I have a NetBSD-current/i386 client trying to connect via ath(4)
using wpa_supplicant to a dlink 2100ap wireless access point. This
in turn is set to using a NetBSD-current/i386 freeradius server.

I get to a point where the radius server sends

Sending Access-Accept of id 1 to 192.168.200.34 port 1102
        Service-Type = Framed-User
        Framed-Protocol = PPP
        EAP-Message = 0x03010004
        Message-Authenticator = 0x00000000000000000000000000000000
        User-Name = "test"

and it then the wpa_supplicant says

EAPOL: Received EAP-Packet frame
EAPOL: SUPP_BE entereing state REQUEST
EAPOL: getSuppRsp
EAP: EAP entering state RECEIVED
EAP: Received EAP-Failure          <-----------------
EAP: EAP entering state DISCARD
EAP: EAP entering state IDLE

So, the username and password manage to be checked and accepted by the
radius server, so any ideas why the supplicant would not actually manage
to complete the authentication? Is a Message-Authenticator of 0x0 correct?

Cheers,

Patrick