** Description changed:

  SRU Justification:
  
  [ Impact ]
  
  Users who input an incorrect password to a WPA3-SAE Wi-Fi network will
  not receive a prompt to enter a new password when the authentication
  fails - instead, the connection will fail silently, and the user will
  need to "forget" the saved profile and try a fresh connection attempt.
  
  [ Test Plan ]
  
+ 0. Ensure you have a version of wpa-supplicant installed which will emit the 
SaePasswordMismatch signal on an incorrect WPA3 password entry
  1. Set up a WPA3-SAE access point
  2. On your test device, attempt to connect to the WPA3-SAE access point with 
the wrong password
  
  Expected behavior: User should be presented with a dialog to re-enter the 
password
  Actual behavior (without patch): The connection attempt will fail silently, 
and the user is never presented with an option to re-enter the password. As a 
result, they must forget the saved connection profile and try a fresh 
connection attempt.
  
  [ Fix ]
  
  Add new signal handlers that will prompt for a new secret if a
  disconnection is reported from wpa_supplicant via the PskMismatch dbus
  signal
  
  [ Where problems could occur ]
  
  Existing auth failure related code paths within NetworkManager should
  not be impacted by this change, since this change only adds a new signal
  handling function for PskMismatch.
  
  If a user is within range of a WPA3 AP that they have an incorrect
  password saved for, this bug fix will cause NM to prompt for a new
  password. If the secret manager agent is blocking, this behavior may be
  unexpected (but still totally correct) to the user.
  
  [ Other Info ]
  Upstream patch: 
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2287
  
  Impacts Jammy, Noble, Plucky, Questing
  
  Related to: https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2125203

** Description changed:

  SRU Justification:
  
  [ Impact ]
  
  Users who input an incorrect password to a WPA3-SAE Wi-Fi network will
  not receive a prompt to enter a new password when the authentication
  fails - instead, the connection will fail silently, and the user will
  need to "forget" the saved profile and try a fresh connection attempt.
  
  [ Test Plan ]
  
  0. Ensure you have a version of wpa-supplicant installed which will emit the 
SaePasswordMismatch signal on an incorrect WPA3 password entry
  1. Set up a WPA3-SAE access point
  2. On your test device, attempt to connect to the WPA3-SAE access point with 
the wrong password
  
  Expected behavior: User should be presented with a dialog to re-enter the 
password
  Actual behavior (without patch): The connection attempt will fail silently, 
and the user is never presented with an option to re-enter the password. As a 
result, they must forget the saved connection profile and try a fresh 
connection attempt.
  
  [ Fix ]
  
  Add new signal handlers that will prompt for a new secret if a
  disconnection is reported from wpa_supplicant via the PskMismatch dbus
  signal
  
  [ Where problems could occur ]
  
  Existing auth failure related code paths within NetworkManager should
  not be impacted by this change, since this change only adds a new signal
  handling function for PskMismatch.
  
  If a user is within range of a WPA3 AP that they have an incorrect
  password saved for, this bug fix will cause NM to prompt for a new
  password. If the secret manager agent is blocking, this behavior may be
  unexpected (but still totally correct) to the user.
  
  [ Other Info ]
- Upstream patch: 
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2287
+ Upstream patches: 
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2287
+ 
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2293
  
  Impacts Jammy, Noble, Plucky, Questing
  
  Related to: https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2125203

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2122458

Title:
  Password re-entry popup does not appear on incorrect password entry
  with WPA3 networks

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/2122458/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to