| View previous topic :: View next topic |
| Author |
Message |
VulgarBulgar
n00b
Joined: 04 Oct 2023
Posts: 23
|
 Posted: Tue Jan 28, 2025 1:04 am Post subject: Problem with Eduroam Connection |
 |
|
Hello everyone!
For about the past month I've had problems with connecting to eduroam. Essentially I'll connect and after >5 minutes my connection will disconnect, I should note that it's only eduroam that has this problem, but then again it's the only wpa2-eap network I use. I was thinking it might be a problem between caused by the powersaving options but when I tested for that it wasn't the case. I use NetworkManager with wpa_supplicant if it makes any difference.
Here's some select output from dmesg:
| Code: |
[Jan28 00:49] wlp6s0: authenticate with ${BSSID_1}
[ +0.498109] wlp6s0: send auth to ${BSSID_1} (try 1/3)
[ +0.023181] wlp6s0: authenticated
[ +0.000620] wlp6s0: associate with ${BSSID_1} (try 1/3)
[ +0.020707] wlp6s0: RX AssocResp from ${BSSID_1} (capab=0x1111 status=0 aid=6)
[ +0.029944] wlp6s0: associated
[ +0.213434] wlp6s0: Limiting TX power to 23 (23 - 0) dBm as advertised by ${BSSID_1}
[ +34.033058] wlp6s0: deauthenticating from ${BSSID_1} by local choice (Reason: 3=DEAUTH_LEAVING)
[ +2.870163] wlp6s0: authenticate with ${BSSID_2}
[ +0.172071] wlp6s0: send auth to ${BSSID_2} (try 1/3)
[ +0.003605] wlp6s0: authenticated
[ +0.000481] wlp6s0: associate with ${BSSID_2} (try 1/3)
[ +0.047195] wlp6s0: RX AssocResp from ${BSSID_2} (capab=0x1411 status=0 aid=2)
[ +0.032869] wlp6s0: associated
[ +0.112733] wlp6s0: Limiting TX power to 20 (20 - 0) dBm as advertised by ${BSSID_2}
[Jan28 00:50] wlp6s0: deauthenticating from ${BSSID_2} by local choice (Reason: 3=DEAUTH_LEAVING)
[ +2.880898] wlp6s0: authenticate with ${BSSID_1}
[ +0.034900] wlp6s0: send auth to ${BSSID_1} (try 1/3)
[ +0.003516] wlp6s0: authenticated
[ +0.003710] wlp6s0: associate with ${BSSID_1} (try 1/3)
[ +0.017594] wlp6s0: RX AssocResp from ${BSSID_1} (capab=0x1111 status=0 aid=3)
[ +0.034074] wlp6s0: associated
[ +0.053878] wlp6s0: Limiting TX power to 23 (23 - 0) dBm as advertised by ${BSSID_1}
[ +33.995137] wlp6s0: deauthenticating from ${BSSID_1} by local choice (Reason: 3=DEAUTH_LEAVING)
[Jan28 00:51] wlp6s0: authenticate with ${BSSID_2}
[ +0.032212] wlp6s0: send auth to ${BSSID_2} (try 1/3)
[ +0.003566] wlp6s0: authenticated
[ +0.006703] wlp6s0: associate with ${BSSID_2} (try 1/3)
[ +0.014000] wlp6s0: RX AssocResp from ${BSSID_2} (capab=0x1411 status=0 aid=1)
[ +0.034059] wlp6s0: associated
[ +0.063666] wlp6s0: Limiting TX power to 20 (20 - 0) dBm as advertised by ${BSSID_2}
[ +33.992225] wlp6s0: deauthenticating from ${BSSID_2} by local choice (Reason: 3=DEAUTH_LEAVING)
[ +2.850887] wlp6s0: authenticate with ${BSSID_1}
[ +0.036953] wlp6s0: send auth to ${BSSID_1} (try 1/3)
[ +0.003495] wlp6s0: authenticated
[ +0.004866] wlp6s0: associate with ${BSSID_1} (try 1/3)
[ +0.016275] wlp6s0: RX AssocResp from ${BSSID_1} (capab=0x1111 status=0 aid=3)
[ +0.033502] wlp6s0: associated
[ +0.055976] wlp6s0: Limiting TX power to 23 (23 - 0) dBm as advertised by ${BSSID_1}
[Jan28 00:52] wlp6s0: deauthenticating from ${BSSID_1} by local choice (Reason: 3=DEAUTH_LEAVING)
[ +2.820854] wlp6s0: authenticate with ${BSSID_2}
[ +0.034304] wlp6s0: send auth to ${BSSID_2} (try 1/3)
[ +0.040987] wlp6s0: authenticated
[ +0.003478] wlp6s0: associate with ${BSSID_2} (try 1/3)
[ +0.035970] wlp6s0: RX AssocResp from ${BSSID_2} (capab=0x1411 status=0 aid=1)
[ +0.033885] wlp6s0: associated
[ +0.000090] wlp6s0: Limiting TX power to 20 (20 - 0) dBm as advertised by ${BSSID_2}
