gmane.linux.drivers.hostap

does hostapd work with wired networks ???

Jush Turner — 2012-05-26T05:48:15

hello everybody
my main question is : can hostapd be used in a wired network ?
im using the following network with hostapd on the authenticator :

Authentication server <------------------wired------
--------------->
Authenticator(hostapd) <-------------------wired-------------------->
User (win XP with WinRadius)
1.100 ------------------- 1.200 , 0.13 --------------------- 0.12
and this is my configurations for hostapd :

interface=eth1
driver=wired
dump_file=/tmp/hostapd.dump

ctrl_interface=/var/run/hostapd
ctrl_interface_group=0

logger_syslog=-1
logger_syslog_level=2
logger_stdout=-1
logger_stdout_level=2

ieee8021x=1
eapol_key_index_workaround=0
eapol_version=1

own_ip_addr=192.168.1.200
auth_server_addr=192.168.1.100
auth_server_port=1812
auth_server_shared_secret=secret
acct_server_addr=192.168.1.100
acct_server_port=1813
acct_server_shared_secret=secret

there is a problem : the EAPOL_start is sent to the authenticator by
the user (win XP) but the authenticator doesn't reply to user. what is
the sol

WPA2 Help

Polarship · — 2012-05-25T10:18:08










Hello.



I
use Debian squeeze 6.0.5, kernel 2.6.32-5-amd64.



I
am trying to connect to my phone's router using WPA2 PSK, without
results.



There
is any problem using open protocol, without encryption, but I want to
use WPA.



A
message I have seen is “scanning” as a result of wpa_cli.



Anybody
can help ?



Please
answer to polarship< at >hotmail.com
and you will get a place in heaven.



Usually
I connect to belkin54g
but
sometimes I want to use WPA2 to connect to WLAN02, my phone's router.



And
after using WLAN02, i would like to connect back to belkin54g without
having to reboot.



Any
answers for the reason I have to reboot to connect again to belkin54g
?



=============================================================
###
This File: /etc/network/interfaces



#
This file describes the network interfaces available on your system
#
and how to activate them. For more information, see interfaces(5).
#
The loopback network interface



auto
lo
iface
lo inet loopback



#
The primary n

How to calculate the percentage of signal strength level from dBm

Chih-Chieh Chou — 2012-05-24T21:53:57

Hi All,

  Here's a question that I have been searching the Internet but
couldn't get an solution to it. I wanted to know all the wireless
hotspots around me and their signal strengths. I used "wpa_cli scan;
wpa_cli scan_results" to list the hotspots around me with signal
level, which were -75 and -83 in my case. I guess the unit here is
dBm. My question is how to convert dBm to percentage of signal
strength. I'm using ath9k driver. I saw a document on the internet
saying that I can use the following formula to convert dBm to
percentage:

    RSSI - 95 = dBm
    RSSI_MAX for Atheros chips is 60. So, -35 dBm is equivalent to
100%, and -95 dBm to 0%


  It doesn't look right to me because I put an access point very close
to me but got -79 dBm via wpa_cli. Please can anyone help?

Thanks and Best Regards,
CC

[PATCH] P2P When UUID gets changed and more pbc session entriesare created, remove logic should check for loop entry address

Neeraj Kumar Garg — 2012-05-24T08:37:27

When UUID gets changed between a received probe request (for wps) and the M1 message, we might endup creating 2 entries in pbc sessions list (with same device address and different UUID). But when we try to remove the entries, we need to compare that pbc sessions list entry->address. This will ensure that both entries gets removed.
Please let me know if the below patch is OK or I am missing something in my understanding.

From 1785eabf9c28bcd3012cc18bc510711f7f8febb9 Mon Sep 17 00:00:00 2001
From: Neeraj Garg <neerajkg< at >broadcom.com>
Date: Thu, 24 May 2012 14:01:40 +0530
Subject: [PATCH] Patch:P2P When UUID gets changed and more pbc session entries are created, remove logic should check for loop entry address
Signed-off-by: Neeraj Garg <neerajkg< at >broadcom.com>

---
 src/wps/wps_registrar.c |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)
 mode change 100644 => 100755 src/wps/wps_registrar.c

diff --git a/src/wps/wps_registrar.c b/src/wps/wps_registrar.c
old mode 100644
new mode 100755
index e6ec04

Re: how to get lists of STAs that connected to hostapd.

