Note
Access to this page requires authorization. You can try signing in or .
Access to this page requires authorization. You can try .
ONEX_EAP_ERROR structure (dot1x.h)
The ONEX_EAP_ERROR structure contains 802.1X EAP error when an error occurs with 802.1X authentication.
Syntax
typedef struct _ONEX_EAP_ERROR {
DWORD dwWinError;
EAP_METHOD_TYPE type;
DWORD dwReasonCode;
GUID rootCauseGuid;
GUID repairGuid;
GUID helpLinkGuid;
DWORD fRootCauseString : 1;
DWORD fRepairString : 1;
ONEX_VARIABLE_BLOB RootCauseString;
ONEX_VARIABLE_BLOB RepairString;
} ONEX_EAP_ERROR, *PONEX_EAP_ERROR;
Members
dwWinError
The error value defined in the Winerror.h header file. This member also sometimes contains the reason the EAP method failed. The existing values for this member for the reason the EAP method failed are defined in the Eaphosterror.h header file.
Some possible values are listed below.
| Value | Meaning |
|---|---|
|
The system cannot find the path specified. |
|
The data is not valid. |
|
A parameter is incorrect. |
|
One or more arguments are not correct. |
|
The configuration registry key could not be opened. |
|
The data supplied is of the wrong type. |
|
The EAPHost received EAP failure after the identity exchange. There is likely a problem with the authenticating user's account. |
|
A catastrophic failure occurred. |
|
The certificate store can't be accessed on either the authenticator or the peer. |
|
The requested EAP method is not installed. |
|
The EAPHost is not able to communicate with the EAP quarantine enforcement client (QEC) on a client with Network Access Protection (NAP) enabled. |
|
The EAPHost returns this error if the authenticator fails the authentication after the peer sent its identity. |
|
The EAPHost returns this error on authentication failure. |
|
The EAPHost returns this error when the client and the server aren't configured with compatible EAP types. |
|
The EAPMethod received an EAP packet that cannot be processed. |
|
The EAPHost received a packet that cannot be processed. |
|
The EAPHost configuration schema validation failed. |
|
The EAP method does not support single signon for the provided configuration. |
|
The EAPHost returns this error when a configured EAP method does not support a requested operation (procedure call). |
|
The EAPHost could not find the user certificate for authentication. |
|
The user certificate being used for authentication does not have a proper extended key usage (EKU) set. |
|
The EAPhost found a user certificate which has expired. |
|
The user certificate being used for authentication has been revoked. |
|
An unknown error occurred with the user certificate being used for authentication. |
|
The authenticator rejected the user certificate being used for authentication. |
|
The authenticator rejected the user credentials for authentication. |
|
The authenticator rejected the user credentials for authentication. |
|
No smart card reader was present. |
|
The server certificate being user for authentication does not have a proper EKU set . |
|
The EAPhost found a server certificate which has expired. |
|
The server certificate being used for authentication has been revoked. |
|
An unknown error occurred with the server certificate being used for authentication. |
|
The EAPHost could not find a certificate in trusted root certificate store for user certificate validation. |
|
The authentication failed because the root certificate used for this network is not valid. |
|
The trusted root certificate needed for user certificate validation has expired. |
|
The EAPHost could not find a root certificate in the trusted root certificate store for server certificate validation. |
type
The EAP method type that raised the error during 802.1X authentication. The EAP_METHOD_TYPE structure is defined in the Eaptypes.h header file.
dwReasonCode
The reason the EAP method failed. Some of the values for this member are defined in the Eaphosterror.h header file and some are defined in the Winerror.h header file, although other values are possible.
Possible values are listed below.
| Value | Meaning |
|---|---|
|
One or more arguments are not correct. |
|
The data is not valid. |
|
A parameter is incorrect. |
|
The EAPHost received EAP failure after the identity exchange. There is likely a problem with the authenticating user's account. |
|
Use FormatMessage to obtain the message string for the returned error. |
rootCauseGuid
A unique ID that identifies cause of error in EAPHost. An EAP method can define a new GUID and associate the GUID with a specific root cause. The existing values for this member are defined in the Eaphosterror.h header file.
| Value | Meaning |
|---|---|
|
The default error cause.
