802.1X authentication failed after ugrade to ThinOS 2303 (9.4.1141)

Viewing 11 posts - 1 through 11 (of 11 total)
  • Author
    Posts
  • #108166
    vinz
    Participant
    • Total Post: 55
    • Back Stage Pass
    • ★★★★

    Hi,

    Since upgrading to ThinOS 2303 (9.4.1141), users can’t connect to our Wifi network with 802.1x authentication.

    The events log says :

    WLAN : EAP PEAP selected

    WLAN : Disconnected with bssid=xx:xx:xx:xx:xx:xx reason=7

    WLAN : Trying to authenticate with xx:xx:xx:xx:xx:xx (SSID=”my_domain” freq=5180 MHz)

    WLAN : Trying to authenticate with xx:xx:xx:xx:xx:xx (SSID=”my_domain” freq=2437 MHz)

    WLAN : Trying to authenticate with xx:xx:xx:xx:xx:xx (SSID=”my_domain” freq=2412 MHz)

    EAP : authentication failed

    WLAN : Disconnected with bssid=xx:xx:xx:xx:xx:xx reason=1

    Then user is prompted for a user/password/domain

    Sometimes the reason also =23

     

    Our WMS conf (sorry, in French !)

    Wireless_Conf

     

    That conf works perfectly with all my mobile Thin Client (Wyse 5470 and Latitude 3420) but stop working when they are upgraded to ThinOS 2303

    I downgraded a 5470 to ThinOS 2211, and it’s working again !

     

    Anyone with the same issue ? Any idea why this ?

    Thank you

    #108169
    vinz
    Participant
    • Total Post: 55
    • Back Stage Pass
    • ★★★★

    For information, according to the Deauthentication Reason Code Table :

    Reason 1 = “unspecified reason”

    Reason 7 = “Class 3 frame received from nonassociated STA”

    Reason 23 = “IEEE 802.1X authentication failed”

    #108230
    vinz
    Participant
    • Total Post: 55
    • Back Stage Pass
    • ★★★★

    Hello!

    Issue still there with ThinOS 2306, so my mobile devices will have to stay with ThinOS 2211…

    Nobody’s got this authentication problem ?

    #108326
    Diginerd
    Keymaster
    • Total Post: 53
    • Back Stage Pass
    • ★★★★

    Have you opened  support ticket? if so, I can help escalate it.

    #108339
    vinz
    Participant
    • Total Post: 55
    • Back Stage Pass
    • ★★★★

    Hi !

    No I didn’t open a ticket yet. I was waiting for testing the latest ThinOS.

    But I think I will do it soon, as I still can’t make it working again.

    #108343
    vinz
    Participant
    • Total Post: 55
    • Back Stage Pass
    • ★★★★

    OK I didn’t know but I can’t open a ticket regarding software issue, as I don’t have a pro licence, just a standard (on premise).

    I will try on the DELL Community webpage instead…

    #108344
    ConfGen
    Keymaster
    • Total Post: 10696
    • Jedi Master
    • ★★★★★★★

    The device you are using, say 5070 or 3000 TC, does it have a valid warranty? If so, use that service tag.

    #108357
    vinz
    Participant
    • Total Post: 55
    • Back Stage Pass
    • ★★★★

    Hi,

    Finally my problem is solved, thanks to zzomp from the DELL Community.

    The authentication failed because of my NPS server which is still under Windows Server 2012R2, that uses TLS 1.0 and 1.1 but not 1.2

    The ThinOS 2303+ documentation reveals that point :

    To further improve the security of ThinOS devices, TLS 1.0 and 1.1 have been removed in ThinOS 2303. If your network or
    VDI environments still require TLS 1.0 or 1.1, use ThinOS 2211 or earlier versions until you have updated your environment.

    So I had to activate TLS 1.2 by simply adding a registry key to the NPS server :

    https://community.spiceworks.com/topic/2195158-enable-tls1-2-in-windows-server-nps

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RasMan\PPP\EAP\13]
    “TlsVersion”=dword:00000c00

    Then restart the EAP service, and that’s it ! authentication passed !

    #108559
    Benjamin298
    Participant
    • Total Post: 2
    • Newbie

    Hello,

    I bought a lot of Latitude 3440

    I have the same connection problem

    I would like to downgrade to ThinOS 2211 or 2208

    I can’t find these versions on the dell website. Does it exist?

    Do you have a solution?

    Thank you

     

    #108560
    vinz
    Participant
    • Total Post: 55
    • Back Stage Pass
    • ★★★★

    Hi,

    The Latitude 3440 is a 2023 laptop, so ThinOS 2211 or 2208 are not made for it.

    I Can’t find older versions on the Dell Website…

     

    Solution to my issue was to activate TLS 1.2 on the old Windows 2012R2 NPS server

    (but now we have upgraded to news Windows 2022 NPS Servers so no problem)

    #108564
    Benjamin298
    Participant
    • Total Post: 2
    • Newbie

    Thank you for your feedback.

Viewing 11 posts - 1 through 11 (of 11 total)
  • You must be logged in to reply to this topic.