[SOLVED] Issues with some wifi network

domx93 · 2023-09-24 14:19:33

Hello, I have a lenovo thinkpad t480s with an intel 8265 wifi card. Since some weeks I cannot connect anymore to eduroam network, even if I have no problem from windows or from the smartphone. It just doesn't connect anymore, the configuration is correct, and I had the same issues in all the universities I visited recently. Moreover, yesterday I was in the train and when I tried to connect to the train wifi (that under windows worked) I had the error message "802-11-wireless-security.key-mgmt: The access point doesn't support PSK, but the setting requests it". I guess it's something related to some recent updates. Can you help me?

Last edited by domx93 (2023-09-25 14:28:33)

seth · 2023-09-24 14:28:38

Please don't paraphrase, https://bbs.archlinux.org/viewtopic.php?id=57855

Probably some WPA3 issue and not neccesarily your eduroam situation.
Please post your complete system journal for a boot covering access failures:

sudo journalctl -b | curl -F 'file=@-' 0x0.st

for the current one.

General read: https://wiki.archlinux.org/title/Networ … entication

domx93 · 2023-09-24 15:19:16

seth wrote:

Please don't paraphrase, https://bbs.archlinux.org/viewtopic.php?id=57855

sorry, I just translated it from the Italian, but I took a screenshot:

seth wrote:

Probably some WPA3 issue and not neccesarily your eduroam situation.
Please post your complete system journal for a boot covering access failures:
sudo journalctl -b | curl -F 'file=@-' 0x0.st
for the current one.
General read: https://wiki.archlinux.org/title/Networ … entication

thank you, here is the system journal. I try to read that page, but I did not have to do anything complicated some weeks ago...

seth · 2023-09-24 15:32:25

That's not what I meant, but reciting some dialog is borderline useless.
The journal has successful connects to FASTWEB-XT4E27 and HUAWEI Mate 10 Pro (the latter one disappearing twice, maybe you turned off the hotspot) but no trace of even attempting to connect to some eduroam. The journal start saturday evening, that's probably why? The failures are probably in yesterdays(?) journal (… -b -1 …)

domx93 · 2023-09-24 18:51:21

Ops sorry, I'm not practical with that command. Here is the one of the day before (here there is eduroam). It doesn't even report the attempt with the train wifi, indeed that message appeared and it didn't even try to connect.

seth · 2023-09-24 19:30:58

set 21 16:42:36 domenico-archthinkpad wpa_supplicant[576]: wlan0: CTRL-EVENT-EAP-STARTED EAP authentication started
set 21 16:42:36 domenico-archthinkpad wpa_supplicant[576]: wlan0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
set 21 16:42:36 domenico-archthinkpad wpa_supplicant[576]: wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=21 -> NAK
set 21 16:42:36 domenico-archthinkpad wpa_supplicant[576]: wlan0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
…
set 21 16:42:37 domenico-archthinkpad wpa_supplicant[576]: wlan0: CTRL-EVENT-EAP-FAILURE EAP authentication failed
set 21 16:42:37 domenico-archthinkpad kernel: wlan0: deauthenticated from 20:a6:cd:9c:e7:70 (Reason: 23=IEEE8021X_FAILED)
set 21 16:42:37 domenico-archthinkpad wpa_supplicant[576]: wlan0: CTRL-EVENT-DISCONNECTED bssid=20:a6:cd:9c:e7:70 reason=23
set 21 16:42:37 domenico-archthinkpad wpa_supplicant[576]: wlan0: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=1 duration=10 reason=AUTH_FAILED

21 is EAP-TTLS (which is rejected) and then PEAP is tried, what does the connection profile look like?
Since the AP seems to prefer EAP-TTLS, you might try to use that.
(obviously obfuscate the private information, eg. your account and password)
https://wiki.archlinux.org/title/Networ … connection

domx93 · 2023-09-24 19:54:09

seth wrote:

set 21 16:42:36 domenico-archthinkpad wpa_supplicant[576]: wlan0: CTRL-EVENT-EAP-STARTED EAP authentication started
set 21 16:42:36 domenico-archthinkpad wpa_supplicant[576]: wlan0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
set 21 16:42:36 domenico-archthinkpad wpa_supplicant[576]: wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=21 -> NAK
set 21 16:42:36 domenico-archthinkpad wpa_supplicant[576]: wlan0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
…
set 21 16:42:37 domenico-archthinkpad wpa_supplicant[576]: wlan0: CTRL-EVENT-EAP-FAILURE EAP authentication failed
set 21 16:42:37 domenico-archthinkpad kernel: wlan0: deauthenticated from 20:a6:cd:9c:e7:70 (Reason: 23=IEEE8021X_FAILED)
set 21 16:42:37 domenico-archthinkpad wpa_supplicant[576]: wlan0: CTRL-EVENT-DISCONNECTED bssid=20:a6:cd:9c:e7:70 reason=23
set 21 16:42:37 domenico-archthinkpad wpa_supplicant[576]: wlan0: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=1 duration=10 reason=AUTH_FAILED

