Intel 3945abg works, but not with WPA supplicant

drlouis · 10-24-2007, 02:25 PM

Slackware 12

I've got my wireless working, but only with no encryption. I got ~alien's WPA_supplicant package and installed it with installpkg, with no errors. I looked around and found a whole bunch of 'how-to's' including several on LQ, and I've read the MadWifi/WPA supplicant how to on ~alien-wiki, and still no joy. I know everything works since I'd originally put Kubuntu on here, and had it working fine (but of course ubuntu uses a different setup). I'm sure there is some simple little thing I'm getting wrong or overlooking, but I'll be d@mmed if I can see what it is. ifconfig gives:

Code:

root@XPS1710:/home/louis# ifconfig
eth0      Link encap:Ethernet  HWaddr 00:18:8B:B6:2C:4A
          inet addr:192.168.1.100  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::218:8bff:feb6:2c4a/64 Scope:Link
          UP BROADCAST NOTRAILERS RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:4339 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4288 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:4464469 (4.2 MiB)  TX bytes:906738 (885.4 KiB)
          Interrupt:19

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

iwconfig gives:

Code:

root@XPS1710:/home/louis# iwconfig
lo        no wireless extensions.

eth0      no wireless extensions.

eth1      unassociated  ESSID:"Home"  Nickname:"XPS1710"
          Mode:Managed  Frequency=2.442 GHz  Access Point: 00:B6:16:74:3D:44
          Bit Rate:0 kb/s   Tx-Power:16 dBm
          Retry limit:15   RTS thr:off   Fragment thr:off
          Encryption key:off
          Power Management:off
          Link Quality:0  Signal level:0  Noise level:0
          Rx invalid nwid:0  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:3   Missed beacon:0

route -n gives:

Code:

root@XPS1710:/home/louis# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 eth0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         192.168.1.1     0.0.0.0         UG    0      0        0 eth0

pertinent part of rc.d/rc.inet1.conf:

Code:

# Config information for eth0:
IPADDR[0]=""
NETMASK[0]=""
USE_DHCP[0]="yes"
DHCP_HOSTNAME[0]=""

# Config information for eth1:
IPADDR[1]=""
NETMASK[1]=""
USE_DHCP[1]="yes"
DHCP_HOSTNAME[1]=""
WLAN_WPA[1]="wpa_supplicant"
WLAN_WPADRIVER[1]="wext"
WLAN_WPACONF[1]="/etc/wpa_supplicant.conf"

# Config information for eth2:
IPADDR[2]=""
NETMASK[2]=""
USE_DHCP[2]=""
DHCP_HOSTNAME[2]=""

# Config information for eth3:
IPADDR[3]=""
NETMASK[3]=""
USE_DHCP[3]=""
DHCP_HOSTNAME[3]=""

# Default gateway IP address:
GATEWAY="192.168.1.1"

DEBUG_ETH_UP="no"

IFNAME[4]="ath0"

NETMASK[4]=""
USE_DHCP[4]="yes"
727569C365E31212096A0EAFAD563B268BAD01CAF TxRate=0"
WLAN_WPA[4]="wpa_supplicant"
WLAN_WPADRIVER[4]="wext"

(I removed all commented lines to keep the length down)
wpa_supplicant.conf reads:

Code:

ctrl_interface=/var/run/wpa_supplicant
# By default, only root (group 0) may use wpa_cli
ctrl_interface_group=0
eapol_version=1
ap_scan=1
fast_reauth=1

# WPA protected network, supply your own ESSID and WPAPSK here:
network={
  scan_ssid=0
  ssid="Home"
  proto=WPA
  key_mgmt=WPA-PSK
  pairwise=CCMP TKIP
  group=CCMP TKIP WEP104 WEP40
  psk=mypsksuperlongkey
}

# Plaintext connection (no WPA, no IEEE 802.1X),
# nice for hotel/airport types of WiFi network.
# You'll need a recent version of wireless-tools for this!
network={
  ssid="any"
  key_mgmt=NONE
  priority=2
}

I've had several things changed over the last several days trying to get this working, but I'm willing to try pretty much anything. Thanks!

Alien Bob · 10-24-2007, 02:36 PM

Troubleshooting tips (feedback command output into this topic):
Run (as root):

Code:

wpa_cli status

There has been a bug in the ipw3945/wpa_supplicant combination where WPA in combination with a hidden ESSID would not work. Do you use the ipw3945 driver (what version), and is your ESSID not being broadcast?

