You are not logged in.

#1 2023-07-06 14:38:00

Nico371
Member
Registered: 2022-06-07
Posts: 19

Can't connect to wifi anymore

I use NetworkManager to connect to my school's wifi, which on my phone asks for username and password. A few months ago I was able to set up a config that would work, but this config no longer works and I have no idea why.
This is my current configuration using nm-connection-editor:

[b]Wi-Fi[/b]
SSID: Alumnos
Mode: Client
Band: Automatic

[b]Wi-Fi Security[/b]
Security: WPA/WPA2 Enterprise
Authentication: Tunneled TLS
Inner Authentication: MSCHAPv2 (no EAP)
Username: [my username]
Password: [my password]

All the other settings are blank

When running

nmcli dev wifi connect Alumnos

I get:

Error: Failed to add/activate new connection: Failed to determine AP security information

This is almost instant, which makes me think there's something obviously wrong with how I have it configured, or some setting I have, but I couldn't find anything on this forum that helped or on the internet
I can still connect to my mobile hotspot, which makes me think it's something I've messed up in the wireless configuration. I also have a wpa_supplicant config:

/etc/wpa_supplicant/wpa_supplicant.conf

ctrl_interface=/run/wpa_supplicant
update_config=1

network={
	ssid="Alumnos"
	psk="password"
	key_mgmt=WPA-EAP
	eap=PEAP
	identity="********"
	password="*******"
	phase1="peaplabel=0"
	phase2="auth=MSCHAPV2"
	mesh_fwding=1
}

I don't think it's relevant because I disabled wpa_supplicant.service a long time ago, but it's something that might help, I suppose

Offline

#2 2023-07-06 19:52:16

seth
Member
From: Won't reply 2 private help req
Registered: 2012-09-03
Posts: 76,137

Re: Can't connect to wifi anymore

NM will still use wpa_supplicant (unless you configured it to use iwd), please post a complete system journal for a boot after failing to connect to the eduroam AP:

sudo journalctl -b | curl -F 'f:1=<-' ix.io

Offline

#3 2023-07-06 21:34:55

Scimmia
Fellow
Registered: 2012-09-01
Posts: 13,727

Re: Can't connect to wifi anymore

Offline

#4 2023-07-08 11:31:32

Nico371
Member
Registered: 2022-06-07
Posts: 19

Re: Can't connect to wifi anymore

seth wrote:

NM will still use wpa_supplicant (unless you configured it to use iwd), please post a complete system journal for a boot after failing to connect to the eduroam AP:

sudo journalctl -b | curl -F 'f:1=<-' ix.io

After running

sudo journalctl -b | curl -F 'f:1=<-' ix.io

is:

http://ix.io/4A3U

(I think what you're looking for is when you Ctrl + F "Alumnos")

Also, the connection is not eduroam

Last edited by Nico371 (2023-07-08 12:30:55)

Offline

#5 2023-07-08 11:40:25

Nico371
Member
Registered: 2022-06-07
Posts: 19

Re: Can't connect to wifi anymore

Following the result posted at the end of this just made my device show up as "unavailable" when running

nmcli dev

I reverted the changes, but think it might have something to do with them using

wlp3s0

in the ExecStart line, where I think mine could be different, hence it not working. Any ideas as to this?

Offline

#6 2023-07-08 12:20:45

seth
Member
From: Won't reply 2 private help req
Registered: 2012-09-03
Posts: 76,137

Re: Can't connect to wifi anymore

http://ix.io/A43U is blank? Typo?

where I think mine could be different, hence it not working. Any ideas as to this?

Yes, upload your journal wink

Offline

#7 2023-07-08 12:30:38

Nico371
Member
Registered: 2022-06-07
Posts: 19

Re: Can't connect to wifi anymore

seth wrote:

http://ix.io/A43U is blank? Typo?

where I think mine could be different, hence it not working. Any ideas as to this?

