Authentication issues with WPA2 and hostapd-0.7.1

Mon Feb 1 09:06:30 PST 2010

I'm running 2.6.27.42 with compat-wireless-2010-01-27, and
hostapd-0.7.1.  I'm seeing syslogging like:

Jan 31 20:36:09 pbx daemon.notice hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: did not acknowledge authentication response
Jan 31 20:36:15 pbx daemon.notice hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: did not acknowledge authentication response
Jan 31 20:36:20 pbx daemon.notice hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: did not acknowledge authentication response
Jan 31 20:36:27 pbx daemon.notice hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: did not acknowledge authentication response
Jan 31 20:36:27 pbx daemon.info hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: associated (aid 1)
Jan 31 20:36:27 pbx daemon.info hostapd: ap0: STA f8:1e:df:1e:c2:23 RADIUS: starting accounting session 4B665929-00000000
Jan 31 20:36:27 pbx daemon.info hostapd: ap0: STA f8:1e:df:1e:c2:23 WPA: pairwise key handshake completed (RSN)
Jan 31 20:37:08 pbx daemon.notice hostapd: ap0: STA 00:24:23:08:e9:88 IEEE 802.11: did not acknowledge authentication response
Jan 31 20:37:13 pbx daemon.info hostapd: ap0: STA 00:24:23:08:e9:88 IEEE 802.11: disassociated
Jan 31 20:37:46 pbx daemon.notice hostapd: ap0: STA 00:26:b0:66:c3:df IEEE 802.11: did not acknowledge authentication response
Jan 31 20:38:15 pbx daemon.notice hostapd: ap0: STA 00:24:23:08:e9:88 IEEE 802.11: did not acknowledge authentication response
Jan 31 20:38:20 pbx daemon.info hostapd: ap0: STA 00:24:23:08:e9:88 IEEE 802.11: disassociated
Jan 31 20:39:23 pbx daemon.notice hostapd: ap0: STA 00:24:23:08:e9:88 IEEE 802.11: did not acknowledge authentication response
Jan 31 20:39:28 pbx daemon.info hostapd: ap0: STA 00:24:23:08:e9:88 IEEE 802.11: disassociated
Jan 31 20:39:41 pbx daemon.info hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: disassociated
Jan 31 20:39:42 pbx daemon.info hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: deauthenticated due to inactivity

or sometimes:

Jan 31 21:39:01 pbx daemon.notice hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: did not acknowledge authentication response
Jan 31 21:39:02 pbx daemon.notice hostapd: ap0: STA 00:24:23:08:e9:88 IEEE 802.11: did not acknowledge authentication response
Jan 31 21:39:07 pbx daemon.info hostapd: ap0: STA 00:24:23:08:e9:88 IEEE 802.11: disassociated
Jan 31 21:39:07 pbx daemon.notice hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: did not acknowledge authentication response
Jan 31 21:39:08 pbx daemon.notice hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: did not acknowledge authentication response
Jan 31 21:39:11 pbx daemon.notice hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: did not acknowledge authentication response
Jan 31 21:39:17 pbx daemon.notice hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: did not acknowledge authentication response
Jan 31 21:39:22 pbx daemon.notice hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: did not acknowledge authentication response
Jan 31 21:39:27 pbx daemon.info hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: authenticated
Jan 31 21:39:32 pbx daemon.notice hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: did not acknowledge authentication response
Jan 31 21:39:37 pbx daemon.notice hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: did not acknowledge authentication response
Jan 31 21:39:37 pbx daemon.info hostapd: ap0: STA f8:1e:df:1e:c2:23 IEEE 802.11: associated (aid 2)
Jan 31 21:39:38 pbx daemon.info hostapd: ap0: STA f8:1e:df:1e:c2:23 RADIUS: starting accounting session 4B66681C-00000001
Jan 31 21:39:38 pbx daemon.info hostapd: ap0: STA f8:1e:df:1e:c2:23 WPA: pairwise key handshake completed (RSN)
Jan 31 21:40:09 pbx daemon.notice hostapd: ap0: STA 00:24:23:08:e9:88 IEEE 802.11: did not acknowledge authentication response
Jan 31 21:40:14 pbx daemon.info hostapd: ap0: STA 00:24:23:08:e9:88 IEEE 802.11: disassociated