Eric

drlouis · 10-24-2007, 03:11 PM

Quote:

Originally Posted by Alien Bob

Troubleshooting tips (feedback command output into this topic):
Run (as root):

Code:

wpa_cli status

There has been a bug in the ipw3945/wpa_supplicant combination where WPA in combination with a hidden ESSID would not work. Do you use the ipw3945 driver (what version), and is your ESSID not being broadcast?

Eric

Thank you for the reply.

sorry, I should have stated initially that ssid is being broadcast.

yes, ipw3945 1.2.0

wpa_cli status gives:

Code:

root@XPS1710:/home/louis# wpa_cli status
Selected interface 'eth1'
wpa_state=SCANNING

Alien Bob · 10-24-2007, 03:24 PM

I am assuming your 64 character PSK is correct? Can you verify that one again (possibly against the Kubuntu version of that wpa_supplicant.conf file)?

Eric

drlouis · 10-24-2007, 03:39 PM

Quote:

Originally Posted by Alien Bob

I am assuming your 64 character PSK is correct? Can you verify that one again (possibly against the Kubuntu version of that wpa_supplicant.conf file)?

Eric

yes, I just happened to have a backup of my Kubuntu install still hanging around that I was able to check it against, and it matches.

Thanks again, (not just for this, I've used your website a LOT, it's been very helpful to me ever since I first started using linux)

Alien Bob · 10-24-2007, 04:07 PM

You can try running wpa_supplicant indebug mode in a terminal so that you can watch what happens -

First, shut down the wireless interface (eth1):

Code:

/etc/rc.d/rc.inet1 eth1_stop

Next, start wpa_supplicant in your terminal window with extra debugging enabled:

Code:

wpa_supplicant -w -c /etc/wpa_supplicant.conf -i eth1 -D wext -d -t -K

and then in another console bring eth1 back up:

Code:

/etc/rc.d/rc.inet1 eth1_start

Now, keep a close watch on the first console and try to determine what wpa_supplicant is doing during the association.

Eric

drlouis · 10-24-2007, 05:24 PM

ok I've done that, and I get this:

Code:

1193263048.834840: Initializing interface 'eth1' conf '/etc/wpa_supplicant.conf' driver 'wext' ctrl_interface 'N/A' bridge 'N/A'
1193263048.834891: Configuration file '/etc/wpa_supplicant.conf' -> '/etc/wpa_supplicant.conf'
1193263048.834898: Reading configuration file '/etc/wpa_supplicant.conf'
1193263048.835034: ctrl_interface='/var/run/wpa_supplicant'
1193263048.835040: ctrl_interface_group='0' (DEPRECATED)
1193263048.835051: eapol_version=1
1193263048.835055: ap_scan=1
1193263048.835059: fast_reauth=1
1193263048.835091: Priority group 2
1193263048.835096:    id=1 ssid='any'
1193263048.835100: Priority group 0
1193263048.835105:    id=0 ssid='Home'
1193263048.835109: Initializing interface (2) 'eth1'
1193263048.836639: EAPOL: SUPP_PAE entering state DISCONNECTED
1193263048.836648: EAPOL: KEY_RX entering state NO_KEY_RECEIVE
1193263048.836652: EAPOL: SUPP_BE entering state INITIALIZE
1193263048.836660: EAP: EAP entering state DISABLED
1193263048.836667: EAPOL: External notification - portEnabled=0
1193263048.836670: EAPOL: External notification - portValid=0
1193263048.838179: SIOCGIWRANGE: WE(compiled)=22 WE(source)=16 enc_capa=0xf
1193263048.838186:   capabilities: key_mgmt 0xf enc 0xf
1193263048.838275: WEXT: Operstate: linkmode=1, operstate=5
1193263048.860599: Own MAC address: 00:43:7a:19:0a:d2
1193263048.860611: wpa_driver_wext_set_wpa
1193263048.860619: wpa_driver_wext_set_key: alg=0 key_idx=0 set_tx=0 seq_len=0 key_len=0
1193263048.860628: wpa_driver_wext_set_key: alg=0 key_idx=1 set_tx=0 seq_len=0 key_len=0
1193263048.860645: wpa_driver_wext_set_key: alg=0 key_idx=2 set_tx=0 seq_len=0 key_len=0
1193263048.860650: wpa_driver_wext_set_key: alg=0 key_idx=3 set_tx=0 seq_len=0 key_len=0
1193263048.860656: wpa_driver_wext_set_countermeasures
1193263048.860660: wpa_driver_wext_set_drop_unencrypted
1193263048.860672: Setting scan request: 0 sec 100000 usec
1193263048.861125: ctrl_interface_group=0
1193263048.861163: Added interface eth1
1193263048.861190: RTM_NEWLINK: operstate=0 ifi_flags=0x1002 ()
1193263048.861198: Wireless event: cmd=0x8b06 len=8
1193263048.861203: RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
1193263048.861208: RTM_NEWLINK, IFLA_IFNAME: Interface 'eth1' added
1193263048.861215: RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
1193263048.861220: RTM_NEWLINK, IFLA_IFNAME: Interface 'eth1' added
1193263048.964597: State: DISCONNECTED -> SCANNING
1193263048.964607: Starting AP scan (broadcast SSID)
1193263048.964612: Trying to get current scan results first without requesting a new scan to speed up initial association
1193263048.964650: Received 255 bytes of scan results (1 BSSes)
1193263048.964655: Scan results: 1
1193263048.964660: Selecting BSS from priority group 2
1193263048.964666: Try to find WPA-enabled AP
1193263048.964670: 0: 00:b6:16:74:3d:44 ssid='Home' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
1193263048.964676:    skip - SSID mismatch
1193263048.964680: Try to find non-WPA AP
1193263048.964684: 0: 00:b6:16:74:3d:44 ssid='Home' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
1193263048.964689:    skip - SSID mismatch
1193263048.964693: Selecting BSS from priority group 0
1193263048.964696: Try to find WPA-enabled AP
1193263048.964700: 0: 00:b6:16:74:3d:44 ssid='Home' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
1193263048.964705:    skip - no WPA/RSN proto match
1193263048.964709: Try to find non-WPA AP
1193263048.964713: 0: 00:b6:16:74:3d:44 ssid='Home' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
1193263048.964718:    skip - non-WPA network not allowed
1193263048.964722: No suitable AP found.