Yes, upload your journal wink

Whoops, mistyped it:
http://ix.io/4A3U

Offline

#8 2023-07-08 12:41:39

seth
Member
From: Won't reply 2 private help req
Registered: 2012-09-03
Posts: 76,137

Re: Can't connect to wifi anymore

Your device name is "wlan0"
The journal has

Jul 08 13:42:23 TheMysteryMachine sudo[595]:  nucieda : TTY=pts/0 ; PWD=/home/nucieda ; USER=root ; COMMAND=/usr/bin/nmcli dev wifi connect Alumnos

but the only SSID ever showing up is "Banana" and it took you about 1s to connect to that.
There's no log of any attempt by NM to connect to "Alumnos", but only

Jul 08 13:42:23 TheMysteryMachine NetworkManager[360]: <info>  [1688816543.4014] audit: op="connection-add-activate" pid=596 uid=0 result="fail" reason="Failed to determine AP security information"

nor any SSL errors.
I'd say you're not even using the existing profile? What if you don't "sudo" nmcli?

Offline

#9 2023-07-08 12:48:44

Nico371
Member
Registered: 2022-06-07
Posts: 19

Re: Can't connect to wifi anymore

If I don't "sudo" I get the same error message:

[nucieda@TheMysteryMachine ~]$ nmcli dev wifi connect Alumnos
Error: Failed to add/activate new connection: Failed to determine AP security information

Offline

#10 2023-07-08 13:15:28

seth
Member
From: Won't reply 2 private help req
Registered: 2012-09-03
Posts: 76,137

Re: Can't connect to wifi anymore

Does the AP show up in a scan?
Are there any documentations authentication protocol privided by your school?

Offline

#11 2023-07-08 13:39:30

Nico371
Member
Registered: 2022-06-07
Posts: 19

Re: Can't connect to wifi anymore

seth wrote:

Does the AP show up in a scan?
Are there any documentations authentication protocol privided by your school?

School doesn't provide anything, unfortunately. The AP shows up:

