FT authentication fails on FT-SAE

Michael Yartys michael.yartys at protonmail.com
Thu Aug 12 23:55:04 PDT 2021


I'm running an FT-SAE network on two routers with OpenWrt, and I've encountered an issue where clients that attempt to authenticate with FT fail due to an invalid PMKID (at least that's what the AP replies in the authentication response). The routers are running a master build of OpenWrt from 9. August, and the hostapd version is a master build up to and including: https://w1.fi/cgit/hostap/commit/?id=b102f19bcc53c7f7db3951424d4d46709b4f1986

I've tried the following clients:

-- Laptop 1 --
* Intel 7260AC
* Fedora 34
* Kernel: 5.13.8-200
* wpa_supplicant v2.9

-- Laptop 2 --
* Intel 7260AC
* Ubuntu 20.04.2 LTS
* Kernel: 5.11.0-25
* wpa_supplicant v2.10-devel-hostap_2_9-2285-gc3155a725 (recent snapshot)

-- iPad --
* iPadOS 15 Beta 4

I can provide logs from wpa_supplicant, hostapd, and packet captures to developers personally.


More information about the Hostap mailing list