[TriLUG] wpa_supplicant blacklists my AP! [Long message!]

[Daniel T. Chen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Brian Henning wrote:
> Problem is, wpa_supplicant never manages to associate with my AP.  My AP is
> configured with broadcast disabled, mac filtering, and WPA-PSK / TKIP.  I
> know my MAC address is allowed, because it all works perfectly when I'm
> booted in Windows.

Depending on the AP, and because you disabled ssid broadcasting, you may
need the following outside your network={} stanzas in
/etc/wpa_supplicant.conf:

eapol_version=2
ap_scan=2

I use a WRT54G 3.0 (running current stock fw) with ssid broadcasting
disabled, MAC address filtering enabled, and WPA2 PSK (AES).

> ctrl_interface=/var/run/wpa_supplicant
> 
> network={
> 	ssid="mywirelesssid"
> 	#psk=" [ my psk string ] "
> 	psk=[my psk hex string]
>       key_mgmt=WPA-PSK
> 	pairwise=TKIP
> 	group=TKIP
> 	proto=WPA
> }

You can strip the pairwise and group directives from the above stanza.

To note, for people using Debian Sarge (and Ubuntu Dapper) and newer,
you can (and probably should) use the interfaces(5) syntax if you're not
using a gui like network-manager. We worked on this for the Debian
package, so what you need is something like the following in
/etc/network/interfaces:

iface ath0 inet dhcp
        wpa-driver wext
        wpa-conf /etc/wpa_supplicant.conf

and thus will only need to modify /etc/wpa_supplicant.conf. At that
point you can simply use ``ifup ath0'', etc.

Thanks,
- --
Daniel T. Chen            crimsun at ubuntu.com
GPG key:  0xC88ABDA3
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFKBXfe9GwFciKvaMRAoG6AJwOKpFVdNzzBde2ruePCrc6mqOKBACfUtEp
S3LFsRDzZOQBzpEbZl2PX1Y=
=AdbD
-----END PGP SIGNATURE-----