wpa_supplicant 不再连接到 eduroam

wpa_supplicant 不再连接到 eduroam

几周后(可能在 dist 升级之后)我的机器无法再连接到 802.1x 网络。我使用 Debian Buster 和 i3,但使用 nm-applet。我也尝试过直接与 wpa_supplicant 连接,但它也不起作用。这是我的配置:

[connection]
id=eduroam
uuid=a86d2f21-990c-4a55-b7e4-933ffcffe0cd
type=wifi
permissions=user:root:;

[wifi]
mac-address-blacklist=
ssid=eduroam

[wifi-security]
group=ccmp;tkip;
key-mgmt=wpa-eap
pairwise=ccmp;
proto=rsn;

[802-1x]
altsubject-matches=DNS:nps1.unitn.it;DNS:nps2.unitn.it;DNS:nps3.unitn.it;
anonymous-identity=
ca-cert=/root/.cat_installer/ca.pem
eap=peap;
identity=[removed]
password=[secret]
phase2-auth=mschapv2

[ipv4]
dns-search=
method=auto

[ipv6]
addr-gen-mode=stable-privacy
dns-search=
method=auto

这是系统日志的输出:

wpa_supplicant[1075]: wlan0: CTRL-EVENT-SSID-REENABLED id=0 ssid="eduroam"
wpa_supplicant[1075]: wlan0: SME: Trying to authenticate with 00:26:0b:ac:91:d2 (SSID='eduroam' freq=2412 MHz)
wpa_supplicant[1075]: wlan0: Trying to associate with 00:26:0b:ac:91:d2 (SSID='eduroam' freq=2412 MHz)
wpa_supplicant[1075]: wlan0: Associated with 00:26:0b:ac:91:d2
wpa_supplicant[1075]: wlan0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
wpa_supplicant[1075]: wlan0: CTRL-EVENT-EAP-STARTED EAP authentication started
wpa_supplicant[1075]: wlan0: CTRL-EVENT-REGDOM-CHANGE init=COUNTRY_IE type=COUNTRY alpha2=IT
wpa_supplicant[1075]: wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 -> NAK
wpa_supplicant[1075]: wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=21
wpa_supplicant[1075]: wlan0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 21 (TTLS) selected
wpa_supplicant[1075]: wlan0: CTRL-EVENT-DISCONNECTED bssid=00:26:0b:ac:91:d2 reason=4 locally_generated=1
wpa_supplicant[1075]: wlan0: CTRL-EVENT-REGDOM-CHANGE init=CORE type=WORLD
wpa_supplicant[1075]: wlan0: SME: Trying to authenticate with 54:75:d0:3f:4d:2d (SSID='eduroam' freq=5200 MHz)
wpa_supplicant[1075]: wlan0: Trying to associate with 54:75:d0:3f:4d:2d (SSID='eduroam' freq=5200 MHz)
wpa_supplicant[1075]: wlan0: Associated with 54:75:d0:3f:4d:2d
wpa_supplicant[1075]: wlan0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
wpa_supplicant[1075]: wlan0: CTRL-EVENT-EAP-STARTED EAP authentication started
wpa_supplicant[1075]: wlan0: CTRL-EVENT-REGDOM-CHANGE init=COUNTRY_IE type=COUNTRY alpha2=IT
wpa_supplicant[1075]: wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 -> NAK
wpa_supplicant[1075]: wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=21
wpa_supplicant[1075]: wlan0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 21 (TTLS) selected
wpa_supplicant[1075]: wlan0: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/CN=eduradius-dr-2018' hash=86fdb85978a8d3c9ba28e40f1f10415d49c0a595b8752556906d37ac9d1884fc
wpa_supplicant[1075]: wlan0: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/CN=eduradius-dr-2018' hash=86fdb85978a8d3c9ba28e40f1f10415d49c0a595b8752556906d37ac9d1884fc
wpa_supplicant[1075]: wlan0: CTRL-EVENT-EAP-FAILURE EAP authentication failed
wpa_supplicant[1075]: wlan0: Authentication with 54:75:d0:3f:4d:2d timed out.
wpa_supplicant[1075]: wlan0: CTRL-EVENT-DISCONNECTED bssid=54:75:d0:3f:4d:2d reason=3 locally_generated=1
wpa_supplicant[1075]: wlan0: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=2 duration=23 reason=AUTH_FAILED
wpa_supplicant[1075]: wlan0: CTRL-EVENT-REGDOM-CHANGE init=CORE type=WORLD

除了等待更新我还能做什么?

更新,dmseg -wL 输出:

[72642.755504] wlan0: authenticate with 54:75:d0:3f:4d:22
[72642.757856] wlan0: send auth to 54:75:d0:3f:4d:22 (try 1/3)
[72642.761033] wlan0: authenticated
[72642.763678] wlan0: associate with 54:75:d0:3f:4d:22 (try 1/3)
[72642.766431] wlan0: RX AssocResp from 54:75:d0:3f:4d:22 (capab=0x431 status=0 aid=3)
[72642.768628] wlan0: associated
[72642.863828] wlan0: Limiting TX power to 17 dBm as advertised by 54:75:d0:3f:4d:22
[72647.757757] wlan0: deauthenticated from 54:75:d0:3f:4d:22 (Reason: 3=DEAUTH_LEAVING)

更新:似乎问题是 wpa_supplicant 2.6 我通过降级到 2.4 解决了这个问题

答案1

我通过将 wpasupplicant 从版本 2.6 降级到版本 2.4 解决了该错误

答案2

我记得我的大学也遇到过类似的问题。事实证明,接入点收到了固件更新,破坏了对某些 WIFI 适配器的支持。

由于连接失败的原因是“AUTH_FAILED”而不是“WRONG_KEY”之类的原因,我会询问您的 eduroam 网络的管理员是否知道某些不兼容性。

同时,您可以检查内核日志是否包含有关 WIFI 适配器固件问题的一些信息。打开终端并dmesg -wL在尝试连接到网络时观察输出。如果您发现可疑的内容,请将其发布在这里,也许我们可以找出问题所在。

答案3

我会检查以下内容:

    systemctl list-unit-files --state=enabled
    systemctl list-units | grep -iE '(net|dhcp|wpa|conn|wicd)'

确保停止并停用所有网络管理服务并尝试手动连接: https://wiki.archlinux.org/index.php/Wireless_network_configuration#Manual_setup

这也可能有帮助:

您可能需要将 ath5k 更改为您的 wifi 卡使用相同配置文件的模块。

    echo "options ath5k nohwcrypt=Y" | sudo tee -a /etc/modprobe.d/ath5k.conf
    sudo iw reg set GB

在这里找到的信息:
https://bbs.archlinux.org/viewtopic.php?id=231904
https://ubuntuforums.org/showthread.php?t=2279555

相关内容