Re: [maemo-users] Getting useful WLAN debugging info for failing EAP-TLS connection

2007-01-08 Thread Kalle Valo
"Kalle Valo" <[EMAIL PROTECTED]> writes:

>> The date on the 770 is correct. Sadly, I've got zero information on
>> the AP and Radius server as it it a work-managed black box.
>
> Unfortunately I don't know what's wrong. We have tested EAP-TLS with
> various RADIUS servers, but I guess you are seeing somekind of IOP
> problem. 
>
> I'll ask around here in Nokia if someone might give any hints. But
> with the amount information provided, I don't have my hopes up.
> EAP-TLS is a complicated system, full Radius server logs and airlogs
> would help a lot.

Actually I got a tip. 770 doesn't support WEP encryption with WPA (by
design) and your network apparently uses WEP for group encryption.
That might be the reason.

-- 
Kalle Valo

___
maemo-users mailing list
maemo-users@maemo.org
https://maemo.org/mailman/listinfo/maemo-users


Re: [maemo-users] Getting useful WLAN debugging info for failing EAP-TLS connection

2007-01-07 Thread Kalle Valo
"Rhys Ulerich" <[EMAIL PROTECTED]> writes:

>> Can you provide more details, please? For example, what Radius server
>> and AP are you using?
>
> The date on the 770 is correct. Sadly, I've got zero information on
> the AP and Radius server as it it a work-managed black box.

Unfortunately I don't know what's wrong. We have tested EAP-TLS with
various RADIUS servers, but I guess you are seeing somekind of IOP
problem. 

I'll ask around here in Nokia if someone might give any hints. But
with the amount information provided, I don't have my hopes up.
EAP-TLS is a complicated system, full Radius server logs and airlogs
would help a lot.

(Sorry for the late answer, I had a bit longer vacation during
Christmas.)

-- 
Kalle Valo

___
maemo-users mailing list
maemo-users@maemo.org
https://maemo.org/mailman/listinfo/maemo-users


Re: [maemo-users] Getting useful WLAN debugging info for failing EAP-TLS connection

2006-12-22 Thread Rhys Ulerich

Can you provide more details, please? For example, what Radius server
and AP are you using?


The date on the 770 is correct.  Sadly, I've got zero information on the AP
and Radius server as it it a work-managed black box.

I do have a WinXP laptop that connects perfectly and gives this information
about the connection--

Security encryption: 802.1x/WPA/TKIP/EAP
EAP type: TLS

and then confirms that I'm using the same certificate.

Regular ol' Debian+wpa_supplicant can connect to the AP after some
wpa_supplicant tweaking--

network={

>   ssid="NotSoFast"

  scan_ssid=1
  #mode=0

>   eap=TLS
>   key_mgmt=IEEE8021X
>   pairwise=TKIP
>   group=WEP104
>   identity="[EMAIL PROTECTED]"
>   private_key="/path/to/userkey"
>   private_key_passwd="topsecret"
>   eapol_flags=3

}


There's gotta be a client side set of 770 error logs including messages like
"You numbskull!" and "We wouldn't accept that authentication method if it
was the last authentication method on earth!"

- Rhys

On 12/22/06, Kalle Valo <[EMAIL PROTECTED]> wrote:


"Rhys Ulerich" <[EMAIL PROTECTED]> writes:

> I'm trying to connect a 770 (OS v2.2006.39-14) to an EAP-TLS
WLAN.  After
> importing the certificate and selecting the appropriate stuff, I get a

Can you provide more details, please? For example, what Radius server
and AP are you using?

First thing I would recommend to check is the date on 770. The
certificate isn't valid if the date is incorrect.

--
Kalle Valo


___
maemo-users mailing list
maemo-users@maemo.org
https://maemo.org/mailman/listinfo/maemo-users


Re: [maemo-users] Getting useful WLAN debugging info for failing EAP-TLS connection

2006-12-22 Thread Kalle Valo
"Rhys Ulerich" <[EMAIL PROTECTED]> writes:

> I'm trying to connect a 770 (OS v2.2006.39-14) to an EAP-TLS WLAN.  After
> importing the certificate and selecting the appropriate stuff, I get a

Can you provide more details, please? For example, what Radius server
and AP are you using?

