I try to rebuild wpa with same configuration file like fedora but I have an error during the compilation
It seems to be due to openssl package but this package is a slackware package

Maybe it's worth trying openssl-1.0.0?

At least they say something about important bug fixes?

The MoD

Ok I found why wpa refused to build.
Slackware build openssl in 2 packages : openssl and openssl-solibs
To build wpa-supplicant with the new option, the second is needed

So the new package is there : http://zenwalk.pinguix.com/user-account ... 6-72.3.txz

I hope it will fix your problem.

Bip

Not yet :-(

Installed the package. Rebooted. Disconnected the LAN cable. Tried connecting using NM and the wireless card.

tail /var/log/syslog
Nov 9 21:37:18 (none) NetworkManager[744]: <warn> Activation (wlan0/wireless): association took too long.
Nov 9 21:37:18 (none) NetworkManager[744]: <warn> Activation (wlan0/wireless): asking for new secrets
Nov 9 21:37:18 (none) NetworkManager[744]: <warn> Couldn't disconnect supplicant interface: This interface is not connected.
Nov 9 21:37:36 (none) NetworkManager[744]: get_secret_flags: assertion `is_secret_prop (setting, secret_name, error)' failed
Nov 9 21:40:48 (none) NetworkManager[744]: <warn> (pid 1922) unhandled DHCP event for interface wlan0
Nov 9 21:41:23 (none) NetworkManager[744]: <warn> (pid 1967) unhandled DHCP event for interface wlan0
Nov 9 21:45:06 (none) NetworkManager[744]: get_secret_flags: assertion `is_secret_prop (setting, secret_name, error)' failed

cat /var/log/wpa_supplicant.log
Trying to authenticate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2412 MHz)
Trying to associate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2412 MHz)
Associated with 00:1f:3f:59:b0:28
WPA: 4-Way Handshake failed - pre-shared key may be incorrect
CTRL-EVENT-DISCONNECTED bssid=00:1f:3f:59:b0:28 reason=1
Trying to authenticate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2412 MHz)
Trying to associate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2412 MHz)
Associated with 00:1f:3f:59:b0:28
WPA: 4-Way Handshake failed - pre-shared key may be incorrect
CTRL-EVENT-DISCONNECTED bssid=00:1f:3f:59:b0:28 reason=1
Trying to authenticate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2412 MHz)
Trying to associate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2412 MHz)
Associated with 00:1f:3f:59:b0:28
WPA: 4-Way Handshake failed - pre-shared key may be incorrect
CTRL-EVENT-DISCONNECTED bssid=00:1f:3f:59:b0:28 reason=1
Trying to authenticate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2412 MHz)
Trying to associate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2412 MHz)
Associated with 00:1f:3f:59:b0:28
CTRL-EVENT-DISCONNECTED bssid=00:00:00:00:00:00 reason=3
Trying to authenticate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2412 MHz)
Trying to associate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2412 MHz)
Associated with 00:1f:3f:59:b0:28
WPA: Key negotiation completed with 00:1f:3f:59:b0:28 [PTK=CCMP GTK=TKIP]
CTRL-EVENT-CONNECTED - Connection to 00:1f:3f:59:b0:28 completed (auth) [id=0 id_str=]
CTRL-EVENT-DISCONNECTED bssid=00:00:00:00:00:00 reason=3
Trying to authenticate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2412 MHz)
Trying to associate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2412 MHz)
Associated with 00:1f:3f:59:b0:28
WPA: Key negotiation completed with 00:1f:3f:59:b0:28 [PTK=CCMP GTK=TKIP]
CTRL-EVENT-CONNECTED - Connection to 00:1f:3f:59:b0:28 completed (reauth) [id=0 id_str=]
CTRL-EVENT-DISCONNECTED bssid=00:00:00:00:00:00 reason=3
Trying to authenticate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2437 MHz)
Trying to associate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2437 MHz)
Associated with 00:1f:3f:59:b0:28
WPA: Key negotiation completed with 00:1f:3f:59:b0:28 [PTK=CCMP GTK=TKIP]
CTRL-EVENT-CONNECTED - Connection to 00:1f:3f:59:b0:28 completed (reauth) [id=0 id_str=]

The first time I really got the pwd wrong. All other attempts shall be correct.

ifconfig wlan0
wlan0 Link encap:Ethernet HWaddr 00:22:FB:64:98:6C
inet addr:192.168.178.22 Bcast:192.168.178.255 Mask:255.255.255.0
inet6 addr: fe80::222:fbff:fe64:986c/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:46 errors:0 dropped:0 overruns:0 frame:0
TX packets:48 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:10486 (10.2 Kb) TX bytes:6223 (6.0 Kb)

The IP address is in the correct range.

The MoD

The log works, it is a good thing

Can you stop networkmanger : /etc/rc.d/rc.NetwrokManager stop
and launch this :



Did you try to configure manually the connection via the applet ?

Bip

Can you try this new package ?

http://zenwalk.pinguix.com/user-account ... 6-72.4.txz

I built with a different config file.

Bip

Hi,

before installing the new package I've stopped NM manually. I noticed that the file is /etc/rc.d/rc.networkmanager, not NetworkManager. Just in case, another process relies on upper / lower cases.