[nucieda@TheMysteryMachine nucieda]$ nmcli dev wifi list
IN-USE  BSSID              SSID                    MODE   CHAN  RATE        SIGNAL  BARS  SECURITY    
*       E2:AF:41:66:9E:11  Banana                  Infra  6     130 Mbit/s  100     ▂▄▆█  WPA2        
        E2:AF:41:66:9E:11  Banana                  Infra  6     130 Mbit/s  100     ▂▄▆█  WPA2        
        5C:5A:C7:E2:35:A1  Alumnos                 Infra  5     195 Mbit/s  84      ▂▄▆█  WPA2 802.1X 
        F8:5B:3B:FE:95:EF  MOVISTAR_95E0           Infra  11    130 Mbit/s  84      ▂▄▆█  WPA2        
        D0:4D:C6:B5:24:50  IntranetTelefonicaWiFi  Infra  11    260 Mbit/s  82      ▂▄▆█  WPA2 802.1X 
        D0:4D:C6:B5:24:51  TelefonicaGuest         Infra  11    260 Mbit/s  82      ▂▄▆█  --          
        D0:4D:C6:B5:24:52  --                      Infra  11    260 Mbit/s  80      ▂▄▆_  WPA2        
        D0:4D:C6:B5:24:72  --                      Infra  128   540 Mbit/s  80      ▂▄▆_  WPA2        
        5C:5A:C7:E2:35:AF  Eventos                 Infra  56    405 Mbit/s  79      ▂▄▆_  WPA2        
        5C:5A:C7:E2:35:AE  Alumnos                 Infra  56    405 Mbit/s  79      ▂▄▆_  WPA2 802.1X 
        F8:5B:3B:FE:95:EE  MOVISTAR_PLUS_95E0      Infra  100   540 Mbit/s  79      ▂▄▆_  WPA2        
        E6:5B:3B:FE:95:EE  MOVISTAR_95E0           Infra  100   540 Mbit/s  79      ▂▄▆_  WPA2        
        D0:4D:C6:B5:24:71  TelefonicaGuest         Infra  128   540 Mbit/s  79      ▂▄▆_  --          
        D0:4D:C6:B5:24:70  IntranetTelefonicaWiFi  Infra  128   540 Mbit/s  77      ▂▄▆_  WPA2 802.1X 
        5C:5A:C7:EA:8B:6F  Eventos                 Infra  36    405 Mbit/s  72      ▂▄▆_  WPA2        
        5C:5A:C7:EA:8B:6E  Alumnos                 Infra  36    405 Mbit/s  72      ▂▄▆_  WPA2 802.1X 
        5C:5A:C7:EA:8B:80  Eventos                 Infra  13    195 Mbit/s  60      ▂▄▆_  WPA2        
        5C:5A:C7:EA:8B:81  Alumnos                 Infra  13    195 Mbit/s  60      ▂▄▆_  WPA2 802.1X 
        D0:4D:C6:B5:22:D2  --                      Infra  6     260 Mbit/s  59      ▂▄▆_  WPA2        
        D0:4D:C6:B5:22:D0  IntranetTelefonicaWiFi  Infra  6     260 Mbit/s  57      ▂▄▆_  WPA2 802.1X 
        D0:4D:C6:B5:22:D1  TelefonicaGuest         Infra  6     260 Mbit/s  57      ▂▄▆_  --          
        D0:4D:C6:B4:C5:A0  IntranetTelefonicaWiFi  Infra  1     260 Mbit/s  52      ▂▄__  WPA2 802.1X 
        D0:4D:C6:B4:C5:A1  TelefonicaGuest         Infra  1     260 Mbit/s  52      ▂▄__  --          
        5C:5A:C7:EA:8B:8F  Eventos                 Infra  44    405 Mbit/s  50      ▂▄__  WPA2        
        5C:5A:C7:EA:8B:8E  Alumnos                 Infra  44    405 Mbit/s  50      ▂▄__  WPA2 802.1X 
        5C:5A:C7:F2:78:AF  Eventos                 Infra  132   405 Mbit/s  50      ▂▄__  WPA2        
        5C:5A:C7:EA:8B:C0  Eventos                 Infra  5     195 Mbit/s  49      ▂▄__  WPA2        
        5C:5A:C7:EA:8B:C1  Alumnos                 Infra  5     195 Mbit/s  49      ▂▄__  WPA2 802.1X 
        D0:4D:C6:B5:68:90  IntranetTelefonicaWiFi  Infra  6     260 Mbit/s  49      ▂▄__  WPA2 802.1X 
        D0:4D:C6:B5:68:91  TelefonicaGuest         Infra  6     260 Mbit/s  49      ▂▄__  --          
        5C:5A:C7:F2:78:AE  Alumnos                 Infra  132   405 Mbit/s  49      ▂▄__  WPA2 802.1X 
        D0:4D:C6:B5:68:92  --                      Infra  6     260 Mbit/s  45      ▂▄__  WPA2        
        D0:4D:C6:B4:C5:A2  --                      Infra  1     260 Mbit/s  44      ▂▄__  WPA2        
        5C:5A:C7:EA:8B:CF  Eventos                 Infra  100   405 Mbit/s  44      ▂▄__  WPA2        
        5C:5A:C7:EA:8B:CE  Alumnos                 Infra  100   405 Mbit/s  42      ▂▄__  WPA2 802.1X 
        D0:4D:C6:B4:C5:C1  TelefonicaGuest         Infra  56    540 Mbit/s  40      ▂▄__  --          
        48:F1:7F:9F:BA:00  VIA_WIFI                Infra  8     65 Mbit/s   39      ▂▄__  WPA2        
        D0:4D:C6:B4:C5:C0  IntranetTelefonicaWiFi  Infra  56    540 Mbit/s  39      ▂▄__  WPA2 802.1X 
        D0:4D:C6:B5:22:F1  TelefonicaGuest         Infra  153   540 Mbit/s  37      ▂▄__  --          
        D0:4D:C6:B5:22:F0  IntranetTelefonicaWiFi  Infra  153   540 Mbit/s  35      ▂▄__  WPA2 802.1X 

Offline

#12 2023-07-08 14:00:55

seth
Member
From: Won't reply 2 private help req
Registered: 2012-09-03
Posts: 76,137

Re: Can't connect to wifi anymore

Did/does the school issue a certificate for the authentication?
Edit: and ideally post an old journal where you successfully connected to the school's AP

Last edited by seth (2023-07-08 14:02:01)

Offline

#13 2023-07-08 14:34:58

Nico371
Member
Registered: 2022-06-07
Posts: 19

Re: Can't connect to wifi anymore

seth wrote:

Did/does the school issue a certificate for the authentication?
Edit: and ideally post an old journal where you successfully connected to the school's AP

School provides nothing, I asked about it.
I have no idea how I could even get an old journal like that

Offline

#14 2023-07-08 18:23:20

seth
Member
From: Won't reply 2 private help req
Registered: 2012-09-03
Posts: 76,137

Re: Can't connect to wifi anymore

"sudo journalctl -b -10" is the journal for 10 boots ago.

