Excessive Client Authentication/Association Failure's. What is going on!?
Hello Community,
Once again I am reaching out to you for help. I am hoping someone can help me. I have been noticing in my trap logs that there are an excessive amount of Client Association/Authentication Failures. I cannot figure out why. I have a Cisco 5508 WLC with 81 AP's (1131ag, 1142abgn, 1262N) models. The wireless devices are on a Windows Domain and use 802.1x EAP authentication, authenticating the user and computer info with a RADIUS Server. I look at the logs and all it can tell me is Reason:Unspecified ReasonCode:1. I read that the Reason Code is due to "Client associated but no longer authorized" but to be honest I am not sure what that means. It could mean many things, unfortunately it is too ambiguous to make heads or tails of. Can someone point me in the right direction? Things I can check? I posted below some of the Trap Logs, they go on and on like that. Thank you for any help you can provide.
1
Tue Jan 29 11:42:51 2013
Client Association Failure: MACAddress:e4:8b:7f:9d:e9:5c Base Radio MAC:10:bd:18:a7:41:e0 Slot: 1 User Name:unknown IP Addr: unknown Reason:Unspecified ReasonCode: 1
2
Tue Jan 29 11:40:40 2013
Client Association Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:00:17:0f:e5:ee:50 Slot: 0 User Name:unknown IP Addr: unknown Reason:Unspecified ReasonCode: 1
3
Tue Jan 29 11:40:40 2013
Client Association Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:00:17:0f:e5:ee:50 Slot: 0 User Name:unknown IP Addr: unknown Reason:Unspecified ReasonCode: 1
4
Tue Jan 29 11:40:39 2013
Client Association Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:00:17:0f:e5:ee:50 Slot: 0 User Name:unknown IP Addr: unknown Reason:Unspecified ReasonCode: 1
5
Tue Jan 29 11:40:39 2013
Client Association Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:00:17:0f:e5:ee:50 Slot: 0 User Name:unknown IP Addr: unknown Reason:Unspecified ReasonCode: 1
6
Tue Jan 29 11:40:39 2013
Client Association Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:00:17:0f:e5:ee:50 Slot: 0 User Name:unknown IP Addr: unknown Reason:Unspecified ReasonCode: 1
7
Tue Jan 29 11:40:38 2013
Client Association Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:00:17:0f:e5:ee:50 Slot: 1 User Name:unknown IP Addr: unknown Reason:Unspecified ReasonCode: 1
8
Tue Jan 29 11:40:38 2013
Client Authentication Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:00:17:0f:e5:ee:50 Slot: 1 User Name: unknown Ip Address: unknown Reason:Unspecified ReasonCode: 1
9
Tue Jan 29 11:40:38 2013
Client Association Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:00:17:0f:e5:ee:50 Slot: 1 User Name:unknown IP Addr: unknown Reason:Unspecified ReasonCode: 1
10
Tue Jan 29 11:40:38 2013
Client Authentication Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:00:17:0f:e5:ee:50 Slot: 1 User Name: unknown Ip Address: unknown Reason:Unspecified ReasonCode: 1
11
Tue Jan 29 11:40:38 2013
Client Association Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:00:17:0f:e5:ee:50 Slot: 1 User Name:unknown IP Addr: unknown Reason:Unspecified ReasonCode: 1
12
Tue Jan 29 11:40:37 2013
Client Authentication Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:00:17:0f:e5:ee:50 Slot: 1 User Name: unknown Ip Address: unknown Reason:Unspecified ReasonCode: 1
13
Tue Jan 29 11:40:37 2013
Client Association Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:00:17:0f:e5:ee:50 Slot: 1 User Name:unknown IP Addr: unknown Reason:Unspecified ReasonCode: 1
14
Tue Jan 29 11:40:37 2013
Client Authentication Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:00:17:0f:e5:ee:50 Slot: 1 User Name: unknown Ip Address: unknown Reason:Unspecified ReasonCode: 1
15
Tue Jan 29 11:40:37 2013
Client Association Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:00:17:0f:e5:ee:50 Slot: 1 User Name:unknown IP Addr: unknown Reason:Unspecified ReasonCode: 1
16
Tue Jan 29 11:40:36 2013
Client Authentication Failure: MACAddress:64:20:0c:b9:59:0f Base Radio MAC:a8:b1:d4:c4:7c:80 Slot: 1 User
David,
I would love to run a debug on a problem client but the problem is that I have no way to tell where the client is or who the device belongs to. I can see what AP is refusing the connection by plugging in the base radio MAC, but also no way of telling what SSID they are trying to connect to either. I am assuming these clients are attemting to connect to the network but are failing, but do not know why. As far as the clients go, again no way to tell. We run laptops as well as iPads (I work at a private K-12 College Prep school) and any other wireless device they may be trying to connect to the network. The laptops run Windows 7 Pro and the WZC supplicant handles the WLAN adapter.
My concern is the inordinant amount of failures to connect. is someone trying to hack my network? Here is the output of the wlan (smesw) that I suspect it may be happening on as this is the only wlan that uses 802.1x authentication. All others require a password and are mac filtered.
WLAN ID WLAN Profile Name / SSID Status Interface Name PMIPv6 Mobility
3 SMES Wireless / smesw Enabled smesw none
4 US Wireless / USWireless Enabled us-wireless none
5 MS Wireless / MSWireless Enabled ms-wireless none
6 LS Wireless / LSWireless Enabled ls-wireless none
7 Guest / Guest Enabled guest none
10 Apple TV / ATV Enabled atvmcast none
(Cisco Controller) >show wlan 3
WLAN Identifier.................................. 3
Profile Name..................................... SMES Wireless
Network Name (SSID).............................. smesw
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
Client Profiling Status ....................... Disabled
DHCP ......................................... Disabled
HTTP ......................................... Disabled
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Maximum number of Clients per AP Radio........... 200
Number of Active Clients......................... 196
Exclusionlist.................................... Disabled
Session Timeout.................................. 1800 seconds
User Idle Timeout................................ 300 seconds
--More-- or (q)uit
User Idle Threshold.............................. 0 Bytes
NAS-identifier................................... Cisco_93:f1:84
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ smesw
Multicast Interface.............................. Not Configured
WLAN IPv4 ACL.................................... unconfigured
WLAN IPv6 ACL.................................... unconfigured
mDNS Status...................................... Enabled
mDNS Profile Name................................ default-mdns-profile
DHCP Server...................................... 10.10.0.6
DHCP Address Assignment Required................. Enabled
Static IP client tunneling....................... Disabled
PMIPv6 Mobility Type............................. none
Quality of Service............................... Silver
Per-SSID Rate Limits............................. Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Per-Client Rate Limits........................... Upstream Downstream
Average Data Rate................................ 0 0
Average Realtime Data Rate....................... 0 0
--More-- or (q)uit
Burst Data Rate.................................. 0 0
Burst Realtime Data Rate......................... 0 0
Scan Defer Priority.............................. 5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
Authentication................................ 10.10.0.6 1812
Accounting.................................... Disabled
Dynamic Interface............................. Disabled
Dynamic Interface Priority.................... wlan
LDAP Servers
--More-- or (q)uit
Server 1...................................... 10.10.1.5 389
Local EAP Authentication......................... Disabled
Security
802.11 Authentication:........................ Open System
FT Support.................................... Disabled
Static WEP Keys............................... Disabled
802.1X........................................ Disabled
Wi-Fi Protected Access (WPA/WPA2)............. Enabled
WPA (SSN IE)............................... Disabled
WPA2 (RSN IE).............................. Enabled
TKIP Cipher............................. Enabled
AES Cipher.............................. Enabled
Auth Key Management
802.1x.................................. Enabled
PSK..................................... Disabled
CCKM.................................... Disabled
FT-1X(802.11r).......................... Disabled
FT-PSK(802.11r)......................... Disabled
PMF-1X(802.11w)......................... Disabled
PMF-PSK(802.11w)........................ Disabled
FT Reassociation Timeout................... 20
FT Over-The-DS mode........................ Disabled
--More-- or (q)uit
GTK Randomization.......................... Disabled
SKC Cache Support.......................... Disabled
CCKM TSF Tolerance......................... 1000
WAPI.......................................... Disabled
Wi-Fi Direct policy configured................ Disabled
EAP-Passthrough............................... Disabled
CKIP ......................................... Disabled
Web Based Authentication...................... Disabled
Web-Passthrough............................... Disabled
Conditional Web Redirect...................... Disabled
Splash-Page Web Redirect...................... Disabled
Auto Anchor................................... Disabled
FlexConnect Local Switching................... Disabled
flexconnect Central Dhcp Flag................. Disabled
flexconnect nat-pat Flag...................... Disabled
flexconnect Dns Override Flag................. Disabled
FlexConnect Vlan based Central Switching ..... Disabled
FlexConnect Local Authentication.............. Disabled
FlexConnect Learn IP Address.................. Enabled
Client MFP.................................... Disabled
PMF........................................... Disabled
PMF Association Comeback Time................. 1
PMF SA Query RetryTimeout..................... 200
--More-- or (q)uit
Tkip MIC Countermeasure Hold-down Timer....... 60
AVC Visibilty.................................... Disabled
AVC Profile Name................................. None
Flow Monitor Name................................ None
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
KTS based CAC Policy............................. Disabled
Assisted Roaming Prediction Optimization......... Disabled
802.11k Neighbor List............................ Disabled
802.11k Neighbor List Dual Band.................. Disabled
Band Select...................................... Enabled
Load Balancing................................... Client-Count Based
Multicast Buffer................................. Disabled
Mobility Anchor List
WLAN ID IP Address Status
802.11u........................................ Disabled
MSAP Services.................................. Disabled
Similar Messages
-
After downloading Adobe Flash Player, I can't play ANY video (it reads "plug-in failure"). What's going on?
Flash Player 13 "Plugin Failure" Workaround
-
I have problem c connecting to cellular data network. There is massage "couldn't activate cellular data network, PDP authentication failure". What is it and how I solve this problem?
If you have a data only plan for the iPad with your carrier, if no change after powering your iPad off and on you will need to contact your carrier.
-
Handshake failure with client authentication
Hi,
I am using the JDK1.4 beta 3 to accomplish the following: I want to request an HTML page on an Apache webserver configured with SSL and client-authentication. It works with Netscape and Internet Explorer (and also with the openssl s_client test program)...
But now I want to try it using Java... So, I wrote a very simple program based on some examples found on this forum... But i keep getting the following error (excerpt from the javax.net.debug=all command)
As you can see the server request a client certificate that's issued by the certificate authority mentioned...
*** CertificateRequest
Cert Types: RSA, DSS,
Cert Authorities:
<[email protected], CN=Andy Zaidman, OU=stage, O=Kava's Certif
icate Authority, L=Antwerp, ST=Antwerp, C=BE>
[read] MD5 and SHA1 hashes: len = 180
0000: 0D 00 00 B0 02 01 02 00 AB 00 A9 30 81 A6 31 0B ...........0..1.
0010: 30 09 06 03 55 04 06 13 02 42 45 31 10 30 0E 06 0...U....BE1.0..
0020: 03 55 04 08 13 07 41 6E 74 77 65 72 70 31 10 30 .U....Antwerp1.0
0030: 0E 06 03 55 04 07 13 07 41 6E 74 77 65 72 70 31 ...U....Antwerp1
0040: 25 30 23 06 03 55 04 0A 13 1C 4B 61 76 61 27 73 %0#..U....Kava's
0050: 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 74 Certificate Aut
0060: 68 6F 72 69 74 79 31 0E 30 0C 06 03 55 04 0B 13 hority1.0...U...
0070: 05 73 74 61 67 65 31 15 30 13 06 03 55 04 03 13 .stage1.0...U...
0080: 0C 41 6E 64 79 20 5A 61 69 64 6D 61 6E 31 25 30 .Andy Zaidman1%0
0090: 23 06 09 2A 86 48 86 F7 0D 01 09 01 16 16 41 6E #..*.H........An
00A0: 64 79 2E 5A 61 69 64 6D 61 6E 40 75 69 61 2E 61 [email protected]
00B0: 63 2E 62 65 c.be
*** ServerHelloDone
[read] MD5 and SHA1 hashes: len = 4
0000: 0E 00 00 00 ....
*** Certificate chain
JsseJCE: Using JSSE internal implementation for cipher RSA/ECB/PKCS1Padding
*** ClientKeyExchange, RSA PreMasterSecret, v3.1
Random Secret: { 3, 1, 38, 54, 219, 158, 32, 158, 155, 15, 55, 137, 216, 164, 4
5, 65, 153, 142, 200, 98, 57, 251, 55, 6, 46, 124, 181, 161, 164, 234, 218, 75,
195, 72, 218, 187, 182, 197, 4, 11, 249, 45, 3, 136, 207, 114, 236, 172 }
[write] MD5 and SHA1 hashes: len = 141
0000: 0B 00 00 03 00 00 00 10 00 00 82 00 80 64 92 2E .............d..
0010: 42 2C A5 79 1D 2B A9 A5 D0 46 2A 1F 67 F3 49 28 B,.y.+...F*.g.I(
0020: E0 ED 1D 85 E3 06 22 49 8A 79 02 48 E2 DD E6 75 ......"I.y.H...u
0030: F3 C0 D3 A8 31 C0 18 94 7C 81 24 75 6A A1 0C 4F ....1.....$uj..O
0040: 99 03 66 B8 37 4F 05 0D 5D CD F2 A0 10 F5 D5 F5 ..f.7O..].......
0050: 50 66 49 91 CA C0 18 F1 07 E9 70 D0 CB EA 70 D3 PfI.......p...p.
0060: 8E 13 55 E7 43 BD 94 1C D3 96 1F E9 67 93 57 62 ..U.C.......g.Wb
0070: 91 5C E6 ED B1 75 9C A8 55 B7 50 DE CE 9B 1C EE .\...u..U.P.....
0080: 57 62 20 9C F3 11 36 68 7A 38 62 79 D1 Wb ...6hz8by.
main, WRITE: SSL v3.1 Handshake, length = 141
SESSION KEYGEN:
PreMaster Secret:
0000: 03 01 26 36 DB 9E 20 9E 9B 0F 37 89 D8 A4 2D 41 ..&6.. ...7...-A
0010: 99 8E C8 62 39 FB 37 06 2E 7C B5 A1 A4 EA DA 4B ...b9.7........K
0020: C3 48 DA BB B6 C5 04 0B F9 2D 03 88 CF 72 EC AC .H.......-...r..
CONNECTION KEYGEN:
Client Nonce:
0000: 3B E9 51 EF F3 13 65 11 4E D6 B7 B1 9F E8 F6 CB ;.Q...e.N.......
0010: B5 2B 34 8F 87 53 66 61 33 BF 5A AD 7D 22 57 7D .+4..Sfa3.Z.."W.
Server Nonce:
0000: 3B E9 53 4E 03 37 E9 CD E8 DB 7C 54 9A 9E 53 B9 ;.SN.7.....T..S.
0010: 78 E0 36 DF 06 17 07 90 2C D1 83 5E 20 05 DC E9 x.6.....,..^ ...
Master Secret:
0000: B5 A0 37 0A 2C 29 AD AC 99 B6 2F E0 4D 80 38 68 ..7.,)..../.M.8h
0010: F7 4F 24 C4 AA 8C ED 25 A9 D6 90 33 4B 5A 0B 1D .O$....%...3KZ..
0020: 11 A5 C9 E8 DB DE EF 9B 8D EB 7C 84 D6 AC 94 4F ...............O
Client MAC write Secret:
0000: F5 AF 61 5B B4 C2 A8 12 DA 7A FE A6 82 79 7F FC ..a[.....z...y..
0010: B9 86 B2 C0 ....
Server MAC write Secret:
0000: 62 22 C6 39 91 E4 45 50 2A 49 E0 26 CF 16 3E 6A b".9..EP*I.&..>j
0010: 46 19 00 D9 F...
Client write key:
0000: D9 D2 99 89 5C CA 2E 7D F3 B8 52 24 9E 01 9B 3B ....\.....R$...;
Server write key:
0000: 37 C3 37 78 8B 85 B0 FE 01 83 E2 6C F7 C6 73 33 7.7x.......l..s3
... no IV for cipher
main, WRITE: SSL v3.1 Change Cipher Spec, length = 1
JsseJCE: Using JSSE internal implementation for cipher RC4
*** Finished, v3.1
verify_data: { 51, 236, 194, 3, 230, 37, 147, 76, 251, 233, 132, 207 }
[write] MD5 and SHA1 hashes: len = 16
0000: 14 00 00 0C 33 EC C2 03 E6 25 93 4C FB E9 84 CF ....3....%.L....
Plaintext before ENCRYPTION: len = 36
0000: 14 00 00 0C 33 EC C2 03 E6 25 93 4C FB E9 84 CF ....3....%.L....
0010: 64 30 E3 0B 31 CF 7D C7 D6 17 D8 FB 31 23 F9 34 d0..1.......1#.4
0020: 5D B9 47 F9 ].G.
main, WRITE: SSL v3.1 Handshake, length = 36
main, READ: SSL v3.1 Alert, length = 2
main, RECV SSLv3 ALERT: fatal, handshake_failure
javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.b(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.b(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.AppOutputStream.write(DashoA6275)
at java.io.OutputStream.write(OutputStream.java:61)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(DashoA6275)
at HttpClient.main(HttpClient.java:105)
Now, I am sure the certificate is in the keystore, because one of the first things I do in the program is print the certificates available in the keystore...
Does anyone know what I'm doing wrong? If you need the code to make a proper judgement, I will post it...
Tnx in advance!
Greetz,
Andy Zaidman
[email protected]import java.net.*;
import java.io.*;
import java.security.*;
import java.security.cert.*;
import javax.net.ssl.*;
import java.util.*;
public class HttpClient
public HttpClient(){}
public static void main (String args[])
try
//This is my server certificate - public key
String serverCertificateFile = "MyCA.cer";
//This is my client personal certificate
String clientCertificateFile = "MyPersonal.pfx";
CertificateFactory cf = CertificateFactory.getInstance("X.509");
KeyStore ks = KeyStore.getInstance("JKS");
TrustManagerFactory tmf = TrustManagerFactory.getInstance("SUNX509");
ks.load(null, null);
java.security.cert.X509Certificate the_cert = (java.security.cert.X509Certificate) cf.generateCertificate(new FileInputStream(serverCertificateFile));
ks.setCertificateEntry("server", the_cert);
tmf.init(ks);
for (Enumeration e = ks.aliases() ; e.hasMoreElements() ;)
System.out.println(ks.getCertificate(e.nextElement().toString()).toString());
KeyStore ks2 = KeyStore.getInstance("PKCS12", "SunJSSE");
KeyManagerFactory kmf = KeyManagerFactory.getInstance("SUNX509");
ks2.load(null, null);
FileInputStream fin = new FileInputStream(clientCertificateFile);
ks2.load(fin, "xxx".toCharArray());
kmf.init(ks2, "xxx".toCharArray());
fin.close();
for (Enumeration e = ks2.aliases() ; e.hasMoreElements() ;)
System.out.println(ks2.getCertificate(e.nextElement().toString()).toString());
SSLContext ctx = SSLContext.getInstance("SSLv3");
KeyManager[] km = kmf.getKeyManagers();
for(int i = 0; i < km.length; ++i)
System.out.println(km);
TrustManager[] tm = tmf.getTrustManagers();
ctx.init(km, tm, null);
// connection part
SSLSocketFactory factory = ctx.getSocketFactory();
SSLSocket socket = (SSLSocket)factory.createSocket("localhost", 443);
for(int i = 0; i < socket.getEnabledCipherSuites().length; ++i)
System.out.println(socket.getEnabledCipherSuites()[i]);
socket.startHandshake();
PrintWriter out = new PrintWriter(
new BufferedWriter(
new OutputStreamWriter(
socket.getOutputStream())));
out.println("GET " + "/" + " HTTP/1.1");
out.println();
out.flush();
catch(Exception e)
e.printStackTrace(); -
Clients are Deauthenticated, Authenticated, Associated all the time
Hi
i'm using WLC 2112 with the soft. version 6.0.199.0
I'm recevind i the logs a huge amount of traps that clients are Deauthenticated, Authenticated, Associated
I monitoring all logs, and there is no log about the coverage hole or other waring info that should do this re-authentication
This events happening almost periodically.
Problem is that some of them are loosing connection to the AP
i removed all timeouts
Thanks for any infoThan you for your answer
no it isn't . Sometimes is 2hors, sometimes 30 minutes and son
I allowed to sent all traps, and my log is filled only with this Deauthenticated, Authenticated, Associated messages.
So there is noreason like interference, coverage hole and so on
First message is :
Client Deauthenticated: MACAddress:7c:6d::ef Base Radio MAC:58:b7:70 Slot: 1 User Name: XXX Ip Address: XX.XX.XX.XX Reason:Unspecified ReasonCode: 1
then follows Client Association, Client Authenticated and so on
thanks -
Strange problem client authentication on the AP
I have a WLC 2504 with six AIR-LAP1042N APs. Authenticate scheme is WPA2 with PSK. All APs in same mobility group.
I have problem, one client cann’t authenticate with one AP. The following occurs: client poweron, associated with nearest AP1, attempts to auth with it, but can’t. It try to connect to other AP2 (not nearest), associated and well authenticated on it. Some seconds later, client found AP1 (nearest) and try to reassociated with it (roaming), but again can’t auth. Then client connect again to AP2, and all repeat infinitely. Outwardly it looks, that wi-fi connecting constantly disappeared and again appeared on client.
When auth failed, AP1 sends to client three EAPOL messages with an interval of one second, but don't receive any answer from client (timer expired).
