Re: [WIRELESS-LAN] iPhone - Incorrect Wi-Fi Password Error

[LaPorte, David]

Sean,

A few different manifest the behavior your users are seeing, but here are a 
couple thoughts.

We use Radiator RADIUS for our 802.1x wireless network and were seeing errors 
in the logs that accompanied the credential pop-up.  It appeared as though the 
RADIUS controllers were receiving a large number of spurious packets mid-EAP 
transaction from our Cisco WISM2s.  That seemed like a bug, but I was able to 
work around the issue by ignoring the offending packets and never re-visited 
it.  Not sure if you are able to debug that deeply with ISE to see if that 
could be an issue.

Another thought, are your AP radios set to maximum power?  It’s possible that 
the user is at the edge of a coverage area and their device’s radio simply 
can’t reach the AP.

Regards,
Dave

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of "Gray, Sean" 

Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 

Date: Monday, January 29, 2018 at 4:44 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: [WIRELESS-LAN] iPhone - Incorrect Wi-Fi Password Error

Hi  Everyone,

I’m just wondering if anyone has experienced or heard reports of weird iPhone 
client behaviour.

We have had a couple of reports of iPhones throwing a “Incorrect Wi-Fi 
Password” error when the client is trying to join a network while walking 
around campus. The error resolves itself quite quickly if they hit cancel on 
the message as the correct credentials are cached on the device.

When I check the logs on our ISE server I see that the client never actually 
made an authentication attempt. So it may have been blacklisted on the WLC, 
unfortunately I don’t see a way to report on historical exclusion events.

No other client devices have been reported as experiencing the same issue, and 
it doesn’t appear to occur in the same geographic region. So I’m thinking this 
is a client side problem.

Thanks

Sean


Sean Gray | B.Sc (Hons)
Voice, Collaboration & Wireless Network Analyst
ITS, University of Lethbridge


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] iPhone - Incorrect Wi-Fi Password Error

[Mike Atkins]

I had a ticket from an IT staff member reporting the same “wrong password”
or “prompted for password.”  When I looked at the screen capture he
provided it says “Enterprise Wi-Fi Network Do you want to continue joining
this network?”  Maybe not exactly the same thing but the user says it is
prompting for password.  The iPhone device appears to be
onboarded/configured correctly.  The staff member documented the
time/location (as good as memory serves) for us.  During the reported time
we did not see anything in our logs (syslog, radius, Nyansa.)  For whatever
it’s worth, Prime did not report any rogue APs/SSID in this area for the
timeframe in question.  I am definitely curious but have not had time to do
much investigation.  And again, this is user reported so maybe not 100%
accurate information.



Since this is an IT staff person, I will ask the user to run the “Net
Analyzer” tool and tell me the Wi-Fi BSSID after clicking the Okay.  Unless
someone knows of an IOS built in tool to tell you the associated BSSID?  I
tried the Airport utility but it does not show anything for me using Cisco
LWAPP and no multicast. (typically use the Wi-Fi scanner part but that does
not tell if the device is associated, just signal level)













*Mike Atkins *

Network Engineer

Office of Information Technology

University of Notre Dame



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Watters, John
*Sent:* Monday, January 29, 2018 5:03 PM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] iPhone - Incorrect Wi-Fi Password Error



If you do message logging from the controller, you might have luck finding
entries on your log server by searching for the MAC address and/or the user
name. Be sure to look in both the WLC and the RADIUS logs.





*John Watters*

Network Engineer, OIT, The University of Alabama



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
] *On Behalf Of *Gray, Sean
*Sent:* Monday, January 29, 2018 3:45 PM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* [WIRELESS-LAN] iPhone - Incorrect Wi-Fi Password Error



Hi  Everyone,



I’m just wondering if anyone has experienced or heard reports of weird
iPhone client behaviour.



We have had a couple of reports of iPhones throwing a “Incorrect Wi-Fi
Password” error when the client is trying to join a network while walking
around campus. The error resolves itself quite quickly if they hit cancel
on the message as the correct credentials are cached on the device.



When I check the logs on our ISE server I see that the client never
actually made an authentication attempt. So it may have been blacklisted on
the WLC, unfortunately I don’t see a way to report on historical exclusion
events.



No other client devices have been reported as experiencing the same issue,
and it doesn’t appear to occur in the same geographic region. So I’m
thinking this is a client side problem.



Thanks



Sean





*Sean Gray* | B.Sc (Hons)

Voice, Collaboration & Wireless Network Analyst

ITS, University of Lethbridge





** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/discuss.

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: iPhone - Incorrect Wi-Fi Password Error

[Watters, John]

If you do message logging from the controller, you might have luck finding 
entries on your log server by searching for the MAC address and/or the user 
name. Be sure to look in both the WLC and the RADIUS logs.


John Watters
Network Engineer, OIT, The University of Alabama

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Gray, Sean
Sent: Monday, January 29, 2018 3:45 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] iPhone - Incorrect Wi-Fi Password Error

Hi  Everyone,

I'm just wondering if anyone has experienced or heard reports of weird iPhone 
client behaviour.

We have had a couple of reports of iPhones throwing a "Incorrect Wi-Fi 
Password" error when the client is trying to join a network while walking 
around campus. The error resolves itself quite quickly if they hit cancel on 
the message as the correct credentials are cached on the device.

When I check the logs on our ISE server I see that the client never actually 
made an authentication attempt. So it may have been blacklisted on the WLC, 
unfortunately I don't see a way to report on historical exclusion events.

No other client devices have been reported as experiencing the same issue, and 
it doesn't appear to occur in the same geographic region. So I'm thinking this 
is a client side problem.

Thanks

Sean


Sean Gray | B.Sc (Hons)
Voice, Collaboration & Wireless Network Analyst
ITS, University of Lethbridge


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

iPhone - Incorrect Wi-Fi Password Error

[Gray, Sean]

Hi  Everyone,

I'm just wondering if anyone has experienced or heard reports of weird iPhone 
client behaviour.

We have had a couple of reports of iPhones throwing a "Incorrect Wi-Fi 
Password" error when the client is trying to join a network while walking 
around campus. The error resolves itself quite quickly if they hit cancel on 
the message as the correct credentials are cached on the device.

When I check the logs on our ISE server I see that the client never actually 
made an authentication attempt. So it may have been blacklisted on the WLC, 
unfortunately I don't see a way to report on historical exclusion events.

No other client devices have been reported as experiencing the same issue, and 
it doesn't appear to occur in the same geographic region. So I'm thinking this 
is a client side problem.

Thanks

Sean


Sean Gray | B.Sc (Hons)
Voice, Collaboration & Wireless Network Analyst
ITS, University of Lethbridge



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Aruba Clearpass

[Michael Hulko]

We are looking to speak to someone that is currently using Aruba ClearPass, for 
more than just Radius authentication, in their environment and is willing to 
spend some of their valuable time (15 - 30 minutes) off-line on a call to 
discuss your experiences.  Please respond to the co-ordinates provided below.

Thanks in advance.


Michael Hulko
Network Analyst

Western University Canada
Network Operations Centre
Western Technology Services
1393 Western Road, SSB 3300CC
London, Ontario  N6G 1G9

tel: 519-661-2111 x82433
direct: 519-850-2433
e-mail: mihu...@uwo.ca




**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.