RasEap* functions and ConfigBlob
- From: Paul Yaroshenko <samepaul@xxxxxxxxxxxx>
- Date: Sat, 24 Jun 2006 02:42:54 +0300
I'm working with preparing wireless profiles for APC (Automatic Profile Configuration, Vista and backport to XPSP2).
As you might know the main problem is mysterious ConfigBlob. Here example:
<EapHostConfig xmlns="http://www.microsoft.com/provisioning/EapHostConfig">
<EapMethod>
<Type xmlns="http://www.microsoft.com/provisioning/EapCommon">25</Type>
<VendorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorId>
<VendorType xmlns="http://www.microsoft.com/provisioning/EapCommon">0</VendorType>
<AuthorId xmlns="http://www.microsoft.com/provisioning/EapCommon">0</AuthorId>
</EapMethod>
<ConfigBlob>0100000037000000010000000000000001000000150000001500000000000000000001000000100000001A000000000000000000000000</ConfigBlob>
</EapHostConfig>
The only way I know by the time is manual creation of profile in ZeroConfig and export it into XML.
But actually ZeroConfig uses known technique of RasEap* functions. These functions provided by authentication protocol agents. So I could call same functions in exactly same way as ZeroConfig does.
Unfortunately it is not so obvious from SDK what is the order. It looks like circular dependency - one function needs something from another and visa versa.
For example I need create wireless profile using WPA + TKIP and as 802.1x - PEAP+MS-CHAP2, but with different login (not currently logged in user credentials). What I'm supposed to do? What is order of calls and what paramas I need to pass?
PEAP authentication agent is RASCHAP.DLL
There is set of documented functions
RasEapGetInfo
RasEapGetIdentity
RasEapFreeMemory
RasEapInvokeInteractiveUI
RasEapInvokeConfigUI
RasEapInitialize
RasEapBegin
RasEapEnd
RasEapMakeMessage
And some undocumented. E.g. RasEapGetCredentials
Someone worked with EAP agents? Can give some hint?
As I said all I need: let given username and password (or certificate name and user identity), how to obtain corresponding ConfigBlob?
-----------------
SamePaul
.
- Prev by Date: Re: SigCheck like functionality.
- Next by Date: Re: LsaLogonUser and kerberos
- Previous by thread: Impersonating access to AzMan Policy Store
- Next by thread: Re: SSPI AcquireCredentialsHandle(WDigest) fails for LocalSystem user?
- Index(es):