There is client debug.
5c:0a:5b:47:66:c3 192.168.110.252 - client
0c:d9:96:9d:1b:20 - AP1
0c:d9:96:9d:55:10 - AP2
*pemReceiveTask: Dec 12 17:51:19.430: 5c:0a:5b:47:66:c3 192.168.110.252 Added NPU entry of type 1, dtlFlags 0x0
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 Reassociation received from mobile on AP 0c:d9:96:9d:1b:20
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 192.168.110.252 RUN (20) Changing ACL 'printer' (ACL ID 0) ===> 'printer' (ACL ID 0) --- (caller apf_policy.c:1698)
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 Applying site-specific IPv6 override for station 5c:0a:5b:47:66:c3 - vapId 2, site 'default-group', interface 'dynamic1'
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 Applying IPv6 Interface Policy for station 5c:0a:5b:47:66:c3 - vlan 10, interface id 11, interface 'dynamic1'
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 STA - rates (6): 152 36 48 72 96 108 0 0 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 Processing RSN IE type 48, length 20 for mobile 5c:0a:5b:47:66:c3
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 192.168.110.252 RUN (20) Deleted mobile LWAPP rule on AP [0c:d9:96:9d:55:10]
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 Updated location for station old AP 0c:d9:96:9d:55:10-0, new AP 0c:d9:96:9d:1b:20-0
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 apfMsRunStateDec
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 apfMs1xStateDec
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 192.168.110.252 RUN (20) Change state to START (0) last state RUN (20)
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 192.168.110.252 START (0) Initializing policy
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 192.168.110.252 START (0) Change state to AUTHCHECK (2) last state RUN (20)
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 192.168.110.252 AUTHCHECK (2) Change state to 8021X_REQD (3) last state RUN (20)
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 192.168.110.252 8021X_REQD (3) DHCP required on AP 0c:d9:96:9d:1b:20 vapId 2 apVapId 2for this client
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 192.168.110.252 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 0c:d9:96:9d:1b:20 vapId 2 apVapId 2
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 apfPemAddUser2 (apf_policy.c:223) Changing state for mobile 5c:0a:5b:47:66:c3 on AP 0c:d9:96:9d:1b:20 from Associated to Associated
*apfMsConnTask_5: Dec 12 17:52:04.149: 5c:0a:5b:47:66:c3 Scheduling deletion of Mobile Station: (callerId: 49) in 1800 seconds
*apfMsConnTask_5: Dec 12 17:52:04.150: 5c:0a:5b:47:66:c3 Sending Assoc Response to station on BSSID 0c:d9:96:9d:1b:20 (status 0) ApVapId 2 Slot 0
*apfMsConnTask_5: Dec 12 17:52:04.150: 5c:0a:5b:47:66:c3 apfProcessAssocReq (apf_80211.c:5237) Changing state for mobile 5c:0a:5b:47:66:c3 on AP 0c:d9:96:9d:1b:20 from Associated to Associated
*pemReceiveTask: Dec 12 17:52:04.151: 5c:0a:5b:47:66:c3 192.168.110.252 Removed NPU entry.
*dot1xMsgTask: Dec 12 17:52:04.153: 5c:0a:5b:47:66:c3 Creating a PKC PMKID Cache entry for station 5c:0a:5b:47:66:c3 (RSN 2)
*dot1xMsgTask: Dec 12 17:52:04.153: 5c:0a:5b:47:66:c3 Adding BSSID 0c:d9:96:9d:1b:21 to PMKID cache for station 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 12 17:52:04.153: New PMKID: (16)
*dot1xMsgTask: Dec 12 17:52:04.153: [0000] 1a 44 36 b7 64 f6 8d 8a b1 16 69 2a 75 fe bd d8
*dot1xMsgTask: Dec 12 17:52:04.153: 5c:0a:5b:47:66:c3 Initiating RSN PSK to mobile 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 12 17:52:04.153: 5c:0a:5b:47:66:c3 dot1x - moving mobile 5c:0a:5b:47:66:c3 into Force Auth state
*dot1xMsgTask: Dec 12 17:52:04.153: 5c:0a:5b:47:66:c3 Skipping EAP-Success to mobile 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 12 17:52:04.153: Including PMKID in M1 (16)
*dot1xMsgTask: Dec 12 17:52:04.153: [0000] 1a 44 36 b7 64 f6 8d 8a b1 16 69 2a 75 fe bd d8
*dot1xMsgTask: Dec 12 17:52:04.153: 5c:0a:5b:47:66:c3 Starting key exchange to mobile 5c:0a:5b:47:66:c3, data packets will be dropped
*dot1xMsgTask: Dec 12 17:52:04.153: 5c:0a:5b:47:66:c3 Sending EAPOL-Key Message to mobile 5c:0a:5b:47:66:c3
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*dot1xMsgTask: Dec 12 17:52:04.153: 5c:0a:5b:47:66:c3 Sending 802.11 EAPOL message to mobile 5c:0a:5b:47:66:c3 WLAN 2, AP WLAN 2
*dot1xMsgTask: Dec 12 17:52:04.154: 00000000: 02 03 00 75 02 00 8a 00 10 00 00 00 00 00 00 00 ...u............
*dot1xMsgTask: Dec 12 17:52:04.154: 00000010: 00 36 24 73 10 bb 2b 7e 84 3d e0 62 4a 7f 0a f5 .6$s..+~.=.bJ...
*dot1xMsgTask: Dec 12 17:52:04.154: 00000020: 3a bb 17 c7 2f 3c b1 0c c0 94 70 fb 0e c0 28 b3 :.../<....p...(.
*dot1xMsgTask: Dec 12 17:52:04.154: 00000030: b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:04.154: 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:04.154: 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:04.154: 00000060: 00 00 16 dd 14 00 0f ac 04 1a 44 36 b7 64 f6 8d ..........D6.d..
*dot1xMsgTask: Dec 12 17:52:04.154: 00000070: 8a b1 16 69 2a 75 fe bd d8 ...i*u...
*osapiBsnTimer: Dec 12 17:52:05.156: 5c:0a:5b:47:66:c3 802.1x 'timeoutEvt' Timer expired for station 5c:0a:5b:47:66:c3 and for message = M2
*dot1xMsgTask: Dec 12 17:52:05.157: 5c:0a:5b:47:66:c3 Retransmit 1 of EAPOL-Key M1 (length 121) for mobile 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 12 17:52:05.157: 5c:0a:5b:47:66:c3 Sending 802.11 EAPOL message to mobile 5c:0a:5b:47:66:c3 WLAN 2, AP WLAN 2
*dot1xMsgTask: Dec 12 17:52:05.157: 00000000: 02 03 00 75 02 00 8a 00 10 00 00 00 00 00 00 00 ...u............
*dot1xMsgTask: Dec 12 17:52:05.157: 00000010: 01 36 24 73 10 bb 2b 7e 84 3d e0 62 4a 7f 0a f5 .6$s..+~.=.bJ...
*dot1xMsgTask: Dec 12 17:52:05.157: 00000020: 3a bb 17 c7 2f 3c b1 0c c0 94 70 fb 0e c0 28 b3 :.../<....p...(.
*dot1xMsgTask: Dec 12 17:52:05.157: 00000030: b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:05.157: 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:05.157: 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:05.157: 00000060: 00 00 16 dd 14 00 0f ac 04 1a 44 36 b7 64 f6 8d ..........D6.d..
*dot1xMsgTask: Dec 12 17:52:05.157: 00000070: 8a b1 16 69 2a 75 fe bd d8 ...i*u...
*osapiBsnTimer: Dec 12 17:52:06.156: 5c:0a:5b:47:66:c3 802.1x 'timeoutEvt' Timer expired for station 5c:0a:5b:47:66:c3 and for message = M2
*dot1xMsgTask: Dec 12 17:52:06.157: 5c:0a:5b:47:66:c3 Retransmit 2 of EAPOL-Key M1 (length 121) for mobile 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 12 17:52:06.157: 5c:0a:5b:47:66:c3 Sending 802.11 EAPOL message to mobile 5c:0a:5b:47:66:c3 WLAN 2, AP WLAN 2
*dot1xMsgTask: Dec 12 17:52:06.157: 00000000: 02 03 00 75 02 00 8a 00 10 00 00 00 00 00 00 00 ...u............
*dot1xMsgTask: Dec 12 17:52:06.157: 00000010: 02 36 24 73 10 bb 2b 7e 84 3d e0 62 4a 7f 0a f5 .6$s..+~.=.bJ...
*dot1xMsgTask: Dec 12 17:52:06.157: 00000020: 3a bb 17 c7 2f 3c b1 0c c0 94 70 fb 0e c0 28 b3 :.../<....p...(.
*dot1xMsgTask: Dec 12 17:52:06.157: 00000030: b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:06.157: 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:06.157: 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:06.157: 00000060: 00 00 16 dd 14 00 0f ac 04 1a 44 36 b7 64 f6 8d ..........D6.d..
*dot1xMsgTask: Dec 12 17:52:06.157: 00000070: 8a b1 16 69 2a 75 fe bd d8 ...i*u...
*osapiBsnTimer: Dec 12 17:52:07.156: 5c:0a:5b:47:66:c3 802.1x 'timeoutEvt' Timer expired for station 5c:0a:5b:47:66:c3 and for message = M2
*dot1xMsgTask: Dec 12 17:52:07.157: 5c:0a:5b:47:66:c3 Retransmit failure for EAPOL-Key M1 to mobile 5c:0a:5b:47:66:c3, retransmit count 3, mscb deauth count 0
*dot1xMsgTask: Dec 12 17:52:07.157: 5c:0a:5b:47:66:c3 Sent Deauthenticate to mobile on BSSID 0c:d9:96:9d:1b:20 slot 0(caller 1x_ptsm.c:534)
*dot1xMsgTask: Dec 12 17:52:07.157: 5c:0a:5b:47:66:c3 Scheduling deletion of Mobile Station: (callerId: 57) in 10 seconds
*apfMsConnTask_3: Dec 12 17:52:15.749: 5c:0a:5b:47:66:c3 Association received from mobile on AP 0c:d9:96:9d:55:10
*apfMsConnTask_3: Dec 12 17:52:15.749: 5c:0a:5b:47:66:c3 192.168.110.252 8021X_REQD (3) Changing ACL 'printer' (ACL ID 0) ===> 'printer' (ACL ID 0) --- (caller apf_policy.c:1698)
*apfMsConnTask_3: Dec 12 17:52:15.749: 5c:0a:5b:47:66:c3 Applying site-specific IPv6 override for station 5c:0a:5b:47:66:c3 - vapId 2, site 'default-group', interface 'dynamic1'
*apfMsConnTask_3: Dec 12 17:52:15.749: 5c:0a:5b:47:66:c3 Applying IPv6 Interface Policy for station 5c:0a:5b:47:66:c3 - vlan 10, interface id 11, interface 'dynamic1'
*apfMsConnTask_3: Dec 12 17:52:15.749: 5c:0a:5b:47:66:c3 STA - rates (6): 152 36 48 72 96 108 0 0 0 0 0 0 0 0 0 0
*apfMsConnTask_3: Dec 12 17:52:15.750: 5c:0a:5b:47:66:c3 Processing RSN IE type 48, length 20 for mobile 5c:0a:5b:47:66:c3
*apfMsConnTask_3: Dec 12 17:52:15.750: 5c:0a:5b:47:66:c3 192.168.110.252 8021X_REQD (3) Deleted mobile LWAPP rule on AP [0c:d9:96:9d:1b:20]
*apfMsConnTask_3: Dec 12 17:52:15.750: 5c:0a:5b:47:66:c3 Updated location for station old AP 0c:d9:96:9d:1b:20-0, new AP 0c:d9:96:9d:55:10-0
*apfMsConnTask_3: Dec 12 17:52:15.750: 5c:0a:5b:47:66:c3 192.168.110.252 8021X_REQD (3) Initializing policy
*apfMsConnTask_3: Dec 12 17:52:15.750: 5c:0a:5b:47:66:c3 192.168.110.252 8021X_REQD (3) Change state to AUTHCHECK (2) last state RUN (20)
*apfMsConnTask_3: Dec 12 17:52:15.750: 5c:0a:5b:47:66:c3 192.168.110.252 AUTHCHECK (2) Change state to 8021X_REQD (3) last state RUN (20)
*apfMsConnTask_3: Dec 12 17:52:15.750: 5c:0a:5b:47:66:c3 192.168.110.252 8021X_REQD (3) DHCP required on AP 0c:d9:96:9d:55:10 vapId 2 apVapId 2for this client
*apfMsConnTask_3: Dec 12 17:52:15.750: 5c:0a:5b:47:66:c3 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_3: Dec 12 17:52:15.750: 5c:0a:5b:47:66:c3 192.168.110.252 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 0c:d9:96:9d:55:10 vapId 2 apVapId 2
*apfMsConnTask_3: Dec 12 17:52:15.750: 5c:0a:5b:47:66:c3 apfPemAddUser2 (apf_policy.c:223) Changing state for mobile 5c:0a:5b:47:66:c3 on AP 0c:d9:96:9d:55:10 from Associated to Associated
*apfMsConnTask_3: Dec 12 17:52:15.750: 5c:0a:5b:47:66:c3 Scheduling deletion of Mobile Station: (callerId: 49) in 1800 seconds
*apfMsConnTask_3: Dec 12 17:52:15.750: 5c:0a:5b:47:66:c3 Sending Assoc Response to station on BSSID 0c:d9:96:9d:55:10 (status 0) ApVapId 2 Slot 0
*apfMsConnTask_3: Dec 12 17:52:15.750: 5c:0a:5b:47:66:c3 apfProcessAssocReq (apf_80211.c:5237) Changing state for mobile 5c:0a:5b:47:66:c3 on AP 0c:d9:96:9d:55:10 from Associated to Associated
*dot1xMsgTask: Dec 12 17:52:15.753: 5c:0a:5b:47:66:c3 Creating a PKC PMKID Cache entry for station 5c:0a:5b:47:66:c3 (RSN 2)
*dot1xMsgTask: Dec 12 17:52:15.753: 5c:0a:5b:47:66:c3 Adding BSSID 0c:d9:96:9d:55:11 to PMKID cache for station 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 12 17:52:15.753: New PMKID: (16)
*dot1xMsgTask: Dec 12 17:52:15.753: [0000] 18 16 8e 32 db 77 3f ed 76 87 9a d6 0b 80 5e 12
*dot1xMsgTask: Dec 12 17:52:15.753: 5c:0a:5b:47:66:c3 Initiating RSN PSK to mobile 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 12 17:52:15.753: 5c:0a:5b:47:66:c3 dot1x - moving mobile 5c:0a:5b:47:66:c3 into Force Auth state
*dot1xMsgTask: Dec 12 17:52:15.753: 5c:0a:5b:47:66:c3 Skipping EAP-Success to mobile 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 12 17:52:15.753: Including PMKID in M1 (16)
*dot1xMsgTask: Dec 12 17:52:15.753: [0000] 18 16 8e 32 db 77 3f ed 76 87 9a d6 0b 80 5e 12
*dot1xMsgTask: Dec 12 17:52:15.753: 5c:0a:5b:47:66:c3 Starting key exchange to mobile 5c:0a:5b:47:66:c3, data packets will be dropped
*dot1xMsgTask: Dec 12 17:52:15.753: 5c:0a:5b:47:66:c3 Sending EAPOL-Key Message to mobile 5c:0a:5b:47:66:c3
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*dot1xMsgTask: Dec 12 17:52:15.753: 5c:0a:5b:47:66:c3 Sending 802.11 EAPOL message to mobile 5c:0a:5b:47:66:c3 WLAN 2, AP WLAN 2
*dot1xMsgTask: Dec 12 17:52:15.754: 00000000: 02 03 00 75 02 00 8a 00 10 00 00 00 00 00 00 00 ...u............
*dot1xMsgTask: Dec 12 17:52:15.754: 00000010: 00 36 24 73 10 bb 2b 7e 84 3d e0 62 4a 7f 0a f5 .6$s..+~.=.bJ...
*dot1xMsgTask: Dec 12 17:52:15.754: 00000020: 3a bb 17 c7 2f 3c b1 0c c0 94 70 fb 0e c0 28 b3 :.../<....p...(.
*dot1xMsgTask: Dec 12 17:52:15.754: 00000030: b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:15.754: 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:15.754: 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:15.754: 00000060: 00 00 16 dd 14 00 0f ac 04 18 16 8e 32 db 77 3f ............2.w?
*dot1xMsgTask: Dec 12 17:52:15.754: 00000070: ed 76 87 9a d6 0b 80 5e 12 .v.....^.
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.790: 5c:0a:5b:47:66:c3 Received 802.11 EAPOL message (len 121) from mobile 5c:0a:5b:47:66:c3
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.790: 00000000: 01 03 00 75 02 01 0a 00 00 00 00 00 00 00 00 00 ...u............
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.790: 00000010: 00 5e 0c a9 8f ae 78 d7 bc 21 96 bd dd 59 23 bd .^....x..!...Y#.
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.790: 00000020: 03 eb d0 a3 c2 c5 54 ed aa 60 9b 4a 38 b0 07 11 ......T..`.J8...
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.790: 00000030: 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.790: 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.790: 00000050: 00 f8 7e a2 cd 8d 9f 05 f4 b7 29 52 f5 d5 04 35 ..~.......)R...5
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.790: 00000060: 69 00 16 30 14 01 00 00 0f ac 04 01 00 00 0f ac i..0............
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.790: 00000070: 04 01 00 00 0f ac 02 00 00 .........
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.790: 5c:0a:5b:47:66:c3 Received EAPOL-Key from mobile 5c:0a:5b:47:66:c3
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.790: 5c:0a:5b:47:66:c3 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 5c:0a:5b:47:66:c3
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.790: 5c:0a:5b:47:66:c3 Received EAPOL-key in PTK_START state (message 2) from mobile 5c:0a:5b:47:66:c3
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.791: 5c:0a:5b:47:66:c3 Stopping retransmission timer for mobile 5c:0a:5b:47:66:c3
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.791: 5c:0a:5b:47:66:c3 Sending EAPOL-Key Message to mobile 5c:0a:5b:47:66:c3
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.791: 5c:0a:5b:47:66:c3 Sending 802.11 EAPOL message to mobile 5c:0a:5b:47:66:c3 WLAN 2, AP WLAN 2
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.791: 00000000: 02 03 00 97 02 13 ca 00 10 00 00 00 00 00 00 00 ................
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.791: 00000010: 01 36 24 73 10 bb 2b 7e 84 3d e0 62 4a 7f 0a f5 .6$s..+~.=.bJ...
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.791: 00000020: 3a bb 17 c7 2f 3c b1 0c c0 94 70 fb 0e c0 28 b3 :.../<....p...(.
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.791: 00000030: b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.791: 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.791: 00000050: 00 73 a8 2b 31 96 d7 b7 64 26 61 50 95 42 68 52 .s.+1...d&aP.BhR
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.791: 00000060: 28 00 38 23 d2 26 34 ae 9b 9f 84 40 60 70 31 35 (.8#.&4....@`p15
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.791: 00000070: 3b a5 d8 f3 76 9c d0 b0 91 d2 72 5e d2 8f 92 89 ;...v.....r^....
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.791: 00000080: f3 6f aa 90 d4 d0 02 1b ea 54 fa b3 a0 1b 76 31 .o.......T....v1
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.791: 00000090: 09 2a 39 ad ea 75 9e d6 fc aa 90 .*9..u.....
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.794: 5c:0a:5b:47:66:c3 Received 802.11 EAPOL message (len 99) from mobile 5c:0a:5b:47:66:c3
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.794: 00000000: 01 03 00 5f 02 03 0a 00 00 00 00 00 00 00 00 00 ..._............
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.794: 00000010: 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.794: 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.794: 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.794: 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.794: 00000050: 00 07 02 8b a7 65 ce 75 37 9f 2e 7c 58 d6 92 f9 .....e.u7..|X...
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.794: 00000060: 7c 00 00 |..