My .config file looks like:

CC=/home/philipp/alix/build_i586/staging_dir/bin/i586-linux-uclibc-gcc
CFLAGS+=-Os -pipe -fomit-frame-pointer -march=k6-2 -fno-align-functions -fno-align-loops -fno-align-jumps -fno-align-labels  -isysroot /home/philipp/alix/build_i586/staging_dir -isystem /home/philipp/alix/build_i586/staging_dir/usr/include -D_GNU_SOURCE
LDFLAGS=--sysroot=/home/philipp/alix/build_i586/staging_dir -L/home/philipp/alix/build_i586/staging_dir/lib -L/home/philipp/alix/build_i586/staging_dir/usr/lib
CFLAGS+=-Os -Wall
V=1
CONFIG_IEEE80211N=y
CONFIG_DRIVER_NL80211=y
CONFIG_DRIVER_NONE=y
CONFIG_DRIVER_WIRED=y
CONFIG_IAPP=y
CONFIG_RSN_PREAUTH=y
CONFIG_PEERKEY=y
CONFIG_EAP=y
CONFIG_EAP_MD5=y
CONFIG_EAP_TLS=y
CONFIG_EAP_MSCHAPV2=y
CONFIG_EAP_PEAP=y
CONFIG_EAP_GTC=y
CONFIG_EAP_TTLS=y
CONFIG_EAP_SIM=y
CONFIG_EAP_AKA=y
CONFIG_EAP_AKA_PRIME=y
CONFIG_EAP_PAX=y
CONFIG_EAP_PSK=y
CONFIG_EAP_SAKE=y
CONFIG_EAP_GPSK=y
CONFIG_EAP_GPSK_SHA256=y
CONFIG_EAP_FAST=y
CONFIG_EAP_IKEV2=y
CONFIG_PKCS12=y
CONFIG_IPV6=y
CONFIG_IEEE80211R=y
CONFIG_IEEE80211N=y
CONFIG_TLS=openssl

My clients are a Win7, an iPhone 3Gs, and XP-SP3.  Only XP seems to be able to authenticate.  This is with an AR9160.

My config file looks like:

# automatically generated. do not edit!

logger_syslog=-1
logger_syslog_level=2
logger_stdout=--1
logger_stdout_level=2

debug=0

ctrl_interface_group=0

# should this be per-ssid?
macaddr_acl=0

dump_file=/tmp/hostapd.dump

bridge=br1
interface=ap0
driver=nl80211
ssid=xyzzy
channel=6

hw_mode=g
auth_algs=1

wpa_passphrase=yes we have no bananas
wpa=2
wpa_key_mgmt=WPA-PSK
wpa_pairwise=CCMP

ignore_broadcast_ssid=1

wpa_strict_rekey=1
wpa_group_rekey=600
wpa_gmk_rekey=14400

I'm not sure if the issue is with CW (compat-wireless) or Hostapd.

I was previously using compat-wireless-2009-11-15 with hostapd-0.6.9 or various weekly snapshots from git://w1.fi/srv/git/hostap.git.

I'll try the same with an AR5413 and see if there's any difference...

So the AR5413 with compat-wireless-2010-01-27 and hostapd-2010-01-30 managed to authenticate XP, iPhone 3Gs, and Win7.

Now trying against hostapd-0.7.1 on the AR5413... XP, iPhone 3Gs, and Win7.

Seems to be be an issue with the AR9160 drivers, but that would surprise me, since the Ath9k is developed a lot more actively than the Ath5k.

Anyone else know of a combination of CW and hostapd that works well with WPA2 and both chipsets?

Thanks,

-Philip