[Solved] Network Manager Not Connecting to Secure Site

Gotit · 2021-10-22 19:58:41

Hi - I just finished re-installing Arch (following the install guide) to my laptop. Prior to the re-install, NM was working fine and I could connect via wifi to to my home network (Virus_Sandbox-1) that has wpa security. However, after the install, I cannot connect directly to my home network. I say "directly" as I can connect to my guest network (Virus_Sandbox-3) that does not have security enabled. Once I've done that, I can switch to my home network and NM will connect.

My driver is:

 $ lspci -k
02:00.0 Network controller: Intel Corporation Wireless 8265 / 8275 (rev 78)
	Subsystem: Intel Corporation Dual Band Wireless-AC 8265
	Kernel driver in use: iwlwifi
	Kernel modules: iwlwifi

Firmware:

# dmesg | grep firmware
[    8.460407] iwlwifi 0000:02:00.0: loaded firmware version 36.ca7b901d.0 8265-36.ucode op_mode iwlmvm

First trying to connect to Virus_Sandbox-1 (with wpa)

$ nmcli device wifi connect Virus_Sandbox-1 password <redacted>
Error: Connection activation failed: (53) The Wi-Fi network could not be found.

dmesg log

# dmesg -w
[ 2619.024359] audit: type=1101 audit(1634929605.076:96): pid=1901 uid=1002 auid=1002 ses=2 msg='op=PAM:accounting grantors=pam_unix,pam_permit,pam_time acct="steve" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success'
[ 2619.024995] audit: type=1110 audit(1634929605.080:97): pid=1901 uid=1002 auid=1002 ses=2 msg='op=PAM:setcred grantors=pam_faillock,pam_permit,pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success'
[ 2619.027703] audit: type=1105 audit(1634929605.080:98): pid=1901 uid=1002 auid=1002 ses=2 msg='op=PAM:session_open grantors=pam_limits,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success'
[ 2637.254161] audit: type=1111 audit(1634929623.310:99): pid=397 uid=0 auid=4294967295 ses=4294967295 msg='op=connection-update uuid=05942e8d-d3a9-4876-a9ad-d29bf812874d name="Virus_Sandbox-1" pid=1905 uid=1002 result=success exe="/usr/bin/NetworkManager" hostname=? addr=? terminal=? res=success'
[ 2637.264921] audit: type=1111 audit(1634929623.320:100): pid=397 uid=0 auid=4294967295 ses=4294967295 msg='op=connection-activate uuid=05942e8d-d3a9-4876-a9ad-d29bf812874d name="Virus_Sandbox-1" pid=1905 uid=1002 result=success exe="/usr/bin/NetworkManager" hostname=? addr=? terminal=? res=success'
[ 2637.266323] wlan0: deauthenticating from xx:xx:xx:xx:xx:xx by local choice (Reason: 3=DEAUTH_LEAVING)
[ 2637.365767] wlan0: authenticate with xx:xx:xx:xx:xx:xx
[ 2637.374598] wlan0: send auth to xx:xx:xx:xx:xx:xx (try 1/3)
[ 2637.375207] wlan0: authenticate with xx:xx:xx:xx:xx:xx
[ 2637.375592] wlan0: send auth to xx:xx:xx:xx:xx:xx (try 1/3)
[ 2637.385158] wlan0: authenticated
[ 2637.387987] wlan0: associate with xx:xx:xx:xx:xx:xx (try 1/3)
[ 2637.410251] wlan0: RX AssocResp from xx:xx:xx:xx:xx:xx (capab=0x411 status=0 aid=4)
[ 2637.416081] wlan0: associated
[ 2637.567670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2688.013360] wlan0: deauthenticating from xx:xx:xx:xx:xx:xx by local choice (Reason: 3=DEAUTH_LEAVING)
[ 2688.113209] wlan0: authenticate with xx:xx:xx:xx:xx:xx
[ 2688.123864] wlan0: send auth to xx:xx:xx:xx:xx:xx (try 1/3)
[ 2688.134309] wlan0: authenticated
[ 2688.134592] wlan0: associate with xx:xx:xx:xx:xx:xx (try 1/3)
[ 2688.156999] wlan0: RX AssocResp from xx:xx:xx:xx:xx:xx (capab=0x411 status=0 aid=4)
[ 2688.164131] wlan0: associated
[ 2688.314117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready

Then connecting to Virus_Sandbox-3 (no security)

$ nmcli device wifi connect Virus_Sandbox-3
Device 'wlan0' successfully activated with '62a62587-2b01-4f7f-85b1-06ffaf8759c1'.

