8832-92751E395E64} not active [168] 17:59:20: ElReadCompletionRoutine: pPCB= 000A1F88, RefCnt = 1 [168] 17:59:20: ElCleanupPort entered for {AE1DE463-3A28-466E-8832-92751E395E64} [168] 17:59:20: ElCleanupPort completed [856] 17:59:21: ElEAPOLDeInit completed, RetCode = 0 [856] 17:59:21: ElMediaDeInit: ElEAPOLDeInit successful [856] 17:59:21: ElMediaDeInit completed [856] 17:59:21: Media DeInit succeeded with dwRetCode = 0 [856] 17:59:21: EAPOLCleanup completed with error 0 MERCI POUR VOTRE AIDE !!!

par **albatore** » 06 Jan 2004 19:39

personne ???

par **klimmrod** » 06 Jan 2004 19:48

Désolé, mais je ne peux pas te répondre mais une question tu fais quoi comme étude ?

par **albatore** » 06 Jan 2004 19:49

je suis en informatique industrielle option télécom et réseaux pq ?? et toi ? tu es d'ou de belgique <IMG SRC="images/smiles/icon_smile.gif">

RADIUS WIFI

Qui est en ligne ?