I dug a bit deeper, created a patch, and filed a bug report for
ndiswrapper too.
Patch is:
diff --git a/iw_ndis.c b/iw_ndis.c
index 434260e..3f5e12c 100644
--- a/iw_ndis.c
+++ b/iw_ndis.c
@@ -1591,6 +1591,12 @@ static int iw_set_auth(struct net_device *dev,
if (wrqu->param.value)
The following happens in the wpa_supplicant, driver_wext.c lines 2115
and further
#ifdef CONFIG_IEEE80211W
switch (params->mgmt_frame_protection) {
case NO_MGMT_FRAME_PROTECTION:
value = IW_AUTH_MFP_DISABLED;
break;
case MGMT_FRAME_PROTECTION