Offline

#15 2023-07-14 07:15:14

Nico371
Member
Registered: 2022-06-07
Posts: 19

Re: Can't connect to wifi anymore

seth wrote:

"sudo journalctl -b -10" is the journal for 10 boots ago.

Sorry it took so long to reply,
http://ix.io/4Ayi

Last edited by Nico371 (2023-07-14 07:15:43)

Offline

#16 2023-07-14 11:54:31

seth
Member
From: Won't reply 2 private help req
Registered: 2012-09-03
Posts: 76,137

Re: Can't connect to wifi anymore

Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: Trying to associate with 5c:5a:c7:1e:e6:4e (SSID='Alumnos' freq=5320 MHz)
Jun 12 13:35:03 TheMysteryMachine NetworkManager[354]: <info>  [1686569703.3189] device (wlp0s20f3): supplicant interface state: authenticating -> associating
Jun 12 13:35:03 TheMysteryMachine NetworkManager[354]: <info>  [1686569703.3189] device (p2p-dev-wlp0s20f3): supplicant management interface state: authenticating -> associating
Jun 12 13:35:03 TheMysteryMachine kernel: wlp0s20f3: authenticated
Jun 12 13:35:03 TheMysteryMachine kernel: wlp0s20f3: associate with 5c:5a:c7:1e:e6:4e (try 1/3)
Jun 12 13:35:03 TheMysteryMachine kernel: wlp0s20f3: RX AssocResp from 5c:5a:c7:1e:e6:4e (capab=0x411 status=0 aid=82)
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: Associated with 5c:5a:c7:1e:e6:4e
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-STARTED EAP authentication started
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jun 12 13:35:03 TheMysteryMachine kernel: wlp0s20f3: associated
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=4 -> NAK
Jun 12 13:35:03 TheMysteryMachine NetworkManager[354]: <info>  [1686569703.3382] device (wlp0s20f3): supplicant interface state: associating -> associated
Jun 12 13:35:03 TheMysteryMachine NetworkManager[354]: <info>  [1686569703.3383] device (p2p-dev-wlp0s20f3): supplicant management interface state: associating -> associated
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=ES/ST=Espana/L=Madrid/O=42 Madrid/emailAddress=xitope@42.fr/CN=42 Madrid Certificate Authority' hash=1c1d…b704
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=ES/ST=Espana/L=Madrid/O=42 Madrid/emailAddress=xitope@42.fr/CN=42 Madrid Certificate Authority' hash=1c1d…b704
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=ES/ST=Espana/L=Madrid/O=42 Madrid/emailAddress=xitope@42.fr/CN=42 Madrid Certificate Authority' hash=1c1d…b704
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=ES/ST=Espana/O=42 Madrid/CN=42 Mardid Server Certificate/emailAddress=xitope@42.fr' hash=1ce5…18cd
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=ES/ST=Espana/O=42 Madrid/CN=42 Mardid Server Certificate/emailAddress=xitope@42.fr' hash=1ce5…18cd
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: EAP-MSCHAPV2: Invalid header: len=63 ms_len=29
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: EAP-MSCHAPV2: workaround, ignore invalid ms_len 29 (len 63)
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: EAP-MSCHAPV2: Invalid header: len=97 ms_len=46
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: EAP-MSCHAPV2: workaround, ignore invalid ms_len 46 (len 97)
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: EAP-MSCHAPV2: Authentication succeeded
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: EAP-TLV: TLV Result - Success - EAP-TLV/Phase2 Completed
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: PMKSA-CACHE-ADDED 5c:5a:c7:1e:e6:4e 0
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: WPA: Key negotiation completed with 5c:5a:c7:1e:e6:4e [PTK=CCMP GTK=CCMP]
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-CONNECTED - Connection to 5c:5a:c7:1e:e6:4e completed [id=0 id_str=]

https://wiki.archlinux.org/title/Networ … .1x_/_PEAP
And google relveals  that we had been there before, https://bbs.archlinux.org/viewtopic.php?id=283747
What caused the altered conneciton settings in the OP?

Your institute might have moved away from MSCHAPv2 but then of course the older journals won't help either.

Offline

Board footer

Powered by FluxBB