Re: change wpa-psk authentication timeout
On Tue, 2009-11-10 at 19:18 +0100, Fabio Airoldi wrote: I split the log in 2 for clarity. The second part (wpa_supplicant.log_close) contains the log of a successful authentication (i moved closer to the AP). The failure log shows that you're simply too far away. The AP either isn't able to receive your 2/4 handshake request, or your machine isn't able to receive the AP's 3/4 response to it due to the signal quality. Note that after your machine sends the 2/4 request, it waits 2 seconds for a response from the AP, and none comes. Basically, even if you eventually *did* get connected, your connection would quite likely be unstable and every time a WPA rekey occurred, you'd probably fail the rekey too in the same way that the initial connection fails. And while that rekeying was going on, you wouldn't be able to send any traffic either. There's not much you can do here I suspect except either be closer to the AP or up the transmit power on your card. Dan ___ NetworkManager-list mailing list NetworkManager-list@gnome.org http://mail.gnome.org/mailman/listinfo/networkmanager-list
Re: change wpa-psk authentication timeout
Date: Mon, 09 Nov 2009 23:15:04 -0800 From: Dan Williams d...@redhat.com On Fri, 2009-11-06 at 18:59 +0100, Fabio Airoldi wrote: I have an authentication timeout when connecting to my wireless network. However if I move closer to the AP I can connect without problems, and even if I go back to my desk the connection doesn't drop. I am using networkmanager v 0.7.1 on fedora 11 (kernel 2.6.30.9). I tried setting iwlagn parameters (disable_hw_scan, sw_crypto ... almost every combination possible) but nothing changed. Is it possible to increase the authentication timeout? Maybe this is a dumb question but I wasn't able to find any documentation about timeouts. The full WPA connection timeout for NM is about 30 seconds. That's usually plenty of time for the supplicant to scan, find the AP, initiate the 4-way handshake, and finish it, *especially* for WPA. I'm very curious about why your setup is taking longer. You can put the option -dddt into your /usr/share/dbus-1/system-services/fi.epitest.hostap.WPASupplicant.service file at teh end of the Exec= line, then 'killall -TERM wpa_supplicant', then attempt to reproduce the issue, and mail me /var/log/wpa_supplicant.log so we can see what's going on. I'll note that wpa_supplicant itself uses a timeout of 70 seconds for WPA authentication. You can see this if you monitor the supplicant using wpa_cli while the supplicant authenticates. As another data point, on my AI TouchBook with RAlink RT3070, it frequently takes much longer than 30 seconds to authenticate to my WPA-EAP network. I don't know that there's any specific reason other than that there's a lot of other networks in the neighborhood and a lot of interference. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/ ___ NetworkManager-list mailing list NetworkManager-list@gnome.org http://mail.gnome.org/mailman/listinfo/networkmanager-list
Re:Re: change wpa-psk authentication timeout
hi,howard! i met similar problem a few days ago,the same chip ,rt3070! My networkmanager is 0.7.1,original wpa_supplicant is 0.5.8,when i update wpa_supplicant to 0.6.3 ,it is OK! 在2009-11-10?16:25:25，Howard?Chu?h...@symas.com?写道： ?Date:?Mon,?09?Nov?2009?23:15:04?-0800 ?From:?Dan?Williams?d...@redhat.com ?On?Fri,?2009-11-06?at?18:59?+0100,?Fabio?Airoldi?wrote: ??I?have?an?authentication?timeout?when?connecting?to?my?wireless?network. ??However?if?I?move?closer?to?the?AP?I?can?connect?without?problems,?and ??even?if?I?go?back?to?my?desk?the?connection?doesn't?drop. ?? ??I?am?using?networkmanager?v?0.7.1?on?fedora?11?(kernel?2.6.30.9).?I ??tried?setting?iwlagn?parameters?(disable_hw_scan,?sw_crypto?...?almost ??every?combination?possible)?but?nothing?changed. ?? ??Is?it?possible?to?increase?the?authentication?timeout??Maybe?this?is?a ??dumb?question?but?I?wasn't?able?to?find?any?documentation?about ??timeouts. ?The?full?WPA?connection?timeout?for?NM?is?about?30?seconds.??That's ?usually?plenty?of?time?for?the?supplicant?to?scan,?find?the?AP,?initiate ?the?4-way?handshake,?and?finish?it,?*especially*?for?WPA.??I'm?very ?curious?about?why?your?setup?is?taking?longer.??You?can?put?the?option ?-dddt?into ?your?/usr/share/dbus-1/system-services/fi.epitest.hostap.WPASupplicant.service?file?at?teh?end?of?the?Exec=?line,?then?'killall?-TERM?wpa_supplicant',?then?attempt?to?reproduce?the?issue,?and?mail?me?/var/log/wpa_supplicant.log?so?we?can?see?what's?going?on. I'll?note?that?wpa_supplicant?itself?uses?a?timeout?of?70?seconds?for?WPA authentication.?You?can?see?this?if?you?monitor?the?supplicant?using?wpa_cli while?the?supplicant?authenticates. As?another?data?point,?on?my?AI?TouchBook?with?RAlink?RT3070,?it?frequently takes?much?longer?than?30?seconds?to?authenticate?to?my?WPA-EAP?network.?I don't?know?that?there's?any?specific?reason?other?than?that?there's?a?lot?of other?networks?in?the?neighborhood?and?a?lot?of?interference. --? ??--?Howard?Chu ??CTO,?Symas?Corp.???http://www.symas.com ??Director,?Highland?Sun?http://highlandsun.com/hyc/ ??Chief?Architect,?OpenLDAP??http://www.openldap.org/project/ ___ NetworkManager-list?mailing?list NetworkManager-list@gnome.org http://mail.gnome.org/mailman/listinfo/networkmanager-list ___ NetworkManager-list mailing list NetworkManager-list@gnome.org http://mail.gnome.org/mailman/listinfo/networkmanager-list