I'm still pretty much a newb, but I think the problem is this:

Code:

1193263048.964666: Try to find WPA-enabled AP
1193263048.964670: 0: 00:b6:16:74:3d:44 ssid='Home' wpa_ie_len=0 rsn_ie_len=22 caps=0x11
1193263048.964676:    skip - SSID mismatch

The thing is, I don't know what to do about it because the ssid in my router matches the one in wpa_supplicant.conf. I don't need to have it entered somewhere else as well do I?

Alien Bob · 10-24-2007, 05:29 PM

CAn you try and 'play' a little with the SSID string in wpa_supplicant.conf? Maybe the SSID is not what you think it is, or wpa_supplicant interprets your string in a way you don't expect.
Several options to try:

Code:

ssid=Home
ssid="Home"
ssid="'Home'"

Eric

drlouis · 10-24-2007, 05:52 PM

man. I tried all the ones you list, plus:

Code:

ssid='Home'
ssid=" Home "

most of them give "1193265997.436717: Line 16: failed to parse ssid ''Home''"

the others just give the same results as before.

I can't believe this is proving to be this much of a challenge. I'm going to step away from it and get some errands run. I'll check back tonight.

Thanks again, I really appreciate the help.

drlouis · 10-24-2007, 11:04 PM

ok, I've been reading over the output from that last step again, and I got to thinking about all the ...stuff I'd been reading the past few days.

I remembered reading somewhere that it might be helpful to comment out the line: "ap_scan=1" so I did. I also replaced the entire section between the {} with the section from my kubuntu install which was this

Code:

eapol_version=1
ap_scan=1
fast_reauth=1

# WPA protected network, supply your own ESSID and WPAPSK here:
network={
       ssid="Home"
       scan_ssid=1
       proto=WPA RSN
       key_mgmt=WPA-PSK
       auth_alg=OPEN
       pairwise=CCMP TKIP
       group=CCMP TKIP
       psk=superlongkey
}

compared with the one I was using in Slackware which was this:

Code:

eapol_version=1
ap_scan=1
fast_reauth=1

# WPA protected network, supply your own ESSID and WPAPSK here:
network={
  scan_ssid=1
  ssid="Home"
  proto=WPA
  key_mgmt=WPA-PSK
  pairwise=CCMP TKIP
  group=CCMP TKIP WEP104 WEP40
  psk=superlongkey
}

in retrospect, I should have only made one change at a time, but I didn't. the bottom line is it now works.

Thank you again, very much. I really appreciate the help.
Hopefully my experience will help someone else.