Ubuntu
plasma-widget-networkmanagement package

can't connect to WPA2 Entreprise using PEAP and MSCHAPv2

Bug #577560 reported by Cedric
36
This bug affects 7 people
Affects Status Importance Assigned to Milestone
Plasma-widget-networkmanagement
Fix Released
Medium
plasma-widget-networkmanagement (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Binary package hint: plasma-widget-networkmanagement

Hi im attaching my syslog so you can see what happens when i try to connect.
The wireless network im trying to connect is a WPA2 Entreprise network working with PEAP and MSCHAPv2.
When trying to connect, i takes some minutes and then the dialog reappears asking the configuration.
The password is correct, so the certificate.
I installed wicd and i could connect without any problems. When i try to connect with gnome (10.04 too), no problem at all.

May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0) starting connection 'eduoram'
May 7 17:04:48 mars05 NetworkManager: <info> (wlan0): device state change: 3 -> 4 (reason 0)
May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0) Stage 1 of 5 (Device Prepare) scheduled...
May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0) Stage 1 of 5 (Device Prepare) started...
May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0) Stage 2 of 5 (Device Configure) scheduled...
May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0) Stage 1 of 5 (Device Prepare) complete.
May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0) Stage 2 of 5 (Device Configure) starting...
May 7 17:04:48 mars05 NetworkManager: <info> (wlan0): device state change: 4 -> 5 (reason 0)
May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0/wireless): access point 'eduoram' has security, but secrets are required.
May 7 17:04:48 mars05 NetworkManager: <info> (wlan0): device state change: 5 -> 6 (reason 0)
May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0) Stage 2 of 5 (Device Configure) complete.
May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0) Stage 1 of 5 (Device Prepare) scheduled...
May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0) Stage 1 of 5 (Device Prepare) started...
May 7 17:04:48 mars05 NetworkManager: <info> (wlan0): device state change: 6 -> 4 (reason 0)
May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0) Stage 2 of 5 (Device Configure) scheduled...
May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0) Stage 1 of 5 (Device Prepare) complete.
May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0) Stage 2 of 5 (Device Configure) starting...
May 7 17:04:48 mars05 NetworkManager: <info> (wlan0): device state change: 4 -> 5 (reason 0)
May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0/wireless): connection 'eduoram' has security, and secrets exist. No new secrets needed.
May 7 17:04:48 mars05 NetworkManager: <info> Config: added 'ssid' value 'eduroam'
May 7 17:04:48 mars05 NetworkManager: <info> Config: added 'scan_ssid' value '1'
May 7 17:04:48 mars05 NetworkManager: <info> Config: added 'key_mgmt' value 'WPA-EAP'
May 7 17:04:48 mars05 NetworkManager: <info> Config: added 'password' value '<omitted>'
May 7 17:04:48 mars05 NetworkManager: <info> Config: added 'eap' value 'TTLS'
May 7 17:04:48 mars05 NetworkManager: <info> Config: added 'fragment_size' value '1300'
May 7 17:04:48 mars05 NetworkManager: <info> Config: added 'phase2' value 'auth=PAP'
May 7 17:04:48 mars05 NetworkManager: <info> Config: added 'ca_path' value '/home/brand10/cacert.pem'
May 7 17:04:48 mars05 NetworkManager: <info> Config: added 'ca_cert' value 'blob://-org-freedesktop-NetworkManagerSettings-3-ca_cert'
May 7 17:04:48 mars05 NetworkManager: <info> Config: added 'identity' value '<email address hidden>'
May 7 17:04:48 mars05 NetworkManager: <info> Config: added 'anonymous_identity' value '@eduction.lu'
May 7 17:04:48 mars05 NetworkManager: <info> Activation (wlan0) Stage 2 of 5 (Device Configure) complete.
May 7 17:04:48 mars05 NetworkManager: <info> Config: set interface ap_scan to 1
May 7 17:04:48 mars05 wpa_supplicant[897]: Failed to initiate AP scan.
May 7 17:04:48 mars05 NetworkManager: <info> (wlan0): supplicant connection state: disconnected -> scanning
May 7 17:04:48 mars05 wpa_supplicant[897]: Trying to associate with 00:1e:49:58:b0:01 (SSID='eduroam' freq=2462 MHz)
May 7 17:04:48 mars05 NetworkManager: <info> (wlan0): supplicant connection state: scanning -> associating
May 7 17:04:48 mars05 kernel: [ 97.261507] wlan0: direct probe to AP 00:1e:49:58:b0:01 (try 1)
May 7 17:04:48 mars05 kernel: [ 97.264794] wlan0: direct probe responded
May 7 17:04:48 mars05 kernel: [ 97.264805] wlan0: authenticate with AP 00:1e:49:58:b0:01 (try 1)
May 7 17:04:48 mars05 kernel: [ 97.266679] wlan0: authenticated
May 7 17:04:48 mars05 kernel: [ 97.266732] wlan0: associate with AP 00:1e:49:58:b0:01 (try 1)
May 7 17:04:48 mars05 kernel: [ 97.270275] wlan0: RX AssocResp from 00:1e:49:58:b0:01 (capab=0x431 status=0 aid=2)