Re:Re: change wpa-psk authentication timeout
hi,howard!i have reconfirm,it is wpa_supplicant 0.6.7 ! do iwlist ra0 scanning also need a lot of time? tommy 在2009-11-10?16:46:43，Howard?Chu?h...@symas.com?写道： tommy.hong?wrote: ? ?hi,howard! ?i?met?similar?problem?a?few?days?ago,the?same?chip?,rt3070! ? ?My?networkmanager?is?0.7.1,original?wpa_supplicant?is?0.5.8,when?i ?update?wpa_supplicant?to?0.6.3?,it?is?OK! Thanks?for?that?info.?Strange?though,?my?wpa_supplicant?is?0.6.7.?I?wonder what?differences?there?are?between?that?and?0.6.3,?will?have?to?look?at?the diff?later. ? ? ?在2009-11-10?16:25:25，Howard?Chu?h...@symas.com?写道： ?Date:?Mon,?09?Nov?2009?23:15:04?-0800 ?From:?Dan?Williams?d...@redhat.com ?On?Fri,?2009-11-06?at?18:59?+0100,?Fabio?Airoldi?wrote: ??I?have?an?authentication?timeout?when?connecting?to?my?wireless?network. ??However?if?I?move?closer?to?the?AP?I?can?connect?without?problems,?and ??even?if?I?go?back?to?my?desk?the?connection?doesn't?drop. ?? ??I?am?using?networkmanager?v?0.7.1?on?fedora?11?(kernel?2.6.30.9).?I ??tried?setting?iwlagn?parameters?(disable_hw_scan,?sw_crypto?...?almost ??every?combination?possible)?but?nothing?changed. ?? ??Is?it?possible?to?increase?the?authentication?timeout??Maybe?this?is?a ??dumb?question?but?I?wasn't?able?to?find?any?documentation?about ??timeouts. ?The?full?WPA?connection?timeout?for?NM?is?about?30?seconds.??That's ?usually?plenty?of?time?for?the?supplicant?to?scan,?find?the?AP,?initiate ?the?4-way?handshake,?and?finish?it,?*especially*?for?WPA.??I'm?very ?curious?about?why?your?setup?is?taking?longer.??You?can?put?the?option ?-dddt?into ?your?/usr/share/dbus-1/system-services/fi.epitest.hostap.WPASupplicant.service?file?at?teh?end?of?the?Exec=?line,?then?'killall?-TERM?wpa_supplicant',?then?attempt?to?reproduce?the?issue,?and?mail?me?/var/log/wpa_supplicant.log?so?we?can?see?what's?going?on. I'll?note?that?wpa_supplicant?itself?uses?a?timeout?of?70?seconds?for?WPA authentication.?You?can?see?this?if?you?monitor?the?supplicant?using?wpa_cli while?the?supplicant?authenticates. As?another?data?point,?on?my?AI?TouchBook?with?RAlink?RT3070,?it?frequently takes?much?longer?than?30?seconds?to?authenticate?to?my?WPA-EAP?network.?I don't?know?that?there's?any?specific?reason?other?than?that?there's?a?lot?of other?networks?in?the?neighborhood?and?a?lot?of?interference. --? ??--?Howard?Chu ??CTO,?Symas?Corp.???http://www.symas.com ??Director,?Highland?Sun?http://highlandsun.com/hyc/ ??Chief?Architect,?OpenLDAP??http://www.openldap.org/project/ ___ NetworkManager-list?mailing?list NetworkManager-list@gnome.org http://mail.gnome.org/mailman/listinfo/networkmanager-list ? ? ? ? ?看陆川杨幂新片《琴棋书画》，品网易3D国韵网游《天下贰》 ?http://allyes.nie.163.com/main/adfclick?db=afaniebid=1260,614,23cid=148,4,1sid=1357show=ignoreurl=http://tx2.163.com/fab.html ? --? ??--?Howard?Chu ??CTO,?Symas?Corp.???http://www.symas.com ??Director,?Highland?Sun?http://highlandsun.com/hyc/ ??Chief?Architect,?OpenLDAP??http://www.openldap.org/project/ ___ NetworkManager-list mailing list NetworkManager-list@gnome.org http://mail.gnome.org/mailman/listinfo/networkmanager-list
Re: change wpa-psk authentication timeout
On Fri, 2009-11-06 at 18:59 +0100, Fabio Airoldi wrote: I have an authentication timeout when connecting to my wireless network. However if I move closer to the AP I can connect without problems, and even if I go back to my desk the connection doesn't drop. I am using networkmanager v 0.7.1 on fedora 11 (kernel 2.6.30.9). I tried setting iwlagn parameters (disable_hw_scan, sw_crypto ... almost every combination possible) but nothing changed. Is it possible to increase the authentication timeout? Maybe this is a dumb question but I wasn't able to find any documentation about timeouts. The full WPA connection timeout for NM is about 30 seconds. That's usually plenty of time for the supplicant to scan, find the AP, initiate the 4-way handshake, and finish it, *especially* for WPA. I'm very curious about why your setup is taking longer. You can put the option -dddt into your /usr/share/dbus-1/system-services/fi.epitest.hostap.WPASupplicant.service file at teh end of the Exec= line, then 'killall -TERM wpa_supplicant', then attempt to reproduce the issue, and mail me /var/log/wpa_supplicant.log so we can see what's going on. Dan ___ NetworkManager-list mailing list NetworkManager-list@gnome.org http://mail.gnome.org/mailman/listinfo/networkmanager-list
