Broadcom 4306 and WPA with D-Link DI-524

Hi all,
I am having difficulty getting the broadcom 4306 wireless working in
my laptop. I have tried the default wpa_supplicant.conf settings as
well as many others I have found on the web but nothing is working
properly.

Has anyone had any experience with a similar setup before? Any
insight is appreciated.

Also, is my method of "./rc.inet1 wlan0_restart" okay for trying a new
configuration? Anything I should be aware of as a noob?

The behaviour of the wireless chip doesn't seem predictable at all.
Sometimes I can see (using wpa_cli) that the wpa handshaking process
completes successfully and then will stop working without any change
to the settings. Once, I've even seen the DI-524's DHCP give it an IP
but when I restarted rc.inet1 it wouldn't work again.

I am starting wpa_supplicant with -Bw -Dwext as well as the .conf file
location specification. The system works as expected without
security. I am using the b43 driver as a module. I also have a wired
Broadcom 44xx using b44 driver as module but usually remove the b44
module when tested the b43.

I use wpa_passphrase to generate my key for the wpa_supplicant.conf
file.

Thanks in advance,
chris
Linux 2.6.24.3
Slackware 12.0
Gateway 7320GZ laptop
P4, 512MB RAM

notchrislee wrote:
> Hi all,
> I am having difficulty getting the broadcom 4306 wireless working in
> my laptop. I have tried the default wpa_supplicant.conf settings as
> well as many others I have found on the web but nothing is working
> properly.
>
> Has anyone had any experience with a similar setup before? Any
> insight is appreciated.
>
> Also, is my method of "./rc.inet1 wlan0_restart" okay for trying a new
> configuration? Anything I should be aware of as a noob?
>
> The behaviour of the wireless chip doesn't seem predictable at all.
> Sometimes I can see (using wpa_cli) that the wpa handshaking process
> completes successfully and then will stop working without any change
> to the settings. Once, I've even seen the DI-524's DHCP give it an IP
> but when I restarted rc.inet1 it wouldn't work again.
>
> I am starting wpa_supplicant with -Bw -Dwext as well as the .conf file
> location specification. The system works as expected without
> security. I am using the b43 driver as a module. I also have a wired
> Broadcom 44xx using b44 driver as module but usually remove the b44
> module when tested the b43.
>
> I use wpa_passphrase to generate my key for the wpa_supplicant.conf
> file.
>
> Thanks in advance,
> chris
> Linux 2.6.24.3
> Slackware 12.0
> Gateway 7320GZ laptop
> P4, 512MB RAM

Please send the output from dmesg that occurs after the first message
from the ssb module. Your basic setup should be OK, but it never hurts
to check.

I put my wpa secret into wpa_supplicant.conf as an ASCII phrase and
let it convert it to a key.

By removing the -B from the line that starts wpa_supplicant and adding
a -ddd switch, wpa_supplicant will skip going into background mode,
and log its internal workings to the console. You should probably post
that too.

What version of wpa_supplicant are you using?

Larry

Sorry for the delay. Easy stuff first.

> What version of wpa_supplicant are you using?

wpa_supplicant v0.5.7
Copyright (c) 2003-2006, Jouni Malinen <(E-Mail Removed)> and
contributors

chris

> Please send the output from dmesg that occurs after the first message
> from the ssb module.