This is not a fixed GUID when it reaches supplicant, but the first portion will be filled by a generic Win32/RAS error. This helps create a unique GUID for every unique error. |
|
EAPHost cannot locate the DLL for the EAP method. |
|
Both the authenticator and the peer are unable to access the certificate store. |
|
EAPHost found an expired server certificate. |
|
The server certificate being user for authentication does not have a proper extended key usage (EKU) set. |
|
EAPHost could not find the server certificate for authentication. |
|
The server certificate being used for authentication has been revoked. |
|
EAPHost found an expired user certificate. |
|
The user certificate being user for authentication does not have proper extended key usage (EKU) set. |
|
EAPHost could not find a user certificate for authentication. |
|
An unknown error occurred with the user certification being used for authentication. |
|
The authenticator rejected the user certification. |
|
The user certificate being used for authentication has been revoked. |
|
The trusted root certificate needed for user certificate validation has expired. |
|
The authentication failed because the root certificate used for this network is not valid. |
|
EAPHost could not find a certificate in a trusted root certificate store for user certification validation. |
|
The authentication failed because the certificate on the server computer does not have a server name specified. |
|
The authentication failed because Windows does not have the authentication method required for this network. |
|
The EAPHost configuration schema validation failed. |
|
EAPHost returns this error when a configured EAP method does not support a requested operation (procedure call). |
|
A valid smart card needs to be present for authentication to be proceed.
This GUID is supported on Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7 . |
|
EAPHost returns this error on a generic, unspecified authentication failure. |
|
An unknown error occurred with the server certificate. |
|
An EAP failure was received after an identity exchange, indicating the likelihood of a problem with the authenticating user's account. |
|
EAPHost could not find a root certificate in a trusted root certificate store for the server certification validation. |
|
EAPHost returns this error if the authenticator fails the authentication after the peer identity was submitted. |
|
The authenticator rejected user credentials for authentication. |
|
The host of the third party method is not responding and was automatically restarted. |
|
EAPHost was not able to communicate with the EAP quarantine enforcement client (QEC) on a client with Network Access Protection (NAP) enabled. This error may occur when the NAP service is not responding. |
|
The EAP method does not support single signon for the provided configuration data.
This GUID is supported on Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7. |
repairGuid
A unique ID that maps to a localizable string that identifies the repair action that can be taken to fix the reported error. The existing values for this member are defined in the Eaphosterror.h header file.
| Value | Meaning |
|---|---|
|
The user should contact the network administrator. |
|
The user should choose a different and valid certificate for authentication with this network. |
|
The user should contact your network administrator. Your administrator can verify your user name and password for network authentication. |
|
The user should obtain an updated certificate from the network administrator. The certificate required to connect to this network can't be found on your computer. |
|
The user should use a different and valid user certificate for authentication with the network. |
|
The user should contact your network administrator. Windows can't verify your identity for connection to this network.
This GUID is supported on Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7. |
|
The user should contact your network administrator. Windows can't verify your identity for connection to this network.
This GUID is supported on Windows Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7. |
|
The user should contact your network administrator. Windows needs to be configured to use the authentication method required for this network.
This GUID is supported on Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7. |
|
The user should contact your network administrator. Windows needs to be configured to use the authentication method required for this network.
This GUID is supported on Windows Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7. |
|
The user should start the Network Access Protection service. The Network Access Protection service is not responding. Start or restart the Network Access Protection service, and then try connecting again.
This GUID is supported on Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7 . |
|
The user should contact your network administrator. The certificate store on this computer needs to be repaired.
This GUID is supported on Windows Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7. |
|
The user should contact your network administrator. A problem with your user account needs to be resolved.
