Problem with acx111

[Henning Moll]

On Donnerstag, 27. März 2008, Dan Williams wrote:
> > State: COMPLETED -> 4WAY_HANDSHAKE
> > State: 4WAY_HANDSHAKE -> GROUP_HANDSHAKE
> > State: GROUP_HANDSHAKE -> COMPLETED
> > State: COMPLETED -> 4WAY_HANDSHAKE
> > and so on...
>
> This is normal, the driver is periodically rekeying as required by
> WPA. Periodically you have to do the 4-Way handshake again so you can
> derive a new pairwise key, which is part of the additional security
> of WPA.

Hmm, the problem may be, that this 'rekeying' happens too fast? With 
another WLAN adapter (USB with zd1211) it stays for several minutes 
(well infact it stayes forever) in the state GROUP_HANDSHAKE -> 
COMPLETED. Not with the acx111: the endless loop happens without any 
break. 

> Is the issue here that the connection doesn't work with
> NetworkManager?

No, neither NetworkManager nor direct usage of wpa_supplicant works. 

> Because it looks like the log you've posted is OK 
> AFAICT, with the exception that sometimes the driver seems to return
> errors when trying to set the PTK during rekey but then seems to
> recover.

I produced the log by runnung wpa_supplicant with a single '-d' option. 
As i said above: Output keeps running as it is a endless loop. But with 
the other device (zd1211), output stops after

State: GROUP_HANDSHAKE -> COMPLETED
CTRL-EVENT-CONNECTED - Connection to 00:1b:11:38:90:ee completed (auth) 
[id=0 id_str=]
wpa_driver_wext_set_operstate: operstate 0->1 (UP)
WEXT: Operstate: linkmode=-1, operstate=6
EAPOL: External notification - portValid=1
EAPOL: External notification - EAP success=1
EAPOL: SUPP_PAE entering state AUTHENTICATING
EAPOL: SUPP_BE entering state SUCCESS
EAP: EAP entering state DISABLED
EAPOL: SUPP_PAE entering state AUTHENTICATED
EAPOL: SUPP_BE entering state IDLE
RTM_NEWLINK: operstate=1 ifi_flags=0x11043 ([UP][RUNNING][LOWER_UP])
RTM_NEWLINK, IFLA_IFNAME: Interface 'eth0' added
EAPOL: startWhen --> 0

At this point i am able to retrieve an ip with dhclient an can use the 
connection as as long as i wish. There's no more output generated by 
wpa_supplicant.

Henning