hostapd: wlan#sta link isn't working

[Denis Vlasenko]

Remote AP is Linux 2.6.2, hostap 0.1.2, mac=00:05:5d:fa:56:36
My AP is Linux 2.6.5, hostap 0.1.3, mac=00:05:5d:fa:1a:e3

I run hostapd with this config:

# grep -v '^#' hostapd.conf | grep -v '^$'
interface=wlan0
logger_syslog=0
logger_syslog_level=2
logger_stdout=-1
logger_stdout_level=1
debug=1
dump_file=/tmp/hostapd.dump
daemonize=0
ssid=test
macaddr_acl=0
auth_algs=3
assoc_ap_addr=00:05:5d:fa:56:36
minimal_eap=0
eap_message=hello
eapol_key_index_workaround=0
own_ip_addr=127.0.0.1

hostapd starts up, seemingly no problems:

Configuration file: /tmp/hostapd.conf
Opening raw packet socket for ifindex 9
Using interface ifaap with hwaddr 00:05:5d:fa:1a:e3 and ssid 'test'
Flushing old station entries
Deauthenticate all stations
Authenticate with AP 00:05:5d:fa:56:36 SSID=ear (as station)
MGMT (TX callback) ACK
mgmt::auth cb
handle_auth_cb: STA 00:05:5d:fa:56:36 not found
mgmt::auth
authentication: STA=00:05:5d:fa:56:36 auth_alg=0 auth_transaction=2 status_code=0 wep=0
Authenticated (as station) with AP 00:05:5d:fa:56:36
Associate with AP 00:05:5d:fa:56:36 SSID=ear (as station)
MGMT (TX callback) ACK
unknown mgmt cb frame subtype 0
mgmt::assoc_resp
Associated (as station) with AP 00:05:5d:fa:56:36 (aid=3)

but as soon as I try to ping remote, tcpdump shows ARPs
from me to remote, nothing back. hostapd says repeatedly:

mgmt::deauth
deauthentication: STA=00:05:5d:fa:56:36 reason_code=7 (class 3 frame received from nonassociated station)
Assoc AP 00:05:5d:fa:56:36 sent deauthentication (reason_code=7 (class 3 frame received from nonassociated station)) - try to authenticate
Authenticate with AP 00:05:5d:fa:56:36 SSID=ear (as station)
MGMT (TX callback) ACK
mgmt::auth cb
handle_auth_cb: STA 00:05:5d:fa:56:36 not found
mgmt::auth
authentication: STA=00:05:5d:fa:56:36 auth_alg=0 auth_transaction=2 status_code=0 wep=0
Authenticated (as station) with AP 00:05:5d:fa:56:36
Associate with AP 00:05:5d:fa:56:36 SSID=ear (as station)
MGMT (TX callback) ACK
unknown mgmt cb frame subtype 0
mgmt::assoc_resp
Associated (as station) with AP 00:05:5d:fa:56:36 (aid=3)

For each such event syslog on remote AP says:

wlan0: deauthentication: 00:05:5d:fa:1a:e3 len=2, reason_code=3
wlan0: dropped received packet from non-associated STA 00:05:5d:fa:1a:e3 (type=0x02, subtype=0x00)
handle_ap_item - data frame
wlan0: 00:05:5d:fa:1a:e3 auth_cb - STA authenticated
wlan0: 00:05:5d:fa:1a:e3 assoc_cb - STA associated

(3 = "deauthenticated because sending station is leaving or has left IBSS or ESS")

This looks wrong in hostapd output:
"handle_auth_cb: STA 00:05:5d:fa:56:36 not found" means
that hostapd treats auth response from remote AP as an
auth request from a STA!

"unknown mgmt cb frame subtype 0" too looks suspicious.
--
vda