From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4chZ5Q29Vxz32lV for ; Wed, 08 Oct 2025 13:45:30 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R13" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4chZ5L6xBXz2xMF for ; Wed, 08 Oct 2025 13:45:26 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4chZ5K3hzLzGT; Wed, 08 Oct 2025 13:45:25 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1759931125; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=ViPjblTjIWUZ0Q4hNqH7Vn7KKlEA/eHBjWD7Cu3PTFg=; b=O2iGN5VtYiW4Ws5MhC78FcZxbU2zKhvnVtHZKwM20mNSCXAZDHoJDRf2dpt6Kiz9JNjopV Bg1Tvw/OWDIz5pBw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1759931125; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=ViPjblTjIWUZ0Q4hNqH7Vn7KKlEA/eHBjWD7Cu3PTFg=; b=m0JIJhjmZ0oNURRKtZIA6xv5auDLurEq6E8vyLPz0EeNp/Vau8bwvk3LUKrCQIsl4+QxEs qIDPuxlVekGHTzFx2qWrZ/4NW9jgiDkNB98RhRJXu70Pe3/voqwyp1AQGfp0F9fQulXqdV ufmHO55uHX0m7/HGeDRiww8ZjdelSsPGcrkBP45dXDhGcVSj5EelwLD65zAmgwAMIzJuyP 6NH7+AIEFwg928UUZfqybq4ykukgNGdevzBIntfoXYMT1w9bpvEB7MZlVg6f70I67BGZJC U+fnt/u6kJOWKkn2AKTINMeU3VJ5W9mHvTBuhqBCl3t6pE9tCMfTzFU3rG5X+A== Message-ID: <116580b6-d16f-406d-b029-0df2277a5f80@ipfire.org> Date: Wed, 8 Oct 2025 15:45:22 +0200 Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Subject: Re: hostapd not working in CU199 To: Michael Tremer Cc: "IPFire: Development-List" References: Content-Language: en-GB From: Adolf Belka In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Hi Michael, On 08/10/2025 15:40, Michael Tremer wrote: > Hello Adolf, > > Thank you for testing this. > > Could you send me the output of “iw list” as well please? Here is the output # iw list Wiphy phy0 wiphy index: 0 max # scan SSIDs: 4 max scan IEs length: 2257 bytes max # sched scan SSIDs: 0 max # match sets: 0 Retry short long limit: 2 Coverage class: 0 (up to 0m) Device supports RSN-IBSS. Supported Ciphers: * WEP40 (00-0f-ac:1) * WEP104 (00-0f-ac:5) * TKIP (00-0f-ac:2) * CCMP-128 (00-0f-ac:4) * CCMP-256 (00-0f-ac:10) * GCMP-128 (00-0f-ac:8) * GCMP-256 (00-0f-ac:9) * CMAC (00-0f-ac:6) * CMAC-256 (00-0f-ac:13) * GMAC-128 (00-0f-ac:11) * GMAC-256 (00-0f-ac:12) Available Antennas: TX 0 RX 0 Supported interface modes: * IBSS * managed * AP * AP/VLAN * monitor * mesh point Band 1: Capabilities: 0x2fe HT20/HT40 SM Power Save disabled RX Greenfield RX HT20 SGI RX HT40 SGI TX STBC RX STBC 2-streams Max AMSDU length: 3839 bytes No DSSS/CCK HT40 Maximum RX AMPDU length 65535 bytes (exponent: 0x003) Minimum RX AMPDU time spacing: 2 usec (0x04) HT TX/RX MCS rate indexes supported: 0-15, 32 Bitrates (non-HT): * 1.0 Mbps * 2.0 Mbps (short preamble supported) * 5.5 Mbps (short preamble supported) * 11.0 Mbps (short preamble supported) * 6.0 Mbps * 9.0 Mbps * 12.0 Mbps * 18.0 Mbps * 24.0 Mbps * 36.0 Mbps * 48.0 Mbps * 54.0 Mbps Frequencies: * 2412.0 MHz [1] (20.0 dBm) * 2417.0 MHz [2] (20.0 dBm) * 2422.0 MHz [3] (20.0 dBm) * 2427.0 MHz [4] (20.0 dBm) * 2432.0 MHz [5] (20.0 dBm) * 2437.0 MHz [6] (20.0 dBm) * 2442.0 MHz [7] (20.0 dBm) * 2447.0 MHz [8] (20.0 dBm) * 2452.0 MHz [9] (20.0 dBm) * 2457.0 MHz [10] (20.0 dBm) * 2462.0 MHz [11] (20.0 dBm) * 2467.0 MHz [12] (20.0 dBm) (no IR) * 2472.0 MHz [13] (20.0 dBm) (no IR) * 2484.0 MHz [14] (20.0 dBm) (no IR) Band 2: Capabilities: 0x2fe HT20/HT40 SM Power Save disabled RX Greenfield RX HT20 SGI RX HT40 SGI TX STBC RX STBC 2-streams Max AMSDU length: 3839 bytes No DSSS/CCK HT40 Maximum RX AMPDU length 65535 bytes (exponent: 0x003) Minimum RX AMPDU time spacing: 2 usec (0x04) HT TX/RX MCS rate indexes supported: 0-15, 32 Bitrates (non-HT): * 6.0 Mbps * 9.0 Mbps * 12.0 Mbps * 18.0 Mbps * 24.0 Mbps * 36.0 Mbps * 48.0 Mbps * 54.0 Mbps Frequencies: * 5180.0 MHz [36] (20.0 dBm) (no IR) * 5190.0 MHz [38] (20.0 