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.794: 5c:0a:5b:47:66:c3 Received EAPOL-Key from mobile 5c:0a:5b:47:66:c3
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.794: 5c:0a:5b:47:66:c3 Ignoring invalid EAPOL version (1) in EAPOL-key message from mobile 5c:0a:5b:47:66:c3
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.794: 5c:0a:5b:47:66:c3 Received EAPOL-key in PTKINITNEGOTIATING state (message 4) from mobile 5c:0a:5b:47:66:c3
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.795: 5c:0a:5b:47:66:c3 apfMs1xStateInc
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.795: 5c:0a:5b:47:66:c3 192.168.110.252 8021X_REQD (3) Change state to L2AUTHCOMPLETE (4) last state RUN (20)
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.795: 5c:0a:5b:47:66:c3 192.168.110.252 L2AUTHCOMPLETE (4) DHCP required on AP 0c:d9:96:9d:55:10 vapId 2 apVapId 2for this client
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.795: 5c:0a:5b:47:66:c3 Not Using WMM Compliance code qosCap 00
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.795: 5c:0a:5b:47:66:c3 192.168.110.252 L2AUTHCOMPLETE (4) Plumbed mobile LWAPP rule on AP 0c:d9:96:9d:55:10 vapId 2 apVapId 2
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.795: 5c:0a:5b:47:66:c3 apfMsRunStateInc
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.795: 5c:0a:5b:47:66:c3 192.168.110.252 L2AUTHCOMPLETE (4) Change state to RUN (20) last state RUN (20)
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.795: 5c:0a:5b:47:66:c3 192.168.110.252 RUN (20) Reached PLUMBFASTPATH: from line 4918
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.795: 5c:0a:5b:47:66:c3 192.168.110.252 RUN (20) Adding Fast Path rule
type = Airespace AP Client
on AP 0c:d9:96:9d:55:10, slot 0, interface = 1, QOS = 0
ACL Id = 0, Jumbo Frames = NO
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.795: 5c:0a:5b:47:66:c3 192.168.110.252 RUN (20) Fast Path rule (contd...) 802.1P = 0, DSCP = 0, TokenID = 7006 IPv6 Vlan = 10, IPv6 intf id = 11
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.795: 5c:0a:5b:47:66:c3 192.168.110.252 RUN (20) Successfully plumbed mobile rule (ACL ID 0)
*Dot1x_NW_MsgTask_3: Dec 12 17:52:15.795: 5c:0a:5b:47:66:c3 Stopping retransmission timer for mobile 5c:0a:5b:47:66:c3
*pemReceiveTask: Dec 12 17:52:15.796: 5c:0a:5b:47:66:c3 192.168.110.252 Added NPU entry of type 1, dtlFlags 0x0
*apfMsConnTask_5: Dec 12 17:52:39.650: 5c:0a:5b:47:66:c3 Reassociation received from mobile on AP 0c:d9:96:9d:1b:20
*apfMsConnTask_5: Dec 12 17:52:39.650: 5c:0a:5b:47:66:c3 192.168.110.252 RUN (20) Changing ACL 'printer' (ACL ID 0) ===> 'printer' (ACL ID 0) --- (caller apf_policy.c:1698)
*apfMsConnTask_5: Dec 12 17:52:39.650: 5c:0a:5b:47:66:c3 Applying site-specific IPv6 override for station 5c:0a:5b:47:66:c3 - vapId 2, site 'default-group', interface 'dynamic1'
*apfMsConnTask_5: Dec 12 17:52:39.650: 5c:0a:5b:47:66:c3 Applying IPv6 Interface Policy for station 5c:0a:5b:47:66:c3 - vlan 10, interface id 11, interface 'dynamic1'
*apfMsConnTask_5: Dec 12 17:52:39.650: 5c:0a:5b:47:66:c3 STA - rates (6): 152 36 48 72 96 108 0 0 0 0 0 0 0 0 0 0
*apfMsConnTask_5: Dec 12 17:52:39.650: 5c:0a:5b:47:66:c3 Processing RSN IE type 48, length 20 for mobile 5c:0a:5b:47:66:c3
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 192.168.110.252 RUN (20) Deleted mobile LWAPP rule on AP [0c:d9:96:9d:55:10]
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 Updated location for station old AP 0c:d9:96:9d:55:10-0, new AP 0c:d9:96:9d:1b:20-0
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 apfMsRunStateDec
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 apfMs1xStateDec
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 192.168.110.252 RUN (20) Change state to START (0) last state RUN (20)
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 192.168.110.252 START (0) Initializing policy
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 192.168.110.252 START (0) Change state to AUTHCHECK (2) last state RUN (20)
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 192.168.110.252 AUTHCHECK (2) Change state to 8021X_REQD (3) last state RUN (20)
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 192.168.110.252 8021X_REQD (3) DHCP required on AP 0c:d9:96:9d:1b:20 vapId 2 apVapId 2for this client
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 Not Using WMM Compliance code qosCap 00
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 192.168.110.252 8021X_REQD (3) Plumbed mobile LWAPP rule on AP 0c:d9:96:9d:1b:20 vapId 2 apVapId 2
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 apfPemAddUser2 (apf_policy.c:223) Changing state for mobile 5c:0a:5b:47:66:c3 on AP 0c:d9:96:9d:1b:20 from Associated to Associated
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 Scheduling deletion of Mobile Station: (callerId: 49) in 1800 seconds
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 Sending Assoc Response to station on BSSID 0c:d9:96:9d:1b:20 (status 0) ApVapId 2 Slot 0
*apfMsConnTask_5: Dec 12 17:52:39.651: 5c:0a:5b:47:66:c3 apfProcessAssocReq (apf_80211.c:5237) Changing state for mobile 5c:0a:5b:47:66:c3 on AP 0c:d9:96:9d:1b:20 from Associated to Associated
*pemReceiveTask: Dec 12 17:52:39.652: 5c:0a:5b:47:66:c3 192.168.110.252 Removed NPU entry.
*dot1xMsgTask: Dec 12 17:52:39.655: 5c:0a:5b:47:66:c3 Creating a PKC PMKID Cache entry for station 5c:0a:5b:47:66:c3 (RSN 2)
*dot1xMsgTask: Dec 12 17:52:39.655: 5c:0a:5b:47:66:c3 Adding BSSID 0c:d9:96:9d:1b:21 to PMKID cache for station 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 12 17:52:39.655: New PMKID: (16)
*dot1xMsgTask: Dec 12 17:52:39.655: [0000] 1a 44 36 b7 64 f6 8d 8a b1 16 69 2a 75 fe bd d8
*dot1xMsgTask: Dec 12 17:52:39.655: 5c:0a:5b:47:66:c3 Initiating RSN PSK to mobile 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 12 17:52:39.655: 5c:0a:5b:47:66:c3 dot1x - moving mobile 5c:0a:5b:47:66:c3 into Force Auth state
*dot1xMsgTask: Dec 12 17:52:39.655: 5c:0a:5b:47:66:c3 Skipping EAP-Success to mobile 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 12 17:52:39.655: Including PMKID in M1 (16)
*dot1xMsgTask: Dec 12 17:52:39.655: [0000] 1a 44 36 b7 64 f6 8d 8a b1 16 69 2a 75 fe bd d8
*dot1xMsgTask: Dec 12 17:52:39.655: 5c:0a:5b:47:66:c3 Starting key exchange to mobile 5c:0a:5b:47:66:c3, data packets will be dropped
*dot1xMsgTask: Dec 12 17:52:39.655: 5c:0a:5b:47:66:c3 Sending EAPOL-Key Message to mobile 5c:0a:5b:47:66:c3
state INITPMK (message 1), replay counter 00.00.00.00.00.00.00.00
*dot1xMsgTask: Dec 12 17:52:39.655: 5c:0a:5b:47:66:c3 Sending 802.11 EAPOL message to mobile 5c:0a:5b:47:66:c3 WLAN 2, AP WLAN 2
*dot1xMsgTask: Dec 12 17:52:39.655: 00000000: 02 03 00 75 02 00 8a 00 10 00 00 00 00 00 00 00 ...u............
*dot1xMsgTask: Dec 12 17:52:39.655: 00000010: 00 36 24 73 10 bb 2b 7e 84 3d e0 62 4a 7f 0a f5 .6$s..+~.=.bJ...
*dot1xMsgTask: Dec 12 17:52:39.655: 00000020: 3a bb 17 c7 2f 3c b1 0c c0 94 70 fb 0e c0 28 b3 :.../<....p...(.
*dot1xMsgTask: Dec 12 17:52:39.655: 00000030: b6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:39.655: 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:39.655: 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:39.655: 00000060: 00 00 16 dd 14 00 0f ac 04 1a 44 36 b7 64 f6 8d ..........D6.d..
*dot1xMsgTask: Dec 12 17:52:39.655: 00000070: 8a b1 16 69 2a 75 fe bd d8 ...i*u...
*osapiBsnTimer: Dec 12 17:52:40.756: 5c:0a:5b:47:66:c3 802.1x 'timeoutEvt' Timer expired for station 5c:0a:5b:47:66:c3 and for message = M2
*dot1xMsgTask: Dec 12 17:52:40.757: 5c:0a:5b:47:66:c3 Retransmit 1 of EAPOL-Key M1 (length 121) for mobile 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 12 17:52:40.757: 5c:0a:5b:47:66:c3 Sending 802.11 EAPOL message to mobile 5c:0a:5b:47:66:c3 WLAN 2, AP WLAN 2
*dot1xMsgTask: Dec 12 17:52:40.757: 00000000: 02 03 00 75 02 00 8a 00 10 00 00 00 00 00 00 00 ...u............
*dot1xMsgTask: Dec 12 17:52:40.757: 00000010: 01 36 24 73 10 bb 2b 7e 84 3d e0 62 4a 7f 0a f5 .6$s..+~.=.bJ...
*dot1xMsgTask: Dec 12 17:52:40.757: 00000020: 3a bb 17 c7 2f 3c b1 0c c0 94 70 fb 0e c0 28 b3 :.../<....p...(.
*dot1xMsgTask: Dec 12 17:52:40.757: 00000030: b6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:40.757: 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:40.757: 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:40.757: 00000060: 00 00 16 dd 14 00 0f ac 04 1a 44 36 b7 64 f6 8d ..........D6.d..
*dot1xMsgTask: Dec 12 17:52:40.757: 00000070: 8a b1 16 69 2a 75 fe bd d8 ...i*u...
*osapiBsnTimer: Dec 12 17:52:41.756: 5c:0a:5b:47:66:c3 802.1x 'timeoutEvt' Timer expired for station 5c:0a:5b:47:66:c3 and for message = M2
*dot1xMsgTask: Dec 12 17:52:41.757: 5c:0a:5b:47:66:c3 Retransmit 2 of EAPOL-Key M1 (length 121) for mobile 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 12 17:52:41.757: 5c:0a:5b:47:66:c3 Sending 802.11 EAPOL message to mobile 5c:0a:5b:47:66:c3 WLAN 2, AP WLAN 2
*dot1xMsgTask: Dec 12 17:52:41.757: 00000000: 02 03 00 75 02 00 8a 00 10 00 00 00 00 00 00 00 ...u............
*dot1xMsgTask: Dec 12 17:52:41.757: 00000010: 02 36 24 73 10 bb 2b 7e 84 3d e0 62 4a 7f 0a f5 .6$s..+~.=.bJ...
*dot1xMsgTask: Dec 12 17:52:41.757: 00000020: 3a bb 17 c7 2f 3c b1 0c c0 94 70 fb 0e c0 28 b3 :.../<....p...(.
*dot1xMsgTask: Dec 12 17:52:41.757: 00000030: b6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:41.757: 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:41.757: 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
*dot1xMsgTask: Dec 12 17:52:41.757: 00000060: 00 00 16 dd 14 00 0f ac 04 1a 44 36 b7 64 f6 8d ..........D6.d..
*dot1xMsgTask: Dec 12 17:52:41.757: 00000070: 8a b1 16 69 2a 75 fe bd d8 ...i*u...
*osapiBsnTimer: Dec 12 17:52:42.756: 5c:0a:5b:47:66:c3 802.1x 'timeoutEvt' Timer expired for station 5c:0a:5b:47:66:c3 and for message = M2
*dot1xMsgTask: Dec 12 17:52:42.757: 5c:0a:5b:47:66:c3 Retransmit failure for EAPOL-Key M1 to mobile 5c:0a:5b:47:66:c3, retransmit count 3, mscb deauth count 0
*dot1xMsgTask: Dec 12 17:52:42.757: 5c:0a:5b:47:66:c3 Sent Deauthenticate to mobile on BSSID 0c:d9:96:9d:1b:20 slot 0(caller 1x_ptsm.c:534)
*dot1xMsgTask: Dec 12 17:52:42.757: 5c:0a:5b:47:66:c3 Scheduling deletion of Mobile Station: (callerId: 57) in 10 seconds
Note that other clients work fine with this AP. What it could be? Help please.Yes I can sniff, but is there anything not encrypted?
I looked at the controllers logs and found that not only this client have a problem. For some there are similar but not as frequently and significantly. I'm beginning to doubt that the case samsung galaxy s3.
Logs except client (#cat log | grep retransmissions | grep -v "5c:0a:5b:47:66:c3"):
*dot1xMsgTask: Dec 13 18:30:30.300: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 44:d8:84:65:15:ad
*dot1xMsgTask: Dec 13 18:26:04.360: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 44:d8:84:65:15:ad
*dot1xMsgTask: Dec 13 18:26:04.360: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 18:26:01.360: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 3c:d0:f8:4f:0d:08
*dot1xMsgTask: Dec 13 18:21:15.752: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 00:26:37:13:7e:73
*dot1xMsgTask: Dec 13 18:21:15.752: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 74:e2:f5:20:b9:a6
*dot1xMsgTask: Dec 13 17:51:03.652: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 3c:d0:f8:1e:13:20
*dot1xMsgTask: Dec 13 17:46:56.236: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 17:46:19.628: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 17:41:15.012: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client e4:ce:8f:bc:54:a3
*dot1xMsgTask: Dec 13 17:28:43.956: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 34:51:c9:9c:a2:56
*dot1xMsgTask: Dec 13 17:25:15.825: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 3c:d0:f8:4f:0d:08
*dot1xMsgTask: Dec 13 17:25:15.825: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 18:87:96:62:44:e5
*dot1xMsgTask: Dec 13 17:25:11.625: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client c0:9f:42:58:56:f4
*dot1xMsgTask: Dec 13 17:20:56.209: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client e4:ce:8f:bc:54:a3
*dot1xMsgTask: Dec 13 17:20:56.209: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 68:09:27:7c:3b:c5
*dot1xMsgTask: Dec 13 16:58:39.761: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*dot1xMsgTask: Dec 13 16:58:27.761: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*dot1xMsgTask: Dec 13 16:54:45.545: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 74:e2:f5:dc:55:6c
*dot1xMsgTask: Dec 13 16:54:45.545: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 16:54:45.545: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 10:9a:dd:0e:37:dd
*dot1xMsgTask: Dec 13 16:43:48.525: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*dot1xMsgTask: Dec 13 16:25:13.360: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 00:23:6c:2b:40:9b
*dot1xMsgTask: Dec 13 16:25:13.360: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 28:cf:da:85:72:bf
*dot1xMsgTask: Dec 13 16:25:13.360: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 3c:d0:f8:4f:0d:08
*dot1xMsgTask: Dec 13 16:24:39.152: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 10:9a:dd:07:d7:de
*dot1xMsgTask: Dec 13 16:20:46.744: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*dot1xMsgTask: Dec 13 16:14:19.128: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 44:d8:84:65:15:ad
*dot1xMsgTask: Dec 13 16:06:49.108: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 16:06:39.908: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 16:06:18.108: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 16:06:05.308: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 16:05:36.904: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 44:d8:84:2c:dc:b3
*dot1xMsgTask: Dec 13 16:05:06.304: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 15:55:02.020: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 74:e2:f5:dc:55:6c
*dot1xMsgTask: Dec 13 15:54:03.016: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 30:17:c8:45:f1:2f
*dot1xMsgTask: Dec 13 15:28:07.916: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 34:51:c9:9c:a2:56
*dot1xMsgTask: Dec 13 15:24:48.784: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 00:23:6c:2b:40:9b
*dot1xMsgTask: Dec 13 15:24:48.784: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*dot1xMsgTask: Dec 13 15:24:29.584: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 10:9a:dd:07:d7:de
*dot1xMsgTask: Dec 13 15:12:48.728: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 15:08:37.916: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 50:46:5d:1a:a0:f5
*dot1xMsgTask: Dec 13 15:00:50.304: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 14:56:14.088: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 44:a7:cf:74:28:ab
*dot1xMsgTask: Dec 13 14:55:18.288: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*dot1xMsgTask: Dec 13 14:25:03.293: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 68:09:27:7c:3b:c5
*dot1xMsgTask: Dec 13 14:24:45.293: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 3c:d0:f8:4f:0d:08
*dot1xMsgTask: Dec 13 14:19:26.077: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 50:46:5d:1b:26:b7
*dot1xMsgTask: Dec 13 14:10:49.433: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:10:39.433: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:10:29.433: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:10:19.633: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:08:41.625: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 18:87:96:62:44:e5
*dot1xMsgTask: Dec 13 14:07:30.625: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:07:16.025: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:07:06.225: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:06:56.225: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:05:54.017: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 13:55:54.593: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 3c:d0:f8:4f:0d:08
*dot1xMsgTask: Dec 13 13:52:41.985: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 74:e2:f5:dc:55:6c
*dot1xMsgTask: Dec 13 13:44:51.749: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 13:42:37.550: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 10:40:f3:b8:3f:01
*dot1xMsgTask: Dec 13 13:42:01.949: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 13:25:46.384: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:19:d2:bb:33:40
*dot1xMsgTask: Dec 13 13:25:33.376: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:19:d2:bb:33:40
*dot1xMsgTask: Dec 13 13:25:19.176: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:19:d2:bb:33:40
*dot1xMsgTask: Dec 13 13:25:08.776: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:19:d2:bb:33:40
*dot1xMsgTask: Dec 13 13:24:03.776: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*dot1xMsgTask: Dec 13 13:24:03.776: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 00:23:6c:2b:40:9b
*dot1xMsgTask: Dec 13 13:19:21.160: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 00:19:d2:bb:33:40
*dot1xMsgTask: Dec 14 10:48:11.660: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:47:19.460: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:47:02.860: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:46:39.860: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:46:09.252: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:46:00.052: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:38:29.028: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:38:01.428: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:37:30.616: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:37:09.016: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:36:50.216: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:36:41.016: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:34:16.812: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:34:07.612: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:33:48.812: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:33:39.612: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:33:20.812: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:33:11.612: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:33:10.004: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 00:23:6c:2b:40:9b
*dot1xMsgTask: Dec 14 10:33:10.004: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 00:16:dc:64:2b:45
*dot1xMsgTask: Dec 14 10:32:52.804: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:32:43.604: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:31:44.804: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:30:56.396: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:30:37.248: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:30:28.049: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:29:14.648: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:29:09.849: %DOT1X-3-WPA_SEND_STATE_ERR: 1x_kxsm.c:1337 Unable to send EAPOL-key msg to client - invalid WPA state (2) for client 5c:0a:5b:47:66:c3
*apfMsConnTask_4: Dec 14 10:28:00.997: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 14 10:27:54.848: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:27:13.248: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:26:03.844: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:25:02.244: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*apfMsConnTask_4: Dec 14 10:23:43.263: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 14 10:18:58.224: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:18:28.224: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:16:38.216: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:16:14.816: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:16:05.416: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:15:46.608: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:15:37.408: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:14:05.608: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:13:56.408: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:13:37.604: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:13:28.404: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*apfMsConnTask_4: Dec 14 10:13:04.660: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 14 10:12:59.204: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:12:50.004: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*apfMsConnTask_4: Dec 14 10:12:29.665: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*apfMsConnTask_4: Dec 14 10:12:27.666: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 14 10:12:10.004: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:11:51.204: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:11:42.000: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:11:02.400: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:10:53.200: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:09:42.200: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:09:32.996: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:08:32.396: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:08:29.796: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client a0:0b:ba:e3:ad:d4
*dot1xMsgTask: Dec 14 10:08:23.196: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:06:19.388: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*dot1xMsgTask: Dec 14 10:05:29.388: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:05:08.580: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:04:59.380: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 10:01:36.372: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 74:e2:f5:dc:55:6c
*dot1xMsgTask: Dec 14 09:58:16.756: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client a0:0b:ba:e3:ad:d4
*dot1xMsgTask: Dec 14 09:56:46.956: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:56:37.756: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:52:33.336: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client a0:0b:ba:e3:ad:d4
*dot1xMsgTask: Dec 14 09:43:59.708: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:43:32.100: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:40:51.492: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:39:31.892: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:38:00.692: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:37:42.492: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 44:d8:84:65:15:ad
*dot1xMsgTask: Dec 14 09:37:27.692: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:36:35.288: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client a0:0b:ba:e3:ad:d4
*dot1xMsgTask: Dec 14 09:36:12.088: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:34:40.680: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:33:06.280: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:33:03.480: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*dot1xMsgTask: Dec 14 09:32:45.872: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:31:08.272: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:30:59.072: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:30:58.272: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client a0:0b:ba:e3:ad:d4
*dot1xMsgTask: Dec 14 09:30:16.925: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:30:07.725: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:29:49.325: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:29:40.125: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:29:12.525: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:26:08.117: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:25:58.917: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:25:27.917: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:25:06.917: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:24:45.717: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:24:29.517: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:24:14.109: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 14 09:13:36.281: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 3c:d0:f8:1e:13:20
*apfMsConnTask_4: Dec 14 09:11:19.057: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*apfMsConnTask_4: Dec 14 09:09:37.980: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*apfMsConnTask_4: Dec 14 09:08:52.861: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 14 06:35:19.753: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 34:51:c9:9c:a2:56
*dot1xMsgTask: Dec 14 04:29:42.673: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 8c:fa:ba:8f:92:c2
*dot1xMsgTask: Dec 14 01:27:59.761: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 8c:fa:ba:8f:92:c2
*dot1xMsgTask: Dec 13 22:26:20.148: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 8c:fa:ba:8f:92:c2
*dot1xMsgTask: Dec 13 22:26:20.148: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client f0:b4:79:18:29:30
*dot1xMsgTask: Dec 13 21:26:14.634: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 8c:fa:ba:8f:92:c2
*dot1xMsgTask: Dec 13 20:27:07.333: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 44:d8:84:2c:dc:b3
*dot1xMsgTask: Dec 13 20:25:55.125: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client d8:a2:5e:61:12:c5
*dot1xMsgTask: Dec 13 19:46:46.621: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 44:d8:84:aa:63:33
*dot1xMsgTask: Dec 13 19:36:50.593: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 50:46:5d:1b:26:b7
*dot1xMsgTask: Dec 13 19:26:57.840: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 3c:d0:f8:1e:13:20
*dot1xMsgTask: Dec 13 18:33:59.504: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:33:50.304: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:33:00.104: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:32:50.904: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:32:00.904: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:31:51.704: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:30:57.500: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:30:30.300: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 44:d8:84:65:15:ad
*dot1xMsgTask: Dec 13 18:30:30.100: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:30:10.500: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:28:37.096: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:27:34.168: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:26:04.360: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 44:d8:84:65:15:ad
*dot1xMsgTask: Dec 13 18:26:04.360: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 18:26:01.360: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 3c:d0:f8:4f:0d:08
*dot1xMsgTask: Dec 13 18:24:19.952: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:24:10.752: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:23:31.752: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:23:11.752: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:23:02.552: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:21:15.752: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 00:26:37:13:7e:73
*dot1xMsgTask: Dec 13 18:21:15.752: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 74:e2:f5:20:b9:a6
*dot1xMsgTask: Dec 13 18:20:06.748: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:19:57.548: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:18:45.744: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:18:36.544: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:18:08.944: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:17:19.744: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:16:48.544: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:16:24.332: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:16:03.732: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:15:46.732: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:14:52.732: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:14:34.332: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:14:24.932: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:07:40.117: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:606 Client 5c:0a:5b:47:66:c3 may be using an incorrect PSK
*dot1xMsgTask: Dec 13 18:07:40.116: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:07:30.716: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:07:14.116: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 18:07:04.916: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*apfMsConnTask_4: Dec 13 17:58:57.674: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 13 17:51:03.652: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 3c:d0:f8:1e:13:20
*dot1xMsgTask: Dec 13 17:46:56.236: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 17:46:19.628: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 17:44:55.628: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:44:42.228: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:44:29.028: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:41:15.012: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client e4:ce:8f:bc:54:a3
*dot1xMsgTask: Dec 13 17:38:04.804: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:37:55.604: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:37:46.400: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:30:38.968: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:30:19.168: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:29:55.168: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:29:05.556: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*apfMsConnTask_4: Dec 13 17:28:45.890: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 13 17:28:43.956: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 34:51:c9:9c:a2:56
*apfMsConnTask_4: Dec 13 17:25:56.863: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 13 17:25:15.825: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 3c:d0:f8:4f:0d:08
*dot1xMsgTask: Dec 13 17:25:15.825: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 18:87:96:62:44:e5
*dot1xMsgTask: Dec 13 17:25:11.625: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client c0:9f:42:58:56:f4
*apfMsConnTask_4: Dec 13 17:21:32.173: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 13 17:20:56.209: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client e4:ce:8f:bc:54:a3
*dot1xMsgTask: Dec 13 17:20:56.209: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 68:09:27:7c:3b:c5
*dot1xMsgTask: Dec 13 17:20:47.010: %DOT1X-3-WPA_SEND_STATE_ERR: 1x_kxsm.c:1337 Unable to send EAPOL-key msg to client - invalid WPA state (2) for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:20:45.609: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*apfMsConnTask_4: Dec 13 17:20:17.897: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*apfMsConnTask_4: Dec 13 17:19:25.710: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*apfMsConnTask_4: Dec 13 17:19:01.777: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*apfMsConnTask_4: Dec 13 17:17:06.954: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*apfMsConnTask_4: Dec 13 17:16:19.501: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 13 17:15:53.201: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:14:08.401: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:13:28.989: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:13:19.589: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:13:00.989: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:12:51.789: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:11:30.389: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:11:21.190: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:10:39.589: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:10:21.789: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:09:37.985: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:08:00.785: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:07:35.781: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 17:07:26.381: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*apfMsConnTask_4: Dec 13 17:03:59.348: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 13 16:58:39.761: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*dot1xMsgTask: Dec 13 16:58:27.761: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*dot1xMsgTask: Dec 13 16:55:22.753: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:55:13.553: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*apfMsConnTask_4: Dec 13 16:55:08.177: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 13 16:54:45.545: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 74:e2:f5:dc:55:6c
*dot1xMsgTask: Dec 13 16:54:45.545: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 16:54:45.545: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 10:9a:dd:0e:37:dd
*dot1xMsgTask: Dec 13 16:54:20.545: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:54:06.345: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:53:46.345: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:53:25.945: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:47:30.333: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:47:21.133: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:45:16.325: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:43:48.525: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*dot1xMsgTask: Dec 13 16:43:46.125: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:43:08.125: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:42:40.725: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:42:13.325: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:41:43.721: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:41:23.521: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:41:03.321: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:40:43.121: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:40:22.921: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:40:02.521: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:39:42.317: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:39:22.117: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:38:51.117: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:38:14.117: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:37:29.509: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:36:37.509: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:36:28.309: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:36:19.109: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:29:57.098: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:606 Client 5c:0a:5b:47:66:c3 may be using an incorrect PSK
*dot1xMsgTask: Dec 13 16:29:57.097: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:29:47.697: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:29:23.697: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:29:14.493: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:28:50.493: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:26:21.160: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:25:13.360: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 00:23:6c:2b:40:9b
*dot1xMsgTask: Dec 13 16:25:13.360: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 28:cf:da:85:72:bf
*dot1xMsgTask: Dec 13 16:25:13.360: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 3c:d0:f8:4f:0d:08
*apfMsConnTask_4: Dec 13 16:24:55.956: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 13 16:24:39.152: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 10:9a:dd:07:d7:de
*dot1xMsgTask: Dec 13 16:20:46.744: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*dot1xMsgTask: Dec 13 16:14:19.128: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 44:d8:84:65:15:ad
*dot1xMsgTask: Dec 13 16:06:49.109: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:606 Client 00:16:d4:61:67:43 may be using an incorrect PSK
*dot1xMsgTask: Dec 13 16:06:49.108: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 16:06:39.908: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 16:06:18.108: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 16:06:05.308: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 16:05:36.904: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 44:d8:84:2c:dc:b3
*dot1xMsgTask: Dec 13 16:05:06.304: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 16:03:29.492: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 16:01:48.432: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 15:55:02.020: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 74:e2:f5:dc:55:6c
*apfMsConnTask_4: Dec 13 15:54:44.182: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*apfMsConnTask_2: Dec 13 15:54:37.497: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 30:17:c8:45:f1:2f.