dmesg out after first ssb output:
ssb: Sonics Silicon Backplane found on PCI device 0000:01:09.0
ieee80211_crypt: registered algorithm 'NULL'
usb 1-1: new low speed USB device using uhci_hcd and address 4
ACPI: PCI Interrupt 0000:01:04.0[A] -> GSI 16 (level, low) -> IRQ 18
ohci1394: fw-host0: OHCI-1394 1.1 (PCI): IRQ=[18] MMIO=[e00ff800-
e00fffff] Max Packet=[2048] IR/IT contexts=[4/8]
ieee80211: 802.11 data/management/control stack, git-1.1.13
ieee80211: Copyright (C) 2004-2005 Intel Corporation
<(E-Mail Removed)>
Yenta: CardBus bridge found at 0000:01:05.0 [161f:202f]
Yenta: Enabling burst memory read transactions
Yenta: Using CSCINT to route CSC interrupts to PCI
Yenta: Routing CardBus interrupts to PCI
Yenta TI: socket 0000:01:05.0, mfunc 0x01001002, devctl 0x64
usb 1-1: configuration #1 chosen from 1 choice
bcm43xx driver
Yenta: ISA IRQ mask 0x0cf8, PCI irq 16
Socket status: 30000007
Yenta: Raising subordinate bus# of parent bus (#01) from #01 to #05
pcmcia: parent PCI bridge Memory window: 0xe0000000 - 0xe00fffff
usbcore: registered new interface driver hiddev
input: HID 0461:4d09 as /devices/pci0000:00/0000:00:1d.0/
usb1/1-1/1-1:1.0/input/input5
b43-phy0: Broadcom 4306 WLAN found
input: USB HID v1.00 Mouse [HID 0461:4d09] on usb-0000:00:1d.0-1
usbcore: registered new interface driver usbhid
drivers/hid/usbhid/hid-core.c: v2.6:USB HID core driver
phy0: Selected rate control algorithm 'simple'
ieee1394: Host added: ID:BUS[0-00:1023] GUID[000325213700a29a]
cs: IO port probe 0xc00-0xcff: clean.
cs: IO port probe 0x820-0x8ff: clean.
cs: IO port probe 0x800-0x80f: clean.
cs: IO port probe 0x3e0-0x4ff: clean.
cs: IO port probe 0x100-0x3af: clean.
cs: IO port probe 0xa00-0xaff: clean.
Adding 1502068k swap on /dev/hda3. Priority:-1 extents:1 across:
1502068k
EXT3 FS on hda4, internal journal
input: PC Speaker as /devices/platform/pcspkr/input/input6
input: ImPS/2 Synaptics TouchPad as /devices/platform/i8042/serio1/
input/input7
lp: driver loaded but no devices found
Registered led device: b43-phy0:tx
Registered led device: b43-phy0:rx
Registered led device: b43-phy0:tx
Registered led device: b43-phy0:rx
Registered led device: b43-phy0:tx
Registered led device: b43-phy0:rx
NET: Registered protocol family 10
lo: Disabled Privacy Extensions
mtrr: no more MTRRs available
mtrr: no more MTRRs available
mtrr: no more MTRRs available
mtrr: no more MTRRs available
ACPI: PCI Interrupt 0000:01:06.0[A] -> GSI 19 (level, low) -> IRQ 19
ssb: Sonics Silicon Backplane found on PCI device 0000:01:06.0
b44.c:v2.0
eth0: Broadcom 44xx/47xx 10/100BaseT Ethernet 00:03:25:12:99:75
ADDRCONF(NETDEV_UP): eth0: link is not ready
b44: eth0: Link is up at 100 Mbps, full duplex.
b44: eth0: Flow control is off for TX and off for RX.
ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
eth0: no IPv6 routers present
b44: eth0: Link is down.
b44: eth0: Link is up at 100 Mbps, full duplex.
b44: eth0: Flow control is off for TX and off for RX.
realplay.bin[4549]: segfault at 00000050 eip b7f6b717 esp bff8b03c
error 4


chris

Here is my output when starting wlan0 using "rc.inet1 wlan0_restart"
with wpa_supplicant using the -ddd option.

I use ctrl+c when PINGing other wise it would go for ~ a minute.
"Failed to connect ..." would continue until I hit ^+c.

The first thing I see wrong is the following:
PSK (ASCII passphrase) - hexdump_ascii(len=10): [REMOVED]
PSK (from passphrase) - hexdump(len=32): [REMOVED]

I will also post my iwconfig output but it says "Encryption keyff"
at one point.