21 is EAP-TTLS (which is rejected) and then PEAP is tried, what does the connection profile look like?
Since the AP seems to prefer EAP-TTLS, you might try to use that.
(obviously obfuscate the private information, eg. your account and password)
https://wiki.archlinux.org/title/Networ … connection

I tried all the possibilities, no one works... at the moment I have PEAP and MSCHAPv2, that is the configuration I have on android.

seth · 2023-09-24 20:02:29

Ah, there's also

set 21 16:42:49 domenico-archthinkpad wpa_supplicant[576]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:protocol version
set 21 16:42:49 domenico-archthinkpad wpa_supplicant[576]: OpenSSL: openssl_handshake - SSL_connect error:0A000102:SSL routines::unsupported protocol

https://bbs.archlinux.org/viewtopic.php … 9#p2104709

domx93 · 2023-09-24 20:30:15

seth wrote:

Ah, there's also

set 21 16:42:49 domenico-archthinkpad wpa_supplicant[576]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:protocol version
set 21 16:42:49 domenico-archthinkpad wpa_supplicant[576]: OpenSSL: openssl_handshake - SSL_connect error:0A000102:SSL routines::unsupported protocol

https://bbs.archlinux.org/viewtopic.php … 9#p2104709

it looks like you could have found the problem! I'll try it tomorrow from the university and I'll tell you, thank you!

domx93 · 2023-09-25 08:19:52

domx93 wrote:

seth wrote:
Ah, there's also
set 21 16:42:49 domenico-archthinkpad wpa_supplicant[576]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:protocol version
set 21 16:42:49 domenico-archthinkpad wpa_supplicant[576]: OpenSSL: openssl_handshake - SSL_connect error:0A000102:SSL routines::unsupported protocol
https://bbs.archlinux.org/viewtopic.php … 9#p2104709
it looks like you could have found the problem! I'll try it tomorrow from the university and I'll tell you, thank you!

Added the line, it doesn't work

seth · 2023-09-25 08:29:06

Added what line where and what does the journal now look like?

domx93 · 2023-09-25 13:03:30

seth wrote:

Added what line where and what does the journal now look like?

Sorry, I was mistaken, it works! Thank you very much!
I added the line "phase1-auth-flags=32" in the eduroam.nmconnection file. I quote the guy in the linked post, this solution should be added to arch wiki.

seth · 2023-09-25 13:15:42

What "should" happen is that your university replaces these overdated protocols.
They're disabled for a reason and there's no ETA on when those "yes, i know but I've to work with retards" keys vanish.
You're not exactly working around a bug here.

Please always remember to mark resolved threads by editing your initial posts subject - so others will know that there's no task left, but maybe a solution to find.
Thanks.

domx93 · 2023-09-25 14:31:25

seth wrote:

What "should" happen is that your university replaces these overdated protocols.
They're disabled for a reason and there's no ETA on when those "yes, i know but I've to work with retards" keys vanish.
You're not exactly working around a bug here.
Please always remember to mark resolved threads by editing your initial posts subject - so others will know that there's no task left, but maybe a solution to find.
Thanks.

I agree, but I'm afraid that this situation is very common (I tried connecting from three different Italian universities with two different accounts from two of them, none combination worked).
Thanks again!

Arch Linux

#1 2023-09-24 14:19:33

[SOLVED] Issues with some wifi network

#2 2023-09-24 14:28:38

Re: [SOLVED] Issues with some wifi network

#3 2023-09-24 15:19:16

Re: [SOLVED] Issues with some wifi network

#4 2023-09-24 15:32:25

Re: [SOLVED] Issues with some wifi network

#5 2023-09-24 18:51:21

Re: [SOLVED] Issues with some wifi network

#6 2023-09-24 19:30:58

Re: [SOLVED] Issues with some wifi network

#7 2023-09-24 19:54:09

Re: [SOLVED] Issues with some wifi network

#8 2023-09-24 20:02:29

Re: [SOLVED] Issues with some wifi network

#9 2023-09-24 20:30:15

Re: [SOLVED] Issues with some wifi network

#10 2023-09-25 08:19:52

Re: [SOLVED] Issues with some wifi network

#11 2023-09-25 08:29:06

Re: [SOLVED] Issues with some wifi network

#12 2023-09-25 13:03:30

Re: [SOLVED] Issues with some wifi network

#13 2023-09-25 13:15:42

Re: [SOLVED] Issues with some wifi network

#14 2023-09-25 14:31:25

Re: [SOLVED] Issues with some wifi network

Board footer