*dot1xMsgTask: Dec 13 15:54:03.016: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 30:17:c8:45:f1:2f
*dot1xMsgTask: Dec 13 15:53:27.216: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 15:52:58.016: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*apfMsConnTask_2: Dec 13 15:48:04.666: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 30:17:c8:45:f1:2f.
*dot1xMsgTask: Dec 13 15:28:07.916: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 34:51:c9:9c:a2:56
*dot1xMsgTask: Dec 13 15:24:48.784: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 00:23:6c:2b:40:9b
*dot1xMsgTask: Dec 13 15:24:48.784: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*apfMsConnTask_4: Dec 13 15:24:32.147: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 13 15:24:29.584: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 10:9a:dd:07:d7:de
*dot1xMsgTask: Dec 13 15:21:53.972: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 15:20:51.768: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 15:18:29.352: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 15:13:17.140: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 15:12:49.728: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 15:12:48.728: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 15:12:20.528: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 15:12:11.328: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 15:11:33.528: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 15:09:40.324: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 15:08:37.916: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 50:46:5d:1a:a0:f5
*dot1xMsgTask: Dec 13 15:01:41.904: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 15:01:03.904: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 15:00:50.304: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 14:59:12.896: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:56:14.088: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 44:a7:cf:74:28:ab
*dot1xMsgTask: Dec 13 14:55:18.288: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 50:ea:d6:e8:b3:e2
*apfMsConnTask_4: Dec 13 14:54:20.459: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 13 14:48:33.868: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:45:26.464: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:45:06.264: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:44:14.664: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:43:54.464: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:42:42.060: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:42:21.860: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:42:01.660: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:40:57.652: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:40:09.452: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:39:40.852: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:39:22.252: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:39:13.052: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:38:51.244: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:38:42.044: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:38:18.044: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:38:03.844: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:37:18.644: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:25:03.293: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 68:09:27:7c:3b:c5
*dot1xMsgTask: Dec 13 14:24:45.293: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M5 retransmissions exceeded for client 3c:d0:f8:4f:0d:08
*apfMsConnTask_4: Dec 13 14:24:08.445: %APF-3-CHECK_SUPP_RATES_FAILED: apf_utils.c:179 Could not check supported rates. Invalid Supported Rates from station . Length :0. Mobile MAC: 00:16:dc:64:2b:45.
*dot1xMsgTask: Dec 13 14:19:26.077: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 50:46:5d:1b:26:b7
*Dot1x_NW_MsgTask_7: Dec 13 14:19:16.981: %DOT1X-3-INVALID_WPA_KEY_STATE: 1x_eapkey.c:2066 Received EAPOL-key message while in invalid state (0) - version 1, type 3, descriptor 2, client 50:46:5d:1b:26:b7
*dot1xMsgTask: Dec 13 14:10:49.434: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:606 Client d4:20:6d:76:e7:5f may be using an incorrect PSK
*dot1xMsgTask: Dec 13 14:10:49.433: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:10:39.433: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:10:29.433: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:10:19.633: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:08:45.425: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:08:41.625: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 18:87:96:62:44:e5
*dot1xMsgTask: Dec 13 14:08:24.625: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:07:45.825: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:07:30.626: %DOT1X-3-PSK_CONFIG_ERR: 1x_ptsm.c:606 Client d4:20:6d:76:e7:5f may be using an incorrect PSK
*dot1xMsgTask: Dec 13 14:07:30.625: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:07:22.425: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:07:16.025: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:07:07.825: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:07:06.225: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:06:56.225: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client d4:20:6d:76:e7:5f
*dot1xMsgTask: Dec 13 14:05:54.017: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M3 retransmissions exceeded for client 00:16:d4:61:67:43
*dot1xMsgTask: Dec 13 14:02:11.801: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:01:51.601: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:01:31.401: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:01:08.001: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:00:47.801: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:00:27.602: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 14:00:07.402: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 13:59:47.193: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 13:59:26.993: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 13:59:06.793: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 13:58:46.593: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 13:58:26.393: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 13:58:06.193: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: 1x_ptsm.c:444 Max EAPOL-key M1 retransmissions exceeded for client 5c:0a:5b:47:66:c3
*dot1xMsgTask: Dec 13 13:57:33.389: %DOT1X-3-MAX_EAPOL_KEY_RETRANS: -
HTTPS Without client authentication shows error of Certificate
Hi Experts,
I am trying to develop a SOAP to RFC scenario where in SOAP sender HTTP security level - HTTPS Without Client Authentication is selected.
I have downloaded WSDL from Sender agreement and trying to test web service from SOAPUI. Now as per my understanding simply placing request to HTTPS:<host>:<port>:XISOAPAdapter/.... with correct user should work and this scenario shouldn't need any certificates.
However in SOAPUI and even in RWB SOAP Sender, I am receiving error that - Client Certificate required.
Any comments on why would it be happening ? In fact whatever option in HTTP Security level I select, error remains same. In NWA is there any other configuration to be done to make this work ?
Is below understanding right ?
-- >> HTTPS Without client authentication will not need certificate exchange and simply user authentication will do
Thanks..
regards,
Omkar.Hello Omkar,
What you are trying to do is Consume a SOAP->RFC scenario (synchronous) from SOAP UI and you want that to be secure. With this requirement, just having the certificates alone is not sufficient (sorry for late response..i just came across this post when i was searching something else )
1)How did you generate the certificate and the private key? Because Key Generation plays a Big Part in it. The Key should have been signed by a CA. Though its not signed by a CA, a trick which would work is, at the time of Key generation, provide the Organization Name as SAP Trust Community and Country as DE.
2) At the time of Key Generation definitely it shall ask for a password. You remember that.
3) Export the Private Key as PCKS12 format and the certificate as Base64 format and have it in your local system, (shall be used later in SOAP UI and NWA)
Here follows the major part
4) Open NWA and go to Configuration Management->Authentication
5) Go to Properties Taband click Modify
6) Under Logon Application select the check box "Enable Showing Certificate Logon URL Link on Logon Page" and save it.
7) Now go to the Components Tab.
8) Search for client_cert Policy Configuration name and Edit it it. Make sure the following Login Modules are maintained in the same Order
==> Name: com.sap.engine.services.security.server.jaas.ClientCertLoginModule
Flag : Sufficient
==> Name: BasicPasswordLoginModule
Flag: Optional
9) Now Select the name com.sap.engine.services.security.server.jaas.ClientCertLoginModule and you can see lots of entries under the Login Module Options. Remove them all and add anew entry (case sensitive). Save it.
==>Name: Rule1.getUserFrom
value : wholeCert
10) Now search for the Policy Configuration name sap.com/com.sap.aii.adapter.soap.app*XISOAPAdapter
and edit it.
11) Under the Authentication stack select the template client_cert against the used template label. and save it
12)If you are using AXIS Adapter, do the steps 11 for the Policy Configuration name sap.com/com.sap.aii.axis.app*XIAxisAdapter.
13) Now in NWA navigate to Operation management->Identity Management
14) Search for the user PIISUSER (or any user id which you thing has good amount of authorizations to access the service)
15)Click Modify and go to the TAB Certificates and upload the certificate (not the private key) which you downloaded in step 3.
16) With this setup what you have done is you have created proper certificate, enabled certificate based logon for SOAP and AXIS adapter and associated the certificate with a user id.
17) usually in Dual stack PI, we will have the same certificate added to the server pse in strustsso2 tcode. But since its single stack, just make sure in the cert and keys you add this certificate to teh Trusted CAs and also to the Server Keystore.
18) Now in SOAP UI Right Click on the Project Name->Select Show Project View->Under the WS Security Configurations->Go to Keystore and certificates and add the Private Key
19) In SOAP UI under the operation name, in the Request, in stead of providing user credentials, choose the private key name against the SSL Keystore entry.
20) Before you execute the scenario make sure you have chosen the HTTPS url and https port is proper. Usually its 443, but some customers configure their own port.
Scenario should work now. Else if you track it using XPI Inspector, you can find out easily at which step it has gone wrong.
Good Luck!!
Best Regards,
Sundar -
HTTP request was forbidden with client authentication scheme 'anonymous'
Hi,
We have updated our support Package for version BPC NW 10.0 release 801 from 0002 to 0005.
After the update we are not being to access the server folders in EPM Add-in.
We have the following error "HTTP request was forbidden with client authentication scheme 'anonymous'". Nevertheless we only can't access to the content of folders that are not public or local.
In SLG1 log, we have the error " Access not granted, You are not the member of team: BUSINESS ADMIN". This is not true because the user has SAP_ALL in BW and is a primary administrator in BPC. The data access profile associated is the administrator member access profile.
Has anybody seen this error?
Best regards,
JAHi Nilanjan,
We are able to log in into EPM Add-in.
We have the error when we try to open input forms or reports from server, but only from some folders.
When we select the folder we have the error.
For example we can see the content from:
WEBEXCEL\REPORTLIBRARY\
ADMIN\WEBEXCEL\TEAMREPORTLIBRARY\
But we can't see the content from:
BUSINESS ADMIN\WEBEXCEL\TEAMREPORTLIBRARY\
TEAM FI\WEBEXCEL\TEAMREPORTLIBRARY\
The user has administrator member access profile ans is included in all teams (ADMIN, BUSINESS ADMIN and TEAM FI)
We really can't see what could be the problem
Hope you can help us.
regards,
JA -
Wireless Client Authentication issues when roaming Access Points (Local)
I have a Cisco 5508 with Software version 7.4.121.0 and Field Recovery 7.6.101.1.
There are a handful of clients that when roaming between AP's with the same SSID that get an authentication issue and have to restart the wireless to get back on.
From Cisco ISE
Event
5400 Authentication failed
Failure Reason
11514 Unexpectedly received empty TLS message; treating as a rejection by the client
Resolution
Ensure that the client's supplicant does not have any known compatibility issues and that it is properly configured. Also ensure that the ISE server certificate is trusted by the client, by configuring the supplicant with the CA certificate that signed the ISE server certificate. It is strongly recommended to not disable the server certificate validation on the client!
Root cause
While trying to negotiate a TLS handshake with the client, ISE expected to receive a non-empty TLS message or TLS alert message, but instead received an empty TLS message. This could be due to an inconformity in the implementation of the protocol between ISE and the supplicant. For example, it is a known issue that the XP supplicant sends an empty TLS message instead of a non-empty TLS alert message. It might also involve the supplicant not trusting the ISE server certificate for some reason. ISE treated the unexpected message as a sign that the client rejected the tunnel establishment.
I am having a hard time figuring out what is causing this. My assumption is if there were a problem with the Controller or AP configurations then it would happen to everyone. My further assumption is if the client had a problem with their laptop (windows 7) then why does work at other times? So I have checked and the ISE certificate is trusted by client.
Is something happening that the previous access point is holding on to the mac and the return authentication traffic is going to the old AP instead of the new one or something like that which is corrupting the data?
I also had this from Splunk for the same client:
Mar 5 13:44:51 usstlz-piseps01 CISE_Failed_Attempts 0014809622 1 0 2015-03-05 13:44:51.952 +00:00 0865003824 5435 NOTICE RADIUS: NAS conducted several failed authentications of the same scenario
FailureReason="12929 NAS sends RADIUS accounting update messages too frequently"
Any help on this would be appreciated. These error messages give me an idea but doesn't give me the exact answer to why the problem occurred and what needs to be done to fix it.
ThanksFurther detail From ISE for the failure:
11001
Received RADIUS Access-Request
11017
RADIUS created a new session
15049
Evaluating Policy Group
15008
Evaluating Service Selection Policy
15048
Queried PIP
15048
Queried PIP
15004
Matched rule
15048
Queried PIP
15048
Queried PIP
15004
Matched rule
11507
Extracted EAP-Response/Identity
12500
Prepared EAP-Request proposing EAP-TLS with challenge
11006
Returned RADIUS Access-Challenge
11001
Received RADIUS Access-Request
11018
RADIUS is re-using an existing session
12301
Extracted EAP-Response/NAK requesting to use PEAP instead
12300
Prepared EAP-Request proposing PEAP with challenge
11006
Returned RADIUS Access-Challenge
11001
Received RADIUS Access-Request
11018
RADIUS is re-using an existing session
12302
Extracted EAP-Response containing PEAP challenge-response and accepting PEAP as negotiated
12318
Successfully negotiated PEAP version 0
12800
Extracted first TLS record; TLS handshake started
12805
Extracted TLS ClientHello message
12806
Prepared TLS ServerHello message
12807
Prepared TLS Certificate message
12810
Prepared TLS ServerDone message
12305
Prepared EAP-Request with another PEAP challenge
11006
Returned RADIUS Access-Challenge
11001
Received RADIUS Access-Request
11018
RADIUS is re-using an existing session
12304
Extracted EAP-Response containing PEAP challenge-response
12305
Prepared EAP-Request with another PEAP challenge
11006
Returned RADIUS Access-Challenge
11001
Received RADIUS Access-Request
11018
RADIUS is re-using an existing session
12304
Extracted EAP-Response containing PEAP challenge-response
12305
Prepared EAP-Request with another PEAP challenge
11006
Returned RADIUS Access-Challenge
11001
Received RADIUS Access-Request
11018
RADIUS is re-using an existing session
12304
Extracted EAP-Response containing PEAP challenge-response
12305
Prepared EAP-Request with another PEAP challenge
11006
Returned RADIUS Access-Challenge
11001
Received RADIUS Access-Request
11018
RADIUS is re-using an existing session
12304
Extracted EAP-Response containing PEAP challenge-response
12305
Prepared EAP-Request with another PEAP challenge
11006
Returned RADIUS Access-Challenge
11001
Received RADIUS Access-Request
11018
RADIUS is re-using an existing session
12304
Extracted EAP-Response containing PEAP challenge-response
12305
Prepared EAP-Request with another PEAP challenge
11006
Returned RADIUS Access-Challenge
11001
Received RADIUS Access-Request
11018
RADIUS is re-using an existing session
12304
Extracted EAP-Response containing PEAP challenge-response
12305
Prepared EAP-Request with another PEAP challenge
11006
Returned RADIUS Access-Challenge
11001
Received RADIUS Access-Request
11018
RADIUS is re-using an existing session
12304
Extracted EAP-Response containing PEAP challenge-response
11514
Unexpectedly received empty TLS message; treating as a rejection by the client
12512
Treat the unexpected TLS acknowledge message as a rejection from the client
11504
Prepared EAP-Failure
11003
Returned RADIUS Access-Reject -
Client authentication not working
Hi all,
I am using Apache's HTTPClient to connect with a server running https. The server is the latest stable Tomcat (version 4.1.27). If I set clientAuth="false" in the Tomcat configuration, everything is working fine. I am able to comunicate with the server, since the server's certificate is in the trusted store. If I want to authenticate myself (by setting clientAuth="true") it doesn't work. It seems that the application I have written doesn't send the client's certificate.
Here's the code:
HttpClient httpclient = new HttpClient();
Protocol myhttps =
new Protocol(
"https",
new StrictSSLProtocolSocketFactory(false),
8443);
httpclient.getHostConfiguration().setHost("rigel", 8443, myhttps);
GetMethod httpget = new GetMethod("/");
httpclient.executeMethod(httpget);
If I turn on all sorts of debugging this is what I get:
2003/10/08 14:54:26:898 CEST [DEBUG] HttpClient - -Java version: 1.4.0_02
2003/10/08 14:54:26:898 CEST [DEBUG] HttpClient - -Java vendor: Sun Microsystems Inc.
