wpa_supplicant can't find hidden SSID

[Dan Williams]

On Thu, 2009-03-19 at 09:14 +0000, planetf1 wrote:
> I' running wpa supplicant 6.8.1 within Fedora rawhide.I'm struggling to 
> connect to a Cisco AP
>   - serving multiple SSIDs
>   - with the one I want to connect to hidden (Grrr.. I so hate that but 
> can't control it)
>   - running LEAP & WPA2 EAP-TLS with digital certs
>   - with multiple AP's
> 
> Under both iwl3945 (Intel 3945abg) drivers & ath5k (ar5004x I think.. 
> .card now broken :-( ) this fails to associate. I'm using iwl3945 right 
> now with no extra parms in modprobe.d. Did add some debug but either got 
> info that didn't seem helpful, or data for every single packet...

Try turning off hardware scanning with "disable_hw_scan=1" when loading
the 3945 driver in modprobe.conf.  We've found Intel hardware scanning
still somewhat flaky in quite a few cases.

Dan

> INitially using NM, but fails under wpa-supplicant standalone also
> 
> Error is basically that I cannot associate with errors like:
> : 00:1b:90:74:34:40 ssid='' wpa_ie_len=24 rsn_ie_len=20 caps=0x11
>     skip - SSID mismatch
> 1: 00:1b:90:75:db:60 ssid='' wpa_ie_len=24 rsn_ie_len=20 caps=0x11
>     skip - SSID mismatch
> 2: 00:1b:90:74:35:c0 ssid='' wpa_ie_len=24 rsn_ie_len=20 caps=0x11
>     skip - SSID mismatch
> Try to find non-WPA AP
> 0: 00:1b:90:74:34:40 ssid='' wpa_ie_len=24 rsn_ie_len=20 caps=0x11
>     skip - SSID mismatch
> 1: 00:1b:90:75:db:60 ssid='' wpa_ie_len=24 rsn_ie_len=20 caps=0x11
>     skip - SSID mismatch
> 2: 00:1b:90:74:35:c0 ssid='' wpa_ie_len=24 rsn_ie_len=20 caps=0x11
>     skip - SSID mismatch
> 
> scan results are similar to this (one out of four I can see right now)
>           Cell 02 - Address: 00:1B:90:74:34:40
>                      ESSID:""
>                      Mode:Master
>                      Channel:11
>                      Frequency:2.462 GHz (Channel 11)
>                      Quality=74/100  Signal level:-60 dBm  Noise 
> level=-127 dBm
>                      Encryption key:on
>                      IE: Unknown: 000100
>                      IE: Unknown: 010882848B0C12961824
>                      IE: Unknown: 03010B
>                      IE: Unknown: 050401020000
>                      IE: Unknown: 0706474249010D17
>                      IE: Unknown: 2A0100
>                      IE: IEEE 802.11i/WPA2 Version 1
>                          Group Cipher : WEP-104
>                          Pairwise Ciphers (1) : CCMP
>                          Authentication Suites (1) : 802.1x
>                      IE: Unknown: 32043048606C
>                      IE: Unknown: 
> 851E030089001F00FF0319006875722D61702D61346C36300000000001000027
>                      IE: WPA Version 1
>                          Group Cipher : WEP-104
>                          Pairwise Ciphers (1) : TKIP
>                          Authentication Suites (1) : 802.1x
>                      IE: Unknown: DD06004096010100
>                      IE: Unknown: DD050040960305
>                      IE: Unknown: DD050040960B09
>                      IE: Unknown: DD050040961401
>                      IE: Unknown: 
> DD180050F2020101810003A5000027A500004254BC0062436600
>                      Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 6 Mb/s; 9 Mb/s
>                                11 Mb/s; 12 Mb/s; 18 Mb/s; 24 Mb/s; 36 Mb/s
>                                48 Mb/s; 54 Mb/s
>                      Extra:tsf=000000bd8f08518c
>                      Extra: Last beacon: 133ms ago
> 
> config file is
> 
> ctrl_interface=/var/run/wpa_supplicant
> ap_scan=1
> eapol_version=1
> fast_reauth=1
> network={
>          ssid="MYSSID"
>          scan_ssid=1
>          key_mgmt=WPA-EAP
>          pairwise=CCMP TKIP
>          group=WEP104
>          eap=TLS
>          identity="MY EMAIL"
>          ca_cert="CACERT.pem"
>          client_cert="MYCERT.cer"
>          private_key="MYKEY.pem"
>          private_key_passwd="MYPASSWORD"
>          eapol_flags=3
>          priority=100
> }
> 
> I'm guessing there is some issue here with the IE parsing and the 
> complexity of multiple SSIDs with hiding involved combined with 
> security. Eeek.
> 
> This *used* to work at least some of the time under F10 & earlier wpa 
> supplicant version, but don't have exact numbers. Also the APs could 
> have changed configuration.
> 
> WPA2-PSK AES is working just nice.
> 
> ap_scan 0, 2 don't help either.
> 
> 
> Note -- previously raised on fedora bugzilla at 
> https://bugzilla.redhat.com/show_bug.cgi?id=489701 as an NM issue
> 
> Thanks for any ideas...
> Nigel.
> 
> _______________________________________________
> HostAP mailing list
> HostAP at lists.shmoo.com
> http://lists.shmoo.com/mailman/listinfo/hostap