problem connecting EAP/TLS wireless network

[Arnold Wang <arnold wang inovis com>]

I'm having trouble to connect to my company's EAP/TLS wireless network
using NM. I'm running FC5 on my laptop and the NIC is Linksys WPC54G
using ndiswrapper driver. The NM is 0.6.4. The wpa_supplicant driver is
0.4.8.
This combination works great with my home WPA2/AES wireless network. The
problem is with my company's EAS/TLS network. When I tried to connect to
the network, I was prompted to enter the WEP key. According to my
understanding of EAP/TLS, the keys are dynamically generated. I
shouldn't be prompted at all.
I configured the software components in the following:
------
/etc/sysconfig/wpa_supplicant:
# wlan0 and wifi0
# INTERFACES="-iwlan0 -iwifi0"
INTERFACES="-iwlan0"
# ndiswrapper and prism
# DRIVERS="-Dndiswrapper -Dprism"
DRIVERS="-Dndiswrapper"
-----
/etc/wpa_supplicant/wpa_supplicant.conf
ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=wheel
ap_scan=2

network={
        ssid="any"
        key_mgmt=NONE
}
-----
NM configuration:
Network Name:	qrslan(SSID)
Wireless Security: WPA Enterprise
EAP:	TLS
Key Type:	Dynamic WEP
identity:	awang itlogon com(ID for RADIUS)
I have all the certificates configured as well.
The followings are the error messages I can find, which don't tell much:
------
/var/log/messages:
Sep 22 13:27:10 arnoldw2 NetworkManager: <information>  Activation
(wlan0) started...
Sep 22 13:27:10 arnoldw2 NetworkManager: <information>  Activation
(wlan0) Stage 1 of 5 (Device Prepare) scheduled...
Sep 22 13:27:10 arnoldw2 NetworkManager: <information>  Activation
(wlan0) Stage 1 of 5 (Device Prepare) started...
Sep 22 13:27:10 arnoldw2 NetworkManager: <information>  Activation
(wlan0) Stage 2 of 5 (Device Configure) scheduled...
Sep 22 13:27:10 arnoldw2 NetworkManager: <information>  Activation
(wlan0) Stage 1 of 5 (Device Prepare) complete.
Sep 22 13:27:10 arnoldw2 NetworkManager: <information>  Activation
(wlan0) Stage 2 of 5 (Device Configure) starting...
Sep 22 13:27:10 arnoldw2 NetworkManager: <information>  Activation
(wlan0/wireless): access point 'qrslan' is encrypted, but NO valid key
exists.  New key needed.
Sep 22 13:27:10 arnoldw2 NetworkManager: <information>  Activation
(wlan0) New wireless user key requested for network 'qrslan'.
Sep 22 13:27:10 arnoldw2 NetworkManager: <information>  Activation
(wlan0) Stage 2 of 5 (Device Configure) complete.
Sep 22 13:27:33 arnoldw2 NetworkManager: <information>  Activation
(wlan0) New wireless user key request for network 'qrslan' was canceled.
(I clicked cancel on the prompt)
---debug messages when I started wpa_supplicant manually
Initializing interface 'wlan0' conf
'/etc/wpa_supplicant/wpa_supplicant.conf' driver 'ndiswrapper'
ctrl_interface 'N/A'
Configuration file '/etc/wpa_supplicant/wpa_supplicant.conf' ->
'/etc/wpa_supplicant/wpa_supplicant.conf'
Reading configuration file '/etc/wpa_supplicant/wpa_supplicant.conf'
ctrl_interface='/var/run/wpa_supplicant'
ctrl_interface_group=10 (from group name 'wheel')
ap_scan=1
Line: 5 - start of a new network block
ssid - hexdump_ascii(len=3):
     61 6e 79                                          any
key_mgmt: 0x4
Priority group 0
   id=0 ssid='any'
Initializing interface (2) 'wlan0'
EAPOL: SUPP_PAE entering state DISCONNECTED
EAPOL: KEY_RX entering state NO_KEY_RECEIVE
EAPOL: SUPP_BE entering state INITIALIZE
EAP: EAP entering state DISABLED
EAPOL: External notification - portEnabled=0
EAPOL: External notification - portValid=0
SIOCGIWRANGE: WE(compiled)=20 WE(source)=18 enc_capa=0xf
  capabilities: key_mgmt 0xf enc 0xf
Own MAC address: 00:0c:41:e3:ca:ad
Driver does not support WPA.
