Non-bridging access point

[Richard Lewis]

At Tue, 30 Sep 2014 17:13:38 +0100,
Richard Lewis wrote:
> 
> Hi there,
> 
> I'm trying to configure a Debian GNU/Linux "jessie" box to work as a
> wifi access point. It's going to use WPA PSK authentication, provide
> DHCP for clients, but clients will only use the access point to access
> services runnning on the host itself; there will be no gateway to any
> other network (including the internet).
> 
> [...]
> 
> Both dhcpd and hostapd are running. I can scan the wifi network from
> my client machine. When I try to connect to the network I get the
> following on the client machine:
> 
> local# iw dev wlan0 connect myap
> local# wpa_supplicant -i wlan0 -c <(wpa_passphrase myap thepassword)
> Successfully initialized wpa_supplicant
> wlan0: CTRL-EVENT-SCAN-STARTED 
> wlan0: SME: Trying to authenticate with xx:xx:xx:xx:xx:xx (SSID='myap' freq=2437 MHz)
> wlan0: Trying to associate with xx:xx:xx:xx:xx:xx (SSID='myap' freq=2437 MHz)
> wlan0: Associated with xx:xx:xx:xx:xx:xx
> wlan0: CTRL-EVENT-DISCONNECTED bssid=xx:xx:xx:xx:xx:xx reason=2
> wlan0: WPA: 4-Way Handshake failed - pre-shared key may be incorrect
> wlan0: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="myap" auth_failures=1 duration=10 reason=WRONG_KEY
> wlan0: CTRL-EVENT-REGDOM-CHANGE init=DRIVER type=WORLD
> wlan0: CTRL-EVENT-SCAN-STARTED 
> wlan0: CTRL-EVENT-SCAN-STARTED 
> ^Cwlan0: CTRL-EVENT-TERMINATING 
> 
> [...]
> WPA: EAPOL-Key TX status for STA c:l:i:e:n:t ack=1
> WPA: Increase initial EAPOL-Key 1/4 timeout by 1000 ms because of acknowledged frame
> wlan0: STA c:l:i:e:n:t WPA: EAPOL-Key timeout
> [...]
> wlan0: STA c:l:i:e:n:t WPA: PTKSTART: Retry limit 4 reached
> WPA: c:l:i:e:n:t WPA_PTK entering state DISCONNECT
> wpa_sta_disconnect STA c:l:i:e:n:t
> hostapd_wpa_auth_disconnect: WPA authenticator requests disconnect: STA c:l:i:e:n:t reason 2
> 
> [...]

Well, I've tried removing the WPA settings altogether and I can
successfully connect to the access point and get an IP address and
access services running on the host this way. Of course, this is now
without any security.

Anyone have any ideas what's wrong with my WPA configuration?

Thanks,
Richard