Alex Vorona — 2012-05-23T08:42:46

How to get stations from MBSSID interfaces?

mail ~ # hostapd_cli all_sta
Selected interface 'wlan0'
f0:7b:cb:a0:f9:8f
dot11RSNAStatsSTAAddress=f0:7b:cb:a0:f9:8f
dot11RSNAStatsVersion=1
dot11RSNAStatsSelectedPairwiseCipher=00-0f-ac-4
dot11RSNAStatsTKIPLocalMICFailures=0
dot11RSNAStatsTKIPRemoveMICFailures=0
hostapdWPAPTKState=11
hostapdWPAPTKGroupState=0
mail ~ # hostapd_cli -i wlan0_0 all_sta
Failed to connect to hostapd - wpa_ctrl_open: No such file or directory
mail ~ # iw wlan0 station dump
Station f0:7b:cb:a0:f9:8f (on wlan0)
[...]
mail ~ # iw wlan0_0 station dump
Station 00:1c:26:ac:89:f1 (on wlan0_0)
[...]
mail ~ #
mail ~ # ls /var/run/hostapd/
wlan0
mail ~ #

P2P NOA invalid parameters

Piszcz Pawel — 2012-05-23T07:33:52

Hello,

Parameter list to set NOA contains : count, start_offset, duration,
interval.  Are there any rules regarding invalid ranges or combination
of duration and interval?  Of course interval should be longer than
duration, but if duration consumes 90% of interval does it still
make sense?

Second problem is how long duration is allowed. I think when I define
90% sleep time then interval longer than 1sec also make no sense.
In other words if GO will go to sleep for too much time then there
will be a problem, with connecting/disconnecting to this group-owner.

Should the validation be performed in supplicant or in driver?

Thanks for opinions, Pawel

HostAP EAP-TLS

why — 2012-05-23T05:54:50

 Hi,all. I want to use hostap for WPA EAP-TLS. Here is my .conf file:
interface=wlan3
bridge=br0
driver=nl80211
ssid=NormalAP
hw_mode=g
channel=13
ieee8021x=1
eapol_version=1
eap_server=1
eap_user_file=/home/wlan/wlan/hostapd-wpa-tls-tkip/hostapd/hostapd-ap.eap_user
ca_cert=/etc/ssl/demoCA/newcerts/cacert.pem
server_cert=/etc/ssl/demoCA/newcerts/APcert.pem
private_key=/etc/ssl/demoCA/newcerts/serverkey.prv
private_key_passwd=wlanwlan
#dh_file=/etc/ssl/hostapd.dh.pem
wpa=1
wpa_key_mgmt=WPA-EAP
wpa_pairwise=TKIP

But the hostap can not derive the key, here is the error message:
 EAP-TLS: CONTINUE -> SUCCESS
EAP: EAP entering state SEND_REQUEST
EAP: EAP entering state IDLE
EAP: retransmit timeout 3 seconds (from dynamic back off; retransCount=0)
IEEE 802.1X: 00:14:78:71:42:67 BE_AUTH entering state REQUEST
wlan3: STA 00:14:78:71:42:67 IEEE 802.1X: Sending EAP Packet (identifier 166)
IEEE 802.1X: 00:14:78:71:42:67 TX status - version=1 type=0 length=49 - ack=1
IEEE 802.1X: 10 bytes from 00:14:78:71:42:67
   IEEE

Re: how to get lists of STAs that connected to hostapd.

Jouni Malinen — 2012-05-23T04:54:42

If you enable the control interface, you can use the STA-FIRST and
STA-NEXT control interface commands to iterate through the station list.
"hostapd_cli all_sta" is an example how this can be handled.

Re: [WPS] responding with WPS_NACK to M7 from AP

Jouni Malinen — 2012-05-23T04:53:03

Yes, this is quite common use case for WPS and it is mentioned in the
Table 34 in WSC 2.0 specification (in the description of "No Error"
Configuration Error).

Re: reconfiguring the access point..

Jouni Malinen — 2012-05-23T04:47:56

Which version of wpa_supplicant are you using? It sound slike the
wpa_cli version was not new enough to include WPS support.

Re: [RFC 4/4] P2P: Handling single channel concurrency

Jouni Malinen — 2012-05-23T04:46:07

Unfortunately these have fallen somewhat of a victim for other projects
and travel taking most of my time. We'll see if I can get to these over
the next weekend, but if not, this may need to wait until I get back
home in couple of weeks.


I'm fine with the D-Bus mechanism being addressed separately, but I
would like to see the needed nl80211 interface changes discussed on
linux-wireless mailing list rather sooner than later. It is important to
make sure that the needed functionality gets accepted to the upstream
kernel to avoid issues in supporting this cleanly with drivers that use
cfg80211.

wpa_supplicant consultant needed

Hien Ha — 2012-05-22T04:28:48

Hello,
I am currently working with wpa_supplicant to build Wi-FI capabilities for a small consumer electronic device which has an RTOS, ARM9 CPU and Atheros Series 6000 chip on board.
The wpa_supplicant source code is release 0.6.9 which was included in the Atheros SDK.
The wpa_supplicant has been successfully ported to our hardware platform.
Currently the device can connect successfully to Wi-Fi Access Points with Atheros chip inside.
However, the device has trouble connecting successfully to Wi-Fi Access Points with Broadcom chip inside.
(It takes up to 2 minutes to connect at distance greater than 50cm)
I am in need of a paid consultant who can help me troubleshoot and fix the above problem.
Thank you
Hien Ha
_______________________________________________
HostAP mailing list
HostAP< at >lists.shmoo.com
http://lists.shmoo.com/mailman/listinfo/hostap

STA is not connecting to any ap with PIN from Access point

ashish kumar — 2012-05-21T19:23:52

Hi,

STA is sending M1 but receiving M2D. Any possible solution.