2003/10/08 14:54:26:898 CEST [DEBUG] HttpClient - -Java class path: f:\myhome\projects\NextiraOne\class;f:\myhome\projects\NextiraOne\lib\commons-httpclient-2.0-rc1.jar;f:\myhome\projects\NextiraOne\lib\log4j-1.2.6.jar;f:\myhome\projects\NextiraOne\lib\commons-logging.jar;f:\myhome\projects\NextiraOne\lib\commons-logging-api.jar;f:\myhome\projects\NextiraOne\lib\com.ibm.mq.jar;f:\myhome\projects\NextiraOne\lib\xmlparserv2new.jar;f:\myhome\projects\NextiraOne\lib\connector.jar
2003/10/08 14:54:26:898 CEST [DEBUG] HttpClient - -Operating system name: Windows 2000
2003/10/08 14:54:26:898 CEST [DEBUG] HttpClient - -Operating system architecture: x86
2003/10/08 14:54:26:898 CEST [DEBUG] HttpClient - -Operating system version: 5.0
2003/10/08 14:54:27:078 CEST [DEBUG] HttpClient - -SUN 1.2: SUN (DSA key/parameter generation; DSA signing; SHA-1, MD5 digests; SecureRandom; X.509 certificates; JKS keystore; PKIX CertPathValidator; PKIX CertPathBuilder; LDAP, Collection CertStores)
2003/10/08 14:54:27:078 CEST [DEBUG] HttpClient - -SunJSSE 1.4002: Sun JSSE provider(implements RSA Signatures, PKCS12, SunX509 key/trust factories, SSLv3, TLSv1)
2003/10/08 14:54:27:078 CEST [DEBUG] HttpClient - -SunRsaSign 1.0: SUN's provider for RSA signatures
2003/10/08 14:54:27:078 CEST [DEBUG] HttpClient - -SunJCE 1.4: SunJCE Provider (implements DES, Triple DES, Blowfish, PBE, Diffie-Hellman, HMAC-MD5, HMAC-SHA1)
2003/10/08 14:54:27:088 CEST [DEBUG] HttpClient - -SunJGSS 1.0: Sun (Kerberos v5)
2003/10/08 14:54:27:188 CEST [DEBUG] HttpConnection - -HttpConnection.setSoTimeout(0)
keyStore is :
keyStore type is : jks
init keystore
init keymanager of type SunX509
trustStore is: f:\client.keystore
trustStore type is : jks
init truststore
adding private entry as trusted cert: [
Version: V1
Subject: CN=rigel, OU=ECS, O=DC, L=MER, ST=OVL, C=BE
Signature Algorithm: MD5withRSA, OID = 1.2.840.113549.1.1.4
Key: com.sun.net.ssl.internal.ssl.JSA_RSAPublicKey@8fd984
Validity: [From: Wed Oct 08 13:48:24 CEST 2003,
To: Tue Jan 06 12:48:24 CET 2004]
Issuer: CN=rigel, OU=ECS, O=DC, L=MER, ST=OVL, C=BE
SerialNumber: [ 3f83f988 ]
Algorithm: [MD5withRSA]
Signature:
0000: 04 24 63 44 43 26 CA 79 BC 0B 96 2D 27 1A 40 DA .$cDC&.y...-'.@.
0010: E0 92 FE D6 57 F8 4C C4 C6 97 F7 13 24 4B 30 F9 ....W.L.....$K0.
0020: E7 C3 06 2B A3 67 FD 70 E1 A5 8E E7 16 3D 59 16 ...+.g.p.....=Y.
0030: DB 7B 73 AC 30 B1 43 C1 F2 96 DD 8F 52 0E 61 1F ..s.0.C.....R.a.
0040: 0E 23 0F 88 8E 1A 6F 24 54 B9 87 4C 2C A1 97 78 .#....o$T..L,..x
0050: FD 80 6A A1 F8 65 C3 CE 39 F4 AA A6 6C 3C 7A 98 ..j..e..9...l<z.
0060: 86 4E 5B 6A 2D 7F BC 89 E8 36 29 54 22 0A 3F C7 .N[j-....6)T".?.
0070: B3 83 4E 47 36 F1 C9 09 25 E7 9C D6 11 10 3B 3C ..NG6...%.....;<
adding as trusted cert: [
Version: V1
Subject: CN=rigel, OU=ECS, O=DC, L=MER, ST=OVL, C=BE
Signature Algorithm: MD5withRSA, OID = 1.2.840.113549.1.1.4
Key: com.sun.net.ssl.internal.ssl.JSA_RSAPublicKey@f99ff5
Validity: [From: Wed Oct 08 11:56:42 CEST 2003,
To: Tue Jan 06 10:56:42 CET 2004]
Issuer: CN=rigel, OU=ECS, O=DC, L=MER, ST=OVL, C=BE
SerialNumber: [ 3f83df5a ]
Algorithm: [MD5withRSA]
Signature:
0000: E0 21 80 C9 4C 8C BC FC 48 B3 36 6A 0B E1 C1 94 .!..L...H.6j....
0010: 79 E1 E7 6B 27 B0 71 7D CF 17 A6 B9 E6 71 D6 85 y..k'.q......q..
0020: 6F 9F EB 66 73 4B CB A2 C1 A2 7F F3 38 A1 A7 8B o..fsK......8...
0030: 92 F0 82 1F 4A A4 E9 F5 8C 64 0B 7E 86 61 C0 D5 ....J....d...a..
0040: 74 60 7D D3 B0 11 3F 77 B9 D8 EC 7D 17 22 D8 7C t`....?w....."..
0050: 77 42 CB C1 24 CC 26 5E CF 8A 20 7D 77 44 D4 29 wB..$.&^.. .wD.)
0060: DF 59 D1 17 CE D2 51 59 BC 53 35 B0 EB CE 51 CE .Y....QY.S5...Q.
0070: 79 F7 D2 53 CE FD 2F 9A FD 1A A8 E3 3C 58 AF EB y..S../.....<X..
init context
trigger seeding of SecureRandom
done seeding SecureRandom
2003/10/08 14:54:32:456 CEST [DEBUG] HttpMethodBase - -Execute loop try 1
2003/10/08 14:54:32:466 CEST [DEBUG] wire - ->> "GET / HTTP/1.1[\r][\n]"
2003/10/08 14:54:32:466 CEST [DEBUG] HttpMethodBase - -Adding Host request header
2003/10/08 14:54:32:476 CEST [DEBUG] wire - ->> "User-Agent: Jakarta Commons-HttpClient/2.0rc1[\r][\n]"
2003/10/08 14:54:32:476 CEST [DEBUG] wire - ->> "Host: rigel[\r][\n]"
%% No cached client session
*** ClientHello, v3.1
RandomCookie: GMT: 1048840456 bytes = { 43, 4, 244, 103, 54, 110, 99, 128, 162, 132, 22, 2, 197, 112, 91, 105, 4, 133, 249, 114, 142, 122, 44, 203, 156, 188, 132, 100 }
Session ID: {}
Cipher Suites: { 0, 5, 0, 4, 0, 9, 0, 10, 0, 18, 0, 19, 0, 3, 0, 17 }
Compression Methods: { 0 }
[write] MD5 and SHA1 hashes: len = 59
0000: 01 00 00 37 03 01 3F 84 09 08 2B 04 F4 67 36 6E ...7..?...+..g6n
0010: 63 80 A2 84 16 02 C5 70 5B 69 04 85 F9 72 8E 7A c......p[i...r.z
0020: 2C CB 9C BC 84 64 00 00 10 00 05 00 04 00 09 00 ,....d..........
0030: 0A 00 12 00 13 00 03 00 11 01 00 ...........
main, WRITE: SSL v3.1 Handshake, length = 59
[write] MD5 and SHA1 hashes: len = 77
0000: 01 03 01 00 24 00 00 00 20 00 00 05 00 00 04 01 ....$... .......
0010: 00 80 00 00 09 06 00 40 00 00 0A 07 00 C0 00 00 .......@........
0020: 12 00 00 13 00 00 03 02 00 80 00 00 11 3F 84 09 .............?..
0030: 08 2B 04 F4 67 36 6E 63 80 A2 84 16 02 C5 70 5B .+..g6nc......p[
0040: 69 04 85 F9 72 8E 7A 2C CB 9C BC 84 64 i...r.z,....d
main, WRITE: SSL v2, contentType = 22, translated length = 16310
main, READ: SSL v3.1 Handshake, length = 2275
*** ServerHello, v3.1
RandomCookie: GMT: 1048840456 bytes = { 2, 207, 237, 54, 101, 119, 116, 33, 59, 54, 56, 111, 170, 110, 92, 129, 178, 67, 124, 46, 187, 153, 247, 27, 216, 197, 21, 232 }
Session ID: {63, 132, 9, 8, 85, 66, 130, 20, 34, 100, 122, 131, 137, 133, 143, 214, 43, 232, 151, 61, 12, 216, 23, 84, 58, 241, 194, 116, 67, 44, 43, 44}
Cipher Suite: { 0, 5 }
Compression Method: 0
%% Created: [Session-1, SSL_RSA_WITH_RC4_128_SHA]
** SSL_RSA_WITH_RC4_128_SHA
[read] MD5 and SHA1 hashes: len = 74
0000: 02 00 00 46 03 01 3F 84 09 08 02 CF ED 36 65 77 ...F..?......6ew
0010: 74 21 3B 36 38 6F AA 6E 5C 81 B2 43 7C 2E BB 99 t!;68o.n\..C....
0020: F7 1B D8 C5 15 E8 20 3F 84 09 08 55 42 82 14 22 ...... ?...UB.."
0030: 64 7A 83 89 85 8F D6 2B E8 97 3D 0C D8 17 54 3A dz.....+..=...T:
0040: F1 C2 74 43 2C 2B 2C 00 05 00 ..tC,+,...
*** Certificate chain
chain [0] = [
Version: V1
Subject: CN=rigel, OU=ECS, O=DC, L=MER, ST=OVL, C=BE
Signature Algorithm: MD5withRSA, OID = 1.2.840.113549.1.1.4
Key: com.sun.net.ssl.internal.ssl.JSA_RSAPublicKey@b2a2d8
Validity: [From: Wed Oct 08 11:56:42 CEST 2003,
To: Tue Jan 06 10:56:42 CET 2004]
Issuer: CN=rigel, OU=ECS, O=DC, L=MER, ST=OVL, C=BE
SerialNumber: [ 3f83df5a ]
Algorithm: [MD5withRSA]
Signature:
0000: E0 21 80 C9 4C 8C BC FC 48 B3 36 6A 0B E1 C1 94 .!..L...H.6j....
0010: 79 E1 E7 6B 27 B0 71 7D CF 17 A6 B9 E6 71 D6 85 y..k'.q......q..
0020: 6F 9F EB 66 73 4B CB A2 C1 A2 7F F3 38 A1 A7 8B o..fsK......8...
0030: 92 F0 82 1F 4A A4 E9 F5 8C 64 0B 7E 86 61 C0 D5 ....J....d...a..
0040: 74 60 7D D3 B0 11 3F 77 B9 D8 EC 7D 17 22 D8 7C t`....?w....."..
0050: 77 42 CB C1 24 CC 26 5E CF 8A 20 7D 77 44 D4 29 wB..$.&^.. .wD.)
0060: DF 59 D1 17 CE D2 51 59 BC 53 35 B0 EB CE 51 CE .Y....QY.S5...Q.
0070: 79 F7 D2 53 CE FD 2F 9A FD 1A A8 E3 3C 58 AF EB y..S../.....<X..
stop on trusted cert: [
Version: V1
Subject: CN=rigel, OU=ECS, O=DC, L=MER, ST=OVL, C=BE
Signature Algorithm: MD5withRSA, OID = 1.2.840.113549.1.1.4
Key: com.sun.net.ssl.internal.ssl.JSA_RSAPublicKey@b2a2d8
Validity: [From: Wed Oct 08 11:56:42 CEST 2003,
To: Tue Jan 06 10:56:42 CET 2004]
Issuer: CN=rigel, OU=ECS, O=DC, L=MER, ST=OVL, C=BE
SerialNumber: [ 3f83df5a ]
Algorithm: [MD5withRSA]
Signature:
0000: E0 21 80 C9 4C 8C BC FC 48 B3 36 6A 0B E1 C1 94 .!..L...H.6j....
0010: 79 E1 E7 6B 27 B0 71 7D CF 17 A6 B9 E6 71 D6 85 y..k'.q......q..
0020: 6F 9F EB 66 73 4B CB A2 C1 A2 7F F3 38 A1 A7 8B o..fsK......8...
0030: 92 F0 82 1F 4A A4 E9 F5 8C 64 0B 7E 86 61 C0 D5 ....J....d...a..
0040: 74 60 7D D3 B0 11 3F 77 B9 D8 EC 7D 17 22 D8 7C t`....?w....."..
0050: 77 42 CB C1 24 CC 26 5E CF 8A 20 7D 77 44 D4 29 wB..$.&^.. .wD.)
0060: DF 59 D1 17 CE D2 51 59 BC 53 35 B0 EB CE 51 CE .Y....QY.S5...Q.
0070: 79 F7 D2 53 CE FD 2F 9A FD 1A A8 E3 3C 58 AF EB y..S../.....<X..
[read] MD5 and SHA1 hashes: len = 552
0000: 0B 00 02 24 00 02 21 00 02 1E 30 82 02 1A 30 82 ...$..!...0...0.
0010: 01 83 02 04 3F 83 DF 5A 30 0D 06 09 2A 86 48 86 ....?..Z0...*.H.
0020: F7 0D 01 01 04 05 00 30 54 31 0B 30 09 06 03 55 .......0T1.0...U
0030: 04 06 13 02 42 45 31 0C 30 0A 06 03 55 04 08 13 ....BE1.0...U...
0040: 03 4F 56 4C 31 0C 30 0A 06 03 55 04 07 13 03 4D .OVL1.0...U....M
0050: 45 52 31 0B 30 09 06 03 55 04 0A 13 02 44 43 31 ER1.0...U....DC1
0060: 0C 30 0A 06 03 55 04 0B 13 03 45 43 53 31 0E 30 .0...U....ECS1.0
0070: 0C 06 03 55 04 03 13 05 72 69 67 65 6C 30 1E 17 ...U....rigel0..
0080: 0D 30 33 31 30 30 38 30 39 35 36 34 32 5A 17 0D .031008095642Z..
0090: 30 34 30 31 30 36 30 39 35 36 34 32 5A 30 54 31 040106095642Z0T1
00A0: 0B 30 09 06 03 55 04 06 13 02 42 45 31 0C 30 0A .0...U....BE1.0.
00B0: 06 03 55 04 08 13 03 4F 56 4C 31 0C 30 0A 06 03 ..U....OVL1.0...
00C0: 55 04 07 13 03 4D 45 52 31 0B 30 09 06 03 55 04 U....MER1.0...U.
00D0: 0A 13 02 44 43 31 0C 30 0A 06 03 55 04 0B 13 03 ...DC1.0...U....
00E0: 45 43 53 31 0E 30 0C 06 03 55 04 03 13 05 72 69 ECS1.0...U....ri
00F0: 67 65 6C 30 81 9F 30 0D 06 09 2A 86 48 86 F7 0D gel0..0...*.H...
0100: 01 01 01 05 00 03 81 8D 00 30 81 89 02 81 81 00 .........0......
0110: F0 8B 5A 91 87 97 AB 55 2A 6A AA 96 1F CF 77 D7 ..Z....U*j....w.
0120: 73 C2 23 4D 78 51 CF 6E 3F 10 46 C5 DA D7 9D 75 s.#MxQ.n?.F....u
0130: 77 3A 94 4A 07 5B D6 38 82 18 AE 71 6A 76 F9 6F w:.J.[.8...qjv.o
0140: 58 19 9D 2F 97 EE 4E 38 0E 3F E1 B2 5D 2D C1 1A X../..N8.?..]-..
0150: 0E F2 08 B2 D6 FF 0A 5E FC BD 57 73 C1 F0 09 C3 .......^..Ws....
0160: 8E E4 20 C2 CC 96 E3 DE 24 2C 76 DD 9C BA F3 D2 .. .....$,v.....
0170: 14 FC 94 86 C6 A3 6D 90 02 6B 5C 6E C7 94 0A 44 ......m..k\n...D
0180: A2 64 F6 A2 31 16 1E AC 97 36 17 84 7E 60 EC 2B .d..1....6...`.+
0190: 02 03 01 00 01 30 0D 06 09 2A 86 48 86 F7 0D 01 .....0...*.H....
01A0: 01 04 05 00 03 81 81 00 E0 21 80 C9 4C 8C BC FC .........!..L...
01B0: 48 B3 36 6A 0B E1 C1 94 79 E1 E7 6B 27 B0 71 7D H.6j....y..k'.q.
01C0: CF 17 A6 B9 E6 71 D6 85 6F 9F EB 66 73 4B CB A2 .....q..o..fsK..
01D0: C1 A2 7F F3 38 A1 A7 8B 92 F0 82 1F 4A A4 E9 F5 ....8.......J...
01E0: 8C 64 0B 7E 86 61 C0 D5 74 60 7D D3 B0 11 3F 77 .d...a..t`....?w
01F0: B9 D8 EC 7D 17 22 D8 7C 77 42 CB C1 24 CC 26 5E ....."..wB..$.&^
0200: CF 8A 20 7D 77 44 D4 29 DF 59 D1 17 CE D2 51 59 .. .wD.).Y....QY
0210: BC 53 35 B0 EB CE 51 CE 79 F7 D2 53 CE FD 2F 9A .S5...Q.y..S../.
0220: FD 1A A8 E3 3C 58 AF EB ....<X..
*** CertificateRequest
Cert Types: DSS, RSA,
Cert Authorities:
<OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US>
<[email protected], CN=Thawte Premium Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA>
<[email protected], CN=Thawte Personal Basic CA, OU=Certification Services Division, O=Thawte Consulting, L=Cape Town, ST=Western Cape, C=ZA>
<OU=Secure Server Certification Authority, O="RSA Data Security, Inc.", C=US>
<OU=Class 4 Public Primary Certification Authority, O="VeriSign, Inc.", C=US>
<OU=Class 1 Public Primary Certification Authority, O="VeriSign, Inc.", C=US>
<[email protected], CN=Thawte Personal Premium CA, OU=Certification Services Division, O=Thawte Consulting, L=Cape Town, ST=Western Cape, C=ZA>
<[email protected], CN=Thawte Personal Freemail CA, OU=Certification Services Division, O=Thawte Consulting, L=Cape Town, ST=Western Cape, C=ZA>
<CN=kws, OU=Delaware, O=Delaware, L=BE, ST=BE, C=BE>
<OU=Class 2 Public Primary Certification Authority, O="VeriSign, Inc.", C=US>
<[email protected], CN=Thawte Server CA, OU=Certification Services Division, O=Thawte Consulting cc, L=Cape Town, ST=Western Cape, C=ZA>
[read] MD5 and SHA1 hashes: len = 1645
0000: 0D 00 06 69 02 02 01 06 64 00 61 30 5F 31 0B 30 ...i....d.a0_1.0
0010: 09 06 03 55 04 06 13 02 55 53 31 17 30 15 06 03 ...U....US1.0...
0020: 55 04 0A 13 0E 56 65 72 69 53 69 67 6E 2C 20 49 U....VeriSign, I
0030: 6E 63 2E 31 37 30 35 06 03 55 04 0B 13 2E 43 6C nc.1705..U....Cl
0040: 61 73 73 20 33 20 50 75 62 6C 69 63 20 50 72 69 ass 3 Public Pri
0050: 6D 61 72 79 20 43 65 72 74 69 66 69 63 61 74 69 mary Certificati
0060: 6F 6E 20 41 75 74 68 6F 72 69 74 79 00 D1 30 81 on Authority..0.
0070: CE 31 0B 30 09 06 03 55 04 06 13 02 5A 41 31 15 .1.0...U....ZA1.
0080: 30 13 06 03 55 04 08 13 0C 57 65 73 74 65 72 6E 0...U....Western
0090: 20 43 61 70 65 31 12 30 10 06 03 55 04 07 13 09 Cape1.0...U....
00A0: 43 61 70 65 20 54 6F 77 6E 31 1D 30 1B 06 03 55 Cape Town1.0...U
00B0: 04 0A 13 14 54 68 61 77 74 65 20 43 6F 6E 73 75 ....Thawte Consu
00C0: 6C 74 69 6E 67 20 63 63 31 28 30 26 06 03 55 04 lting cc1(0&..U.
00D0: 0B 13 1F 43 65 72 74 69 66 69 63 61 74 69 6F 6E ...Certification
00E0: 20 53 65 72 76 69 63 65 73 20 44 69 76 69 73 69 Services Divisi
00F0: 6F 6E 31 21 30 1F 06 03 55 04 03 13 18 54 68 61 on1!0...U....Tha
0100: 77 74 65 20 50 72 65 6D 69 75 6D 20 53 65 72 76 wte Premium Serv
0110: 65 72 20 43 41 31 28 30 26 06 09 2A 86 48 86 F7 er CA1(0&..*.H..
0120: 0D 01 09 01 16 19 70 72 65 6D 69 75 6D 2D 73 65 ......premium-se
0130: 72 76 65 72 40 74 68 61 77 74 65 2E 63 6F 6D 00 [email protected].
0140: CE 30 81 CB 31 0B 30 09 06 03 55 04 06 13 02 5A .0..1.0...U....Z
0150: 41 31 15 30 13 06 03 55 04 08 13 0C 57 65 73 74 A1.0...U....West
0160: 65 72 6E 20 43 61 70 65 31 12 30 10 06 03 55 04 ern Cape1.0...U.
0170: 07 13 09 43 61 70 65 20 54 6F 77 6E 31 1A 30 18 ...Cape Town1.0.
