Cannot authenticate to AP on W2K with ZyAIR G-220 802.11b+g Wireless LAN

[Robert Flum]

I googled "wpa group handshake" and found a long discussion of the same
problem (group handshake failing) here:
https://dev.laptop.org/ticket/7825
The AP used is a D-Link WBR-2310, which I think is significant.  There is a
timing issue because the D-Link is fast.
There is mention of an XO, which seems to be in the middle of the AP-STA
communication.  I don't know what an XO is.  If you have time, please read
the discussion and see if it is relevant.
I will try running wpa_supplicant in verbose mode as mentioned in the
problem description and see if that allows the group handshake to succeed.
  thanks, Rob


On Thu, Mar 31, 2011 at 11:14 AM, Jouni Malinen <j at w1.fi> wrote:

> On Fri, Mar 25, 2011 at 06:00:27PM -0400, Robert Flum wrote:
> > I have a D-Link WBR1310, and am using WPA-PSK.
>
> > WPA: Sending EAPOL-Key 4/4
> > WPA: Installing PTK to the driver.
> > NDIS: OID_802_11_ADD_KEY - hexdump(len=64): 40 00 00 00 00 00 00 e0 20 00
> 00 00
> > 00 1b 11 5f 2a db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5e 48 d4 21
> 32 f9 de
> >  2e 1e f2 8b 53 e1 09 e7 a5 84 4d 68 1f 50 9b 2d f7 32 b9 d3 fd e3 a4 9d
> e3
> > NDIS: Set OID 0d01011d - hexdump(len=64): 40 00 00 00 00 00 00 e0 20 00
> 00 00 00
> >  1b 11 5f 2a db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5e 48 d4 21 32
> f9 de 2
> > e 1e f2 8b 53 e1 09 e7 a5 84 4d 68 1f 50 9b 2d f7 32 b9 d3 fd e3 a4 9d e3
> > State: 4WAY_HANDSHAKE -> GROUP_HANDSHAKE
> > Authentication with 00:1b:11:5f:2a:db timed out.
>
> It looks like the association and 4-way handshake go through without
> issues, but something happens here when the group key handshake is
> supposed to occur immediately after the 4-way handshake. The EAPOL-Key
> message 1/2 of the group key handshake is the first encrypted frame on
> the connection and for some reason that does not seem to go through all
> the way to wpa_supplicant. Unfortunately, this can be quite difficult to
> debug.. Either the AP is not sending the frame or is sending an invalid
> frame (which could be checked with a wireless sniffer) or the station
> driver is unable to use the key that was just configured to decrypt the
> frame.
>
> --
> Jouni Malinen                                            PGP id EFC895FA
> _______________________________________________
> HostAP mailing list
> HostAP at lists.shmoo.com
> http://lists.shmoo.com/mailman/listinfo/hostap
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20110401/92803174/attachment.htm