[ +34.053868] wlp6s0: deauthenticating from ${BSSID_2} by local choice (Reason: 3=DEAUTH_LEAVING)
[ +2.826893] wlp6s0: authenticate with ${BSSID_1}
[ +0.036929] wlp6s0: send auth to ${BSSID_1} (try 1/3)
[ +0.003577] wlp6s0: authenticated
[ +0.005581] wlp6s0: associate with ${BSSID_1} (try 1/3)
[ +0.015508] wlp6s0: RX AssocResp from ${BSSID_1} (capab=0x1111 status=0 aid=1)
[ +0.034805] wlp6s0: associated
[ +0.000097] wlp6s0: Limiting TX power to 23 (23 - 0) dBm as advertised by ${BSSID_1}
[Jan28 00:53] wlp6s0: deauthenticating from ${BSSID_1} by local choice (Reason: 3=DEAUTH_LEAVING)
|
and rarely it does this:
| Code: |
[Jan28 01:53] wlp6s0: authenticate with ${BSSID_1}
[ +0.032188] wlp6s0: send auth to ${BSSID_1} (try 1/3)
[ +0.003462] wlp6s0: authenticated
[ +0.000274] wlp6s0: associate with ${BSSID_1} (try 1/3)
[ +0.020951] wlp6s0: RX AssocResp from ${BSSID_1} (capab=0x1411 status=0 aid=1)
[ +0.035604] wlp6s0: associated
[ +0.000079] wlp6s0: Limiting TX power to 20 (20 - 0) dBm as advertised by ${BSSID_1}
[ +33.943680] wlp6s0: deauthenticating from ${BSSID_1} by local choice (Reason: 3=DEAUTH_LEAVING)
[ +2.987855] wlp6s0: authenticate with ${BSSID_2}
[ +0.034886] wlp6s0: send auth to ${BSSID_2} (try 1/3)
[ +0.003659] wlp6s0: authenticated
[ +0.003220] wlp6s0: associate with ${BSSID_2} (try 1/3)
[ +0.018311] wlp6s0: RX AssocResp from ${BSSID_2} (capab=0x1111 status=0 aid=6)
[ +0.034251] wlp6s0: associated
[ +0.052214] wlp6s0: Limiting TX power to 23 (23 - 0) dBm as advertised by ${BSSID_2}
[Jan28 01:54] wlp6s0: deauthenticating from ${BSSID_2} by local choice (Reason: 3=DEAUTH_LEAVING)
[ +2.907037] wlp6s0: authenticate with ${BSSID_1}
[ +0.032286] wlp6s0: send auth to ${BSSID_1} (try 1/3)
[ +0.003592] wlp6s0: authenticated
[ +0.003105] wlp6s0: associate with ${BSSID_1} (try 1/3)
[ +0.018184] wlp6s0: RX AssocResp from ${BSSID_1} (capab=0x1411 status=0 aid=2)
[ +0.035318] wlp6s0: associated
[ +0.050943] wlp6s0: Limiting TX power to 20 (20 - 0) dBm as advertised by ${BSSID_1}
[ +33.965969] wlp6s0: deauthenticating from ${BSSID_1} by local choice (Reason: 3=DEAUTH_LEAVING)
[ +2.990683] wlp6s0: authenticate with ${BSSID_3}
[ +0.162505] wlp6s0: send auth to ${BSSID_3} (try 1/3)
[ +0.003482] wlp6s0: authenticated
[ +0.002882] wlp6s0: associate with ${BSSID_3} (try 1/3)
[ +0.019277] wlp6s0: RX AssocResp from ${BSSID_3} (capab=0x1411 status=0 aid=1)
[ +0.034675] wlp6s0: associated
[ +0.000217] wlp6s0: Limiting TX power to 20 (20 - 0) dBm as advertised by ${BSSID_3}
[Jan28 01:55] wlp6s0: deauthenticating from ${BSSID_3} by local choice (Reason: 3=DEAUTH_LEAVING)
[ +3.392735] wlp6s0: authenticate with ${BSSID_1}
[ +0.033320] wlp6s0: send auth to ${BSSID_1} (try 1/3)
[ +0.003524] wlp6s0: authenticated
[ +0.002874] wlp6s0: associate with ${BSSID_1} (try 1/3)
[ +0.047764] wlp6s0: RX AssocResp from ${BSSID_1} (capab=0x1411 status=0 aid=2)
[ +0.034149] wlp6s0: associated
[ +0.052122] wlp6s0: Limiting TX power to 20 (20 - 0) dBm as advertised by ${BSSID_1}
[Jan28 01:56] wlp6s0: deauthenticating from ${BSSID_1} by local choice (Reason: 3=DEAUTH_LEAVING)
[ +2.990354] wlp6s0: authenticate with ${BSSID_4}
[ +0.495002] wlp6s0: send auth to ${BSSID_4} (try 1/3)
[ +0.010896] wlp6s0: send auth to ${BSSID_4} (try 2/3)
[ +0.014826] wlp6s0: send auth to ${BSSID_4} (try 3/3)
[ +0.011212] wlp6s0: authentication with ${BSSID_4} timed out
[ +1.463564] wlp6s0: authenticate with ${BSSID_5}
[ +0.498205] wlp6s0: send auth to ${BSSID_5} (try 1/3)
[ +0.010537] wlp6s0: send auth to ${BSSID_5} (try 2/3)