0180: 06 03 55 04 0A 13 11 54 68 61 77 74 65 20 43 6F ..U....Thawte Co
0190: 6E 73 75 6C 74 69 6E 67 31 28 30 26 06 03 55 04 nsulting1(0&..U.
01A0: 0B 13 1F 43 65 72 74 69 66 69 63 61 74 69 6F 6E ...Certification
01B0: 20 53 65 72 76 69 63 65 73 20 44 69 76 69 73 69 Services Divisi
01C0: 6F 6E 31 21 30 1F 06 03 55 04 03 13 18 54 68 61 on1!0...U....Tha
01D0: 77 74 65 20 50 65 72 73 6F 6E 61 6C 20 42 61 73 wte Personal Bas
01E0: 69 63 20 43 41 31 28 30 26 06 09 2A 86 48 86 F7 ic CA1(0&..*.H..
01F0: 0D 01 09 01 16 19 70 65 72 73 6F 6E 61 6C 2D 62 ......personal-b
0200: 61 73 69 63 40 74 68 61 77 74 65 2E 63 6F 6D 00 [email protected].
0210: 61 30 5F 31 0B 30 09 06 03 55 04 06 13 02 55 53 a0_1.0...U....US
0220: 31 20 30 1E 06 03 55 04 0A 13 17 52 53 41 20 44 1 0...U....RSA D
0230: 61 74 61 20 53 65 63 75 72 69 74 79 2C 20 49 6E ata Security, In
0240: 63 2E 31 2E 30 2C 06 03 55 04 0B 13 25 53 65 63 c.1.0,..U...%Sec
0250: 75 72 65 20 53 65 72 76 65 72 20 43 65 72 74 69 ure Server Certi
0260: 66 69 63 61 74 69 6F 6E 20 41 75 74 68 6F 72 69 fication Authori
0270: 74 79 00 61 30 5F 31 0B 30 09 06 03 55 04 06 13 ty.a0_1.0...U...
0280: 02 55 53 31 17 30 15 06 03 55 04 0A 13 0E 56 65 .US1.0...U....Ve
0290: 72 69 53 69 67 6E 2C 20 49 6E 63 2E 31 37 30 35 riSign, Inc.1705
02A0: 06 03 55 04 0B 13 2E 43 6C 61 73 73 20 34 20 50 ..U....Class 4 P
02B0: 75 62 6C 69 63 20 50 72 69 6D 61 72 79 20 43 65 ublic Primary Ce
02C0: 72 74 69 66 69 63 61 74 69 6F 6E 20 41 75 74 68 rtification Auth
02D0: 6F 72 69 74 79 00 61 30 5F 31 0B 30 09 06 03 55 ority.a0_1.0...U
02E0: 04 06 13 02 55 53 31 17 30 15 06 03 55 04 0A 13 ....US1.0...U...
02F0: 0E 56 65 72 69 53 69 67 6E 2C 20 49 6E 63 2E 31 .VeriSign, Inc.1
0300: 37 30 35 06 03 55 04 0B 13 2E 43 6C 61 73 73 20 705..U....Class
0310: 31 20 50 75 62 6C 69 63 20 50 72 69 6D 61 72 79 1 Public Primary
0320: 20 43 65 72 74 69 66 69 63 61 74 69 6F 6E 20 41 Certification A
0330: 75 74 68 6F 72 69 74 79 00 D2 30 81 CF 31 0B 30 uthority..0..1.0
0340: 09 06 03 55 04 06 13 02 5A 41 31 15 30 13 06 03 ...U....ZA1.0...
0350: 55 04 08 13 0C 57 65 73 74 65 72 6E 20 43 61 70 U....Western Cap
0360: 65 31 12 30 10 06 03 55 04 07 13 09 43 61 70 65 e1.0...U....Cape
0370: 20 54 6F 77 6E 31 1A 30 18 06 03 55 04 0A 13 11 Town1.0...U....
0380: 54 68 61 77 74 65 20 43 6F 6E 73 75 6C 74 69 6E Thawte Consultin
0390: 67 31 28 30 26 06 03 55 04 0B 13 1F 43 65 72 74 g1(0&..U....Cert
03A0: 69 66 69 63 61 74 69 6F 6E 20 53 65 72 76 69 63 ification Servic
03B0: 65 73 20 44 69 76 69 73 69 6F 6E 31 23 30 21 06 es Division1#0!.
03C0: 03 55 04 03 13 1A 54 68 61 77 74 65 20 50 65 72 .U....Thawte Per
03D0: 73 6F 6E 61 6C 20 50 72 65 6D 69 75 6D 20 43 41 sonal Premium CA
03E0: 31 2A 30 28 06 09 2A 86 48 86 F7 0D 01 09 01 16 1*0(..*.H.......
03F0: 1B 70 65 72 73 6F 6E 61 6C 2D 70 72 65 6D 69 75 .personal-premiu
0400: 6D 40 74 68 61 77 74 65 2E 63 6F 6D 00 D4 30 81 [email protected].
0410: D1 31 0B 30 09 06 03 55 04 06 13 02 5A 41 31 15 .1.0...U....ZA1.
0420: 30 13 06 03 55 04 08 13 0C 57 65 73 74 65 72 6E 0...U....Western
0430: 20 43 61 70 65 31 12 30 10 06 03 55 04 07 13 09 Cape1.0...U....
0440: 43 61 70 65 20 54 6F 77 6E 31 1A 30 18 06 03 55 Cape Town1.0...U
0450: 04 0A 13 11 54 68 61 77 74 65 20 43 6F 6E 73 75 ....Thawte Consu
0460: 6C 74 69 6E 67 31 28 30 26 06 03 55 04 0B 13 1F lting1(0&..U....
0470: 43 65 72 74 69 66 69 63 61 74 69 6F 6E 20 53 65 Certification Se
0480: 72 76 69 63 65 73 20 44 69 76 69 73 69 6F 6E 31 rvices Division1
0490: 24 30 22 06 03 55 04 03 13 1B 54 68 61 77 74 65 $0"..U....Thawte
04A0: 20 50 65 72 73 6F 6E 61 6C 20 46 72 65 65 6D 61 Personal Freema
04B0: 69 6C 20 43 41 31 2B 30 29 06 09 2A 86 48 86 F7 il CA1+0)..*.H..
04C0: 0D 01 09 01 16 1C 70 65 72 73 6F 6E 61 6C 2D 66 ......personal-f
04D0: 72 65 65 6D 61 69 6C 40 74 68 61 77 74 65 2E 63 [email protected]
04E0: 6F 6D 00 5D 30 5B 31 0B 30 09 06 03 55 04 06 13 om.]0[1.0...U...
04F0: 02 42 45 31 0B 30 09 06 03 55 04 08 13 02 42 45 .BE1.0...U....BE
0500: 31 0B 30 09 06 03 55 04 07 13 02 42 45 31 11 30 1.0...U....BE1.0
0510: 0F 06 03 55 04 0A 13 08 44 65 6C 61 77 61 72 65 ...U....Delaware
0520: 31 11 30 0F 06 03 55 04 0B 13 08 44 65 6C 61 77 1.0...U....Delaw
0530: 61 72 65 31 0C 30 0A 06 03 55 04 03 13 03 6B 77 are1.0...U....kw
0540: 73 00 61 30 5F 31 0B 30 09 06 03 55 04 06 13 02 s.a0_1.0...U....
0550: 55 53 31 17 30 15 06 03 55 04 0A 13 0E 56 65 72 US1.0...U....Ver
0560: 69 53 69 67 6E 2C 20 49 6E 63 2E 31 37 30 35 06 iSign, Inc.1705.
0570: 03 55 04 0B 13 2E 43 6C 61 73 73 20 32 20 50 75 .U....Class 2 Pu
0580: 62 6C 69 63 20 50 72 69 6D 61 72 79 20 43 65 72 blic Primary Cer
0590: 74 69 66 69 63 61 74 69 6F 6E 20 41 75 74 68 6F tification Autho
05A0: 72 69 74 79 00 C7 30 81 C4 31 0B 30 09 06 03 55 rity..0..1.0...U
05B0: 04 06 13 02 5A 41 31 15 30 13 06 03 55 04 08 13 ....ZA1.0...U...
05C0: 0C 57 65 73 74 65 72 6E 20 43 61 70 65 31 12 30 .Western Cape1.0
05D0: 10 06 03 55 04 07 13 09 43 61 70 65 20 54 6F 77 ...U....Cape Tow
05E0: 6E 31 1D 30 1B 06 03 55 04 0A 13 14 54 68 61 77 n1.0...U....Thaw
05F0: 74 65 20 43 6F 6E 73 75 6C 74 69 6E 67 20 63 63 te Consulting cc
0600: 31 28 30 26 06 03 55 04 0B 13 1F 43 65 72 74 69 1(0&..U....Certi
0610: 66 69 63 61 74 69 6F 6E 20 53 65 72 76 69 63 65 fication Service
0620: 73 20 44 69 76 69 73 69 6F 6E 31 19 30 17 06 03 s Division1.0...
0630: 55 04 03 13 10 54 68 61 77 74 65 20 53 65 72 76 U....Thawte Serv
0640: 65 72 20 43 41 31 26 30 24 06 09 2A 86 48 86 F7 er CA1&0$..*.H..
0650: 0D 01 09 01 16 17 73 65 72 76 65 72 2D 63 65 72 ......server-cer
0660: 74 73 40 74 68 61 77 74 65 2E 63 6F 6D [email protected]
*** ServerHelloDone
[read] MD5 and SHA1 hashes: len = 4
0000: 0E 00 00 00 ....
*** Certificate chain
JsseJCE: Using JSSE internal implementation for cipher RSA/ECB/PKCS1Padding
*** ClientKeyExchange, RSA PreMasterSecret, v3.1
Random Secret: { 3, 1, 183, 52, 32, 171, 15, 252, 104, 26, 122, 4, 33, 152, 207, 169, 53, 3, 54, 92, 207, 235, 108, 124, 43, 137, 189, 40, 155, 244, 16, 195, 171, 111, 45, 24, 118, 251, 161, 5, 255, 221, 102, 77, 136, 92, 253, 146 }
[write] MD5 and SHA1 hashes: len = 141
0000: 0B 00 00 03 00 00 00 10 00 00 82 00 80 E7 73 AF ..............s.
0010: 77 3C B9 37 C3 23 58 BB 44 7E B0 E1 EE D1 6F 37 w<.7.#X.D.....o7
0020: E9 C2 CB CD 5B 36 80 61 76 69 28 FA 66 E5 19 31 ....[6.avi(.f..1
0030: AF C5 CE 1D D0 B1 C0 A3 31 D4 2E 1A DB 1E CC 21 ........1......!
0040: 7F B9 9F 8C 6A B8 4C 43 50 78 95 CF 51 E3 9E 97 ....j.LCPx..Q...
0050: BF 07 DC 25 DE 56 D7 A5 7C D7 7D 5C D4 47 16 5D ...%.V.....\.G.]
0060: 54 FC FE 6C D8 C7 17 AB 18 A0 EE 31 B6 38 10 29 T..l.......1.8.)
0070: C4 D6 75 5B DB 1F B2 2B 20 28 40 C5 96 E4 E3 7A ..u[...+ (@....z
0080: 5C D6 85 C3 03 05 F5 38 FE 34 72 EF 3F \......8.4r.?
main, WRITE: SSL v3.1 Handshake, length = 141
SESSION KEYGEN:
PreMaster Secret:
0000: 03 01 B7 34 20 AB 0F FC 68 1A 7A 04 21 98 CF A9 ...4 ...h.z.!...
0010: 35 03 36 5C CF EB 6C 7C 2B 89 BD 28 9B F4 10 C3 5.6\..l.+..(....
0020: AB 6F 2D 18 76 FB A1 05 FF DD 66 4D 88 5C FD 92 .o-.v.....fM.\..
CONNECTION KEYGEN:
Client Nonce:
0000: 3F 84 09 08 2B 04 F4 67 36 6E 63 80 A2 84 16 02 ?...+..g6nc.....
0010: C5 70 5B 69 04 85 F9 72 8E 7A 2C CB 9C BC 84 64 .p[i...r.z,....d
Server Nonce:
0000: 3F 84 09 08 02 CF ED 36 65 77 74 21 3B 36 38 6F ?......6ewt!;68o
0010: AA 6E 5C 81 B2 43 7C 2E BB 99 F7 1B D8 C5 15 E8 .n\..C..........
Master Secret:
0000: 92 AB 4A D6 D4 F1 35 46 3D F8 20 64 7D 0D 1D 3C ..J...5F=. d...<
0010: 6D 12 61 D7 B6 21 1D F9 9E F2 A3 1E C8 72 16 48 m.a..!.......r.H
0020: 7E EB ED BD 71 66 89 36 8D A4 AA 30 A7 B6 F9 E3 ....qf.6...0....
Client MAC write Secret:
0000: FB B5 C5 28 A0 EF A9 2C 6F 6E 9A 8E 46 21 F8 5D ...(...,on..F!.]
0010: 21 3A F3 5A !:.Z
Server MAC write Secret:
0000: AC B4 8C 0C 19 E9 70 87 86 2C 88 19 74 96 CB 86 ......p..,..t...
0010: E1 57 28 D0 .W(.
Client write key:
0000: 67 8C 40 8A 0E F6 66 02 AA 57 A9 46 3E 4C 2B 0B [email protected]>L+.
Server write key:
0000: 39 79 50 0C 26 2A 0C 06 34 57 9F D0 ED 9E 76 1A 9yP.&*..4W....v.
... no IV for cipher
main, WRITE: SSL v3.1 Change Cipher Spec, length = 1
JsseJCE: Using JSSE internal implementation for cipher RC4
*** Finished, v3.1
verify_data: { 2, 131, 239, 184, 3, 52, 180, 31, 246, 47, 142, 241 }
[write] MD5 and SHA1 hashes: len = 16
0000: 14 00 00 0C 02 83 EF B8 03 34 B4 1F F6 2F 8E F1 .........4.../..
Plaintext before ENCRYPTION: len = 36
0000: 14 00 00 0C 02 83 EF B8 03 34 B4 1F F6 2F 8E F1 .........4.../..
0010: E8 92 3D 1E 0C A5 0A B2 E3 71 7A E9 02 41 91 20 ..=......qz..A.
0020: 30 86 A2 47 0..G
main, WRITE: SSL v3.1 Handshake, length = 36
waiting for close_notify or alert: state 1
Exception while waiting for close java.net.SocketException: Software caused connection abort: JVM_recv in socket input stream read
main, SEND SSL v3.1 ALERT: warning, description = close_notify
Plaintext before ENCRYPTION: len = 22
0000: 01 00 BD 94 A3 63 BB DA 73 4F 7A 85 4B 79 25 76 .....c..sOz.Ky%v
0010: 8B 08 0F FF CE FC ......
main, WRITE: SSL v3.1 Alert, length = 22
java.net.SocketException: Software caused connection abort: JVM_recv in socket input stream read
at java.net.SocketInputStream.socketRead0(Native Method)
at java.net.SocketInputStream.read(SocketInputStream.java:116)
at com.sun.net.ssl.internal.ssl.InputRecord.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.InputRecord.read(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.HandshakeOutStream.flush(DashoA6275)
at com.sun.net.ssl.internal.ssl.Handshaker.sendChangeCipherSpec(DashoA6275)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.g(DashoA6275)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(DashoA6275)
at com.sun.net.ssl.internal.ssl.Handshaker.process_record(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.a(DashoA6275)
at com.sun.net.ssl.internal.ssl.AppOutputStream.write(DashoA6275)
at org.apache.commons.httpclient.HttpConnection$WrappedOutputStream.write(HttpConnection.java:1344)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:69)
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:127)
at org.apache.commons.httpclient.HttpConnection.flushRequestOutputStream(HttpConnection.java:779)
at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:2179)
at org.apache.commons.httpclient.HttpMethodBase.processRequest(HttpMethodBase.java:2534)
at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1047)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:638)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:500)
at kws.testing.out.HTTPClient.main(HTTPClient.java:60)
Exception in thread "main"
Does someone have an idea on how to get client authentication (without password) work?
regards,
Kenneth... no IV for cipher
This line is in my debug and the debug posted in the original message.
Am having the same problem of accessing a page with a Client Side Cert that uses a password. I get debug that has the "no IV for cipher" message. It does not throw
an exception, but gets a 403 from server.
Does anyone know? Will a Client Side Cert with a Symmetric Key work in Java APIs?
I load the .pfx cert into a Java KeyStore and send this to Apache HTTPClient. -
HTTPs without client authentication, error while posting through Altova
Hi Experts
I am doing a SOAP- XI-Proxy synchronous scenario where i have to use HTTPs without client authentication for the first time in my system.
I have made the scenario and WSDL out of it.
When i am trying to test it through Altova, i am getting the following error:
<?xml version="1.0"?>
<!-- see the documentation -->
<SOAP:Envelope xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP:Body>
<SOAP:Fault>
<faultcode>SOAP:Server</faultcode>
<faultstring>Server Error</faultstring>
<detail>
<s:SystemError xmlns:s="http://sap.com/xi/WebService/xi2.0">
<context>XIAdapter</context>
<code>ADAPTER.JAVA_EXCEPTION</code>
<text><![CDATA[
java.security.AccessControlException: https scheme required
at com.sap.aii.af.mp.soap.ejb.XISOAPAdapterBean.process(XISOAPAdapterBean.java:918)
at com.sap.aii.af.mp.module.ModuleLocalLocalObjectImpl0_3.process(ModuleLocalLocalObjectImpl0_3.java:103)
at com.sap.aii.af.mp.ejb.ModuleProcessorBean.process(ModuleProcessorBean.java:296)
at com.sap.aii.af.mp.processor.ModuleProcessorLocalLocalObjectImpl0_0.process(ModuleProcessorLocalLocalObjectImpl0_0.java:103)
at com.sap.aii.af.mp.soap.web.MessageServlet.callModuleProcessor(MessageServlet.java:187)
at com.sap.aii.af.mp.soap.web.MessageServlet.doPost(MessageServlet.java:496)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1060)
at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
]]></text>
</s:SystemError>
</detail>
</SOAP:Fault>
</SOAP:Body>
</SOAP:Envelope>
i saw a few discussion on web but nowhere the solution was provided.
the url is
http://abc.sap.point:1234/XISOAPAdapter/MessageServlet?channel=:system:communicationchannel&version=3.0&Sender.Service=x&Interface=x%5Ex
i changed it to https also but in that case it was not even posting the request.
i have set the sender adapter like this
is there any setting that i am missing.
What is the setting the i need to do in SM59.
Please help me getting through this.
Your help is highly appreciated. Thanks in advance.
NehaHI Neha,
1. Enable the https service in the ICM: you can follow the way to do it like is pointed out in the page 4 of this document (PI 7.1 and PI 7.0 has the same smicm abap transaction) http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/60ff2883-70c5-2c10-f090-a744def2ba66?overridelayout=t…
2. Generate the certificate. Use the STRUST transaction. Chech this document SSL Configuration in SAP ABAP AS and JAVA AS – Step-by-step procedure
Hope this helps.
Regards. -
Problem in Client authentication in JSSE on a web service
Hi,
I am having a Web service running on my Web server (Sunone 6.1). I need to implement Security on it using JSSE. It has to be a MUTUAL authentication.
I have installed all the certificates and CA certs on both Client and server. But when I try to call the web service from a standalone Java test client I am getting error on the third step of handshake process that is CLient authentication.
I am not able to understand whether it is authentication problem or some problem while encrypting and decrypting the data. I am sending and receiving data in xml format
I am pasting here the debug output from client side. ALthough it is long but please any one help me on this.
Or if any one can point out what are the various steps depicting the debug statement
Thanks
<spusinfradev1:hk186763> $ RUNDNSSEC_DEV
Note: TestDNSSec.java uses or overrides a deprecated API.
Note: Recompile with -deprecation for details.
submitRequest: BEGIN
submitRequest: calling HttpSubmitter.postTransaction()
postTransaction: Begin
postTransaction: XML Request
<?xml version="1.0" encoding="UTF-8"?>
<sunir.share.service.drpl.client.DNSReqXmlDocTag>
<sunir.share.service.drpl.client.DNSReq>
<CheckType>isEmbargo</CheckType>
<IPAddr>203.81.162.9</IPAddr>
<LookupType>always</LookupType>
<Strict>true</Strict>
</sunir.share.service.drpl.client.DNSReq>
</sunir.share.service.drpl.client.DNSReqXmlDocTag>
postTransaction: creating connection to target url
keyStore is : /home/users/hk186763/RDNS/DRPL/TestClient/serverkey
keyStore type is : jks
init keystore
init keymanager of type SunX509
trustStore is: /home/users/hk186763/RDNS/DRPL/TestClient/serverkey
trustStore type is : jks
init truststore
adding as trusted cert: [
Version: V1
Subject: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5
Key: com.sun.net.ssl.internal.ssl.JSA_RSAPublicKey@d6c16c
Validity: [From: Sun May 17 17:00:00 PDT 1998,
To: Tue Aug 01 16:59:59 PDT 2028]
Issuer: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
SerialNumber: [ 7dd9fe07 cfa81eb7 107967fb a78934c6 ]
Algorithm: [SHA1withRSA]
Signature:
0000: 51 4D CD BE 5C CB 98 19 9C 15 B2 01 39 78 2E 4D QM..\.......9x.M
0010: 0F 67 70 70 99 C6 10 5A 94 A4 53 4D 54 6D 2B AF .gpp...Z..SMTm+.
0020: 0D 5D 40 8B 64 D3 D7 EE DE 56 61 92 5F A6 C4 1D .]@.d....Va._...
0030: 10 61 36 D3 2C 27 3C E8 29 09 B9 11 64 74 CC B5 .a6.,'<.)...dt..
