EAP-TLV: Earlier failure - force failed Phase 2

[Adam Jacobs]

When I upgraded my Ubuntu laptop to Ubuntu 15.10 (wpa_supplicant 2.4) I could no longer connect to our WPA2-Enterprise network.  Did some research, upgraded our RADIUS servers from Windows 2003 (yes, I'm suitably ashamed) to Windows 2012r2, and now I'm able to connect BUT my sessions randomly drop and won't reconnect until I restart wpa_supplicant.  Relevants logs:

Dec 17 07:18:20 jeremiah wpa_supplicant[1146]: wlan0: CTRL-EVENT-EAP-STARTED EAP authentication started
Dec 17 07:18:20 jeremiah wpa_supplicant[1146]: wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Dec 17 07:18:20 jeremiah wpa_supplicant[1146]: wlan0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Dec 17 07:18:20 jeremiah wpa_supplicant[1146]: EAP-MSCHAPV2: Authentication succeeded
Dec 17 07:18:20 jeremiah wpa_supplicant[1146]: EAP-TLV: TLV Result - Success - EAP-TLV/Phase2 Completed
Dec 17 07:18:20 jeremiah wpa_supplicant[1146]: EAP-TLV: Earlier failure - force failed Phase 2
Dec 17 07:18:20 jeremiah wpa_supplicant[1146]: wlan0: CTRL-EVENT-EAP-FAILURE EAP authentication failed
Dec 17 07:18:22 jeremiah wpa_supplicant[1146]: wlan0: Authentication with f8:4f:57:31:61:1f timed out.
Dec 17 07:18:22 jeremiah kernel: [ 4230.395276] wlan0: deauthenticating from f8:4f:57:31:61:1f by local choice (Reason: 3=DEAUTH_LEAVING)
Dec 17 07:18:22 jeremiah wpa_supplicant[1146]: wlan0: CTRL-EVENT-DISCONNECTED bssid=f8:4f:57:31:61:1f reason=3 locally_generated=1
Dec 17 07:18:22 jeremiah wpa_supplicant[1146]: wlan0: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="Mocana-SECURE" auth_failures=1 duration=10 reason=AUTH_FAILED
Dec 17 07:18:22 jeremiah NetworkManager[5963]: <warn> Connection disconnected (reason -3)
Dec 17 07:18:22 jeremiah wpa_supplicant[1146]: p2p-dev-wlan0: CTRL-EVENT-REGDOM-CHANGE init=CORE type=WORLD
Dec 17 07:18:22 jeremiah NetworkManager[5963]: <info> (wlan0): supplicant interface state: completed -> disconnected



It seems to happen more-or-less randomly; I'm not doing anything in particular when the connection drops.  I'd say an average session lasts about 30 minutes or so, before it dies and I need to restart.

Disabling TLS1.2 in wpa_supplicant seems to solve the problem, but that's a workaround, not a fix.


Any ideas?  In particular, "EAP-TLV: Earlier failure - force failed Phase 2" seems to be where the trouble starts.  Anyone know what that means?


Happy New Year!





Adam