First thing I would recommend to check is the date on 770. The
certificate isn't valid if the date is incorrect.

-- 
Kalle Valo

___
maemo-users mailing list
maemo-users@maemo.org
https://maemo.org/mailman/listinfo/maemo-users


[maemo-users] Getting useful WLAN debugging info for failing EAP-TLS connection

2006-12-21 Thread Rhys Ulerich

Me again,

Thank you for the searchable archive pointer, Mike.  Sadly, no luck on that
network_error string.

It looks like there are some old discussions around toying with
wpa_supplicant (in dutch, I think) but nothing indicating it works.  I
believe wpa_supplicant can get me running on this particular, pesky EAP-TLS
network.

Anyone out there has had any success or failures with wpa_supplicant?  It
looks like wpa_supplicant plays nicely with regular debian network interface
definitions, but I can't quite figure out how to get it integrated with the
770's gconf wifi stuff (
http://www.maemo.org/platform/docs/howtos/howto_connectivity_guide.html).

- Rhys

On 12/21/06, Mike Lococo <[EMAIL PROTECTED]> wrote:


> Didn't find anything related on the web or the maemo wiki.  No
> searchable interface for this list, so hopefully this isn't a repeat of
> an earlier thread...

I don't have an answer for your question, but searchable archives are
available at gossamer-threads.com:

http://www.gossamer-threads.com/lists/maemo/

Perhaps you'll find an answer in the archives, if no one else chimes in
here you might escalate to the dev list.  They're typically friendly to
well-researched user queries, especially in the format you're using of
"How can I extract x information from the system".

Thanks,
Mike
___
maemo-users mailing list
maemo-users@maemo.org
https://maemo.org/mailman/listinfo/maemo-users

___
maemo-users mailing list
maemo-users@maemo.org
https://maemo.org/mailman/listinfo/maemo-users


Re: [maemo-users] Getting useful WLAN debugging info for failing EAP-TLS connection

2006-12-21 Thread Mike Lococo
Didn't find anything related on the web or the maemo wiki.  No 
searchable interface for this list, so hopefully this isn't a repeat of 
an earlier thread...


I don't have an answer for your question, but searchable archives are 
available at gossamer-threads.com:


http://www.gossamer-threads.com/lists/maemo/

Perhaps you'll find an answer in the archives, if no one else chimes in 
here you might escalate to the dev list.  They're typically friendly to 
well-researched user queries, especially in the format you're using of 
"How can I extract x information from the system".


Thanks,
Mike
___
maemo-users mailing list
maemo-users@maemo.org
https://maemo.org/mailman/listinfo/maemo-users


[maemo-users] Getting useful WLAN debugging info for failing EAP-TLS connection

2006-12-21 Thread Rhys Ulerich

Hi all,

Didn't find anything related on the web or the maemo wiki.  No searchable
interface for this list, so hopefully this isn't a repeat of an earlier
thread...

I'm trying to connect a 770 (OS v2.2006.39-14) to an EAP-TLS WLAN.  After
importing the certificate and selecting the appropriate stuff, I get a
"Network Connection Error" dialog and no other useful information.  Playing
with EAP-TLS advanced settings (like explicit username, WPA2, etc) gets me
nowhere.  Using 'dbus-monitor --system' (per
http://stefans.datenbruch.de/nokia770/) shows only the interesting string '
com.nokia.icd.error.network_error'.  'dmesg' isn't useful other than showing
the interface going up and then down again.

How the heck do I get useful network configuration debugging information
from this puppy?

I suspect the problem is that the WLAN uses TKIP (based on my laptop's
working configuration using the same certificate) and the 770 can't.  I'm
looking to confirm this in a logfile somewhere.

Any help appreciated,
Rhys
___
maemo-users mailing list
maemo-users@maemo.org
https://maemo.org/mailman/listinfo/maemo-users