This GUID is supported on Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7. |
|
The user should contact your network administrator. The root certificate used for this network needs to be repaired.
This GUID is supported on Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7. |
|
The user should contact your network administrator. The certificate used by the server for this network needs to be properly installed on your computer.
This GUID is supported on Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7. |
|
The user should contact your network administrator. The root certificate used for this network needs to be renewed.
This GUID is supported on Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7. |
|
The user should contact your network administrator. A problem with the server certificate used for this network needs to be resolved.
This GUID is supported on Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7. |
|
The user should connect a smart card reader to your computer, insert a smart card, and attempt to connect again.
This GUID is supported on Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7. |
|
The user should contact your network administrator. The user certificate on this computer needs to be repaired.
This GUID is supported on Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7. |
|
The user should contact your network administrator. Windows needs to be configured to use the authentication method required for this network.
This GUID is supported on Windows Server 2008 R2 with the Wireless LAN Service installed and on Windows 7. |
|
The user should try to connect to the network again. |
helpLinkGuid
A unique ID that maps to a localizable string that specifies an URL for a page that contains additional information about an error or repair message. An EAP method can potentially define a new GUID and associate with one specific help link. Some of the existing values for this member are defined in the Eaphosterror.h header file.
| Value | Meaning |
|---|---|
|
The URL for the page with more information about troubleshooting. This currently is a generic networking troubleshooting help page, not EAP specific. |
|
The URL for the page with more information about configuring EAP types. |
|
The URL for the page with more information about authentication failures.
This GUID is supported on Windows Vista |
|
The URL for the page with more information about selecting the appropriate certificate to use for authentication. |
|
The URL for the page with more information about setting up an EAP server.
This GUID is supported on Windows Vista |
|
The URL for the page with more information about troubleshooting.
This GUID is supported on Windows Vista |
|
The URL for the page with more information about getting EAP certificates. |
fRootCauseString
Indicates if the ONEX_EAP_ERROR structure contains a root cause string in the RootCauseString member.
fRepairString
Indicates if the ONEX_EAP_ERROR structure contains a repair string in the RepairString member.
RootCauseString
A localized and readable string that describes the root cause of the error. This member contains a NULL-terminated Unicode string starting at the dwOffset member of the ONEX_VARIABLE_BLOB if the fRootCauseString bitfield member is set.
RepairString
A localized and readable string that describes the possible repair action. This member contains a NULL-terminated Unicode string starting at the dwOffset member of the ONEX_VARIABLE_BLOB if the fRepairString bitfield member is set.
Remarks
The ONEX_EAP_ERROR structure is used by the 802.1X module, a new wireless configuration component supported on Windows Vista and later.
Many members of the ONEX_EAP_ERROR structure correspond with similar members in the EAP_ERROR structure
The ONEX_RESULT_UPDATE_DATA contains information on a status change to 802.1X authentication. The ONEX_RESULT_UPDATE_DATA structure is returned when the NotificationSource member of the WLAN_NOTIFICATION_DATA structure is WLAN_NOTIFICATION_SOURCE_ONEX and the NotificationCode member of the WLAN_NOTIFICATION_DATA structure for received notification is OneXNotificationTypeResultUpdate. For this notification, the pData member of the WLAN_NOTIFICATION_DATA structure points to an ONEX_RESULT_UPDATE_DATA structure that contains information on the 802.1X authentication status change.
If the fEapError member in the ONEX_RESULT_UPDATE_DATA structure is set, then the eapError member of the ONEX_RESULT_UPDATE_DATA structure contains an ONEX_VARIABLE_BLOB structure with an ONEX_EAP_ERROR structure embedded starting at the dwOffset member of the ONEX_VARIABLE_BLOB.
Requirements
| Requirement | Value |
|---|---|
| Minimum supported client | Windows Vista [desktop apps only] |
| Minimum supported server | Windows Server 2008 [desktop apps only] |
| Header | dot1x.h |
See also
Feedback
Was this page helpful?
