Doesn't work for me with eduroam (or my university network for that
matter). Downgrading back to 2.3 (built from ports) without any other
changes works fine as before.
It looks like everything's going fine, authentication
completed successfully, but then it just keeps spinning
more (successful) authentication attempts, ad infinitum.
The one difference I can see in the logs is that 2.4 has this at the
very beginning: "WMM AC: Missing IEs" (see below).
This patch, post-release, seems related, but doesn't change anything for
me:
http://w1.fi/cgit/hostap/commit/?id=54d3dc918409ba948709fee9aa9edd895356810c
wpa_supplicant 2.4 log:
========================
*zbigniew ~> sudo /usr/local/sbin/wpa_supplicant -K -t
-c /etc/wpa_supplicant.conf -D openbsd -i iwn0
1427410181.015220: Successfully initialized wpa_supplicant
1427410181.131829: iwn0: Associated with 46:04:01:05:c5:b5
1427410181.131975: WMM AC: Missing IEs
1427410183.083298: iwn0: CTRL-EVENT-EAP-STARTED EAP authentication
started
1427410183.106920: iwn0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0
method=25
1427410183.125953: iwn0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25
(PEAP) selected
1427410183.200115: iwn0: CTRL-EVENT-EAP-PEER-CERT depth=2
subject='/C=SE/O=AddTrust AB/OU=AddTrust External TTP
Network/CN=AddTrust External CA Root'
hash=687fa451382278fff0c8b11f8d43d576671c6eb2bceab413fb83d965d06d2ff2
1427410183.202781: iwn0: CTRL-EVENT-EAP-PEER-CERT depth=1
subject='/C=US/O=Internet2/OU=InCommon/CN=InCommon Server CA'
hash=623727ec472644a6bb70d240565c24223fdb0f2f5ac698027e3012489c70e817
1427410183.204147: iwn0: CTRL-EVENT-EAP-PEER-CERT depth=0
subject='/C=US/postalCode=48105-3640/ST=MI/L=Ann Arbor/street=4251
Plymouth Rd/O=University of Michigan/OU=Information Technology
Services/CN=radius.umnet.umich.edu'
hash=ab1b2969cefd819acb08ee8f257535476bd2fd306bdc622242c3e5b0818318b9
1427410183.205031: iwn0: CTRL-EVENT-EAP-PEER-ALT depth=0
DNS:radius.umnet.umich.edu
1427410183.412564: EAP-MSCHAPV2: Authentication succeeded
1427410183.437029: EAP-TLV: TLV Result - Success - EAP-TLV/Phase2
Completed
1427410183.476939: iwn0: CTRL-EVENT-EAP-SUCCESS EAP authentication
completed successfully
1427410183.477038: iwn0: CTRL-EVENT-CONNECTED - Connection to
46:04:01:05:c5:b5 completed [id=3 id_str=]
1427410194.302547: iwn0: CTRL-EVENT-EAP-STARTED EAP authentication
started
1427410194.340892: iwn0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0
method=25
1427410194.341141: iwn0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25
(PEAP) selected
1427410194.423075: iwn0: CTRL-EVENT-EAP-PEER-CERT depth=2
subject='/C=SE/O=AddTrust AB/OU=AddTrust External TTP
Network/CN=AddTrust External CA Root'
hash=687fa451382278fff0c8b11f8d43d576671c6eb2bceab413fb83d965d06d2ff2
1427410194.424223: iwn0: CTRL-EVENT-EAP-PEER-CERT depth=1
subject='/C=US/O=Internet2/OU=InCommon/CN=InCommon Server CA'
hash=623727ec472644a6bb70d240565c24223fdb0f2f5ac698027e3012489c70e817
1427410194.425519: iwn0: CTRL-EVENT-EAP-PEER-CERT depth=0
subject='/C=US/postalCode=48105-3640/ST=MI/L=Ann Arbor/street=4251
Plymouth Rd/O=University of Michigan/OU=Information Technology
Services/CN=radius.umnet.umich.edu'
hash=ab1b2969cefd819acb08ee8f257535476bd2fd306bdc622242c3e5b0818318b9
