Forming Profile Data for Profile ID ( 4106 ) ID/Attribute name msNPAllowedEapType

All replies

• 

  

  0

  Sign in to vote

  Krishna,
  
  The profile attribute 0x100a (NP-Allowed-EAP-Type) specifies which EAP types are permitted for a connection:
  http://msdn.microsoft.com/en-us/library/bb960684(VS.85).aspx
  
  

  19000000000000000000000000000000 = PEAP

  0D000000000000000000000000000000 = EAP-TLS

  1A000000000000000000000000000000 = EAP-MSCHAPv2

  04000000000000000000000000000000 = EAP-MD5

  
  
  The data takes the form of the EAP_METHOD_TYPE struct in the Windows SDK include file eaptypes.h:

  typedef struct _EAP_TYPE

  {

  BYTE type;

  DWORD dwVendorId;

  DWORD dwVendorType;

  } EAP_TYPE;

  // definition of EAP_METHOD_TYPE used for describing an EAP method

  typedef struct _EAP_METHOD_TYPE

  {

  EAP_TYPE eapType;

  DWORD dwAuthorId;

  } EAP_METHOD_TYPE;

  
  The profile attribute 0x1fa2 (EAP-Configuration) specifies the configuration for a particular EAP method. The format of this data is dependent on the EAP method implementation. You can configure the method in the UI and dump the EAP-Configuration blob in netsh to use it again in netsh or SDO. Keep in mind that an EAP-Configuration blob you dump from an x86 OS can't be used on an x64 OS and vice-versa.

  • Edited by Matt McKenzie [MSFT] Friday, June 20, 2008 10:55 PM Missing information
  • Proposed as answer by Greg LindsayMicrosoft employee Saturday, June 21, 2008 1:05 AM

  Friday, June 20, 2008 10:37 PM
• 

  

  0

  Sign in to vote

  Thank You for your reply.
  
  Is there any better way for me to understand this whole thing , form the values and apply the values for the profile attribute 0x1fa2 (EAP-Configuration). ?
  
  please help me out.
  
  Thanks and Regards,
  krishna.
  
  
  

  ---

  krishna

  Monday, June 23, 2008 1:28 PM
• 

  

  0

  Sign in to vote

  Unfortunetly, the format of the data for profile attribute 0x1fa2 (EAP-Configuration) is specific to a particular EAP method implementation. The data is a binary blob received from the EAP method when its configuration UI is shown. The data is deciphered by the specific EAP method implementation and its format is known only to that specific EAP method implementation.
  
  From looking at the data, it would appear that the EAP type is pre-pended to the configuration blob:
  
  profiledata = "0D0000000000000000000000000000003C00000000000000... appears to be the config for EAP-TLS
  profiledata = "190000000000000000000000000000003800000002000000... appears to be the config for PEAP
  profiledata = "1A0000000000000000000000000000002402000002000000... appears to be the config for EAP-MSCHAPv2
  
  But understanding the format of the data beyond that is not possible as it is EAP method implementation specific.
  
  Check out http://msdn.microsoft.com/en-us/library/aa363593(VS.85).aspx for more information on how this configuration data is passed to/from an EAP method implementation.

  • Edited by Matt McKenzie [MSFT] Tuesday, June 24, 2008 1:01 AM Corrected spelling
  • Marked as answer by Greg LindsayMicrosoft employee Tuesday, July 15, 2008 8:27 PM

  Tuesday, June 24, 2008 12:33 AM
• 

  

  0

  Sign in to vote

  thanks for your reply and time.
  
  Krishna
  

  ---

  krishna

  Wednesday, July 16, 2008 10:55 AM