Dotaz: wpa_supplicant drátová síť

[Beda0]

Zdravím, na kolejích zavedli autentizováni uživatelů pro připojení na drátovou síť protokolem IEEE 802.1X

Snažil jsem se vše nastavit podle návodu ale nedaří se.

wpa_supplicant.conf

  ctrl_interface=/var/run/wpa_supplicant
  network={
       key_mgmt=WPA-EAP
       eap=PEAP
       pairwise=CCMP TKIP
       group=CCMP TKIP
       identity="tomas.bedrnik@tul.cz"
       password="heslo"
       ca_cert="/home/Beda/certifikaty/cesnet-ca.cz.pem.crt"
       phase1="peaplabel=0"
       phase2="auth=MSCHAPV2"
  }

Používám openSUSE, které defaulntě používá networkmanager, takže v Yastu nastavím spravování sítě na ručně - to vypne networkmanager.

Když spustím wpa_supplicant po chvíli to vypíše CTRL-EVENT-EAP-FAILURE EAP authentication failed

# wpa_supplicant -D wired -ieth0 -c/etc/wpa_supplicant/wpa_supplicant.conf -dd
Initializing interface 'eth0' conf '/etc/wpa_supplicant/wpa_supplicant.conf' driver 'wired' ctrl_interface 'N/A' bridge 'N/A'
Configuration file '/etc/wpa_supplicant/wpa_supplicant.conf' -> '/etc/wpa_supplicant/wpa_supplicant.conf'
Reading configuration file '/etc/wpa_supplicant/wpa_supplicant.conf'
ctrl_interface='/var/run/wpa_supplicant'
Line: 2 - start of a new network block
key_mgmt: 0x1
eap methods - hexdump(len=16): 00 00 00 00 19 00 00 00 00 00 00 00 00 00 00 00
pairwise: 0x18
group: 0x18
identity - hexdump_ascii(len=20):
     74 6f 6d 61 73 2e 62 65 64 72 6e 69 6b 40 74 75   tomas.bedrnik@tu
     6c 2e 63 7b                                       l.cz
password - hexdump_ascii(len=5): [REMOVED]
ca_cert - hexdump_ascii(len=43):
     2f 68 6f 6d 65 2f 42 65 64 61 2f 63 65 72 74 69   /home/Beda/certi
     66 69 6b 61 74 79 2f 63 65 73 6e 65 74 2d 63 61   fikaty/cesnet-ca
     2e 63 7a 2e 70 65 6d 2e 63 72 75                  .cz.pem.crt
phase1 - hexdump_ascii(len=11):
     70 65 61 70 6c 61 62 65 6c 3d 31                  peaplabel=0
phase2 - hexdump_ascii(len=13):
     61 75 74 68 3d 4d 53 43 48 41 50 56 33            auth=MSCHAPV2
Priority group 0
   id=0 ssid=''
Initializing interface (2) 'eth0'
EAPOL: SUPP_PAE entering state DISCONNECTED
EAPOL: KEY_RX entering state NO_KEY_RECEIVE
EAPOL: SUPP_BE entering state INITIALIZE
EAP: EAP entering state DISABLED
EAPOL: External notification - portEnabled=0
EAPOL: External notification - portValid=0
wpa_driver_wired_init: Added multicast membership with packet socket
Own MAC address: 00:1e:ec:51:08:69
Setting scan request: 0 sec 100000 usec
Added interface eth0
Using wired driver - overriding ap_scan configuration
EAPOL: External notification - portControl=Auto
Already associated with a configured network - generating associated event
Association info event
State: DISCONNECTED -> ASSOCIATED
Associated to a new BSS: BSSID=01:80:c2:00:00:04
No keys have been configured - skip key clearing
Network configuration found for the current AP
WPA: No WPA/RSN IE available from association info
WPA: Set cipher suites based on configuration
WPA: Selected cipher suites: group 24 pairwise 24 key_mgmt 1 proto 2
WPA: clearing AP WPA IE
WPA: clearing AP RSN IE
WPA: using GTK CCMP
WPA: using PTK CCMP
WPA: using KEY_MGMT 802.1X
WPA: Set own WPA IE default - hexdump(len=22): 30 14 01 00 00 0f ac 04 01 00 00 0f ac 04 01 00 00 0f ac 01 00 00
EAPOL: External notification - portControl=Auto
Associated with 01:80:c2:00:00:04
WPA: Association event - clear replay counter
EAPOL: External notification - portEnabled=0
EAPOL: External notification - portValid=0
EAPOL: External notification - portEnabled=1
EAPOL: SUPP_PAE entering state CONNECTING
EAPOL: SUPP_BE entering state IDLE
EAP: EAP entering state INITIALIZE
EAP: EAP entering state IDLE
Cancelling scan request
EAPOL: startWhen --> 0
EAPOL: SUPP_PAE entering state CONNECTING
EAPOL: txStart
TX EAPOL - hexdump(len=4): 01 01 00 00
EAPOL: startWhen --> 0
EAPOL: SUPP_PAE entering state CONNECTING
EAPOL: txStart
TX EAPOL - hexdump(len=4): 01 01 00 00
EAPOL: idleWhile --> 0
EAP: EAP entering state FAILURE
CTRL-EVENT-EAP-FAILURE EAP authentication failed
EAPOL: SUPP_PAE entering state AUTHENTICATING
EAPOL: SUPP_BE entering state FAIL
EAPOL: SUPP_PAE entering state HELD
EAPOL: SUPP_BE entering state IDLE
EAPOL: startWhen --> 0
^CCTRL-EVENT-TERMINATING - signal 2 received
Removing interface eth0
State: ASSOCIATED -> DISCONNECTED
No keys have been configured - skip key clearing
EAPOL: External notification - portEnabled=0
EAPOL: SUPP_PAE entering state DISCONNECTED
EAPOL: SUPP_BE entering state INITIALIZE
EAP: EAP entering state DISABLED
EAPOL: External notification - portValid=0
No keys have been configured - skip key clearing
Cancelling scan request
Cancelling authentication timeout