dmesg log

# dmesg -w
[ 3099.600827] audit: type=1130 audit(1634930085.653:113): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
[ 3110.021430] audit: type=1131 audit(1634930096.076:114): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
[ 3135.902886] audit: type=1101 audit(1634930121.956:115): pid=2023 uid=1002 auid=1002 ses=2 msg='op=PAM:accounting grantors=pam_unix,pam_permit,pam_time acct="steve" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success'
[ 3135.903705] audit: type=1110 audit(1634930121.956:116): pid=2023 uid=1002 auid=1002 ses=2 msg='op=PAM:setcred grantors=pam_faillock,pam_permit,pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success'
[ 3135.906438] audit: type=1105 audit(1634930121.960:117): pid=2023 uid=1002 auid=1002 ses=2 msg='op=PAM:session_open grantors=pam_limits,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success'
[ 3312.696516] audit: type=1111 audit(1634930298.750:118): pid=397 uid=0 auid=4294967295 ses=4294967295 msg='op=connection-update uuid=05942e8d-d3a9-4876-a9ad-d29bf812874d name="Virus_Sandbox-1" pid=2035 uid=1002 result=success exe="/usr/bin/NetworkManager" hostname=? addr=? terminal=? res=success'
[ 3312.712039] audit: type=1111 audit(1634930298.766:119): pid=397 uid=0 auid=4294967295 ses=4294967295 msg='op=connection-activate uuid=05942e8d-d3a9-4876-a9ad-d29bf812874d name="Virus_Sandbox-1" pid=2035 uid=1002 result=success exe="/usr/bin/NetworkManager" hostname=? addr=? terminal=? res=success'
[ 3312.734859] audit: type=1130 audit(1634930298.790:120): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
[ 3076.058504] wlan0: deauthenticating from xx:xx:xx:xx:xx:xx by local choice (Reason: 3=DEAUTH_LEAVING)
[ 3076.160172] wlan0: authenticate with xx:xx:xx:xx:xx:xx
[ 3076.168947] wlan0: send auth to xx:xx:xx:xx:xx:xx (try 1/3)
[ 3076.211711] wlan0: authenticate with yy:yy:yy:yy:yy:yy
[ 3076.221037] wlan0: send auth to yy:yy:yy:yy:yy:yy (try 1/3)
[ 3076.235287] wlan0: authenticated
[ 3076.271177] wlan0: associate with xx:xx:xx:xx:xx:xx (try 1/3)
[ 3076.378333] wlan0: associate with xx:xx:xx:xx:xx:xx (try 2/3)
[ 3076.481724] wlan0: associate with xx:xx:xx:xx:xx:xx (try 3/3)
[ 3076.587922] wlan0: association with xx:xx:xx:xx:xx:xx timed out
[ 3096.010970] wlan0: authenticate with yy:yy:yy:yy:yy:yy
[ 3096.018750] wlan0: send auth to yy:yy:yy:yy:yy:yy (try 1/3)
[ 3096.029838] wlan0: authenticated
[ 3096.031283] wlan0: associate with yy:yy:yy:yy:yy:yy (try 1/3)
[ 3096.052194] wlan0: RX AssocResp from yy:yy:yy:yy:yy:yy (capab=0x401 status=0 aid=4)
[ 3096.067528] wlan0: associated
[ 3096.072248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready

Finally, I can now connect to Virus_Sandbox-1 (wpa). Note: without the password???

$ nmcli device wifi connect Virus_Sandbox-1
Device 'wlan0' successfully activated with '05942e8d-d3a9-4876-a9ad-d29bf812874d'.

dmesg log

# dmesg -w
[ 3099.600827] audit: type=1130 audit(1634930085.653:113): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
[ 3110.021430] audit: type=1131 audit(1634930096.076:114): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
[ 3135.902886] audit: type=1101 audit(1634930121.956:115): pid=2023 uid=1002 auid=1002 ses=2 msg='op=PAM:accounting grantors=pam_unix,pam_permit,pam_time acct="steve" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success'
[ 3135.903705] audit: type=1110 audit(1634930121.956:116): pid=2023 uid=1002 auid=1002 ses=2 msg='op=PAM:setcred grantors=pam_faillock,pam_permit,pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success'
[ 3135.906438] audit: type=1105 audit(1634930121.960:117): pid=2023 uid=1002 auid=1002 ses=2 msg='op=PAM:session_open grantors=pam_limits,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success'
[ 3312.696516] audit: type=1111 audit(1634930298.750:118): pid=397 uid=0 auid=4294967295 ses=4294967295 msg='op=connection-update uuid=05942e8d-d3a9-4876-a9ad-d29bf812874d name="Virus_Sandbox-1" pid=2035 uid=1002 result=success exe="/usr/bin/NetworkManager" hostname=? addr=? terminal=? res=success'
[ 3312.712039] audit: type=1111 audit(1634930298.766:119): pid=397 uid=0 auid=4294967295 ses=4294967295 msg='op=connection-activate uuid=05942e8d-d3a9-4876-a9ad-d29bf812874d name="Virus_Sandbox-1" pid=2035 uid=1002 result=success exe="/usr/bin/NetworkManager" hostname=? addr=? terminal=? res=success'
[ 3312.734859] audit: type=1130 audit(1634930298.790:120): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
[ 3312.746801] wlan0: deauthenticating from yy:yy:yy:yy:yy:yy by local choice (Reason: 3=DEAUTH_LEAVING)
[ 3316.526983] wlan0: authenticate with xx:xx:xx:xx:xx:xx
[ 3316.537844] wlan0: send auth to xx:xx:xx:xx:xx:xx (try 1/3)
[ 3316.550973] wlan0: authenticated
[ 3316.555016] wlan0: associate with xx:xx:xx:xx:xx:xx (try 1/3)
[ 3316.573374] wlan0: RX AssocResp from xx:xx:xx:xx:xx:xx (capab=0x411 status=0 aid=4)
[ 3316.577852] wlan0: associated
[ 3316.762681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 3323.013889] audit: type=1131 audit(1634930309.066:121): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
[ 3330.520330] audit: type=1101 audit(1634930316.573:122): pid=2176 uid=1002 auid=1002 ses=2 msg='op=PAM:accounting grantors=pam_unix,pam_permit,pam_time acct="steve" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success'
[ 3330.520967] audit: type=1110 audit(1634930316.573:123): pid=2176 uid=1002 auid=1002 ses=2 msg='op=PAM:setcred grantors=pam_faillock,pam_permit,pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success'
[ 3330.523603] audit: type=1105 audit(1634930316.576:124): pid=2176 uid=1002 auid=1002 ses=2 msg='op=PAM:session_open grantors=pam_limits,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success'