/usr/sbin/NetworkManager --no-daemon --log-level=DEBUG --log-domains=CORE,WIFI,AGENTS 2>&1 | tee -a ~/nm.log
NetworkManager is already running (pid 743) shall I kill pid 743?

tail /var/log/wpa_supplicant.log
Trying to authenticate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2412 MHz)
Trying to associate with 00:1f:3f:59:b0:28 (SSID='Hotzenplotz' freq=2412 MHz)
Associated with 00:1f:3f:59:b0:28
WPA: Key negotiation completed with 00:1f:3f:59:b0:28 [PTK=CCMP GTK=TKIP]
CTRL-EVENT-CONNECTED - Connection to 00:1f:3f:59:b0:28 completed (auth) [id=0 id_str=]
CTRL-EVENT-DISCONNECTED bssid=00:00:00:00:00:00 reason=3

I disconnected after I could not load www.zenwalk.org nor to 91.121.50.95. I think this is what reason=3 means.

The MoD

This is the more simple wpa_supplicant.conf that I found
(from partedmagic)
-----------------------------------------------


# See /usr/doc/wpa_supplicant-0.5.10/wpa_supplicant.conf.sample
# for many more options that you can use in this file.

# This line enables the use of wpa_cli which is used by rc.wireless
# if possible (to check for successful association)
ctrl_interface=/var/run/wpa_supplicant
# By default, only root (group 0) may use wpa_cli
ctrl_interface_group=0
eapol_version=1
ap_scan=1
fast_reauth=1

# WPA protected network, supply your own ESSID and WPAPSK here:
network={
scan_ssid=0
ssid="your_essid_here"
proto=WPA
key_mgmt=WPA-PSK
pairwise=CCMP TKIP
group=CCMP TKIP WEP104 WEP40
psk=your_psk_here
}

# Plaintext connection (no WPA, no IEEE 802.1X),
# nice for hotel/airport types of WiFi network.
network={
key_mgmt=NONE
priority=0
}
-------------------------------------------------------------

Hi, I've installed the new package and rebooted.

As always I get a valid IP address. As "usual" I can't access any web page, I can't ping my own DSL router or any server in the internet

ping 192.168.178.1
PING 192.168.178.1 (192.168.178.1) 56(84) bytes of data.
ping: sendmsg: Operation not permitted

ping 91.121.50.95
PING 91.121.50.95 (91.121.50.95) 56(84) bytes of data.
ping: sendmsg: Operation not permitted

BUT - and this starts worrying me - I can nping (from the NMAP package)

nping 91.121.50.95

Starting Nping 0.5.51 ( http://nmap.org/nping ) at 2011-11-12 21:01 CET
SENT (0.0091s) ICMP 192.168.178.39 > 91.121.50.95 Echo request (type=8/code=0) ttl=64 id=25741 iplen=28
RCVD (0.0657s) ICMP 91.121.50.95 > 192.168.178.39 Echo reply (type=0/code=0) ttl=57 id=3972 iplen=28
SENT (1.0100s) ICMP 192.168.178.39 > 91.121.50.95 Echo request (type=8/code=0) ttl=64 id=25741 iplen=28
RCVD (1.0657s) ICMP 91.121.50.95 > 192.168.178.39 Echo reply (type=0/code=0) ttl=57 id=3973 iplen=28
SENT (2.0119s) ICMP 192.168.178.39 > 91.121.50.95 Echo request (type=8/code=0) ttl=64 id=25741 iplen=28
RCVD (2.0677s) ICMP 91.121.50.95 > 192.168.178.39 Echo reply (type=0/code=0) ttl=57 id=3974 iplen=28
SENT (3.0136s) ICMP 192.168.178.39 > 91.121.50.95 Echo request (type=8/code=0) ttl=64 id=25741 iplen=28
RCVD (3.0697s) ICMP 91.121.50.95 > 192.168.178.39 Echo reply (type=0/code=0) ttl=57 id=3975 iplen=28
SENT (4.0156s) ICMP 192.168.178.39 > 91.121.50.95 Echo request (type=8/code=0) ttl=64 id=25741 iplen=28
RCVD (4.0717s) ICMP 91.121.50.95 > 192.168.178.39 Echo reply (type=0/code=0) ttl=57 id=3976 iplen=28
^C
Max rtt: 56.455ms | Min rtt: 55.547ms | Avg rtt: 55.924ms
Raw packets sent: 5 (140B) | Rcvd: 5 (230B) | Lost: 0 (0.00%)
Tx time: 4.00690s | Tx bytes/s: 34.94 | Tx pkts/s: 1.25
Rx time: 4.40194s | Rx bytes/s: 52.25 | Rx pkts/s: 1.14
Nping done: 1 IP address pinged in 4.41 seconds


So, it looks like another package (providing some basic networking) is either missing or broken?? Or do I have a problem with my IPTABLE settings?

The MoD

Now I'm baffled completely.

After setting firestarter to WLAN0 (both for the internal and external interface) I can load any web page I want. I changed these settings before. But I always assumed that the only purpose of this is to define that incoming connections on the selected interface will be blocked. And never touched it on Fedora or Ubuntu. Edited: Checked on Fedora. Here I don't have to select the interface that will be protected.//

Edited: double- checked with ZW 6.x. In ZW 6.x it doesn't matter whether the FW is started or not, I get a connection. In ZW snapshot it is obviously different. I get only a connection if the FW is set to that interface. I appreciate this as a security measure.

However, can somebody explain what NPING does differently?

Sorry, Bip, I don't know if this was the solution from the very beginning and whether I've mislead you not trying this before.

The MoD

I had to return to the previous package (wpa_supplicant-0.7.3-i486-72.3) since I couldn't hibernate after installing .4

With .3 it works again.

However, it looks like I can now connect - also via wlan0 - no matter to which interface I set Firestarter.


The MoD

Good

I will push the package version 3 on the repo.

Bip