1427410194.426390: iwn0: CTRL-EVENT-EAP-PEER-ALT depth=0
DNS:radius.umnet.umich.edu
1427410194.529972: EAP-MSCHAPV2: Authentication succeeded
1427410194.554051: EAP-TLV: TLV Result - Success - EAP-TLV/Phase2
Completed
1427410194.582156: iwn0: CTRL-EVENT-EAP-SUCCESS EAP authentication
completed successfully
1427410205.249464: iwn0: CTRL-EVENT-EAP-STARTED EAP authentication
started
1427410205.273434: iwn0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0
method=25
1427410205.273476: iwn0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25
(PEAP) selected
1427410205.355627: iwn0: CTRL-EVENT-EAP-PEER-CERT depth=2
subject='/C=SE/O=AddTrust AB/OU=AddTrust External TTP
Network/CN=AddTrust External CA Root'
hash=687fa451382278fff0c8b11f8d43d576671c6eb2bceab413fb83d965d06d2ff2
1427410205.357123: iwn0: CTRL-EVENT-EAP-PEER-CERT depth=1
subject='/C=US/O=Internet2/OU=InCommon/CN=InCommon Server CA'
hash=623727ec472644a6bb70d240565c24223fdb0f2f5ac698027e3012489c70e817
1427410205.358427: iwn0: CTRL-EVENT-EAP-PEER-CERT depth=0
subject='/C=US/postalCode=48105-3640/ST=MI/L=Ann Arbor/street=4251
Plymouth Rd/O=University of Michigan/OU=Information Technology
Services/CN=radius.umnet.umich.edu'
hash=ab1b2969cefd819acb08ee8f257535476bd2fd306bdc622242c3e5b0818318b9
1427410205.359301: iwn0: CTRL-EVENT-EAP-PEER-ALT depth=0
DNS:radius.umnet.umich.edu
1427410205.466629: EAP-MSCHAPV2: Authentication succeeded
1427410205.495948: EAP-TLV: TLV Result - Success - EAP-TLV/Phase2
Completed
1427410205.528433: iwn0: CTRL-EVENT-EAP-SUCCESS EAP authentication
completed successfully
^C1427410206.712587: iwn0: CTRL-EVENT-DISCONNECTED
bssid=46:04:01:05:c5:b5 reason=3 locally_generated=1
1427410206.718180: iwn0: CTRL-EVENT-TERMINATING
The same with 2.3:
===================
*zbigniew ~> sudo /usr/local/sbin/wpa_supplicant -K -t
-c /etc/wpa_supplicant.conf -D openbsd -i iwn0
1427410112.436355: Successfully initialized wpa_supplicant
1427410112.551115: iwn0: Associated with 46:04:01:05:c5:b5
1427410114.493187: iwn0: CTRL-EVENT-EAP-STARTED EAP authentication
started
1427410114.516781: iwn0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0
method=25
1427410114.535718: iwn0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25
(PEAP) selected
1427410114.609458: iwn0: CTRL-EVENT-EAP-PEER-CERT depth=2
subject='/C=SE/O=AddTrust AB/OU=AddTrust External TTP
Network/CN=AddTrust External CA Root'
1427410114.611290: iwn0: CTRL-EVENT-EAP-PEER-CERT depth=1
subject='/C=US/O=Internet2/OU=InCommon/CN=InCommon Server CA'
1427410114.611777: iwn0: CTRL-EVENT-EAP-PEER-CERT depth=0
subject='/C=US/postalCode=48105-3640/ST=MI/L=Ann Arbor/street=4251
Plymouth Rd/O=University of Michigan/OU=Information Technology
Services/CN=radius.umnet.umich.edu'
1427410114.729940: EAP-MSCHAPV2: Authentication succeeded
1427410114.754016: EAP-TLV: TLV Result - Success - EAP-TLV/Phase2
Completed
1427410114.779660: iwn0: CTRL-EVENT-EAP-SUCCESS EAP authentication
completed successfully
1427410114.779753: iwn0: CTRL-EVENT-CONNECTED - Connection to
46:04:01:05:c5:b5 completed [id=3 id_str=]
[then it stays this way indefinitely of course]
wpa_supplicant.conf:
=====================
update_config=1
ap_scan=0
ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=wheel
network={
ssid="eduroam"
priority=3
key_mgmt=WPA-EAP
eap=PEAP
identity="*********"
password="*********"
ca_cert="/etc/ssl/cert.pem"
phase1="peaplabel=0"
phase2="auth=MSCHAPV2"
}
dmesg:
=======
OpenBSD 5.7-current (GENERIC.MP) #895: Wed Mar 18 18:55:03 MDT 2015
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 4166717440 (3973MB)
avail mem = 4036497408 (3849MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xe0010 (80 entries)
bios0: vendor LENOVO version "6EET50WW (3.10 )" date 03/16/2010
bios0: LENOVO 4057WGN
acpi0 at bios0: rev 2
acpi0: sleep states S0 S3 S4 S5
acpi0: tables DSDT FACP SSDT ECDT APIC MCFG HPET SLIC BOOT ASF! SSDT
SSDT TCPA DMAR SSDT SSDT SSDT acpi0: wakeup devices LID_(S3) SLPB(S3)
IGBE(S4) EXP0(S4) EXP1(S4) EXP2(S4) PCI1(S4) USB0(S3) USB1(S3) USB2(S3)
USB3(S3) USB4(S3) USB5(S3) EHC0(S3) EHC1(S3) HDEF(S4) acpitimer0 at
acpi0: 3579545 Hz, 24 bits acpiec0 at acpi0 acpimadt0 at acpi0 addr
0xfee00000: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Core(TM)2 Duo CPU U9400 @ 1.40GHz, 798.12 MHz
cpu0:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,NXE,LONG,LAHF,PERF
cpu0: 3MB 64b/line 8-way L2 cache cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 7 var ranges, 88 fixed ranges
cpu0: apic clock running at 199MHz
cpu0: mwait min=64, max=64, C-substates=0.2.2.2.2, IBE
cpu1 at mainbus0: apid 1 (application processor)
cpu1: Intel(R) Core(TM)2 Duo CPU U9400 @ 1.40GHz, 798.01 MHz
cpu1:
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,NXE,LONG,LAHF,PERF
cpu1: 3MB 64b/line 8-way L2 cache cpu1: smt 0, core 1, package 0
ioapic0 at mainbus0: apid 1 pa 0xfec00000, version 20, 24 pins
ioapic0: misconfigured as apic 2, remapped to apid 1
acpimcfg0 at acpi0 addr 0xe0000000, bus 0-63
acpihpet0 at acpi0: 14318179 Hz
acpiprt0 at acpi0: bus 0 (PCI0)
acpiprt1 at acpi0: bus -1 (AGP_)
acpiprt2 at acpi0: bus 2 (EXP0)
acpiprt3 at acpi0: bus 3 (EXP1)
acpiprt4 at acpi0: bus -1 (EXP2)
acpiprt5 at acpi0: bus 21 (PCI1)
acpicpu0 at acpi0: C3, C2, C1, PSS
acpicpu1 at acpi0: C3, C2, C1, PSS
acpipwrres0 at acpi0: PUBS, resource for USB0, USB3, USB5, EHC0, EHC1
acpitz0 at acpi0: critical temperature is 127 degC
acpitz1 at acpi0: critical temperature is 105 degC
acpibtn0 at acpi0: LID_
acpibtn1 at acpi0: SLPB
acpibat0 at acpi0: BAT0 model "42T4643" serial 532 type LION oem
"SANYO" acpibat1 at acpi0: BAT1 not present
acpiac0 at acpi0: AC unit offline
acpithinkpad0 at acpi0
cpu0: Enhanced SpeedStep 798 MHz: speeds: 1401, 1400, 1200, 800 MHz
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "Intel GM45 Host" rev 0x07
vga1 at pci0 dev 2 function 0 "Intel GM45 Video" rev 0x07
intagp0 at vga1
agp0 at intagp0: aperture at 0xd0000000, size 0x10000000
inteldrm0 at vga1
drm0 at inteldrm0
inteldrm0: 1440x900
wsdisplay0 at vga1 mux 1: console (std, vt100 emulation)
wsdisplay0: screen 1-5 added (std, vt100 emulation)
"Intel GM45 Video" rev 0x07 at pci0 dev 2 function 1 not configured
"Intel GM45 HECI" rev 0x07 at pci0 dev 3 function 0 not configured
em0 at pci0 dev 25 function 0 "Intel ICH9 IGP M AMT" rev 0x03: msi,
address 00:22:68:0c:bd:e6 uhci0 at pci0 dev 26 function 0 "Intel 82801I
USB" rev 0x03: apic 1 int 20 uhci1 at pci0 dev 26 function 1 "Intel
