Hostapd handheld connection problem - handshake timeout to short

[Steffen Dreise]

Hi,

i got some problems with an Pocket Pc 5.0 mobile device - its a wireless
barcode scanner with WPA-Tikip support.

The summary of the problem is that the device cant connect over wpa-tkip
to hostapd 4.* or 5.*.

Im running debian stable with latest madwifi svn (1648) - hostapd 5.4 is
compiled with madwifi support and the headers from 1648 are used for
this. Hostapd works perfectly with a lot over other devices - also with
some other handhelds.

When the handheld scanner connects the following output comes from
hostapd:

ioctl[IEEE80211_IOCTL_DELKEY]: Invalid argument
ath0: STA 00:a0:f8:eb:4f:3a IEEE 802.1X: unauthorizing port
ath0: STA 00:a0:f8:eb:4f:3a IEEE 802.11: deauthenticated due to local deauth request
Wireless event: cmd=0x8c04 len=20
ath0: STA 00:a0:f8:eb:4f:3a IEEE 802.11: disassociated
Wireless event: cmd=0x8c03 len=20
ath0: STA 00:a0:f8:eb:4f:3a IEEE 802.11: associated
  New STA
ath0: STA 00:a0:f8:eb:4f:3a WPA: event 1 notification
madwifi_del_key: addr=00:a0:f8:eb:4f:3a key_idx=0
ath0: STA 00:a0:f8:eb:4f:3a WPA: start authentication
WPA: 00:a0:f8:eb:4f:3a WPA_PTK entering state INITIALIZE
madwifi_del_key: addr=00:a0:f8:eb:4f:3a key_idx=0
ath0: STA 00:a0:f8:eb:4f:3a IEEE 802.1X: unauthorizing port
WPA: 00:a0:f8:eb:4f:3a WPA_PTK_GROUP entering state IDLE
WPA: 00:a0:f8:eb:4f:3a WPA_PTK entering state AUTHENTICATION
WPA: 00:a0:f8:eb:4f:3a WPA_PTK entering state AUTHENTICATION2
WPA: 00:a0:f8:eb:4f:3a WPA_PTK entering state INITPSK
WPA: 00:a0:f8:eb:4f:3a WPA_PTK entering state PTKSTART
ath0: STA 00:a0:f8:eb:4f:3a WPA: sending 1/4 msg of 4-Way Handshake
WPA: Send EAPOL(secure=0 mic=0 ack=1 install=0 pairwise=8 ie_len=0 gtk_len=0 keyidx=0 encr=0)
ath0: STA 00:a0:f8:eb:4f:3a WPA: EAPOL-Key timeout
WPA: 00:a0:f8:eb:4f:3a WPA_PTK entering state PTKSTART
ath0: STA 00:a0:f8:eb:4f:3a WPA: sending 1/4 msg of 4-Way Handshake
WPA: Send EAPOL(secure=0 mic=0 ack=1 install=0 pairwise=8 ie_len=0 gtk_len=0 keyidx=0 encr=0)

I called the firm of the handheld scanner (the name of the firm is datalogic and the productname is "skorpio"). They told me that they
have some problems with there wifi card - they said that you have to adjust the timeout for the wpa-handshake on cisco devices for example.

I searched around for a similar option for hostapd but didnt get any result.

The client can connect to the ap but the encryption wont work - as i said - its possible to connect with other devices to that hostapd.

The power management of the handheld scanner is off - wpa-tkip psk is used.

Here is the hostapd.conf just to go secure:
### MESHNODE HOSTAPD CONF

interface=ath0
bridge=br0
driver=madwifi
logger_syslog=-1
logger_syslog_level=2
logger_stdout=-1
logger_stdout_level=2
debug=0
dump_file=/tmp/hostapd.dump
ctrl_interface=/var/run/hostapd
ctrl_interface_group=0
ssid=test
macaddr_acl=0
auth_algs=3
eap_server=0
wpa=1
wpa_passphrase=PASS
wpa_key_mgmt=WPA-PSK
wpa_pairwise=TKIP

Btw - im using only TKIP and not "TKIP CCMP" because i got some problem with other handhelds when CCMP is enabled.

Does anybody got a idea what i can do for that problem?

Best regards,

Steffen