[ +0.010365] wlp6s0: send auth to ${BSSID_5} (try 3/3)
[ +0.011352] wlp6s0: authentication with ${BSSID_5} timed out
[ +1.503782] wlp6s0: authenticate with ${BSSID_6}
[ +0.179987] wlp6s0: send auth to ${BSSID_6} (try 1/3)
[ +0.009999] wlp6s0: send auth to ${BSSID_6} (try 2/3)
[ +0.010339] wlp6s0: send auth to ${BSSID_6} (try 3/3)
[ +0.010193] wlp6s0: authentication with ${BSSID_6} timed out
|
Any help would be greatly appreciated! 
_________________
Sometimes you can't help but laugh at the absurdity of it all |
|
| Back to top |
|
 |
wanne32
Tux's lil' helper
Joined: 11 Nov 2023
Posts: 83
|
|
| Back to top |
|
|
VulgarBulgar
n00b
Joined: 04 Oct 2023
Posts: 23
|
| Posted: Tue Jan 28, 2025 4:29 am Post subject: |
|
|
| wanne32 wrote: | | https://eduroam.org/configuration-assistant-tool-cat/ |
As useful as that is, my university doesn't have a config and when I pestered them about it they didn't reply. Further yet it's not the only way to connect and what I had before worked well (until it didn't), so I know it works without having to deal with my IT department.
_________________
Sometimes you can't help but laugh at the absurdity of it all |
|
| Back to top |
|
|
logrusx
Advocate
Joined: 22 Feb 2018
Posts: 2658
|
| Posted: Tue Jan 28, 2025 6:29 am Post subject: |
|
|
| VulgarBulgar wrote: | | when I pestered them about it they didn't reply. |
Sounds familiar. Any chance we reside in one country?
| VulgarBulgar wrote: | | what I had before worked well (until it didn't) |
If that's true, it doesn't sound like you can do anything about it.
| VulgarBulgar wrote: | | so I know it works without having to deal with my IT department. |
No, you don't. And if we're talking about the same country you have to go out of your way to do the job of somebody else and make them actually apply the result...
Best Regards,
Georgi |
|
| Back to top |
|
|
wanne32
Tux's lil' helper
Joined: 11 Nov 2023
Posts: 83
|
| Posted: Wed Jan 29, 2025 3:22 am Post subject: |
|
|
| VulgarBulgar wrote: | | As useful as that is, my university doesn't have a config and when I pestered them about it they didn't reply. Further yet it's not the only way to connect and what I had before worked well (until it didn't), so I know it works without having to deal with my IT department. |
It is not the only way. But it is almost impossible to configure PEAP/MSCHAPv2 by hand in a way that it isn't throwing passwords at everyone who asks.
I think subject_match/altsubject_match/domain_match are still undocumented in wpa_supplicnat and NetworkManager. Windows and Android doesn't allow so set it at all in the GUI and you have to supply xml-configs. I doubt that it is better on iOS/Mac.
Had to fight here for a while too. But published passwords help. Especially since most universities are required to use the same passwords as for important stuff like setting marks and exmatriculating.
| Quote: | | Essentially I'll connect and after >5 minutes my connection will disconnect |
Are you using ARM? Otherwise sounds like a problem that is AP related. I know that android and iOS have blacklists for faulty BSSIDs. So if there are a few working ones most people won't recognize.
I would test iwd just to double check:
For PEAP/MSCHAPV2 the Security part should look something like that:
| Code: | [Security]
EAP-Method=PEAP
EAP-Identity={anonymous_identity}
EAP-PEAP-CACert={ca_cert}
EAP-PEAP-ServerDomainMask={servers}
EAP-PEAP-Phase2-Method=MSCHAPV2
EAP-PEAP-Phase2-Identity={username}@{realm}
EAP-PEAP-Phase2-Password={password}
|
|
|
| Back to top |
|
|
|
Networking & Security
