You are not logged in.
Pages: 1
I use NetworkManager to connect to my school's wifi, which on my phone asks for username and password. A few months ago I was able to set up a config that would work, but this config no longer works and I have no idea why.
This is my current configuration using nm-connection-editor:
[b]Wi-Fi[/b]
SSID: Alumnos
Mode: Client
Band: Automatic
[b]Wi-Fi Security[/b]
Security: WPA/WPA2 Enterprise
Authentication: Tunneled TLS
Inner Authentication: MSCHAPv2 (no EAP)
Username: [my username]
Password: [my password]All the other settings are blank
When running
nmcli dev wifi connect AlumnosI get:
Error: Failed to add/activate new connection: Failed to determine AP security informationThis is almost instant, which makes me think there's something obviously wrong with how I have it configured, or some setting I have, but I couldn't find anything on this forum that helped or on the internet
I can still connect to my mobile hotspot, which makes me think it's something I've messed up in the wireless configuration. I also have a wpa_supplicant config:
/etc/wpa_supplicant/wpa_supplicant.conf
ctrl_interface=/run/wpa_supplicant
update_config=1
network={
ssid="Alumnos"
psk="password"
key_mgmt=WPA-EAP
eap=PEAP
identity="********"
password="*******"
phase1="peaplabel=0"
phase2="auth=MSCHAPV2"
mesh_fwding=1
}I don't think it's relevant because I disabled wpa_supplicant.service a long time ago, but it's something that might help, I suppose
Offline
NM will still use wpa_supplicant (unless you configured it to use iwd), please post a complete system journal for a boot after failing to connect to the eduroam AP:
sudo journalctl -b | curl -F 'f:1=<-' ix.ioOffline
Offline
NM will still use wpa_supplicant (unless you configured it to use iwd), please post a complete system journal for a boot after failing to connect to the eduroam AP:
sudo journalctl -b | curl -F 'f:1=<-' ix.io
After running
sudo journalctl -b | curl -F 'f:1=<-' ix.iois:
http://ix.io/4A3U(I think what you're looking for is when you Ctrl + F "Alumnos")
Also, the connection is not eduroam
Last edited by Nico371 (2023-07-08 12:30:55)
Offline
Following the result posted at the end of this just made my device show up as "unavailable" when running
nmcli devI reverted the changes, but think it might have something to do with them using
wlp3s0in the ExecStart line, where I think mine could be different, hence it not working. Any ideas as to this?
Offline
http://ix.io/A43U is blank? Typo?
where I think mine could be different, hence it not working. Any ideas as to this?
Yes, upload your journal ![]()
Offline
http://ix.io/A43U is blank? Typo?
where I think mine could be different, hence it not working. Any ideas as to this?
Yes, upload your journal
Whoops, mistyped it:
http://ix.io/4A3U
Offline
Your device name is "wlan0"
The journal has
Jul 08 13:42:23 TheMysteryMachine sudo[595]: nucieda : TTY=pts/0 ; PWD=/home/nucieda ; USER=root ; COMMAND=/usr/bin/nmcli dev wifi connect Alumnos but the only SSID ever showing up is "Banana" and it took you about 1s to connect to that.
There's no log of any attempt by NM to connect to "Alumnos", but only
Jul 08 13:42:23 TheMysteryMachine NetworkManager[360]: <info> [1688816543.4014] audit: op="connection-add-activate" pid=596 uid=0 result="fail" reason="Failed to determine AP security information" nor any SSL errors.
I'd say you're not even using the existing profile? What if you don't "sudo" nmcli?
Offline
If I don't "sudo" I get the same error message:
[nucieda@TheMysteryMachine ~]$ nmcli dev wifi connect Alumnos
Error: Failed to add/activate new connection: Failed to determine AP security informationOffline
Does the AP show up in a scan?
Are there any documentations authentication protocol privided by your school?
Offline
Does the AP show up in a scan?
Are there any documentations authentication protocol privided by your school?