chris


Error for wireless request "Set Nickname" (8B1C) :
SET failed on device wlan0 ; Operation not supported.
rc.wireless: wpa_supplicant
Initializing interface 'wlan0' conf '/etc/wpa_supplicant.conf' driver
'wext' ctrl_interface 'N/A' bridge 'N/A'
Configuration file '/etc/wpa_supplicant.conf' -> '/etc/
wpa_supplicant.conf'
Reading configuration file '/etc/wpa_supplicant.conf'
ctrl_interface='/var/run/wpa_supplicant'
ctrl_interface_group='0' (DEPRECATED)
eapol_version=1
ap_scan=2
fast_reauth=1
Line: 19 - start of a new network block
scan_ssid=1 (0x1)
ssid - hexdump_ascii(len=4):
6f 68 6d 79 ohmy
proto: 0x1
key_mgmt: 0x2
pairwise: 0x8
group: 0x8
PSK (ASCII passphrase) - hexdump_ascii(len=10): [REMOVED]
PSK (from passphrase) - hexdump(len=32): [REMOVED]
Line: 45 - start of a new network block
ssid - hexdump_ascii(len=3):
61 6e 79 any
key_mgmt: 0x4
priority=2 (0x2)
Priority group 2
id=1 ssid='any'
Priority group 0
id=0 ssid='ohmy'
Initializing interface (2) 'wlan0'
EAPOL: SUPP_PAE entering state DISCONNECTED
EAPOL: KEY_RX entering state NO_KEY_RECEIVE
EAPOL: SUPP_BE entering state INITIALIZE
EAP: EAP entering state DISABLED
EAPOL: External notification - portEnabled=0
EAPOL: External notification - portValid=0
SIOCGIWRANGE: WE(compiled)=22 WE(source)=21 enc_capa=0xf
capabilities: key_mgmt 0xf enc 0xf
WEXT: Operstate: linkmode=1, operstate=5
Own MAC address: 00:90:4b:c4:2a:3c
wpa_driver_wext_set_wpa
wpa_driver_wext_set_key: alg=0 key_idx=0 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_key: alg=0 key_idx=1 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_key: alg=0 key_idx=2 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_key: alg=0 key_idx=3 set_tx=0 seq_len=0 key_len=0
wpa_driver_wext_set_countermeasures
ioctl[SIOCSIWAUTH]: Operation not supported
WEXT auth param 4 value 0x0 - wpa_driver_wext_set_drop_unencrypted
ioctl[SIOCSIWAUTH]: Operation not supported
WEXT auth param 5 value 0x1 - Setting scan request: 0 sec 100000 usec
ctrl_interface_group=0
Added interface wlan0
RTM_NEWLINK: operstate=0 ifi_flags=0x1002 ()
Wireless event: cmd=0x8b06 len=8
Ignore event for foreign ifindex 2
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
RTM_NEWLINK, IFLA_IFNAME: Interface 'wlan0' added
State: DISCONNECTED -> SCANNING
Trying to associate with SSID 'ohmy'
Cancelling scan request
WPA: clearing own WPA/RSN IE
Automatic auth_alg selection: 0x1
WPA: No WPA/RSN IE available from association info
WPA: Set cipher suites based on configuration
WPA: Selected cipher suites: group 8 pairwise 8 key_mgmt 2 proto 1
WPA: clearing AP WPA IE
WPA: clearing AP RSN IE
WPA: using GTK TKIP
WPA: using PTK TKIP
WPA: using KEY_MGMT WPA-PSK
WPA: Set own WPA IE default - hexdump(len=24): dd 16 00 50 f2 01 01 00
00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02
No keys have been configured - skip key clearing
wpa_driver_wext_set_drop_unencrypted
ioctl[SIOCSIWAUTH]: Operation not supported
WEXT auth param 5 value 0x1 - State: SCANNING -> ASSOCIATING
wpa_driver_wext_set_operstate: operstate 0->0 (DORMANT)
WEXT: Operstate: linkmode=-1, operstate=5
wpa_driver_wext_associate
Setting authentication timeout: 60 sec 0 usec
EAPOL: External notification - EAP success=0
EAPOL: External notification - EAP fail=0
EAPOL: External notification - portControl=Auto
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b06 len=8
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b1a len=12
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Scan results did not fit - trying larger buffer (8192 bytes)
Received 4836 bytes of scan results (23 BSSes)
Scan results: 23
Authentication with 00:00:00:00:00:00 timed out.
Added BSSID 00:00:00:00:00:00 into blacklist
State: ASSOCIATING -> DISCONNECTED
wpa_driver_wext_set_operstate: operstate 0->0 (DORMANT)
WEXT: Operstate: linkmode=-1, operstate=5
No keys have been configured - skip key clearing
EAPOL: External notification - portEnabled=0
EAPOL: External notification - portValid=0
