Cannot authenticate to AP on W2K with ZyAIR G-220 802.11b+g Wireless LAN

[Jouni Malinen]

On Fri, Mar 25, 2011 at 06:00:27PM -0400, Robert Flum wrote:
> I have a D-Link WBR1310, and am using WPA-PSK.

> WPA: Sending EAPOL-Key 4/4
> WPA: Installing PTK to the driver.
> NDIS: OID_802_11_ADD_KEY - hexdump(len=64): 40 00 00 00 00 00 00 e0 20 00 00 00
> 00 1b 11 5f 2a db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5e 48 d4 21 32 f9 de
>  2e 1e f2 8b 53 e1 09 e7 a5 84 4d 68 1f 50 9b 2d f7 32 b9 d3 fd e3 a4 9d e3
> NDIS: Set OID 0d01011d - hexdump(len=64): 40 00 00 00 00 00 00 e0 20 00 00 00 00
>  1b 11 5f 2a db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5e 48 d4 21 32 f9 de 2
> e 1e f2 8b 53 e1 09 e7 a5 84 4d 68 1f 50 9b 2d f7 32 b9 d3 fd e3 a4 9d e3
> State: 4WAY_HANDSHAKE -> GROUP_HANDSHAKE
> Authentication with 00:1b:11:5f:2a:db timed out.

It looks like the association and 4-way handshake go through without
issues, but something happens here when the group key handshake is
supposed to occur immediately after the 4-way handshake. The EAPOL-Key
message 1/2 of the group key handshake is the first encrypted frame on
the connection and for some reason that does not seem to go through all
the way to wpa_supplicant. Unfortunately, this can be quite difficult to
debug.. Either the AP is not sending the frame or is sending an invalid
frame (which could be checked with a wireless sniffer) or the station
driver is unable to use the key that was just configured to decrypt the
frame.

-- 
Jouni Malinen                                            PGP id EFC895FA