Regards,
Ashish
D/wpa_supplicant(  584): EAPOL: startWhen --> 0

D/wpa_supplicant(  584): EAPOL: SUPP_PAE entering state CONNECTING

D/wpa_supplicant(  584): EAPOL: txStart

D/wpa_supplicant(  584): TX EAPOL: dst=00:26:0b:dc:17:8d

D/wpa_supplicant(  584): EAPOL: Received EAP-Packet frame

D/wpa_supplicant(  584): EAPOL: SUPP_PAE entering state RESTART

D/wpa_supplicant(  584): EAP: EAP entering state INITIALIZE

D/wpa_supplicant(  584): EAP: EAP entering state IDLE

D/wpa_supplicant(  584): EAPOL: SUPP_PAE entering state AUTHENTICATING

D/wpa_supplicant(  584): EAPOL: SUPP_BE entering state REQUEST

D/wpa_supplicant(  584): EAPOL: getSuppRsp

D/wpa_supplicant(  584): EAP: EAP entering state RECEIVED

D/wpa_supplicant(  584): EAP: Received EAP-Request id=1 method=1 vendor=0 vendorMethod=0

D/wpa_supplicant(  584): EAP: EAP entering state IDENTITY

I/wpa_supplicant(  584): wlan0: CTRL-EVENT-EAP-STARTED EAP authentica

reconfiguring the access point..

Harish — 2012-05-21T11:42:22

Hi,

I want to use wpa_cli and wps_reg to reconfigure access point of mine but

when i am doing sudo wpa_cli wps_reg 02:34:56:78:9a:bc 12345670

its showing "unknown command" . I do not why. Is here any help?

RE: [RFC 4/4] P2P: Handling single channel concurrency

Jithu Jance — 2012-05-21T06:44:50

Hi Jouni,

My understanding was that you have agreed on the below patches. Is there something 
to be done on these patches? Else could we get the basic implementation of single 
channel concurrency checked in?

http://patchwork.ozlabs.org/patch/154020/
http://patchwork.ozlabs.org/patch/151368/
http://patchwork.ozlabs.org/patch/151369/
http://patchwork.ozlabs.org/patch/151368/

There are some works pending (DBUS events and GO channel switch). But these can 
be appended to the hooks provided. If you require them on priority, let me know.



Thanks,

Jithu Jance


________________________________________
From: Jithu Jance
Sent: Friday, April 20, 2012 4:42 PM
To: Jouni Malinen; hostap< at >lists.shmoo.com
Subject: RE: [RFC 4/4] P2P: Handling single channel concurrency

Hi Jouni,

I have updated the patch a bit. So re-sending the mail with updated patch.
I have superseded the previous one in the patchwork list.

Thanks!!

While testing, I found a bug in the patch I sent previously. In the
below piece of code, the "wp

[PATCH] P2P: Race condition in GO-NEG process if both peersenter p2p_connect at the same time

Neeraj Kumar Garg — 2012-05-21T06:28:55

Hello,

We hit a case where both the peers assumed that other peer will be GO. Let us assume that p2p_connect command was given on both the peers using a script at the same time. Also assume that P1 has higher mac address than P2. 
1. P1 will send a GO-NEG-REQ and P2 will also send a GO-NEG-REQ.
2. Before P2 could get a callback p2p_go_neg_req_cb to update the variable go_neg_req_sent, P2 receives a GO-NEG request of P1 in the dwell time of its own request.
3. So P2 prepares the GO-NEG-RSP and send it even though its mac address is lower than P1 because go_neg_req_sent variable is NOT yet incremented.
4. Now P1 will get P2's GO-NEG-REQ and will reply it since it has higher mac address.
5. Both peers end up in sending GO-CONF frame.

To resolve this race, we propose that we increment go_neg_req_sent as soon as p2p_send_action is called for GO-NEG-REQ. And then decrement go_neg_req_sent if because of some reason the success is not reported in the callback p2p_go_neg_req_cb.

From 65193927d34fbbb9e84109b4502681

RE: [PATCH] Speed up connection time during ASSOC retry

Jithu Jance — 2012-05-21T06:24:31

Forgot to add <signed-hostap> tag in the previous mail. Please Ignore the prev mail.