82801I USB" rev 0x03: apic 1 int 21 uhci2 at pci0 dev 26 function 2
"Intel 82801I USB" rev 0x03: apic 1 int 22 ehci0 at pci0 dev 26
function 7 "Intel 82801I USB" rev 0x03: apic 1 int 23 usb0 at ehci0:
USB revision 2.0 uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr
1 azalia0 at pci0 dev 27 function 0 "Intel 82801I HD Audio" rev 0x03:
msi azalia0: codecs: Conexant CX20561
audio0 at azalia0
ppb0 at pci0 dev 28 function 0 "Intel 82801I PCIE" rev 0x03: msi
pci1 at ppb0 bus 2
ppb1 at pci0 dev 28 function 1 "Intel 82801I PCIE" rev 0x03: msi
pci2 at ppb1 bus 3
iwn0 at pci2 dev 0 function 0 "Intel WiFi Link 5350" rev 0x00: msi,
MIMO 3T3R, MoW, address 00:16:eb:05:a5:e4 uhci3 at pci0 dev 29 function
0 "Intel 82801I USB" rev 0x03: apic 1 int 16 uhci4 at pci0 dev 29
function 1 "Intel 82801I USB" rev 0x03: apic 1 int 17 uhci5 at pci0 dev
29 function 2 "Intel 82801I USB" rev 0x03: apic 1 int 18 ehci1 at pci0
dev 29 function 7 "Intel 82801I USB" rev 0x03: apic 1 int 19 usb1 at
ehci1: USB revision 2.0 uhub1 at usb1 "Intel EHCI root hub" rev
2.00/1.00 addr 1 ppb2 at pci0 dev 30 function 0 "Intel 82801BAM
Hub-to-PCI" rev 0x93 pci3 at ppb2 bus 21
pcib0 at pci0 dev 31 function 0 "Intel 82801IEM LPC" rev 0x03
pciide0 at pci0 dev 31 function 2 "Intel 82801I SATA" rev 0x03: DMA,
channel 0 configured to native-PCI, channel 1 configured to native-PCI
pciide0: using apic 1 int 16 for native-PCI interrupt wd0 at pciide0
channel 0 drive 0: <SAMSUNG MMCQE28G8MUP-0VA> wd0: 16-sector PIO,
LBA48, 122104MB, 250069680 sectors wd0(pciide0:0:0): using PIO mode 4,
Ultra-DMA mode 5 atapiscsi0 at pciide0 channel 1 drive 0
scsibus1 at atapiscsi0: 2 targets
cd0 at scsibus1 targ 0 lun 0: <MATSHITA, DVD-RAM UJ-844, RC02> ATAPI
5/cdrom removable cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2
ichiic0 at pci0 dev 31 function 3 "Intel 82801I SMBus" rev 0x03: apic 1
int 23 iic0 at ichiic0
usb2 at uhci0: USB revision 1.0
uhub2 at usb2 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb3 at uhci1: USB revision 1.0
uhub3 at usb3 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb4 at uhci2: USB revision 1.0
uhub4 at usb4 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb5 at uhci3: USB revision 1.0
uhub5 at usb5 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb6 at uhci4: USB revision 1.0
uhub6 at usb6 "Intel UHCI root hub" rev 1.00/1.00 addr 1
usb7 at uhci5: USB revision 1.0
uhub7 at usb7 "Intel UHCI root hub" rev 1.00/1.00 addr 1
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pms0: ALPS Dualpoint, version 0x7301
wsmouse1 at pms0 mux 0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
aps0 at isa0 port 0x1600/31
umass0 at uhub1 port 2 configuration 1 interface 0 " Patriot Memory"
rev 2.00/1.00 addr 2 umass0: using SCSI over Bulk-Only
scsibus2 at umass0: 2 targets, initiator 0
sd0 at scsibus2 targ 1 lun 0: <, Patriot Memory, PMAP> SCSI2 0/direct
removable serial.13fe4100386983B2E025 sd0: 7385MB, 512 bytes/sector,
15124992 sectors vscsi0 at root
scsibus3 at vscsi0: 256 targets
softraid0 at root
scsibus4 at softraid0: 256 targets
sd1 at scsibus4 targ 1 lun 0: <OPENBSD, SR CRYPTO, 005> SCSI2 0/direct
fixed sd1: 122022MB, 512 bytes/sector, 249902848 sectors
