Clients failed to connect with correct password.

[AlexTalker]

Hello! I'm using Arch Linux, after some of latest updates, I've got this in logs each time I try to connect from phone to access point:

ноя 04 11:05:35 alx-arch hostapd[26467]: ap0: STA 00:5b:12:62:39:95 IEEE 802.11: authenticated
ноя 04 11:05:35 alx-arch hostapd[26467]: ap0: STA 00:5b:12:62:39:95 IEEE 802.11: associated (aid 1)
ноя 04 11:05:41 alx-arch hostapd[26467]: ap0: STA 00:5b:12:62:39:95 IEEE 802.11: deauthenticated due to local deauth request
ноя 04 11:05:47 alx-arch hostapd[26467]: ap0: STA 00:5b:12:62:39:95 IEEE 802.11: authenticated
ноя 04 11:05:47 alx-arch hostapd[26467]: ap0: STA 00:5b:12:62:39:95 IEEE 802.11: associated (aid 1)
ноя 04 11:05:52 alx-arch hostapd[26467]: ap0: STA 00:5b:12:62:39:95 IEEE 802.11: deauthenticated due to local deauth request

And phone disconnects without error every time I try to connect.

I create access point inside network namespace(ip netns), using command:
create_ap "<wifi interface>" "<interface with internet>" "<access-point-name>" "<password>"

Is somebody knows how to fix that?

[oblique]

Please post the output of the following commands before you use create_ap:

iw list
iw dev

So, this was working before? Probably it's a hostapd issue. Try to use WPA2 only with -w 2.

[AlexTalker]

I've to find out(or at least I guess that's why).
I've updated kernel and didn't restart system, so old modules directory got removes. Probably, issue in something like that since after reboot everything is fixed.

Thank you for this project.

But I anyway attach cmds output:

[root@alx-arch ubuntu]# iw list
Wiphy phy0
    max # scan SSIDs: 20
    max scan IEs length: 195 bytes
    max # sched scan SSIDs: 0
    max # match sets: 0
    max # scan plans: 1
    max scan plan interval: -1
    max scan plan iterations: 0
    Retry short limit: 7
    Retry long limit: 4
    Coverage class: 0 (up to 0m)
    Device supports RSN-IBSS.
    Supported Ciphers:
        * WEP40 (00-0f-ac:1)
        * WEP104 (00-0f-ac:5)
        * TKIP (00-0f-ac:2)
        * CCMP (00-0f-ac:4)
        * 00-0f-ac:10
        * GCMP (00-0f-ac:8)
        * 00-0f-ac:9
    Available Antennas: TX 0 RX 0
    Supported interface modes:
         * IBSS
         * managed
         * AP
         * AP/VLAN
         * monitor
    Band 1:
        Capabilities: 0x1072
            HT20/HT40
            Static SM Power Save
            RX Greenfield
            RX HT20 SGI
            RX HT40 SGI
            No RX STBC
            Max AMSDU length: 3839 bytes
            DSSS/CCK HT40
        Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
        Minimum RX AMPDU time spacing: 4 usec (0x05)
        HT Max RX data rate: 150 Mbps
        HT TX/RX MCS rate indexes supported: 0-7
        Bitrates (non-HT):
            * 1.0 Mbps
            * 2.0 Mbps (short preamble supported)
            * 5.5 Mbps (short preamble supported)
            * 11.0 Mbps (short preamble supported)
            * 6.0 Mbps
            * 9.0 Mbps
            * 12.0 Mbps
            * 18.0 Mbps
            * 24.0 Mbps
            * 36.0 Mbps
            * 48.0 Mbps
            * 54.0 Mbps
        Frequencies:
            * 2412 MHz [1] (15.0 dBm)
            * 2417 MHz [2] (15.0 dBm)
            * 2422 MHz [3] (15.0 dBm)
            * 2427 MHz [4] (15.0 dBm)
            * 2432 MHz [5] (15.0 dBm)
            * 2437 MHz [6] (15.0 dBm)
            * 2442 MHz [7] (15.0 dBm)
            * 2447 MHz [8] (15.0 dBm)
            * 2452 MHz [9] (15.0 dBm)
            * 2457 MHz [10] (15.0 dBm)
            * 2462 MHz [11] (15.0 dBm)
            * 2467 MHz [12] (15.0 dBm) (no IR)
            * 2472 MHz [13] (15.0 dBm) (no IR)
    Supported commands:
         * new_interface
         * set_interface
         * new_key
         * start_ap
         * new_station
         * new_mpath
         * set_mesh_config
         * set_bss
         * authenticate
         * associate
         * deauthenticate
         * disassociate
         * join_ibss
         * join_mesh
         * set_tx_bitrate_mask
         * frame
         * frame_wait_cancel
         * set_wiphy_netns
         * set_channel
         * set_wds_peer
         * probe_client
         * set_noack_map
         * register_beacons
         * start_p2p_device
         * set_mcast_rate
         * set_qos_map
         * connect
         * disconnect
    Supported TX frame types:
         * IBSS: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
         * managed: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
         * AP: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
         * AP/VLAN: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
         * mesh point: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
         * P2P-client: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
         * P2P-GO: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
         * P2P-device: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
    Supported RX frame types:
         * IBSS: 0x40 0xb0 0xc0 0xd0
         * managed: 0x40 0xd0
         * AP: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
         * AP/VLAN: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
         * mesh point: 0xb0 0xc0 0xd0
         * P2P-client: 0x40 0xd0
         * P2P-GO: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
         * P2P-device: 0x40 0xd0
    WoWLAN support:
         * wake up on disconnect
         * wake up on magic packet
         * wake up on pattern match, up to 20 patterns of 16-128 bytes,
           maximum packet offset 0 bytes
         * can do GTK rekeying
         * wake up on GTK rekey failure
         * wake up on EAP identity request
         * wake up on rfkill release
    software interface modes (can always be added):
         * AP/VLAN
         * monitor
    valid interface combinations:
         * #{ managed } <= 1, #{ AP } <= 1,
           total <= 2, #channels <= 1, STA/AP BI must match
         * #{ managed } <= 2,
           total <= 2, #channels <= 1
    HT Capability overrides:
         * MCS: ff ff ff ff ff ff ff ff ff ff
         * maximum A-MSDU length
         * supported channel width
         * short GI for 40 MHz
         * max A-MPDU length exponent
         * min MPDU start spacing
    Device supports TX status socket option.
    Device supports HT-IBSS.
    Device supports SAE with AUTHENTICATE command
    Device supports scan flush.
    Device supports per-vif TX power setting
    Driver supports full state transitions for AP/GO clients
    Driver supports a userspace MPM
    Device supports static SMPS
    Device supports dynamic SMPS
    Device supports configuring vdev MAC-addr on create.
[root@alx-arch ubuntu]# iw dev
phy#0
        Interface wlp1s0
                ifindex 3
                wdev 0x2
                addr dc:a9:71:b6:fe:d6
                type managed
                txpower 15.00 dBm

[macmpi]

valid interface combinations:
         * #{ managed } <= 1, #{ AP } <= 1,
           total <= 2, #channels <= 1, STA/AP BI must match

Most likely your wifi hardware does not support AP & Client modes simultaneously, and create_ap fails to detect that capability (or lack thereof) in some cases, as per issue #203

You may try specifying --no-virt as follows:
create_ap --no-virt "<wifi interface>" "<interface with internet>" "<access-point-name>" "<password>"

Hope this helps until issue #203 is fixed.

[AlexTalker]

@macmpi thank you, I'll try 😄

[oblique]

Since it is fixed after a reboot, I'm closing the issue. Thanks!