In current implementation, authentication timer continues to run even after the
driver has reported ASSOC_REJECT. Then the association is retried on authentication
timeout which is 10secs.

The below patch cancels the authentication timeout on ASSOC_REJECT and initiates an
scan for association. Kindly see whether the patch is fine.


[PATCH] Speed up connection time during ASSOC retry

Avoid waiting for authentication timeout, If driver reports
ASSOC-REJECT

Signed-hostap: Jithu Jance <jithu< at >broadcom.com>
---
 wpa_supplicant/events.c           |   19 +++++++++++++++++++
 wpa_supplicant/wpa_supplicant.c   |    3 +++
 wpa_supplicant/wpa_supplicant_i.h |    1 +
 3 files changed, 23 insertions(+), 0 deletions(-)

diff --git a/wpa_supplicant/events.c b/wpa_supplicant/events.c
index 407407a..25c8f90 100644
--- a/wpa_supplicant/events.c
+++ b/wpa_supplicant/events.c
< at >< at > -2238,6 +2238,25 < at >< at > void wpa_supplicant_event(void *ctx, enum

[PATCH] Speed up connection time during ASSOC retry

Jithu Jance — 2012-05-21T06:17:06


In current implementation, authentication timer continues to run even after the
driver has reported ASSOC_REJECT. Then the association is retried on authentication
timeout which is 10secs.

The below patch cancels the authentication timeout on ASSOC_REJECT and initiates an
scan for association. Kindly see whether the patch is fine.


[PATCH] Speed up connection time during ASSOC retry

Avoid waiting for authentication timeout, If driver reports
ASSOC-REJECT

Signed-off-by: Jithu Jance <jithu< at >broadcom.com>
---
 wpa_supplicant/events.c           |   19 +++++++++++++++++++
 wpa_supplicant/wpa_supplicant.c   |    3 +++
 wpa_supplicant/wpa_supplicant_i.h |    1 +
 3 files changed, 23 insertions(+), 0 deletions(-)

diff --git a/wpa_supplicant/events.c b/wpa_supplicant/events.c
index 407407a..25c8f90 100644
--- a/wpa_supplicant/events.c
+++ b/wpa_supplicant/events.c
< at >< at > -2238,6 +2238,25 < at >< at > void wpa_supplicant_event(void *ctx, enum wpa_event_type event,
 data->assoc_reject.status_code);
 if (wpa_s->drv_flags

[PATCH] Set default P2P_MAX_CLIENT_IDLE to 20

Jithu Jance — 2012-05-21T05:16:33

Consider the disconnect event generated due to EAP-FAILURE(after WPS handshake) during the P2P connection.

In this disconnect context, the group idle timer will be set to 10 and assoc retry starts. If the connection doesn't go through in
the first attempt the group will be removed. This is because the authentication timeout happens at 10secs and the assoc
will be retried only after that.

I feel setting to twenty seconds will help to retry at least two times. Please see whether it is okay.

Setting authentication timeout to 5secs is also another option. But not sure whether there are some systems requiring 10secs
time.


[PATCH] Set default P2P_MAX_CLIENT_IDLE to 20

Signed-hostap: Jithu Jance <jithu< at >broadcom.com>
---
 wpa_supplicant/p2p_supplicant.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/wpa_supplicant/p2p_supplicant.c b/wpa_supplicant/p2p_supplicant.c
index 44aadf1..4054b3b 100644
--- a/wpa_supplicant/p2p_supplicant.c
+++ b/wpa_supplicant/p2p_supplicant.c
< at >< at > -44,7 +44,7

[WPS] responding with WPS_NACK to M7 from AP

Kiran Divekar — 2012-05-19T06:24:37

Hi all,
  I have a question on current WPS code in wpa_supplicant. In
src/wps/wps_registrar.c Function: wps_process_m7...see foll. piece of code.

    if (wps_parse_msg(decrypted, &eattr) < 0 ||
        wps_process_key_wrap_auth(wps, decrypted, eattr.key_wrap_auth) ||
        wps_process_e_snonce2(wps, eattr.e_snonce2) ||
        wps_process_ap_settings_r(wps, &eattr)) {
        wpabuf_free(decrypted);
        wps->state = SEND_WSC_NACK;
        return WPS_CONTINUE;
    }

Function wps_process_ap_settings_r returns non-zero value, if STA does not
want to re-configure AP. In this case, STA responds to AP by sending
WSC_NACK message.
But, as per WSC 2.0 specification,  WSC_NACK is to be sent to indicate a
authenticating or processing error. Is sending WSC_NACK ok in this case?

Thanks
- Kiran
_______________________________________________
HostAP mailing list
HostAP< at >lists.shmoo.com
http://lists.shmoo.com/mailman/listinfo/hostap

Re: how to get lists of STAs that connected to hostapd.

Alex Vorona — 2012-05-18T10:25:08

something like that
iw wlan0 station dump