May 7 17:04:48 mars05 kernel: [ 97.270283] wlan0: associated
May 7 17:04:48 mars05 wpa_supplicant[897]: Associated with 00:1e:49:58:b0:01
May 7 17:04:48 mars05 NetworkManager: <info> (wlan0): supplicant connection state: associating -> associated
May 7 17:04:48 mars05 kernel: [ 97.278138] ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
May 7 17:04:48 mars05 kernel: [ 97.278224] cfg80211: Calling CRDA for country: LU
May 7 17:04:48 mars05 kernel: [ 97.281340] cfg80211: Received country IE:
May 7 17:04:48 mars05 kernel: [ 97.281344] cfg80211: Regulatory domain: LU
May 7 17:04:48 mars05 kernel: [ 97.281347] (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
May 7 17:04:48 mars05 kernel: [ 97.281351] (2402000 KHz - 2494000 KHz @ 40000 KHz), (10000 mBi, 10000 mBm)
May 7 17:04:48 mars05 kernel: [ 97.281353] cfg80211: CRDA thinks this should applied:
May 7 17:04:48 mars05 kernel: [ 97.281355] cfg80211: Regulatory domain: LU
May 7 17:04:48 mars05 kernel: [ 97.281357] (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
May 7 17:04:48 mars05 kernel: [ 97.281360] (2402000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm)
May 7 17:04:48 mars05 kernel: [ 97.281363] (5170000 KHz - 5250000 KHz @ 40000 KHz), (N/A, 2000 mBm)
May 7 17:04:48 mars05 kernel: [ 97.281366] (5250000 KHz - 5330000 KHz @ 40000 KHz), (N/A, 2000 mBm)
May 7 17:04:48 mars05 kernel: [ 97.281369] (5490000 KHz - 5710000 KHz @ 40000 KHz), (N/A, 2700 mBm)
May 7 17:04:48 mars05 kernel: [ 97.281372] cfg80211: We intersect both of these and get:
May 7 17:04:48 mars05 kernel: [ 97.281374] cfg80211: Regulatory domain: 98
May 7 17:04:48 mars05 kernel: [ 97.281376] (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
May 7 17:04:48 mars05 kernel: [ 97.281379] (2402000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm)
May 7 17:04:48 mars05 kernel: [ 97.281386] cfg80211: Leaving channel 5170 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281389] cfg80211: Leaving channel 5180 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281392] cfg80211: Leaving channel 5190 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281395] cfg80211: Leaving channel 5200 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281399] cfg80211: Leaving channel 5210 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281402] cfg80211: Leaving channel 5220 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281405] cfg80211: Leaving channel 5230 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281408] cfg80211: Leaving channel 5240 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281411] cfg80211: Leaving channel 5260 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281414] cfg80211: Leaving channel 5280 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281417] cfg80211: Leaving channel 5300 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281421] cfg80211: Leaving channel 5320 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281424] cfg80211: Leaving channel 5500 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281427] cfg80211: Leaving channel 5520 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281430] cfg80211: Leaving channel 5540 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281433] cfg80211: Leaving channel 5560 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281436] cfg80211: Leaving channel 5580 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281440] cfg80211: Leaving channel 5600 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281443] cfg80211: Leaving channel 5620 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281446] cfg80211: Leaving channel 5640 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281449] cfg80211: Leaving channel 5660 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281452] cfg80211: Leaving channel 5680 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281455] cfg80211: Leaving channel 5700 MHz intact on phy0 - no rule found in band on Country IE
May 7 17:04:48 mars05 kernel: [ 97.281459] cfg80211: Current regulatory domain updated by AP to: LU
May 7 17:04:48 mars05 kernel: [ 97.281461] (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
May 7 17:04:48 mars05 kernel: [ 97.281464] (2402000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm)
May 7 17:04:49 mars05 wpa_supplicant[897]: CTRL-EVENT-EAP-STARTED EAP authentication started
May 7 17:04:50 mars05 avahi-daemon[803]: Registering new address record for fe80::219:d2ff:fe53:6c3 on wlan0.*.
May 7 17:04:54 mars05 wpa_supplicant[897]: CTRL-EVENT-EAP-STARTED EAP authentication started
May 7 17:04:59 mars05 kernel: [ 108.140137] wlan0: no IPv6 routers present
May 7 17:05:48 mars05 NetworkManager: <info> Activation (wlan0/wireless): association took too long.
May 7 17:05:48 mars05 NetworkManager: <info> (wlan0): device state change: 5 -> 6 (reason 0)
May 7 17:05:48 mars05 NetworkManager: <info> Activation (wlan0/wireless): asking for new secrets
