On Mon, Jan 28, 2019 at 10:36:16AM +0100, Andrej Shadura wrote:
> On Wed, 16 Jan 2019 at 21:51, Different55 <differen...@protonmail.com> wrote:
> >
> > Alright, not entirely sure if I did this right but I followed Debian's
> > Building Tutorial to download and build wpa_supplicant with the changes you
> > linked. One exception, I use wpa_supplicant through NetworkManager and
> > could not work out where I needed to create a wpa_supplicant.conf, so I
> > changed the one line in config.c to:
> >
> > { INT(no_oper_classes_ie), 1 },
> >
> > which I'm hoping makes the default "on" instead of "off." Sadly doesn't
> > appear to have made a difference, although it didn't make anything worse
> > either.
> >
> > Tiny mostly-uninteresting side note, I gave wpa_supplicant 2.7 a try on my
> > desktop this morning and had the same problems with a Qualcomm Atheros
> > AR9462 Wireless Adapter.
>
> Forwarding Different55’s message from the Debian bug here:
> ====
> Sure thing! Sadly doesn't seem to make a difference. I've included
> another log, this time starting from the time wpa_supplicant was
> brought back up to a little bit after I got the popup that the
> connection had failed.
Hi,
> ...
> Jan 27 21:32:01 Empanada NetworkManager[582]: <info> [1548646321.7273]
> device (wls8): state change: need-auth -> prepare (reason 'none',
> sys-iface-state: 'managed')
> Jan 27 21:32:01 Empanada NetworkManager[582]: <info> [1548646321.7281]
> device (wls8): state change: prepare -> config (reason 'none',
> sys-iface-state: 'managed')
> Jan 27 21:32:01 Empanada NetworkManager[582]: <info> [1548646321.7286]
> device (wls8): Activation: (wifi) connection 'Depeche Modem' has security,
> and secrets exist. No new secrets needed.
> Jan 27 21:32:01 Empanada NetworkManager[582]: <info> [1548646321.7286]
> Config: added 'ssid' value 'Depeche Modem'
> Jan 27 21:32:01 Empanada NetworkManager[582]: <info> [1548646321.7287]
> Config: added 'scan_ssid' value '1'
> Jan 27 21:32:01 Empanada NetworkManager[582]: <info> [1548646321.7287]
> Config: added 'bgscan' value 'simple:30:-80:86400'
> Jan 27 21:32:01 Empanada NetworkManager[582]: <info> [1548646321.7287]
> Config: added 'key_mgmt' value 'WPA-PSK WPA-PSK-SHA256'
> Jan 27 21:32:01 Empanada NetworkManager[582]: <info> [1548646321.7287]
> Config: added 'psk' value '<hidden>'
Here NetworkManager enables optional PMF:
> Jan 27 21:32:01 Empanada NetworkManager[582]: <info> [1548646321.7287]
> Config: added 'ieee80211w' value '1'
> Jan 27 21:32:01 Empanada NetworkManager[582]: <info> [1548646321.7841]
> device (wls8): supplicant interface state: ready -> disconnected
> Jan 27 21:32:01 Empanada NetworkManager[582]: <info> [1548646321.7942]
> device (wls8): supplicant interface state: disconnected -> inactive
> Jan 27 21:32:01 Empanada NetworkManager[582]: <info> [1548646321.8001]
> device (wls8): supplicant interface state: inactive -> scanning
> Jan 27 21:32:02 Empanada wpa_supplicant[10450]: wls8: SME: Trying to
> authenticate with xx:xx:xx:xx:xx:xx (SSID='Depeche Modem' freq=2442 MHz)
> Jan 27 21:32:02 Empanada kernel: wls8: authenticate with xx:xx:xx:xx:xx:xx
> Jan 27 21:32:02 Empanada NetworkManager[582]: <info> [1548646322.8513]
> device (wls8): supplicant interface state: scanning -> authenticating
> Jan 27 21:32:02 Empanada kernel: wls8: send auth to xx:xx:xx:xx:xx:xx (try
> 1/3)
> Jan 27 21:32:02 Empanada wpa_supplicant[10450]: wls8: Trying to associate
> with xx:xx:xx:xx:xx:xx (SSID='Depeche Modem' freq=2442 MHz)
> Jan 27 21:32:02 Empanada NetworkManager[582]: <info> [1548646322.8562]
> device (wls8): supplicant interface state: authenticating -> associating
> Jan 27 21:32:02 Empanada kernel: wls8: authenticated
> Jan 27 21:32:02 Empanada kernel: wls8: associate with xx:xx:xx:xx:xx:xx (try
> 1/3)
> Jan 27 21:32:02 Empanada wpa_supplicant[10450]: wls8: Associated with
> xx:xx:xx:xx:xx:xx
> Jan 27 21:32:02 Empanada wpa_supplicant[10450]: wls8:
> CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
> Jan 27 21:32:02 Empanada kernel: wls8: RX AssocResp from xx:xx:xx:xx:xx:xx
> (capab=0x411 status=0 aid=6)
> Jan 27 21:32:02 Empanada kernel: wls8: associated
> Jan 27 21:32:02 Empanada NetworkManager[582]: <info> [1548646322.8693]
> device (wls8): supplicant interface state: associating -> associated
> Jan 27 21:32:02 Empanada NetworkManager[582]: <info> [1548646322.8756]
> device (wls8): supplicant interface state: associated -> 4-way handshake
> Jan 27 21:32:02 Empanada wpa_supplicant[10450]: wls8: WPA: Key negotiation
> completed with xx:xx:xx:xx:xx:xx [PTK=CCMP GTK=CCMP]
> Jan 27 21:32:02 Empanada kernel: IPv6: ADDRCONF(NETDEV_CHANGE): wls8: link
> becomes ready
> Jan 27 21:32:02 Empanada wpa_supplicant[10450]: wls8: CTRL-EVENT-CONNECTED -
> Connection to xx:xx:xx:xx:xx:xx completed [id=0 id_str=]
> Jan 27 21:32:02 Empanada wpa_supplicant[10450]: wls8: WPA: Failed to
> configure IGTK to the driver
> Jan 27 21:32:02 Empanada wpa_supplicant[10450]: wls8: RSN: Failed to
> configure IGTK
Could you please configure a more verbose debug level and paste the
lines related to the IGTK just before "Failed to configure IGTK"?
Disabling PMF in NetworkManager would probably solve the problem:
nmcli connection modify 'Depeche Modem' wifi-sec.pmf disable
but I think it's worth investigating the root cause of the issue.
Newer NM versions don't set 'ieee80211w=1' but instead use the global
'Pmf' property, which should work better in cases where the driver
doesn't support PMF.
Beniamino