School doesn't provide anything, unfortunately. The AP shows up:
[nucieda@TheMysteryMachine nucieda]$ nmcli dev wifi list
IN-USE BSSID SSID MODE CHAN RATE SIGNAL BARS SECURITY
* E2:AF:41:66:9E:11 Banana Infra 6 130 Mbit/s 100 ▂▄▆█ WPA2
E2:AF:41:66:9E:11 Banana Infra 6 130 Mbit/s 100 ▂▄▆█ WPA2
5C:5A:C7:E2:35:A1 Alumnos Infra 5 195 Mbit/s 84 ▂▄▆█ WPA2 802.1X
F8:5B:3B:FE:95:EF MOVISTAR_95E0 Infra 11 130 Mbit/s 84 ▂▄▆█ WPA2
D0:4D:C6:B5:24:50 IntranetTelefonicaWiFi Infra 11 260 Mbit/s 82 ▂▄▆█ WPA2 802.1X
D0:4D:C6:B5:24:51 TelefonicaGuest Infra 11 260 Mbit/s 82 ▂▄▆█ --
D0:4D:C6:B5:24:52 -- Infra 11 260 Mbit/s 80 ▂▄▆_ WPA2
D0:4D:C6:B5:24:72 -- Infra 128 540 Mbit/s 80 ▂▄▆_ WPA2
5C:5A:C7:E2:35:AF Eventos Infra 56 405 Mbit/s 79 ▂▄▆_ WPA2
5C:5A:C7:E2:35:AE Alumnos Infra 56 405 Mbit/s 79 ▂▄▆_ WPA2 802.1X
F8:5B:3B:FE:95:EE MOVISTAR_PLUS_95E0 Infra 100 540 Mbit/s 79 ▂▄▆_ WPA2
E6:5B:3B:FE:95:EE MOVISTAR_95E0 Infra 100 540 Mbit/s 79 ▂▄▆_ WPA2
D0:4D:C6:B5:24:71 TelefonicaGuest Infra 128 540 Mbit/s 79 ▂▄▆_ --
D0:4D:C6:B5:24:70 IntranetTelefonicaWiFi Infra 128 540 Mbit/s 77 ▂▄▆_ WPA2 802.1X
5C:5A:C7:EA:8B:6F Eventos Infra 36 405 Mbit/s 72 ▂▄▆_ WPA2
5C:5A:C7:EA:8B:6E Alumnos Infra 36 405 Mbit/s 72 ▂▄▆_ WPA2 802.1X
5C:5A:C7:EA:8B:80 Eventos Infra 13 195 Mbit/s 60 ▂▄▆_ WPA2
5C:5A:C7:EA:8B:81 Alumnos Infra 13 195 Mbit/s 60 ▂▄▆_ WPA2 802.1X
D0:4D:C6:B5:22:D2 -- Infra 6 260 Mbit/s 59 ▂▄▆_ WPA2
D0:4D:C6:B5:22:D0 IntranetTelefonicaWiFi Infra 6 260 Mbit/s 57 ▂▄▆_ WPA2 802.1X
D0:4D:C6:B5:22:D1 TelefonicaGuest Infra 6 260 Mbit/s 57 ▂▄▆_ --
D0:4D:C6:B4:C5:A0 IntranetTelefonicaWiFi Infra 1 260 Mbit/s 52 ▂▄__ WPA2 802.1X
D0:4D:C6:B4:C5:A1 TelefonicaGuest Infra 1 260 Mbit/s 52 ▂▄__ --
5C:5A:C7:EA:8B:8F Eventos Infra 44 405 Mbit/s 50 ▂▄__ WPA2
5C:5A:C7:EA:8B:8E Alumnos Infra 44 405 Mbit/s 50 ▂▄__ WPA2 802.1X
5C:5A:C7:F2:78:AF Eventos Infra 132 405 Mbit/s 50 ▂▄__ WPA2
5C:5A:C7:EA:8B:C0 Eventos Infra 5 195 Mbit/s 49 ▂▄__ WPA2
5C:5A:C7:EA:8B:C1 Alumnos Infra 5 195 Mbit/s 49 ▂▄__ WPA2 802.1X
D0:4D:C6:B5:68:90 IntranetTelefonicaWiFi Infra 6 260 Mbit/s 49 ▂▄__ WPA2 802.1X
D0:4D:C6:B5:68:91 TelefonicaGuest Infra 6 260 Mbit/s 49 ▂▄__ --
5C:5A:C7:F2:78:AE Alumnos Infra 132 405 Mbit/s 49 ▂▄__ WPA2 802.1X
D0:4D:C6:B5:68:92 -- Infra 6 260 Mbit/s 45 ▂▄__ WPA2
D0:4D:C6:B4:C5:A2 -- Infra 1 260 Mbit/s 44 ▂▄__ WPA2
5C:5A:C7:EA:8B:CF Eventos Infra 100 405 Mbit/s 44 ▂▄__ WPA2
5C:5A:C7:EA:8B:CE Alumnos Infra 100 405 Mbit/s 42 ▂▄__ WPA2 802.1X
D0:4D:C6:B4:C5:C1 TelefonicaGuest Infra 56 540 Mbit/s 40 ▂▄__ --
48:F1:7F:9F:BA:00 VIA_WIFI Infra 8 65 Mbit/s 39 ▂▄__ WPA2
D0:4D:C6:B4:C5:C0 IntranetTelefonicaWiFi Infra 56 540 Mbit/s 39 ▂▄__ WPA2 802.1X
D0:4D:C6:B5:22:F1 TelefonicaGuest Infra 153 540 Mbit/s 37 ▂▄__ --
D0:4D:C6:B5:22:F0 IntranetTelefonicaWiFi Infra 153 540 Mbit/s 35 ▂▄__ WPA2 802.1X Offline
Did/does the school issue a certificate for the authentication?
