Comment 79 for bug 272185

Revision history for this message
Chris Wakelin (c-d-wakelin) wrote : Re: [Intrepid] iwl3945 + iwl4965 -- network-manager will not connect to a WPA EAP (Enterprise) network (disassociating by local choice (reason=3) )

I'm also having trouble connecting to our Eduroam WPA/Enterprise in Intrepid Xubuntu. It works fine with wpa_supplicant, and worked fine in Hardy & network-manager 0.6. dmesg output is similar to Matthieu's above, and wpa_supplicant.log contains entries like:

CTRL-EVENT-SCAN-RESULTS
Trying to associate with 00:1a:1e:bc:43:60 (SSID='eduroam' freq=2437 MHz)
Associated with 00:1a:1e:bc:43:60
CTRL-EVENT-EAP-STARTED EAP authentication started
CTRL-EVENT-DISCONNECTED - Disconnect event - remove keys

Killing off nm-applet and running it from a console, I noticed:

** (nm-applet:5449): WARNING **: Unhandled setting secret type (write) '802-1x/private-key' : 'GArray_guchar_'

** (nm-applet:5449): WARNING **: Unhandled setting secret type (write) '802-1x/phase2-private-key' : 'GArray_guchar_'
** Message: <info> New secrets for Auto eduroam/802-1x requested; ask the user

every time I submitted credentials.

Authentication should work via EAP-TTLS/PAP or PEAP/MSCHAPv2.

Looking at our RADIUS logs, it seems that network-manager isn't responding properly; we get a Packet-Type = Access-Request followed immediately by an Access-Challenge, but no further traffic, whereas a successful negotiation generates several Access-Challenge/Access-Request pairs followed by Access-Accept.

Again no CA certificate specified (the TLS cert is properly signed) and no anonymous-identity provided (it still fails if I provide one).