Linux hosts reauthenticating every minute

Orion Poplawski orion at nwra.com
Mon Sep 19 09:02:11 PDT 2022 

We're seeing some of our linux clients re-authenticating to our 802.1X wired
network every minute or so.  Running wpa_supplicant in debug yields:

Sep 19 08:47:26 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state IDLE
Sep 19 08:47:26 host wpa_supplicant[1436180]: EAPOL authentication completed -
result=SUCCESS

Sep 19 08:47:56 host wpa_supplicant[1436180]: EAPOL: authWhile --> 0
Sep 19 08:47:56 host wpa_supplicant[1436180]: EAPOL: startWhen --> 0
Sep 19 08:47:58 host wpa_supplicant[1436180]: l2_packet_receive:
src=78:24:af:85:12:93 len=46
Sep 19 08:47:58 host wpa_supplicant[1436180]: enp6s0: RX EAPOL from
78:24:af:85:12:93
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: Received unknown EAPOL type 1
Sep 19 08:47:58 host wpa_supplicant[1436180]: l2_packet_receive:
src=78:24:af:85:12:93 len=46
Sep 19 08:47:58 host wpa_supplicant[1436180]: enp6s0: RX EAPOL from
78:24:af:85:12:93
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: Received EAP-Packet frame
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_PAE entering state
RESTART
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state INITIALIZE
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: maintaining EAP method data
for fast reauthentication
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state IDLE
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_PAE entering state
AUTHENTICATING
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
REQUEST
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: getSuppRsp
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state RECEIVED
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: Ignored EAP-Response
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state DISCARD
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state IDLE
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
RECEIVE
Sep 19 08:47:58 host wpa_supplicant[1436180]: l2_packet_receive:
src=78:24:af:85:12:93 len=46
Sep 19 08:47:58 host wpa_supplicant[1436180]: enp6s0: RX EAPOL from
78:24:af:85:12:93
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: Received EAP-Packet frame
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
REQUEST
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: getSuppRsp
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state RECEIVED
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: Ignored EAP-Response
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state DISCARD
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state IDLE
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
RECEIVE
Sep 19 08:47:58 host wpa_supplicant[1436180]: l2_packet_receive:
src=78:24:af:85:12:93 len=200
Sep 19 08:47:58 host wpa_supplicant[1436180]: enp6s0: RX EAPOL from
78:24:af:85:12:93
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: Received EAP-Packet frame
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
REQUEST
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: getSuppRsp
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state RECEIVED
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: Ignored EAP-Response
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state DISCARD
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state IDLE
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
RECEIVE
Sep 19 08:47:58 host wpa_supplicant[1436180]: l2_packet_receive:
src=78:24:af:85:12:93 len=46
Sep 19 08:47:58 host wpa_supplicant[1436180]: enp6s0: RX EAPOL from
78:24:af:85:12:93
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: Received EAP-Packet frame
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
REQUEST

Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: getSuppRsp
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state RECEIVED
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: Ignored EAP-Response
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state DISCARD
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state IDLE
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
RECEIVE
Sep 19 08:47:58 host wpa_supplicant[1436180]: l2_packet_receive:
src=78:24:af:85:12:93 len=46
Sep 19 08:47:58 host wpa_supplicant[1436180]: enp6s0: RX EAPOL from
78:24:af:85:12:93
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: Received EAP-Packet frame
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
REQUEST
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: getSuppRsp
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state RECEIVED
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: Ignored EAP-Response
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state DISCARD
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state IDLE
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
RECEIVE
Sep 19 08:47:58 host wpa_supplicant[1436180]: l2_packet_receive:
src=78:24:af:85:12:93 len=1280
Sep 19 08:47:58 host wpa_supplicant[1436180]: enp6s0: RX EAPOL from
78:24:af:85:12:93
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: Received EAP-Packet frame
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
REQUEST
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: getSuppRsp
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state RECEIVED
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: Ignored EAP-Response
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state DISCARD
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state IDLE
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
RECEIVE
Sep 19 08:47:58 host wpa_supplicant[1436180]: l2_packet_receive:
src=78:24:af:85:12:93 len=1243
Sep 19 08:47:58 host wpa_supplicant[1436180]: enp6s0: RX EAPOL from
78:24:af:85:12:93
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: Received EAP-Packet frame
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
REQUEST
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: getSuppRsp
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state RECEIVED
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: Ignored EAP-Response
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state DISCARD
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state IDLE
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
RECEIVE
Sep 19 08:47:58 host wpa_supplicant[1436180]: l2_packet_receive:
src=78:24:af:85:12:93 len=46
Sep 19 08:47:58 host wpa_supplicant[1436180]: enp6s0: RX EAPOL from
78:24:af:85:12:93
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: Received EAP-Packet frame
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
REQUEST
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: getSuppRsp
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state RECEIVED
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: Ignored EAP-Response
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state DISCARD
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAP: EAP entering state IDLE
Sep 19 08:47:58 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
RECEIVE

Sep 19 08:48:27 host wpa_supplicant[1436180]: EAPOL: authWhile --> 0
Sep 19 08:48:27 host wpa_supplicant[1436180]: EAPOL: SUPP_BE entering state
TIMEOUT
Sep 19 08:48:27 host wpa_supplicant[1436180]: EAPOL: SUPP_PAE entering state
CONNECTING

My guess is that the reception of the "unknown EAPOL type 1" packet triggers
the re-auth.  Any idea what this might be?  Should it trigger a re-auth?

Thanks.

wpa_supplicant-2.10-2.fc35.x86_64


-- 
Orion Poplawski
IT Systems Manager                         720-772-5637
NWRA, Boulder/CoRA Office             FAX: 303-415-9702
3380 Mitchell Lane                       orion at nwra.com
Boulder, CO 80301                 https://www.nwra.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3847 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.infradead.org/pipermail/hostap/attachments/20220919/6faba177/attachment.p7s>

More information about the Hostap mailing list