0040: 73 9F 1C 48 A9 BC 61 01 EE E2 17 A6 0C E3 40 08 s..H..a.......@.
0050: 3B 0E E7 EB 44 73 2A 9A F1 69 92 EF 71 14 C3 39 ;...Ds*..i..q..9
0060: AC 71 A7 91 09 6F E4 71 06 B3 BA 59 57 26 79 00 .q...o.q...YW&y.
0070: F6 F8 0D A2 33 30 28 D4 AA 58 A0 9D 9D 69 91 FD ....30(..X...i..
adding as trusted cert: [
Version: V3
Subject: CN=RDNS, OU=Class C, OU=Corporate SSL Client, O=Sun Microsystems Inc
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5
Key: com.sun.net.ssl.internal.ssl.JSA_RSAPublicKey@99681b
Validity: [From: Tue Jan 03 16:00:00 PST 2006,
To: Thu Jan 04 15:59:59 PST 2007]
Issuer: CN=SSL Client CA, OU=Class 2 OnSite Subscriber CA, OU=VeriSign Trust Network, O=Sun Microsystems Inc
SerialNumber: [ 0e45c61f 24091c18 b354a76c 71ee15f2 ]
Certificate Extensions: 7
[1]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 12 FB 4E 70 BA E0 53 E5 B2 C2 DC D2 74 BE 7F 17 ..Np..S.....t...
0010: 67 68 55 14 ghU.
[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: C9 06 C7 9C F6 0E 1E 36 9E 49 8E 50 AC 06 46 DE .......6.I.P..F.
0010: A1 4D A6 4F .M.O
[3]: ObjectId: 2.5.29.31 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 60 30 5E 30 5C A0 5A A0 58 86 56 68 74 74 70 .`0^0\.Z.X.Vhttp
0010: 3A 2F 2F 6F 6E 73 69 74 65 63 72 6C 2E 76 65 72 ://onsitecrl.ver
0020: 69 73 69 67 6E 2E 63 6F 6D 2F 53 75 6E 4D 69 63 isign.com/SunMic
0030: 72 6F 73 79 73 74 65 6D 73 49 6E 63 43 6F 72 70 rosystemsIncCorp
0040: 6F 72 61 74 65 53 53 4C 43 6C 69 65 6E 74 43 6C orateSSLClientCl
0050: 61 73 73 43 2F 4C 61 74 65 73 74 43 52 4C 2E 63 assC/LatestCRL.c
0060: 72 6C rl
[4]: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
[1.3.6.1.5.5.7.3.2]]
[5]: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
[CertificatePolicyId: [2.16.840.1.113733.1.7.23.2]
[PolicyQualifierInfo: [
qualifierID: 1.3.6.1.5.5.7.2.1
qualifier: 0000: 16 1C 68 74 74 70 73 3A 2F 2F 77 77 77 2E 76 65 ..https://www.ve0010: 72 69 73 69 67 6E 2E 63 6F 6D 2F 72 70 61 risign.com/rpa
[CertificatePolicyId: [2.16.840.1.113536.509.3647]
[PolicyQualifierInfo: [
qualifierID: 1.3.6.1.5.5.7.2.1
qualifier: 0000: 16 1B 68 74 74 70 73 3A 2F 2F 77 77 77 2E 73 75 ..https://www.su0010: 6E 2E 63 6F 6D 2F 70 6B 69 2F 63 70 73 n.com/pki/cps
], PolicyQualifierInfo: [
qualifierID: 1.3.6.1.5.5.7.2.2
qualifier: 0000: 30 2B 16 29 4E 6F 74 20 56 61 6C 69 64 61 74 65 0+.)Not Validate0010: 64 20 46 6F 72 20 53 75 6E 20 42 75 73 69 6E 65 d For Sun Busine
0020: 73 73 20 4F 70 65 72 61 74 69 6F 6E 73 ss Operations
[6]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
DigitalSignature
[7]: ObjectId: 2.5.29.19 Criticality=false
BasicConstraints:[
CA:false
PathLen: undefined
Algorithm: [SHA1withRSA]
Signature:
0000: 72 C1 27 C2 5C 7E D2 8A 39 B8 14 D9 20 8D 6D C6 r.'.\...9... .m.
0010: 7E 34 FC 86 BD 16 30 2E B9 18 05 F9 83 BA FD 43 .4....0........C
0020: 65 E4 48 85 CC 00 C6 19 FC D4 DC E2 ED DC BE F8 e.H.............
0030: 33 65 36 AC AC 32 FD 1E 9C 93 E4 08 FF 1D DD D5 3e6..2..........
0040: AB 81 45 FE AE 5B 0D 90 1E CC 1D 33 CB 56 24 BB ..E..[.....3.V$.
0050: 4D 43 0E 7B B0 EE 04 6B 4F DB 04 3C FB 4E C0 29 MC.....kO..<.N.)
0060: 64 AF 1B E8 9D 22 F0 37 8E 4B A0 19 AC 58 8A A5 d....".7.K...X..
0070: F7 CA 58 B3 D8 7F 36 5C A9 1B A6 7D 13 C7 CF 2E ..X...6\........
0080: 83 4A E0 15 98 1C 0A AD 12 31 7E BC 7B 81 90 B0 .J.......1......
0090: 13 7D 49 D7 FD 17 B0 BE 56 F8 AB 98 33 D9 D3 3E ..I.....V...3..>
00A0: C2 E8 44 7B 29 6D 79 4F A4 88 22 7D 45 3F B4 D8 ..D.)myO..".E?..
00B0: 09 D3 6C 14 13 EC 36 57 FF CE 04 C4 9B 2C 2C CE ..l...6W.....,,.
00C0: 15 0C F3 1A 5E 21 86 A8 E4 BB CA 8B 9B 5E A1 EC ....^!.......^..
00D0: A3 30 2A 36 25 5A BA 91 DF 6E E3 4D 72 BC 41 F8 .0*6%Z...n.Mr.A.
00E0: 25 30 E2 CD 34 7A 08 19 59 19 61 BA 53 FD 1C 2C %0..4z..Y.a.S..,
00F0: 7F EA 38 BA C9 38 0B D3 8D 01 DF 1C 11 CB 3E BB ..8..8........>.
adding as trusted cert: [
Version: V3
Subject: CN=Sun Microsystems Inc SSL CA, OU=Class 3 MPKI Secure Server CA, OU=VeriSign Trust Network, O=Sun Microsystems Inc
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5
Key: com.sun.net.ssl.internal.ssl.JSA_RSAPublicKey@551f60
Validity: [From: Wed Jun 01 17:00:00 PDT 2005,
To: Mon Jun 01 16:59:59 PDT 2015]
Issuer: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
SerialNumber: [ 4fa13003 7f5dfd64 3fb367fb af699e7c ]
Certificate Extensions: 7
[1]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: D7 DD 5E 81 BE CF 5C E3 DC D2 F2 8D ED 04 B8 AC ..^...\.........
0010: 17 F9 01 FA ....
[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
[OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US]
SerialNumber: [ 7dd9fe07 cfa81eb7 107967fb a78934c6 ]
[3]: ObjectId: 2.5.29.31 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 2D 30 2B 30 29 A0 27 A0 25 86 23 68 74 74 70 .-0+0).'.%.#http
0010: 3A 2F 2F 63 72 6C 2E 76 65 72 69 73 69 67 6E 2E ://crl.verisign.
0020: 63 6F 6D 2F 70 63 61 33 2D 67 32 2E 63 72 6C com/pca3-g2.crl
[4]: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
[CN=PrivateLabel3-2048-142]]
[5]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
Key_CertSign
Crl_Sign
[6]: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
[CertificatePolicyId: [2.16.840.1.113733.1.7.23.3]
[PolicyQualifierInfo: [
qualifierID: 1.3.6.1.5.5.7.2.1
qualifier: 0000: 16 1C 68 74 74 70 73 3A 2F 2F 77 77 77 2E 76 65 ..https://www.ve0010: 72 69 73 69 67 6E 2E 63 6F 6D 2F 72 70 61 risign.com/rpa
[CertificatePolicyId: [2.16.840.1.113536.509.3647]
[PolicyQualifierInfo: [
qualifierID: 1.3.6.1.5.5.7.2.1
qualifier: 0000: 16 1B 68 74 74 70 73 3A 2F 2F 77 77 77 2E 73 75 ..https://www.su0010: 6E 2E 63 6F 6D 2F 70 6B 69 2F 63 70 73 n.com/pki/cps
[7]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
CA:true
PathLen:1
Algorithm: [SHA1withRSA]
Signature:
0000: B7 5A 35 83 75 74 8B E1 62 92 86 30 A2 4E 5B 21 .Z5.ut..b..0.N[!
0010: FD 3D 2B 91 A1 AC 98 5E 5F 6A D2 51 BE 27 68 67 .=+....^_j.Q.'hg
0020: 22 C3 FB 69 61 F2 53 00 45 0E 1E E4 A3 DC 27 82 "..ia.S.E.....'.
0030: 5F A8 ED 07 F7 06 73 A1 68 0F 0C E8 4A 66 F4 93 _.....s.h...Jf..
0040: E5 25 50 82 5B DD 2D 9A 2E 55 4E F5 74 3B 90 3B .%P.[.-..UN.t;.;
0050: 40 CA 56 80 87 41 77 17 A3 50 2F 0B 31 15 CC 22 @.V..Aw..P/.1.."
0060: A9 F8 13 DF 4B 77 DB 80 28 80 A9 E0 EF A0 40 0D ....Kw..(.....@.
0070: D7 CF 64 72 8B BC CF 19 9B D9 81 A1 D8 E3 7D 40 ..dr...........@
init context
trigger seeding of SecureRandom
done seeding SecureRandom
postTransaction: creating output stream on connection
%% No cached client session
*** ClientHello, v3.1
RandomCookie: GMT: 1121389894 bytes = { 177, 208, 214, 162, 50, 118, 129, 69, 14, 124, 134, 197, 180, 112, 220, 185, 218, 97, 213, 180, 222, 100, 98, 105, 221, 111, 135, 84 }
Session ID: {}
Cipher Suites: { 0, 5, 0, 4, 0, 9, 0, 10, 0, 18, 0, 19, 0, 3, 0, 17 }
Compression Methods: { 0 }
[write] MD5 and SHA1 hashes: len = 59
0000: 01 00 00 37 03 01 43 D7 0D 46 B1 D0 D6 A2 32 76 ...7..C..F....2v
0010: 81 45 0E 7C 86 C5 B4 70 DC B9 DA 61 D5 B4 DE 64 .E.....p...a...d
0020: 62 69 DD 6F 87 54 00 00 10 00 05 00 04 00 09 00 bi.o.T..........
0030: 0A 00 12 00 13 00 03 00 11 01 00 ...........
main, WRITE: SSL v3.1 Handshake, length = 59
[write] MD5 and SHA1 hashes: len = 77
0000: 01 03 01 00 24 00 00 00 20 00 00 05 00 00 04 01 ....$... .......
0010: 00 80 00 00 09 06 00 40 00 00 0A 07 00 C0 00 00 .......@........
0020: 12 00 00 13 00 00 03 02 00 80 00 00 11 43 D7 0D .............C..
0030: 46 B1 D0 D6 A2 32 76 81 45 0E 7C 86 C5 B4 70 DC F....2v.E.....p.
0040: B9 DA 61 D5 B4 DE 64 62 69 DD 6F 87 54 ..a...dbi.o.T
main, WRITE: SSL v2, contentType = 22, translated length = 16310
main, READ: SSL v3.1 Handshake, length = 4439
*** ServerHello, v3.1
RandomCookie: GMT: 5338 bytes = { 145, 99, 82, 205, 255, 74, 235, 252, 50, 27, 190, 156, 21, 12, 30, 236, 206, 196, 74, 65, 93, 217, 213, 118, 179, 227, 8, 118 }
Session ID: {10, 116, 131, 159, 53, 168, 226, 227, 34, 25, 222, 197, 123, 128, 250, 118, 2, 72, 46, 147, 155, 118, 230, 164, 82, 24, 206, 76, 155, 96, 72, 120}
Cipher Suite: { 0, 5 }
Compression Method: 0
%% Created: [Session-1, SSL_RSA_WITH_RC4_128_SHA]
** SSL_RSA_WITH_RC4_128_SHA
[read] MD5 and SHA1 hashes: len = 74
0000: 02 00 00 46 03 01 00 00 15 DA 91 63 52 CD FF 4A ...F.......cR..J
0010: EB FC 32 1B BE 9C 15 0C 1E EC CE C4 4A 41 5D D9 ..2.........JA].
0020: D5 76 B3 E3 08 76 20 0A 74 83 9F 35 A8 E2 E3 22 .v...v .t..5..."
0030: 19 DE C5 7B 80 FA 76 02 48 2E 93 9B 76 E6 A4 52 ......v.H...v..R
0040: 18 CE 4C 9B 60 48 78 00 05 00 ..L.`Hx...
*** Certificate chain
chain [0] = [
Version: V3
Subject: CN=rdns-alpha.sun.com, OU=Class C, O=Sun Microsystems Inc, L=Broomfield, ST=Colorado, C=US
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5
Key: com.sun.net.ssl.internal.ssl.JSA_RSAPublicKey@a2d64
Validity: [From: Sun Nov 20 16:00:00 PST 2005,
To: Tue Nov 21 15:59:59 PST 2006]
Issuer: CN=Sun Microsystems Inc SSL CA, OU=Class 3 MPKI Secure Server CA, OU=VeriSign Trust Network, O=Sun Microsystems Inc
SerialNumber: [ 6702ab4c 00bfe850 3a0eb9a9 1ca380eb ]
Certificate Extensions: 8
[1]: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 28 30 26 30 24 06 08 2B 06 01 05 05 07 30 01 .(0&0$..+.....0.
0010: 86 18 68 74 74 70 3A 2F 2F 6F 63 73 70 2E 76 65 ..http://ocsp.ve
0020: 72 69 73 69 67 6E 2E 63 6F 6D risign.com
[2]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 45 7D F2 17 01 02 2F 0D C6 89 E8 A7 63 A0 D6 B6 E...../.....c...
0010: 13 3F 8C A8 .?..
[3]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: D7 DD 5E 81 BE CF 5C E3 DC D2 F2 8D ED 04 B8 AC ..^...\.........
0010: 17 F9 01 FA ....
[4]: ObjectId: 2.5.29.31 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 72 30 70 30 6E A0 6C A0 6A 86 68 68 74 74 70 .r0p0n.l.j.hhttp
0010: 3A 2F 2F 53 56 52 43 33 53 65 63 75 72 65 53 75 ://SVRC3SecureSu
0020: 6E 4D 69 63 72 6F 73 79 73 74 65 6D 73 2D 4D 50 nMicrosystems-MP
0030: 4B 49 2D 63 72 6C 2E 76 65 72 69 73 69 67 6E 2E KI-crl.verisign.
0040: 63 6F 6D 2F 53 75 6E 4D 69 63 72 6F 73 79 73 74 com/SunMicrosyst
0050: 65 6D 73 49 6E 63 43 6C 61 73 73 43 55 6E 69 66 emsIncClassCUnif
0060: 69 65 64 2F 4C 61 74 65 73 74 43 52 4C 53 72 76 ied/LatestCRLSrv
0070: 2E 63 72 6C .crl
[5]: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
[CertificatePolicyId: [2.16.840.1.113733.1.7.23.3]
[PolicyQualifierInfo: [
qualifierID: 1.3.6.1.5.5.7.2.1
qualifier: 0000: 16 1C 68 74 74 70 73 3A 2F 2F 77 77 77 2E 76 65 ..https://www.ve0010: 72 69 73 69 67 6E 2E 63 6F 6D 2F 72 70 61 risign.com/rpa
[CertificatePolicyId: [2.16.840.1.113536.509.3647]
[PolicyQualifierInfo: [
qualifierID: 1.3.6.1.5.5.7.2.2
qualifier: 0000: 30 2B 1A 29 4E 6F 74 20 56 61 6C 69 64 61 74 65 0+.)Not Validate0010: 64 20 46 6F 72 20 53 75 6E 20 42 75 73 69 6E 65 d For Sun Busine
0020: 73 73 20 4F 70 65 72 61 74 69 6F 6E 73 ss Operations
], PolicyQualifierInfo: [
qualifierID: 1.3.6.1.5.5.7.2.1
qualifier: 0000: 16 1B 68 74 74 70 73 3A 2F 2F 77 77 77 2E 73 75 ..https://www.su0010: 6E 2E 63 6F 6D 2F 70 6B 69 2F 63 70 73 n.com/pki/cps
[6]: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
[1.3.6.1.5.5.7.3.1, 1.3.6.1.5.5.7.3.2]]
[7]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
DigitalSignature
Key_Encipherment
[8]: ObjectId: 2.5.29.19 Criticality=false
BasicConstraints:[
CA:false
PathLen: undefined
Algorithm: [SHA1withRSA]
Signature:
0000: 08 EA E4 7E FB 1B A6 4D DC EA BE 44 44 0E 9E 97 .......M...DD...
0010: BC B3 4A 85 39 4A AF B0 7F AB CB C4 9F C4 11 90 ..J.9J..........
0020: C6 0F FC C5 D0 41 4E 87 C8 93 1A 27 8F F4 7A 26 .....AN....'..z&
0030: A8 26 DE 52 D9 0A CC 78 5E 55 21 04 D9 C6 B2 22 .&.R...x^U!...."
0040: C5 18 EA 19 EF C0 EA F3 C0 95 B0 6C DB 16 E7 B8 ...........l....
0050: 9D 22 06 50 E1 70 19 71 C0 8E 9D 0C AD 6E 11 AE .".P.p.q.....n..
0060: C6 DE 7E 54 9F 39 48 9C E8 3E F3 1B 1D 1B 00 5B ...T.9H..>.....[
0070: F5 DB 63 CE 16 07 3A 70 B0 FB AF 8D 82 9B DD 58 ..c...:p.......X
0080: 57 AC 33 9C 2D D4 CE 76 51 7E 4F 9E EA 59 90 B0 W.3.-..vQ.O..Y..
0090: 91 A7 A8 E0 F9 F6 E0 4B 1E 24 51 92 E0 31 43 E4 .......K.$Q..1C.
00A0: 70 6E 7D E9 13 93 84 E9 1C 88 CC 85 72 55 91 13 pn..........rU..
00B0: 33 4C 91 45 13 32 D0 F1 72 82 E1 A9 F3 6E 7F FD 3L.E.2..r....n..
00C0: 73 38 D8 8D 04 70 DB 28 E0 5D A1 17 20 06 B8 83 s8...p.(.].. ...
00D0: FE 80 37 55 32 77 12 BF DC FC 2D E5 6B EE C8 23 ..7U2w....-.k..#
00E0: 89 1F D4 53 51 EE 36 ED 68 26 0D B7 A3 3C E2 9C ...SQ.6.h&...<..
00F0: E5 B3 61 96 BD 6B 37 A0 7E 15 76 29 EB 97 5B E8 ..a..k7...v)..[.
chain [1] = [
Version: V3
Subject: CN=Sun Microsystems Inc SSL CA, OU=Class 3 MPKI Secure Server CA, OU=VeriSign Trust Network, O=Sun Microsystems Inc
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5
Key: com.sun.net.ssl.internal.ssl.JSA_RSAPublicKey@89cf1e
Validity: [From: Wed Jun 01 17:00:00 PDT 2005,
To: Mon Jun 01 16:59:59 PDT 2015]
Issuer: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
SerialNumber: [ 4fa13003 7f5dfd64 3fb367fb af699e7c ]
Certificate Extensions: 7
[1]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: D7 DD 5E 81 BE CF 5C E3 DC D2 F2 8D ED 04 B8 AC ..^...\.........
0010: 17 F9 01 FA ....
[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
[OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US]
SerialNumber: [ 7dd9fe07 cfa81eb7 107967fb a78934c6 ]
[3]: ObjectId: 2.5.29.31 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 2D 30 2B 30 29 A0 27 A0 25 86 23 68 74 74 70 .-0+0).'.%.#http
0010: 3A 2F 2F 63 72 6C 2E 76 65 72 69 73 69 67 6E 2E ://crl.verisign.
0020: 63 6F 6D 2F 70 63 61 33 2D 67 32 2E 63 72 6C com/pca3-g2.crl
[4]: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
[CN=PrivateLabel3-2048-142]]
[5]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
Key_CertSign
Crl_Sign
[6]: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
[CertificatePolicyId: [2.16.840.1.113733.1.7.23.3]
[PolicyQualifierInfo: [
qualifierID: 1.3.6.1.5.5.7.2.1
qualifier: 0000: 16 1C 68 74 74 70 73 3A 2F 2F 77 77 77 2E 76 65 ..https://www.ve0010: 72 69 73 69 67 6E 2E 63 6F 6D 2F 72 70 61 risign.com/rpa
[CertificatePolicyId: [2.16.840.1.113536.509.3647]
[PolicyQualifierInfo: [
qualifierID: 1.3.6.1.5.5.7.2.1
qualifier: 0000: 16 1B 68 74 74 70 73 3A 2F 2F 77 77 77 2E 73 75 ..https://www.su0010: 6E 2E 63 6F 6D 2F 70 6B 69 2F 63 70 73 n.com/pki/cps
[7]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
CA:true
PathLen:1
Algorithm: [SHA1withRSA]
Signature:
0000: B7 5A 35 83 75 74 8B E1 62 92 86 30 A2 4E 5B 21 .Z5.ut..b..0.N[!
