Atheros 5212 and WPA issues

[Pedro Ramalhais]

Hi!

On Wed, 2004-09-01 at 17:06, Wouter de Jong wrote:
> On Wed, Sep 01, 2004 at 07:05:28AM -0700, Jouni Malinen wrote:
> > On Wed, Sep 01, 2004 at 10:16:59AM +0200, Wouter de Jong wrote:
> 
> Hi Jouni,
> 
> > > I can successfully use it with WEP-encryption, but I just can't get 
> > > WPA to work. I've attached wpa_supplicant output. (Note that there are
> > > more WLAN's configured here... the correct one is 'WIDEXS') 
> > > (AP is currently in WPA-PSK mode with TKIP).
> > 
> > Do you know how the group cipher is configured? Is there any special
> > configuration for it or is it supposed to be TKIP for everything?
> 
> Mm, see below. Don't know exactly what you mean :)
> 
> > > Also, my AccessPoint is a Buffalo WLA-G54 (www.buffalotech.com)
> > 
> > What firmwate version are you using?
> 
> WLA-G54 Ver.2.05, the latest available as of January 19th 2004
> 
> > > Configuration file '/etc/wpa_supplicant.conf' -> '/etc/wpa_supplicant.conf'
> > 
> > Could you please send the configuration file you are using?
> 
> Sure, I should have sent it in the first place :)
> Here it is, but note that I've tried almost every combination that I've
> found in the docs and howto's, etc:
> 
> ctrl_interface=/var/run/wpa_supplicant
> ctrl_interface_group=0
> eapol_version=1
> ap_scan=0
> network={
> 	scan_ssid=1
> 	proto=WPA
> 	key_mgmt=WPA-PSK
> 	ssid="WIDEXS"
> #	pairwise=TKIP

Maybe you should set pairwise=TKIP CCMP so it accepts both cyphers.

> 	psk="widexslan001"

psk=64 HEXADECIMAL DIGITS, not a passphrase (i think)

> 	priority=5
> }
> 
> Maybe this is a config that shouldn't work, but it just doesn't 
> make a difference with whatever I configure in key_mgmt, pairwise, etc.
> 
> > > WPA: Own WPA IE - hexdump(len=24): dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02
> > 
> > > IEEE 802.1X RX: version=1 type=3 length=95
> > >   EAPOL-Key type=254
> > > WPA: RX message 1 of 4-Way Handshake from 00:07:40:a0:80:fe (ver=1)
> > > Invalid group cipher (1).
> > > WPA: Failed to generate WPA IE (for msg 2 of 4).
> > 
> > Hmm.. That group cipher 1 would be WPA_CIPHER_NONE which is not
> > allowed.. Odd that wpa_supplicant allowed the negotiation to go this
> > far. Own WPA IE above uses TKIP as the group cipher.. I will need to go
> > through the code to understand how this could happen.
> 
> Mm, I see. The config-page for the Wireless LAN Security looks like this: 
> http://www.maddog2k.net/stuff/tmp/buffalo-wla-g54-sc01.png
> 
> > Which version of wpa_supplicant are you using?
> 
> Version 0.2.4
> 
> Thanks for your time :)
-- 
Pedro Ramalhais <ramalhais at serrado.net>