wpa_driver_wext_set_key: alg=0 key_idx=0 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_key: alg=0 key_idx=1 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_key: alg=0 key_idx=2 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_key: alg=0 key_idx=3 set_tx=0 seq_len=0 key_len=0
Setting scan request: 0 sec 100000 usec
Added interface wlan0
Wireless event: cmd=0x8b06 len=8
RTM_NEWLINK, IFLA_IFNAME: Interface 'wlan0' added
RTM_NEWLINK, IFLA_IFNAME: Interface 'wlan0' added
State: DISCONNECTED -> SCANNING
Starting AP scan (broadcast SSID)
Scan timeout - try to get results
Received 607 bytes of scan results (3 BSSes)
Scan results: 3
Selecting BSS from priority group 0
0: 00:0f:24:b6:9c:10 ssid='qrslan' wpa_ie_len=0 rsn_ie_len=0 caps=0x11
   skip - no WPA/RSN IE
1: 00:0f:24:1d:0f:50 ssid='qrslan' wpa_ie_len=0 rsn_ie_len=0 caps=0x11
   skip - no WPA/RSN IE
2: 00:06:25:a0:d1:98 ssid='HelpDesk' wpa_ie_len=0 rsn_ie_len=0 caps=0x1
   skip - no WPA/RSN IE
No suitable AP found.
Setting scan request: 5 sec 0 usec
Wireless event: cmd=0x8b1a len=8
Wireless event: cmd=0x8b15 len=20
Wireless event: new AP: 00:00:00:00:00:00
Added BSSID 00:00:00:00:00:00 into blacklist
State: SCANNING -> DISCONNECTED
EAPOL: External notification - portEnabled=0
EAPOL: External notification - portValid=0
CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys
wpa_driver_wext_set_key: alg=0 key_idx=0 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_key: alg=0 key_idx=1 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_key: alg=0 key_idx=2 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_key: alg=0 key_idx=3 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_key: alg=0 key_idx=0 set_tx=0 seq_len=0 key_len=0
Wireless event: cmd=0x8b2a len=8
Wireless event: cmd=0x8b06 len=8
Wireless event: cmd=0x8c07 len=40
AssocReq IE wireless event - hexdump(len=32): 00 08 48 65 6c 70 44 65 73
6b 01 04 82 84 0b 16 dd 06 00 40 96 01 01 00 dd 06 00 10 18 02 00 00
Wireless event: cmd=0x8c08 len=14
AssocResp IE wireless event - hexdump(len=6): 01 04 82 84 0b 16
Wireless event: cmd=0x8b15 len=20
Wireless event: new AP: 00:06:25:a0:d1:98
Association info event
req_ies - hexdump(len=32): 00 08 48 65 6c 70 44 65 73 6b 01 04 82 84 0b
16 dd 06 00 40 96 01 01 00 dd 06 00 10 18 02 00 00
resp_ies - hexdump(len=6): 01 04 82 84 0b 16
WPA: clearing own WPA/RSN IE
State: DISCONNECTED -> ASSOCIATED
Associated to a new BSS: BSSID=00:06:25:a0:d1:98
No keys have been configured - skip key clearing
No network configuration found for the current AP
State: ASSOCIATED -> DISCONNECTED
No keys have been configured - skip key clearing
EAPOL: External notification - portEnabled=0
EAPOL: External notification - portValid=0
State: DISCONNECTED -> SCANNING
Starting AP scan (broadcast SSID)
Wireless event: cmd=0x8b1a len=8
Wireless event: cmd=0x8b15 len=20