May 7 17:05:48 mars05 NetworkManager: <info> (wlan0): supplicant connection state: associated -> disconnected
May 7 17:05:48 mars05 kernel: [ 156.642577] wlan0: deauthenticating from 00:1e:49:58:b0:01 by local choice (reason=3)
May 7 17:05:48 mars05 wpa_supplicant[897]: CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys
May 7 17:05:59 mars05 wpa_supplicant[897]: Authentication with 00:00:00:00:00:00 timed out.
May 7 17:06:03 mars05 NetworkManager: <info> wlan0: link timed out.
May 7 17:06:47 mars05 NetworkManager: <info> Activation (wlan0) Stage 1 of 5 (Device Prepare) scheduled...
May 7 17:06:47 mars05 NetworkManager: <info> Activation (wlan0) Stage 1 of 5 (Device Prepare) started...
May 7 17:06:47 mars05 NetworkManager: <info> (wlan0): device state change: 6 -> 4 (reason 0)
May 7 17:06:47 mars05 NetworkManager: <info> Activation (wlan0) Stage 2 of 5 (Device Configure) scheduled...
May 7 17:06:47 mars05 NetworkManager: <info> Activation (wlan0) Stage 1 of 5 (Device Prepare) complete.
May 7 17:06:47 mars05 NetworkManager: <info> Activation (wlan0) Stage 2 of 5 (Device Configure) starting...
May 7 17:06:47 mars05 NetworkManager: <info> (wlan0): device state change: 4 -> 5 (reason 0)
May 7 17:06:47 mars05 NetworkManager: <info> Activation (wlan0/wireless): connection 'eduoram' has security, and secrets exist. No new secrets needed.
May 7 17:06:47 mars05 NetworkManager: <info> Config: added 'ssid' value 'eduroam'
May 7 17:06:47 mars05 NetworkManager: <info> Config: added 'scan_ssid' value '1'
May 7 17:06:47 mars05 NetworkManager: <info> Config: added 'key_mgmt' value 'WPA-EAP'
May 7 17:06:47 mars05 NetworkManager: <info> Config: added 'password' value '<omitted>'
May 7 17:06:47 mars05 NetworkManager: <info> Config: added 'eap' value 'TTLS'
May 7 17:06:47 mars05 NetworkManager: <info> Config: added 'fragment_size' value '1300'
May 7 17:06:47 mars05 NetworkManager: <info> Config: added 'phase2' value 'auth=PAP'
May 7 17:06:47 mars05 NetworkManager: <info> Config: added 'ca_path' value '/home/brand10/cacert.pem'
May 7 17:06:47 mars05 NetworkManager: <info> Config: added 'ca_cert' value 'blob://-org-freedesktop-NetworkManagerSettings-3-ca_cert'
May 7 17:06:47 mars05 NetworkManager: <info> Config: added 'identity' value '<email address hidden>'
May 7 17:06:47 mars05 NetworkManager: <info> Config: added 'anonymous_identity' value '@eduction.lu'
May 7 17:06:47 mars05 NetworkManager: <info> Activation (wlan0) Stage 2 of 5 (Device Configure) complete.
May 7 17:06:47 mars05 NetworkManager: <info> Config: set interface ap_scan to 1
May 7 17:06:47 mars05 NetworkManager: <info> (wlan0): supplicant connection state: disconnected -> scanning
May 7 17:06:50 mars05 wpa_supplicant[897]: Trying to associate with 00:1e:49:58:b0:01 (SSID='eduroam' freq=2462 MHz)
May 7 17:06:50 mars05 NetworkManager: <info> (wlan0): supplicant connection state: scanning -> associating
May 7 17:06:50 mars05 kernel: [ 218.925899] wlan0: deauthenticating from 00:1e:49:58:b0:01 by local choice (reason=3)
May 7 17:06:50 mars05 kernel: [ 218.961346] wlan0: direct probe to AP 00:1e:49:58:b0:01 (try 1)
May 7 17:06:50 mars05 kernel: [ 218.964743] wlan0: direct probe responded
May 7 17:06:50 mars05 kernel: [ 218.964753] wlan0: authenticate with AP 00:1e:49:58:b0:01 (try 1)
May 7 17:06:50 mars05 kernel: [ 218.970783] wlan0: authenticated
May 7 17:06:50 mars05 kernel: [ 218.970827] wlan0: associate with AP 00:1e:49:58:b0:01 (try 1)
May 7 17:06:50 mars05 wpa_supplicant[897]: Associated with 00:1e:49:58:b0:01
May 7 17:06:50 mars05 NetworkManager: <info> (wlan0): supplicant connection state: associating -> associated
May 7 17:06:50 mars05 kernel: [ 218.974484] wlan0: RX AssocResp from 00:1e:49:58:b0:01 (capab=0x431 status=0 aid=2)
May 7 17:06:50 mars05 kernel: [ 218.974493] wlan0: associated
May 7 17:06:50 mars05 wpa_supplicant[897]: CTRL-EVENT-EAP-STARTED EAP authentication started
May 7 17:07:48 mars05 NetworkManager: <info> Activation (wlan0/wireless): association took too long.
May 7 17:07:48 mars05 NetworkManager: <info> (wlan0): device state change: 5 -> 6 (reason 0)
May 7 17:07:48 mars05 NetworkManager: <info> Activation (wlan0/wireless): asking for new secrets
May 7 17:07:48 mars05 NetworkManager: <info> (wlan0): supplicant connection state: associated -> disconnected
May 7 17:07:48 mars05 kernel: [ 276.640080] wlan0: deauthenticating from 00:1e:49:58:b0:01 by local choice (reason=3)
May 7 17:07:48 mars05 wpa_supplicant[897]: CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys
May 7 17:08:00 mars05 wpa_supplicant[897]: Authentication with 00:00:00:00:00:00 timed out.
May 7 17:08:03 mars05 NetworkManager: <info> wlan0: link timed out.
May 7 17:08:06 mars05 NetworkManager: <info> (wlan0): device state change: 6 -> 9 (reason 7)
May 7 17:08:06 mars05 NetworkManager: <info> Activation (wlan0) failed for access point (eduroam)
May 7 17:08:06 mars05 NetworkManager: <info> Marking connection 'eduoram' invalid.
May 7 17:08:06 mars05 NetworkManager: <info> Activation (wlan0) failed.