0010: FD 3D 2B 91 A1 AC 98 5E 5F 6A D2 51 BE 27 68 67 .=+....^_j.Q.'hg
0020: 22 C3 FB 69 61 F2 53 00 45 0E 1E E4 A3 DC 27 82 "..ia.S.E.....'.
0030: 5F A8 ED 07 F7 06 73 A1 68 0F 0C E8 4A 66 F4 93 _.....s.h...Jf..
0040: E5 25 50 82 5B DD 2D 9A 2E 55 4E F5 74 3B 90 3B .%P.[.-..UN.t;.;
0050: 40 CA 56 80 87 41 77 17 A3 50 2F 0B 31 15 CC 22 @.V..Aw..P/.1.."
0060: A9 F8 13 DF 4B 77 DB 80 28 80 A9 E0 EF A0 40 0D ....Kw..(.....@.
0070: D7 CF 64 72 8B BC CF 19 9B D9 81 A1 D8 E3 7D 40 ..dr...........@
chain [2] = [
Version: V1
Subject: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5
Key: com.sun.net.ssl.internal.ssl.JSA_RSAPublicKey@7ce4e7
Validity: [From: Sun May 17 17:00:00 PDT 1998,
To: Tue Aug 01 16:59:59 PDT 2028]
Issuer: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
SerialNumber: [ 7dd9fe07 cfa81eb7 107967fb a78934c6 ]
Algorithm: [SHA1withRSA]
Signature:
0000: 51 4D CD BE 5C CB 98 19 9C 15 B2 01 39 78 2E 4D QM..\.......9x.M
0010: 0F 67 70 70 99 C6 10 5A 94 A4 53 4D 54 6D 2B AF .gpp...Z..SMTm+.
0020: 0D 5D 40 8B 64 D3 D7 EE DE 56 61 92 5F A6 C4 1D .]@.d....Va._...
0030: 10 61 36 D3 2C 27 3C E8 29 09 B9 11 64 74 CC B5 .a6.,'<.)...dt..
0040: 73 9F 1C 48 A9 BC 61 01 EE E2 17 A6 0C E3 40 08 s..H..a.......@.
0050: 3B 0E E7 EB 44 73 2A 9A F1 69 92 EF 71 14 C3 39 ;...Ds*..i..q..9
0060: AC 71 A7 91 09 6F E4 71 06 B3 BA 59 57 26 79 00 .q...o.q...YW&y.
0070: F6 F8 0D A2 33 30 28 D4 AA 58 A0 9D 9D 69 91 FD ....30(..X...i..
stop on trusted cert: [
Version: V3
Subject: CN=Sun Microsystems Inc SSL CA, OU=Class 3 MPKI Secure Server CA, OU=VeriSign Trust Network, O=Sun Microsystems Inc
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5
Key: com.sun.net.ssl.internal.ssl.JSA_RSAPublicKey@89cf1e
Validity: [From: Wed Jun 01 17:00:00 PDT 2005,
To: Mon Jun 01 16:59:59 PDT 2015]
Issuer: OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US
SerialNumber: [ 4fa13003 7f5dfd64 3fb367fb af699e7c ]
Certificate Extensions: 7
[1]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: D7 DD 5E 81 BE CF 5C E3 DC D2 F2 8D ED 04 B8 AC ..^...\.........
0010: 17 F9 01 FA ....
[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
[OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US]
SerialNumber: [ 7dd9fe07 cfa81eb7 107967fb a78934c6 ]
[3]: ObjectId: 2.5.29.31 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 2D 30 2B 30 29 A0 27 A0 25 86 23 68 74 74 70 .-0+0).'.%.#http
0010: 3A 2F 2F 63 72 6C 2E 76 65 72 69 73 69 67 6E 2E ://crl.verisign.
0020: 63 6F 6D 2F 70 63 61 33 2D 67 32 2E 63 72 6C com/pca3-g2.crl
[4]: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
[CN=PrivateLabel3-2048-142]]
[5]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
Key_CertSign
Crl_Sign
[6]: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
[CertificatePolicyId: [2.16.840.1.113733.1.7.23.3]
[PolicyQualifierInfo: [
qualifierID: 1.3.6.1.5.5.7.2.1
qualifier: 0000: 16 1C 68 74 74 70 73 3A 2F 2F 77 77 77 2E 76 65 ..https://www.ve0010: 72 69 73 69 67 6E 2E 63 6F 6D 2F 72 70 61 risign.com/rpa
[CertificatePolicyId: [2.16.840.1.113536.509.3647]
[PolicyQualifierInfo: [
qualifierID: 1.3.6.1.5.5.7.2.1
qualifier: 0000: 16 1B 68 74 74 70 73 3A 2F 2F 77 77 77 2E 73 75 ..https://www.su0010: 6E 2E 63 6F 6D 2F 70 6B 69 2F 63 70 73 n.com/pki/cps
[7]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
CA:true
PathLen:1
Algorithm: [SHA1withRSA]
Signature:
0000: B7 5A 35 83 75 74 8B E1 62 92 86 30 A2 4E 5B 21 .Z5.ut..b..0.N[!
0010: FD 3D 2B 91 A1 AC 98 5E 5F 6A D2 51 BE 27 68 67 .=+....^_j.Q.'hg
0020: 22 C3 FB 69 61 F2 53 00 45 0E 1E E4 A3 DC 27 82 "..ia.S.E.....'.
0030: 5F A8 ED 07 F7 06 73 A1 68 0F 0C E8 4A 66 F4 93 _.....s.h...Jf..
0040: E5 25 50 82 5B DD 2D 9A 2E 55 4E F5 74 3B 90 3B .%P.[.-..UN.t;.;
0050: 40 CA 56 80 87 41 77 17 A3 50 2F 0B 31 15 CC 22 @.V..Aw..P/.1.."
0060: A9 F8 13 DF 4B 77 DB 80 28 80 A9 E0 EF A0 40 0D ....Kw..(.....@.
0070: D7 CF 64 72 8B BC CF 19 9B D9 81 A1 D8 E3 7D 40 ..dr...........@
[read] MD5 and SHA1 hashes: len = 3479
0000: 0B 00 0D 93 00 0D 90 00 05 0A 30 82 05 06 30 82 ..........0...0.
0010: 03 EE A0 03 02 01 02 02 10 67 02 AB 4C 00 BF E8 .........g..L...
0020: 50 3A 0E B9 A9 1C A3 80 EB 30 0D 06 09 2A 86 48 P:.......0...*.H
0030: 86 F7 0D 01 01 05 05 00 30 81 8E 31 1D 30 1B 06 ........0..1.0..
0040: 03 55 04 0A 13 14 53 75 6E 20 4D 69 63 72 6F 73 .U....Sun Micros
0050: 79 73 74 65 6D 73 20 49 6E 63 31 1F 30 1D 06 03 ystems Inc1.0...
0060: 55 04 0B 13 16 56 65 72 69 53 69 67 6E 20 54 72 U....VeriSign Tr
0070: 75 73 74 20 4E 65 74 77 6F 72 6B 31 26 30 24 06 ust Network1&0$.
0080: 03 55 04 0B 13 1D 43 6C 61 73 73 20 33 20 4D 50 .U....Class 3 MP
0090: 4B 49 20 53 65 63 75 72 65 20 53 65 72 76 65 72 KI Secure Server
00A0: 20 43 41 31 24 30 22 06 03 55 04 03 13 1B 53 75 CA1$0"..U....Su
00B0: 6E 20 4D 69 63 72 6F 73 79 73 74 65 6D 73 20 49 n Microsystems I
00C0: 6E 63 20 53 53 4C 20 43 41 30 1E 17 0D 30 35 31 nc SSL CA0...051
00D0: 31 32 31 30 30 30 30 30 30 5A 17 0D 30 36 31 31 121000000Z..0611
00E0: 32 31 32 33 35 39 35 39 5A 30 81 83 31 0B 30 09 21235959Z0..1.0.
00F0: 06 03 55 04 06 13 02 55 53 31 11 30 0F 06 03 55 ..U....US1.0...U
0100: 04 08 13 08 43 6F 6C 6F 72 61 64 6F 31 13 30 11 ....Colorado1.0.
0110: 06 03 55 04 07 14 0A 42 72 6F 6F 6D 66 69 65 6C ..U....Broomfiel
0120: 64 31 1D 30 1B 06 03 55 04 0A 14 14 53 75 6E 20 d1.0...U....Sun
0130: 4D 69 63 72 6F 73 79 73 74 65 6D 73 20 49 6E 63 Microsystems Inc
0140: 31 10 30 0E 06 03 55 04 0B 14 07 43 6C 61 73 73 1.0...U....Class
0150: 20 43 31 1B 30 19 06 03 55 04 03 14 12 72 64 6E C1.0...U....rdn
0160: 73 2D 61 6C 70 68 61 2E 73 75 6E 2E 63 6F 6D 30 s-alpha.sun.com0
0170: 81 9F 30 0D 06 09 2A 86 48 86 F7 0D 01 01 01 05 ..0...*.H.......
0180: 00 03 81 8D 00 30 81 89 02 81 81 00 E3 8A 2F 46 .....0......../F
0190: 49 FD 71 6B 5E F3 72 64 22 25 36 06 D0 B7 AC 28 I.qk^.rd"%6....(
01A0: 28 30 0D 34 66 56 22 63 40 F9 8C 1B 9A 54 1C 5B (0.4fV"[email protected].[
01B0: 76 FF 1A D7 18 D3 5A 39 A5 C6 67 8C B0 B0 99 C6 v.....Z9..g.....
01C0: 32 6C 18 FF E3 61 EF 31 DE D6 0C 76 BE 6D CA C4 2l...a.1...v.m..
01D0: 2B A7 84 A7 47 E3 E2 2F 5E 71 02 8E 03 89 B7 66 +...G../^q.....f
01E0: 9C 53 5B C5 81 81 41 E8 82 2F B4 DA 9E 4D 41 C7 .S[...A../...MA.
01F0: E8 05 43 EC BA F6 1C 26 F2 CF 07 9A 5C A2 D2 B9 ..C....&....\...
0200: AB 3C 91 6A 90 DE 0D 58 B8 0B 57 AB 02 03 01 00 .<.j...X..W.....
0210: 01 A3 82 01 EB 30 82 01 E7 30 09 06 03 55 1D 13 .....0...0...U..
0220: 04 02 30 00 30 1D 06 03 55 1D 0E 04 16 04 14 45 ..0.0...U......E
0230: 7D F2 17 01 02 2F 0D C6 89 E8 A7 63 A0 D6 B6 13 ...../.....c....
0240: 3F 8C A8 30 1F 06 03 55 1D 23 04 18 30 16 80 14 ?..0...U.#..0...
0250: D7 DD 5E 81 BE CF 5C E3 DC D2 F2 8D ED 04 B8 AC ..^...\.........
0260: 17 F9 01 FA 30 0E 06 03 55 1D 0F 01 01 FF 04 04 ....0...U.......
0270: 03 02 05 A0 30 1D 06 03 55 1D 25 04 16 30 14 06 ....0...U.%..0..
0280: 08 2B 06 01 05 05 07 03 01 06 08 2B 06 01 05 05 .+.........+....
0290: 07 03 02 30 81 B9 06 03 55 1D 20 04 81 B1 30 81 ...0....U. ...0.
02A0: AE 30 39 06 0B 60 86 48 01 86 F8 45 01 07 17 03 .09..`.H...E....
02B0: 30 2A 30 28 06 08 2B 06 01 05 05 07 02 01 16 1C 0*0(..+.........
02C0: 68 74 74 70 73 3A 2F 2F 77 77 77 2E 76 65 72 69 https://www.veri
02D0: 73 69 67 6E 2E 63 6F 6D 2F 72 70 61 30 71 06 0B sign.com/rpa0q..
02E0: 60 86 48 01 86 F7 00 83 7D 9C 3F 30 62 30 27 06 `.H.......?0b0'.
02F0: 08 2B 06 01 05 05 07 02 01 16 1B 68 74 74 70 73 .+.........https
0300: 3A 2F 2F 77 77 77 2E 73 75 6E 2E 63 6F 6D 2F 70 ://www.sun.com/p
0310: 6B 69 2F 63 70 73 30 37 06 08 2B 06 01 05 05 07 ki/cps07..+.....
0320: 02 02 30 2B 1A 29 4E 6F 74 20 56 61 6C 69 64 61 ..0+.)Not Valida
0330: 74 65 64 20 46 6F 72 20 53 75 6E 20 42 75 73 69 ted For Sun Busi
0340: 6E 65 73 73 20 4F 70 65 72 61 74 69 6F 6E 73 30 ness Operations0
0350: 79 06 03 55 1D 1F 04 72 30 70 30 6E A0 6C A0 6A y..U...r0p0n.l.j
0360: 86 68 68 74 74 70 3A 2F 2F 53 56 52 43 33 53 65 .hhttp://SVRC3Se
0370: 63 75 72 65 53 75 6E 4D 69 63 72 6F 73 79 73 74 cureSunMicrosyst
0380: 65 6D 73 2D 4D 50 4B 49 2D 63 72 6C 2E 76 65 72 ems-MPKI-crl.ver
0390: 69 73 69 67 6E 2E 63 6F 6D 2F 53 75 6E 4D 69 63 isign.com/SunMic
03A0: 72 6F 73 79 73 74 65 6D 73 49 6E 63 43 6C 61 73 rosystemsIncClas
03B0: 73 43 55 6E 69 66 69 65 64 2F 4C 61 74 65 73 74 sCUnified/Latest
03C0: 43 52 4C 53 72 76 2E 63 72 6C 30 34 06 08 2B 06 CRLSrv.crl04..+.
03D0: 01 05 05 07 01 01 04 28 30 26 30 24 06 08 2B 06 .......(0&0$..+.
03E0: 01 05 05 07 30 01 86 18 68 74 74 70 3A 2F 2F 6F ....0...http://o
03F0: 63 73 70 2E 76 65 72 69 73 69 67 6E 2E 63 6F 6D csp.verisign.com
0400: 30 0D 06 09 2A 86 48 86 F7 0D 01 01 05 05 00 03 0...*.H.........
0410: 82 01 01 00 08 EA E4 7E FB 1B A6 4D DC EA BE 44 ...........M...D
0420: 44 0E 9E 97 BC B3 4A 85 39 4A AF B0 7F AB CB C4 D.....J.9J......
0430: 9F C4 11 90 C6 0F FC C5 D0 41 4E 87 C8 93 1A 27 .........AN....'
0440: 8F F4 7A 26 A8 26 DE 52 D9 0A CC 78 5E 55 21 04 ..z&.&.R...x^U!.
0450: D9 C6 B2 22 C5 18 EA 19 EF C0 EA F3 C0 95 B0 6C ..."...........l
0460: DB 16 E7 B8 9D 22 06 50 E1 70 19 71 C0 8E 9D 0C .....".P.p.q....
0470: AD 6E 11 AE C6 DE 7E 54 9F 39 48 9C E8 3E F3 1B .n.....T.9H..>..
0480: 1D 1B 00 5B F5 DB 63 CE 16 07 3A 70 B0 FB AF 8D ...[..c...:p....
0490: 82 9B DD 58 57 AC 33 9C 2D D4 CE 76 51 7E 4F 9E ...XW.3.-..vQ.O.
04A0: EA 59 90 B0 91 A7 A8 E0 F9 F6 E0 4B 1E 24 51 92 .Y.........K.$Q.
04B0: E0 31 43 E4 70 6E 7D E9 13 93 84 E9 1C 88 CC 85 .1C.pn..........
04C0: 72 55 91 13 33 4C 91 45 13 32 D0 F1 72 82 E1 A9 rU..3L.E.2..r...
04D0: F3 6E 7F FD 73 38 D8 8D 04 70 DB 28 E0 5D A1 17 .n..s8...p.(.]..
04E0: 20 06 B8 83 FE 80 37 55 32 77 12 BF DC FC 2D E5 .....7U2w....-.
04F0: 6B EE C8 23 89 1F D4 53I am having the same problem , did you ever found the solution for this. I am getting an error " .... no IV for cipher". I am trying to do the Client Authentication to IIS from Java client.
Any help is greatly appreciated.
Thanks -
when i connect to wcf service , i am getting the client authentication error.
It happens only when i connect to wcf service from a client machine (virtual machine) that is logged in with local user account.
Wcf service is hosted as windows service in my case.
Client application is a windows application that connects using below security mode.
BasicHttpBinding httpbind = new BasicHttpBinding();
httpbind.Security.Mode = BasicHttpSecurityMode.TransportCredentialOnly;
httpbind.Security.Transport.ClientCredentialType = HttpClientCredentialType.Ntlm;
httpFactory.Credentials.Windows.AllowedImpersonationLevel
= System.Security.Principal.TokenImpersonationLevel.Impersonation;
Please help me with a solution.
As i read more through below link , i doubt if the client is not in the same domain, it might not work ? is it rite.
http://blogs.msdn.com/b/chiranth/archive/2013/09/21/ntlm-want-to-know-how-it-works.aspx
Regards Battechhttps://msdn.microsoft.com/en-us/library/windows/desktop/aa378749%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396
Well, you need to figure out what the authentication is supposed to be bettwen the WCF client and WCF service, because Windows Authentication is being rejected. -
Enabling HTTPS with Client Authentication for Sender SOAP Adapter on PI7.1
Hello All,
We are currently building up a HTTPS message exchange with an external client.
Our PI 7.1 recieved over HTTPS messages on an already configured Sender SOAP Adapter.
The HTTPS (SSL) connectivity works fine and was completely configured on the ABAP Stack at Trust Manager (TC=STRUSTSSO2)
Login to Message Servlet "com.sap.aii.adapter.soap.web.MessageServlet is required and works fine with user ID and password.
Now we have to configure the addtional Client Authentication.
At SOAP Adapter (Sender Communication Channel) under "HTTP Security Level"you are able to configure "HTTPS with Client Authentication".
But what are the next steps to get this scenario successfully in place?
Many thanks in advance!
JochenHi Colleagues,
following Steps still have to be done:
- Mapping public key to technical user at Java Stack
As preparation you have to activate value "ume.logon.allow.cert" with true under "com.sap.security.core.ume.service" under Config Tool. At NWA under Identity Management at for repecively technical user the public key certificate
- Be sure CA root certivicate at Database under STRUSTSSO2
- Import intermediate Certificate under Certificate List at Trast Manager for the Respecive Server Note
- use Login Module "client_cert" which you have to configure under NWA\Configuration Management\Authentication for Components "sap.com/com.sap.aii.adapter.soap.app*XISOAPAdapter".
Many thanks to all for support!
Regards,
Jochen -
SOAP Adapter (Client Authentication)
Hi Guys,
I am trying to follow this blog
How to use Client Authentication with SOAP Adapter
Am new to this security settings stuffs , i hear that we have to maintainn keys in visual admin and then later authenticate , am confused all around
My Question
1) Who would provide the Key or certificate ?
2) Should we generate and give it to client r is it given by the client??
3) Where to maintain these key , i know in visual admin , but what r the steps and which place ?
$) How to use this to get authenticated with SOAP Sender Adapter ?
Can any one elobrate this in details and provide any more links on this.
thx in advance for help
with regards
SriniHI
1.These will be provided by th Client or they can be downloaded from the website n then the Basis Team or the System Adminstrator will do the needful for us.
2.it depends , if the client wishes to give to us he will give or Basis team will be helping us in this Query.
Digital certificates
A digital certificate is an electronic "credit card" that establishes your credentials when doing business or other transactions on the Web. It is issued by a certification authority (CA). It contains your name, a serial number, expiration dates, a copy of the certificate holder's public key (used for encrypting messages and digital signatures), and the digital signature of the certificate-issuing authority so that a recipient can verify that the certificate is real. Some digital certificates conform to a standard, X.509. Digital certificates can be kept in registries so that authenticating users can look up other users' public keys.
Certificates are issued by Certifying Authority(CA) for people or an organization. This is used to identify unique person or unique organization.
Also look at these links
http://www.abanet.org/scitech/ec/isc/dsg-tutorial.html
http://mindprod.com/jgloss/certificate.html
Please go through these links and i am sure they will help you in some ways.
http://help.sap.com/saphelp_nw04/helpdata/en/a8/882a40ce93185de10000000a1550b0/content.htm
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/db3d8798-0701-0010-9781-8a6e925dd5da
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/092dddc6-0701-0010-268e-fd61f2035fdd
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/b2a56861-0601-0010-bba1-e37eb5d8d4a9
cheers
Edited by: vemuganti naga phalguna on Jul 2, 2008 1:00 PM
Maybe you are looking for
-
What is the right way to move a directory to another drive?
When I move a directory to another location using drag and drop in the Elements 11 Organizer folder tree most, if not all, of the images become unlinked. What is the right way to move a directory and have the image paths updated in the Organizer data
-
Cannot copy and paste from Firefox 3.5 into Dreamweaver
I cannot copy and paste text from a website displayed in Firefox 3.5 into Dreamweaver. I can copy and paste URIs from the address bar fine. I have Dreamweaver CS3 on Mac OS X 10.4.
-
External output video/to television
hello...i have an ibook G4, 1.33Ghz...can i plug into a television to show videos, etc? if so, using which connection/how? thanks
-
Why do I get a message "processing" sometimes when downloading TV shows?
Why do I get a message that says "processing" sometimes when downloading a TV show? When this happens the show never downloads completely.
-
Trying to set up WRT54G as access point
I also put this on the Access Point Forum Situation: Using a cable modem. Installed a WIRED SMC barricade router next to the cable modem (just plug & play). Have 1 PC connected directly to port 2 of the SMC (PC works fine). Ran a cable from port 1 of