Wireless event: new AP: 00:00:00:00:00:00
Added BSSID 00:06:25:a0:d1:98 into blacklist
State: SCANNING -> DISCONNECTED
EAPOL: External notification - portEnabled=0
EAPOL: External notification - portValid=0
CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys
wpa_driver_wext_set_key: alg=0 key_idx=0 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_key: alg=0 key_idx=1 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_key: alg=0 key_idx=2 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_key: alg=0 key_idx=3 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_key: alg=0 key_idx=0 set_tx=0 seq_len=0 key_len=0
Wireless event: cmd=0x8b2a len=8
Wireless event: cmd=0x8b06 len=8
Wireless event: cmd=0x8c07 len=40
AssocReq IE wireless event - hexdump(len=32): 00 08 48 65 6c 70 44 65 73
6b 01 04 82 84 0b 16 dd 06 00 40 96 01 01 00 dd 06 00 10 18 02 00 00
Wireless event: cmd=0x8c08 len=14
AssocResp IE wireless event - hexdump(len=6): 01 04 82 84 0b 16
Wireless event: cmd=0x8b15 len=20
Wireless event: new AP: 00:06:25:a0:d1:98
Association info event
req_ies - hexdump(len=32): 00 08 48 65 6c 70 44 65 73 6b 01 04 82 84 0b
16 dd 06 00 40 96 01 01 00 dd 06 00 10 18 02 00 00
resp_ies - hexdump(len=6): 01 04 82 84 0b 16
WPA: clearing own WPA/RSN IE
State: DISCONNECTED -> ASSOCIATED
Associated to a new BSS: BSSID=00:06:25:a0:d1:98
No keys have been configured - skip key clearing
No network configuration found for the current AP
State: ASSOCIATED -> DISCONNECTED
No keys have been configured - skip key clearing
EAPOL: External notification - portEnabled=0
EAPOL: External notification - portValid=0
Scan timeout - try to get results
Received 607 bytes of scan results (3 BSSes)
Scan results: 3
Selecting BSS from priority group 0
0: 00:0f:24:b6:9c:10 ssid='qrslan' wpa_ie_len=0 rsn_ie_len=0 caps=0x11
   skip - no WPA/RSN IE
1: 00:0f:24:1d:0f:50 ssid='qrslan' wpa_ie_len=0 rsn_ie_len=0 caps=0x11
   skip - no WPA/RSN IE
2: 00:06:25:a0:d1:98 ssid='HelpDesk' wpa_ie_len=0 rsn_ie_len=0 caps=0x1
   skip - no WPA/RSN IE
No APs found - clear blacklist and try again
Removed BSSID 00:06:25:a0:d1:98 from blacklist (clear)
Removed BSSID 00:00:00:00:00:00 from blacklist (clear)
Selecting BSS from priority group 0
0: 00:0f:24:b6:9c:10 ssid='qrslan' wpa_ie_len=0 rsn_ie_len=0 caps=0x11
   skip - no WPA/RSN IE
1: 00:0f:24:1d:0f:50 ssid='qrslan' wpa_ie_len=0 rsn_ie_len=0 caps=0x11
   skip - no WPA/RSN IE
2: 00:06:25:a0:d1:98 ssid='HelpDesk' wpa_ie_len=0 rsn_ie_len=0 caps=0x1
   skip - no WPA/RSN IE
No suitable AP found.
Setting scan request: 5 sec 0 usec
CTRL-EVENT-TERMINATING - signal 2 received
Removing interface wlan0
State: DISCONNECTED -> DISCONNECTED
No keys have been configured - skip key clearing
EAPOL: External notification - portEnabled=0
EAPOL: External notification - portValid=0
No keys have been configured - skip key clearing
Cancelling scan request