Edit: and ideally post an old journal where you successfully connected to the school's AP
Last edited by seth (2023-07-08 14:02:01)
Offline
Did/does the school issue a certificate for the authentication?
Edit: and ideally post an old journal where you successfully connected to the school's AP
School provides nothing, I asked about it.
I have no idea how I could even get an old journal like that
Offline
"sudo journalctl -b -10" is the journal for 10 boots ago.
Offline
"sudo journalctl -b -10" is the journal for 10 boots ago.
Sorry it took so long to reply,
http://ix.io/4Ayi
Last edited by Nico371 (2023-07-14 07:15:43)
Offline
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: Trying to associate with 5c:5a:c7:1e:e6:4e (SSID='Alumnos' freq=5320 MHz)
Jun 12 13:35:03 TheMysteryMachine NetworkManager[354]: <info> [1686569703.3189] device (wlp0s20f3): supplicant interface state: authenticating -> associating
Jun 12 13:35:03 TheMysteryMachine NetworkManager[354]: <info> [1686569703.3189] device (p2p-dev-wlp0s20f3): supplicant management interface state: authenticating -> associating
Jun 12 13:35:03 TheMysteryMachine kernel: wlp0s20f3: authenticated
Jun 12 13:35:03 TheMysteryMachine kernel: wlp0s20f3: associate with 5c:5a:c7:1e:e6:4e (try 1/3)
Jun 12 13:35:03 TheMysteryMachine kernel: wlp0s20f3: RX AssocResp from 5c:5a:c7:1e:e6:4e (capab=0x411 status=0 aid=82)
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: Associated with 5c:5a:c7:1e:e6:4e
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-STARTED EAP authentication started
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jun 12 13:35:03 TheMysteryMachine kernel: wlp0s20f3: associated
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=4 -> NAK
Jun 12 13:35:03 TheMysteryMachine NetworkManager[354]: <info> [1686569703.3382] device (wlp0s20f3): supplicant interface state: associating -> associated
Jun 12 13:35:03 TheMysteryMachine NetworkManager[354]: <info> [1686569703.3383] device (p2p-dev-wlp0s20f3): supplicant management interface state: associating -> associated
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=ES/ST=Espana/L=Madrid/O=42 Madrid/emailAddress=xitope@42.fr/CN=42 Madrid Certificate Authority' hash=1c1d…b704
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=ES/ST=Espana/L=Madrid/O=42 Madrid/emailAddress=xitope@42.fr/CN=42 Madrid Certificate Authority' hash=1c1d…b704
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=ES/ST=Espana/L=Madrid/O=42 Madrid/emailAddress=xitope@42.fr/CN=42 Madrid Certificate Authority' hash=1c1d…b704
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=ES/ST=Espana/O=42 Madrid/CN=42 Mardid Server Certificate/emailAddress=xitope@42.fr' hash=1ce5…18cd
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=ES/ST=Espana/O=42 Madrid/CN=42 Mardid Server Certificate/emailAddress=xitope@42.fr' hash=1ce5…18cd
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: EAP-MSCHAPV2: Invalid header: len=63 ms_len=29
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: EAP-MSCHAPV2: workaround, ignore invalid ms_len 29 (len 63)
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: EAP-MSCHAPV2: Invalid header: len=97 ms_len=46
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: EAP-MSCHAPV2: workaround, ignore invalid ms_len 46 (len 97)
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: EAP-MSCHAPV2: Authentication succeeded
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: EAP-TLV: TLV Result - Success - EAP-TLV/Phase2 Completed
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: PMKSA-CACHE-ADDED 5c:5a:c7:1e:e6:4e 0
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: WPA: Key negotiation completed with 5c:5a:c7:1e:e6:4e [PTK=CCMP GTK=CCMP]
Jun 12 13:35:03 TheMysteryMachine wpa_supplicant[356]: wlp0s20f3: CTRL-EVENT-CONNECTED - Connection to 5c:5a:c7:1e:e6:4e completed [id=0 id_str=]https://wiki.archlinux.org/title/Networ … .1x_/_PEAP
And google relveals that we had been there before, https://bbs.archlinux.org/viewtopic.php?id=283747
What caused the altered conneciton settings in the OP?
Your institute might have moved away from MSCHAPv2 but then of course the older journals won't help either.
Offline
Pages: 1