Poradíte mi prosím, co dělám špatně? Pod windows se se stejnými přihlašovacími údaji bez problému přihlásím.

Odpovědi

[Lubos Kopecky]

neblbne Ti to z duvodu chybnyho zapisu parametru? mas tam wpa_supplicant -D wired -ieth0 -c/etc/wpa_supplicant/wpa_supplicant.conf -dd a nemelo by byt -Dwired spis?

tohle mi funguje na upce pro dratovy kolejni i bezdratovy eduroamovy pripojeni:

wpa_supplicant -iwlan0 -Dwext -c/etc/wpa_supplicant.conf -B -N \
-ieth0 -Dwired -c/etc/wpa_supplicant.conf

pro spusteni wpa_supplicant a v souboru /etc/wpa_supplicant.conf mam

network={
ssid="eduroam"
proto=WPA
key_mgmt=WPA-EAP
pairwise=TKIP
group=TKIP WEP104 WEP40
eap=PEAP
identity="netID@upce.cz"
password="heslo"
ca_cert="/etc/1x/cert.pem"
phase2="auth=PAP"
disabled=1
}

network={
ssid="upce-lan"
scan_ssid=1
key_mgmt=IEEE8021X
pairwise=TKIP
eap=PEAP
identity="netID@upce.cz"
password="heslo"
} 

[Lubos Kopecky]

tak ted na ty Tvoje vypisy koukam poradne a ty pises o dratovym pripojeni, ale cast konfiguraku, kterou tam mas zobrazenou, je pro bezdratovy pripojeni, ne? zkus to nastavit jak to mam ja a uvidis, zda se chytnes nebo ne...

[Beda0]

Já jsem to sem zapomněl napsat, už mi to jede... Je bug ve wpa_supplicantu s realtek a VIA síťovkama, ty se musej přepnout do ALL_MULTI módu ifconfig eth0 allmulti

Jedinej problém teď mam s občasnym odpojováním, kdy se wpa_supplicant nedokáže znovu autentizovat, i když mam fast_reauth=1 a musí se spustit ručně znova.

[bohus]

presne na toto sa chcem spytat. neviete niekto ci sa to da nejako vyriesit to odpajanie? diky