Setting scan request: 0 sec 0 usec
State: DISCONNECTED -> SCANNING
Trying to associate with SSID 'any'
Cancelling scan request
WPA: clearing own WPA/RSN IE
Automatic auth_alg selection: 0x1
WPA: clearing AP WPA IE
WPA: clearing AP RSN IE
WPA: clearing own WPA/RSN IE
No keys have been configured - skip key clearing
wpa_driver_wext_set_drop_unencrypted
ioctl[SIOCSIWAUTH]: Operation not supported
WEXT auth param 5 value 0x0 - State: SCANNING -> ASSOCIATING
wpa_driver_wext_set_operstate: operstate 0->0 (DORMANT)
WEXT: Operstate: linkmode=-1, operstate=5
wpa_driver_wext_associate
Setting authentication timeout: 60 sec 0 usec
EAPOL: External notification - portControl=ForceAuthorized
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b06 len=8
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b1a len=11
RTM_NEWLINK: operstate=0 ifi_flags=0x1003 ([UP])
Wireless event: cmd=0x8b19 len=8
Received 3932 bytes of scan results (19 BSSes)
Scan results: 19
CTRL_IFACE monitor attached - hexdump(len=21): 2f 74 6d 70 2f 77 70 61
5f 63 74 72 6c 5f 33 36 30 39 2d 30 00
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=6):
53 54 41 54 55 53 STATUS
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
RX ctrl_iface - hexdump_ascii(len=4):
50 49 4e 47 PING
CTRL-EVENT-TERMINATING - signal 2 received
CTRL_IFACE monitor send - hexdump(len=21): 2f 74 6d 70 2f 77 70 61 5f
63 74 72 6c 5f 33 36 30 39 2d 30 00
Removing interface wlan0
State: ASSOCIATING -> DISCONNECTED
wpa_driver_wext_set_operstate: operstate 0->0 (DORMANT)
WEXT: Operstate: linkmode=-1, operstate=5
No keys have been configured - skip key clearing
EAPOL: External notification - portEnabled=0
EAPOL: External notification - portValid=0
wpa_driver_wext_set_wpa
wpa_driver_wext_set_drop_unencrypted
ioctl[SIOCSIWAUTH]: Operation not supported
WEXT auth param 5 value 0x0 - wpa_driver_wext_set_countermeasures
ioctl[SIOCSIWAUTH]: Operation not supported
WEXT auth param 4 value 0x0 - No keys have been configured - skip key
clearing
CTRL_IFACE wait for attached monitors to receive messages
Removed BSSID 00:00:00:00:00:00 from blacklist (clear)
Cancelling scan request
Cancelling authentication timeout
WEXT: Operstate: linkmode=0, operstate=6
rc.wireless: begin sleep
rc.wireless: done sleep
Failed to connect to wpa_supplicant - wpa_ctrl_open: No such file or
directory
Failed to connect to wpa_supplicant - wpa_ctrl_open: No such file or
directory
Failed to connect to wpa_supplicant - wpa_ctrl_open: No such file or
directory
Failed to connect to wpa_supplicant - wpa_ctrl_open: No such file or
directory
Failed to connect to wpa_supplicant - wpa_ctrl_open: No such file or
directory
Failed to connect to wpa_supplicant - wpa_ctrl_open: No such file or
directory

notchrislee wrote:
> Here is my output when starting wlan0 using "rc.inet1 wlan0_restart"
> with wpa_supplicant using the -ddd option.
>
> I use ctrl+c when PINGing other wise it would go for ~ a minute.
> "Failed to connect ..." would continue until I hit ^+c.
>
> The first thing I see wrong is the following:
> PSK (ASCII passphrase) - hexdump_ascii(len=10): [REMOVED]
> PSK (from passphrase) - hexdump(len=32): [REMOVED]
>
> I will also post my iwconfig output but it says "Encryption keyff"
> at one point.

If nothing else works, please consider upgrading to version 0.5.10 of
wpa_supplicant. That is the latest and greatest.

Is your passphrase is not 10 characters long? The [REMOVED] is there
to note that the PSK values have been removed from the output for
security reasons. If you use the -K switch when starting
wpa_supplicant, the PSK values will be printed. Of course, don't
distribute any output with them in it. Of course, a brute-force attack
on a 10-character passphrase wouldn't be too difficult. Mine is 28
characters in length.

What I don't see in your output is that the supplicant picked ssid
"ohmy" from the 23 that it found based on the IE. It looks as if the
PSK in the conf doesn't match the AP.

Larry