[Madwifi-users] Madwifi, hostapd, and WPA with TKIP and PEAP-MSCHAPv2 doesn't work

[Jim O. <Jim...@pa...>]

Hi everyone,

I am having trouble getting hostapd+madwifi to do WPA.  I'm sure the =
problem is somewhere in madwifi or the hostapd interface to madwifi, =
because when I use a prism2 card and the hostap device driver WPA works =
fine with exactly the same software versions, config files, =
supplicants/client hardware, etc.

I'm using madwifi version:

ath_hal 0.9.12.14
wlan 0.8.4.5
ath_rate_onoe 1.0
ath_pci 0.9.4.12

The AP hardware is an AR5212 (Cisco Aeronet, pci-id 0x168c 0x0013).  I'm =
trying to do WPA-EAP with PEAP-MSCHAPV2 authentication and TKIP group =
and pairwise keying.  As I say everything works fine with the prism2 =
card and hostap driver, even the RADIUS server is set up right with the =
NT-Hash passwords.

The client (wpa_supplicant, latest CVS, with madwifi and AR5212 =
hardware) is able to associate with the AP and does a TX EAPOL then =
starts its 10 second timeout.  It times out and disassociates, and =
starts the whole process over.

The AP (hostapd, latest CVS) sees the client's EAPOL right away and says =
it generates a TX-EAPOL for the client.  Unfortunately the client never =
receives this EAPOL packet.  Here is the relevant output for hostapd =
-ddd (after my sig).  It could be worth nothing that the RADIUS server =
(radiusd -X) is idle the whole time hostapd+madwifi is operating, other =
than the radacct accounting start/stop requests hostapd sends it.

I'd appreciate any suggestions as to how to get the hostapd+madwifi WPA =
AP to actually transmit the EAPOL to the client so that the client =
actually sees it.  I applied Coert Vonk's corrected (newest) groupkey =
patch to ieee80211_output.c but that didn't make any difference to this =
problem.

Thanks,
Jim

--
Jim Ockers, P.Eng. (jim...@pa...)
Contact info: http://www.ockers.ca/pason.html


Wireless event: cmd=3D0x8c03 len=3D20
ath0: STA 00:0f:3d:04:bc:53 IEEE 802.11: associated
  New STA
ath0: STA 00:0f:3d:04:bc:53 WPA: event 1 notification
ath0: STA 00:0f:3d:04:bc:53 IEEE 802.1X: start authentication
IEEE 802.1X: 00:0f:3d:04:bc:53 AUTH_PAE entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 AUTH_PAE entering state INITIALIZE
ath0: STA 00:0f:3d:04:bc:53 WPA: start authentication
WPA: 00:0f:3d:04:bc:53 WPA_PTK entering state INITIALIZE
madwifi_del_key: addr=3D00:0f:3d:04:bc:53 key_idx=3D0
WPA: 00:0f:3d:04:bc:53 WPA_PTK_GROUP entering state IDLE
WPA: 00:0f:3d:04:bc:53 WPA_PTK entering state AUTHENTICATION
WPA: 00:0f:3d:04:bc:53 WPA_PTK entering state AUTHENTICATION2
IEEE 802.1X: 4 bytes from 00:0f:3d:04:bc:53
   IEEE 802.1X: version=3D1 type=3D1 length=3D0
ath0: STA 00:0f:3d:04:bc:53 IEEE 802.1X: received EAPOL-Start from STA
ath0: STA 00:0f:3d:04:bc:53 WPA: event 5 notification
WPA: 00:0f:3d:04:bc:53 WPA_PTK entering state AUTHENTICATION2
IEEE 802.1X: 00:0f:3d:04:bc:53 AUTH_PAE entering state DISCONNECTED
ath0: STA 00:0f:3d:04:bc:53 IEEE 802.1X: unauthorizing port
madwifi_set_sta_authorized: addr=3D00:0f:3d:04:bc:53 authorized=3D0
IEEE 802.1X: 00:0f:3d:04:bc:53 BE_AUTH entering state IDLE
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 CTRL_DIR entering state FORCE_BOTH
IEEE 802.1X: 00:0f:3d:04:bc:53 AUTH_PAE entering state RESTART
IEEE 802.1X: station 00:0f:3d:04:bc:53 - new auth session, clearing =
State
IEEE 802.1X: Generated EAP Request-Identity for 00:0f:3d:04:bc:53 =
(identifier 0, timeout 30)
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 AUTH_PAE entering state CONNECTING
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 AUTH_PAE entering state AUTHENTICATING
IEEE 802.1X: 00:0f:3d:04:bc:53 BE_AUTH entering state REQUEST
IEEE 802.1X: Sending EAP Packet to 00:0f:3d:04:bc:53 (identifier 0)
TX EAPOL - hexdump(len=3D28): 00 0f 3d 04 bc 53 00 40 96 a1 51 de 88 8e =
02 00 00 0a 01 00 00 0a 01 68 65 6c 6c 6f
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 Port Timers TICK (timers: 0 0 3599)
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 Port Timers TICK (timers: 0 0 3599)
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 Port Timers TICK (timers: 0 0 3599)
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 Port Timers TICK (timers: 0 0 3599)
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 Port Timers TICK (timers: 0 0 3599)
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 Port Timers TICK (timers: 0 0 3599)
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 Port Timers TICK (timers: 0 0 3599)
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 Port Timers TICK (timers: 0 0 3599)
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 Port Timers TICK (timers: 0 0 3599)
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
Wireless event: cmd=3D0x8c04 len=3D20
ath0: STA 00:0f:3d:04:bc:53 IEEE 802.11: deassociated
ath0: STA 00:0f:3d:04:bc:53 WPA: event 2 notification
madwifi_del_key: addr=3D00:0f:3d:04:bc:53 key_idx=3D0
WPA: 00:0f:3d:04:bc:53 WPA_PTK entering state DISCONNECTED
WPA: 00:0f:3d:04:bc:53 WPA_PTK entering state INITIALIZE
madwifi_del_key: addr=3D00:0f:3d:04:bc:53 key_idx=3D0
IEEE 802.1X: station 00:0f:3d:04:bc:53 port disabled
IEEE 802.1X: 00:0f:3d:04:bc:53 AUTH_PAE entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 KEY_RX entering state NO_KEY_RECEIVE
IEEE 802.1X: 00:0f:3d:04:bc:53 AUTH_PAE entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:0f:3d:04:bc:53 KEY_RX entering state NO_KEY_RECEIVE