I've walked through Network Configuration and Network Manager on the wiki a number of times now. Any thoughts on how I can get first time connection to secure sites?

Last edited by Gotit (2021-10-29 16:45:47)

Gotit · 2021-10-26 14:56:14

Bump
Any thoughts on this out there?

Gotit · 2021-10-29 12:58:00

Bump... again
Is there any information I'm missing above that would help?

V1del · 2021-10-29 13:30:57

Don't do that: https://wiki.archlinux.org/title/Genera … es#Bumping

Did you run a nmcli wifi rescan before trying that connect?

Make sure you aren't running conflicting services:

find /etc/systemd -type l -exec test -f {} \; -print | awk -F'/' '{ printf ("%-40s | %s\n", $(NF-0), $(NF-1)) }' | sort -f

How disciplined are/were you about setting the connection up with nmcli? Did you always use nmcli or did you ever use a GUI applet? There could be differences in who stores the connection secret if you did.

Last edited by V1del (2021-10-29 13:31:48)

Lone_Wolf · 2021-10-29 13:36:15

Have you checked whether https://wiki.archlinux.org/title/Networ … domization is involved ?

Last edited by Lone_Wolf (2021-10-29 13:37:21)

seth · 2021-10-29 14:24:04

And also inspect the journal on when the crng is initialized and see https://wiki.debian.org/BoottimeEntropyStarvation and https://wiki.archlinux.org/title/Haveged

Gotit · 2021-10-29 14:30:10

@V1del - sorry about the bump and thanks for point that out in the wiki.

$ find /etc/systemd -type l -exec test -f {} \; -print | awk -F'/' '{ printf ("%-40s | %s\n", $(NF-0), $(NF-1)) }' | sort -f
cronie.service                           | multi-user.target.wants
dbus-org.freedesktop.nm-dispatcher.service | system
dirmngr.socket                           | sockets.target.wants
display-manager.service                  | system
getty@tty1.service                       | getty.target.wants
gpg-agent-browser.socket                 | sockets.target.wants
gpg-agent-extra.socket                   | sockets.target.wants
gpg-agent.socket                         | sockets.target.wants
gpg-agent-ssh.socket                     | sockets.target.wants
iwd.service                              | multi-user.target.wants
NetworkManager.service                   | multi-user.target.wants
NetworkManager-wait-online.service       | network-online.target.wants
p11-kit-server.socket                    | sockets.target.wants
pamac-cleancache.timer                   | timers.target.wants
pulseaudio.socket                        | sockets.target.wants
remote-fs.target                         | multi-user.target.wants

I normally run MN via the applet with the same results.
-No connection with secure site
-Will connect to non-secure site
-can then connect to the secure site

I provided nmcli as research on the issue seemed that folks wanted to see that vs logs from trying with the applet.

seth · 2021-10-29 14:33:52

You've networkmanager and iwd enabled, disable iwd.service, reboot and see whether you can connect directly…

Gotit · 2021-10-29 16:44:35

@Seth disabling iwd worked the trick.
I've re-enabled MAC address randomization and the secure network is easily found and logged into.

I'll mark this solved.

Thanks everyone!

Arch Linux

#1 2021-10-22 19:58:41

[Solved] Network Manager Not Connecting to Secure Site

#2 2021-10-26 14:56:14

Re: [Solved] Network Manager Not Connecting to Secure Site

#3 2021-10-29 12:58:00

Re: [Solved] Network Manager Not Connecting to Secure Site

#4 2021-10-29 13:30:57

Re: [Solved] Network Manager Not Connecting to Secure Site

#5 2021-10-29 13:36:15

Re: [Solved] Network Manager Not Connecting to Secure Site

#6 2021-10-29 14:24:04

Re: [Solved] Network Manager Not Connecting to Secure Site

#7 2021-10-29 14:30:10

Re: [Solved] Network Manager Not Connecting to Secure Site

#8 2021-10-29 14:33:52

Re: [Solved] Network Manager Not Connecting to Secure Site

#9 2021-10-29 16:44:35

Re: [Solved] Network Manager Not Connecting to Secure Site

Board footer