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: network-manager-kde 1:0.9~svn1112085-0ubuntu4
ProcVersionSignature: Ubuntu 2.6.32-22.33-generic 2.6.32.11+drm33.2
Uname: Linux 2.6.32-22-generic x86_64
NonfreeKernelModules: nvidia
Architecture: amd64
Date: Sat May 8 20:55:35 2010
InstallationMedia: Kubuntu 10.04 "Lucid Lynx" - Release Candidate amd64 (20100419.1)
SourcePackage: plasma-widget-networkmanagement

Revision history for this message
Cedric (cedric-brandenbourger-deactivatedaccount-deactivatedaccount) wrote :
Revision history for this message
Cedric (cedric-brandenbourger-deactivatedaccount-deactivatedaccount) wrote :

Sorry wrong log, the network i want to connect to supports PEAP/MSCHAPv2 and TTLS/PAP. I get the same problem with the 2 configurations.

Revision history for this message
Lixin Chin (wstfgl) wrote :

I'm seeing the same problem, with plasma-widget-networkmanagement. An identical issue seems to be affecting network-manager-kde (knetworkmanager).

But it works perfectly when using the gnome network manager (network-manager-gnome).

My network isn't using a CA Cert, could that be causing a problem? It brings an "are you sure" prompt from the gnome network manager, but nothing in the kde versions.

Revision history for this message
molecule-eye (niburu1) wrote :

I have the same problem. I have to "killall knetworkmanager" and load nm-applet (in the network-manager-gnome package) to connect to WPA2 Enterprise encrypted eduroam networks. This is awful.

Revision history for this message
andreselsuave (andreselsuave) wrote :

Same problem here, can't connect to a PEAP / MSCHAPv2 wireless network. Keeps asking for the secrets, and eventually times out.

Revision history for this message
Marco (curati-marco) wrote :

Same problem. the widget is unable to connect to a wpa2 enterprise TLS and CA certificate. There is no problem with Gnome NM applet.

Revision history for this message
Robert Bredereck (rbredereck) wrote :

Backporting a version containing this patch:

https://bugs.kde.org/show_bug.cgi?id=209673#c84

could solve the problem?

Revision history for this message
Maarten Bezemer (veger) wrote :

If have the same problem as well.
Using the workaround (creating a *.der) certificate worked for me: http://bugs.kde.org/show_bug.cgi?id=209673#c42

Changed in plasma-widget-networkmanagement (Ubuntu):
status: New → Confirmed
Bug Watch Updater (bug-watch-updater)
Changed in plasma-widget-networkmanagement:
importance: Unknown → Medium
status: Unknown → Fix Released
Revision history for this message
Maarten Bezemer (veger) wrote :

I have build a snapshot (as of 20-07-2011) containing the patch to solve the certificate problem.
It is available at: https://launchpad.net/~maarten-bezemer/+archive/ppa

Revision history for this message
Maarten Bezemer (veger) wrote :

The bug is fixed for Oneiric as it contains a newer snapshot containing the patch provided upstream

Changed in plasma-widget-networkmanagement (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.