dBm) (no IR) * 5200.0 MHz [40] (20.0 dBm) (no IR) * 5210.0 MHz [42] (20.0 dBm) (no IR) * 5220.0 MHz [44] (20.0 dBm) (no IR) * 5230.0 MHz [46] (20.0 dBm) (no IR) * 5240.0 MHz [48] (20.0 dBm) (no IR) * 5250.0 MHz [50] (20.0 dBm) (no IR, radar detection) * 5260.0 MHz [52] (20.0 dBm) (no IR, radar detection) * 5270.0 MHz [54] (20.0 dBm) (no IR, radar detection) * 5280.0 MHz [56] (20.0 dBm) (no IR, radar detection) * 5290.0 MHz [58] (20.0 dBm) (no IR, radar detection) * 5300.0 MHz [60] (20.0 dBm) (no IR, radar detection) * 5310.0 MHz [62] (20.0 dBm) (no IR, radar detection) * 5320.0 MHz [64] (20.0 dBm) (no IR, radar detection) * 5500.0 MHz [100] (20.0 dBm) (no IR, radar detection) * 5510.0 MHz [102] (20.0 dBm) (no IR, radar detection) * 5520.0 MHz [104] (20.0 dBm) (no IR, radar detection) * 5530.0 MHz [106] (20.0 dBm) (no IR, radar detection) * 5540.0 MHz [108] (20.0 dBm) (no IR, radar detection) * 5550.0 MHz [110] (20.0 dBm) (no IR, radar detection) * 5560.0 MHz [112] (20.0 dBm) (no IR, radar detection) * 5570.0 MHz [114] (20.0 dBm) (no IR, radar detection) * 5580.0 MHz [116] (20.0 dBm) (no IR, radar detection) * 5590.0 MHz [118] (20.0 dBm) (no IR, radar detection) * 5600.0 MHz [120] (20.0 dBm) (no IR, radar detection) * 5610.0 MHz [122] (20.0 dBm) (no IR, radar detection) * 5620.0 MHz [124] (20.0 dBm) (no IR, radar detection) * 5630.0 MHz [126] (20.0 dBm) (no IR, radar detection) * 5640.0 MHz [128] (20.0 dBm) (no IR, radar detection) * 5650.0 MHz [130] (20.0 dBm) (no IR, radar detection) * 5660.0 MHz [132] (20.0 dBm) (no IR, radar detection) * 5670.0 MHz [134] (20.0 dBm) (no IR, radar detection) * 5680.0 MHz [136] (20.0 dBm) (no IR, radar detection) * 5690.0 MHz [138] (20.0 dBm) (no IR, radar detection) * 5700.0 MHz [140] (20.0 dBm) (no IR, radar detection) * 5745.0 MHz [149] (20.0 dBm) (no IR) * 5755.0 MHz [151] (20.0 dBm) (no IR) * 5765.0 MHz [153] (20.0 dBm) (no IR) * 5775.0 MHz [155] (20.0 dBm) (no IR) * 5785.0 MHz [157] (20.0 dBm) (no IR) * 5795.0 MHz [159] (20.0 dBm) (no IR) * 5805.0 MHz [161] (20.0 dBm) (no IR) * 5825.0 MHz [165] (20.0 dBm) (no IR) * 4920.0 MHz [184] (disabled) * 4940.0 MHz [188] (disabled) * 4960.0 MHz [192] (disabled) * 4980.0 MHz [196] (disabled) Supported commands: * new_interface * set_interface * new_key * start_ap * new_station * new_mpath * set_mesh_config * set_bss * authenticate * associate * deauthenticate * disassociate * join_ibss * join_mesh * remain_on_channel * set_tx_bitrate_mask * frame * frame_wait_cancel * set_wiphy_netns * set_channel * probe_client * set_noack_map * register_beacons * start_p2p_device * set_mcast_rate * testmode * connect * disconnect * set_qos_map * set_multicast_to_unicast software interface modes (can always be added): * AP/VLAN * monitor valid interface combinations: * #{ AP, mesh point } <= 8, total <= 8, #channels <= 1 HT Capability overrides: * MCS: ff ff ff ff ff ff ff ff ff ff * maximum A-MSDU length * supported channel width * short GI for 40 MHz * max A-MPDU length exponent * min MPDU start spacing Device supports TX status socket option. Device supports HT-IBSS. Device supports SAE with AUTHENTICATE command Device supports low priority scan. Device supports scan flush. Device supports AP scan. Device supports per-vif TX power setting Driver supports full state transitions for AP/GO clients Driver supports a userspace MPM Device supports configuring vdev MAC-addr on create. max # scan plans: 1 max scan plan interval: -1 max scan plan iterations: 0 Supported TX frame types: * IBSS: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 * managed: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 * AP: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 * AP/VLAN: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 * mesh point: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 * P2P-client: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 * P2P-GO: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 * P2P-device: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0 Supported RX frame types: * IBSS: 0x40 0xb0 0xc0 0xd0 * managed: 0x40 0xb0 0xd0 * AP: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0 * AP/VLAN: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0 * mesh point: 0xb0 0xc0 0xd0 * P2P-client: 0x40 0xd0 * P2P-GO: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0 * P2P-device: 0x40 0xd0 Supported extended features: * [ RRM ]: RRM * [ FILS_STA ]: STA FILS (Fast Initial Link Setup) * [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records * [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211 * [ TXQS ]: FQ-CoDel-enabled intermediate TXQs * [ SCAN_RANDOM_SN ]: use random sequence numbers in scans * [ SCAN_MIN_PREQ_CONTENT ]: use probe request with only rate IEs in scans * [ CONTROL_PORT_NO_PREAUTH ]: disable pre-auth over nl80211 control port support * [ DEL_IBSS_STA ]: deletion of IBSS station support * [ SCAN_FREQ_KHZ ]: scan on kHz frequency support * [ CONTROL_PORT_OVER_NL80211_TX_STATUS ]: tx status for nl80211 control port support * [ POWERED_ADDR_CHANGE ]: can change MAC address while up Regards, Adolf. > > Either I have an error somewhere checking for the [MAX-AMSDU-7935] capability, or the device claims to support it but actually doesn't. > > -Michael > >> On 8 Oct 2025, at 14:38, Adolf Belka wrote: >> >> Hi Michael, >> >> As mentioned at the monthly conf call I tested out today the wireless function in CU199 but it won't start for me. >> >> Basically the code overwrites the WPA Passphrase in hostapd.conf with a directory. In the WUI the passphrase is still correctly shown. It is correctly stored in the wlanap/settings file. It is just not correct in the hostapd.conf file. >> >> The first time I tried the update the WPA Passphrase was replaced with /srv/web/ipfire/cgi-bin/ >> >> The second time I tried the update it was overwritten by / which is the version shown below. >> >> The hostapd.conf with CU197 (with 63 character Passphrase redacted) was >> >> ------------------------------------- >> driver=nl80211 >> ######################### basic hostapd configuration ########################## >> # >> country_code=NL >> country3=0x49 # indoor >> ieee80211d=1 >> ieee80211h=1 >> channel=6 >> >> # Always advertise TPC >> local_pwr_constraint=3 >> spectrum_mgmt_required=1 >> hw_mode=g >> ieee80211n=1 >> wmm_enabled=1 >> ht_capab= >> # Enable logging >> logger_syslog=-1 >> logger_syslog_level=4 >> auth_algs=1 >> ctrl_interface=/var/run/hostapd >> ctrl_interface_group=0 >> disassoc_low_ack=1 >> >> # SSID >> ssid2="Jarnsaxa" >> utf8_ssid=1 >> >> noscan=1 >> ieee80211w=0 >> ######################### wpa hostapd configuration ############################ >> # >> wpa=2 >> wpa_passphrase=*************************************************************** >> wpa_key_mgmt=WPA-PSK SAE >> rsn_pairwise=CCMP >> ------------------------------------- >> >> After the update the file contained >> >> ------------------------------------- >> # Automatically generated configuration >> # DO NOT EDIT >> logger_syslog=-1 >> logger_syslog_level=4 >> driver=nl80211 >> country_code=NL >> country3=0x49 >> ieee80211d=1 >> ieee80211h=1 >> channel=6 >> local_pwr_constraint=3 >> spectrum_mgmt_required=1 >> enable_background_radar=1 >> wmm_enabled=1 >> hw_mode=g >> ieee80211n=1 >> ht_capab=[HT40+][HT40-] [GF] [RX-STBC1] [SHORT-GI-40] [TX-STBC] [MAX-AMSDU-7935] [SHORT-GI-20] >> auth_algs=1 >> ctrl_interface=/var/run/hostapd >> ctrl_interface_group=0 >> disassoc_low_ack=1 >> ssid2="Jarnsaxa" >> utf8_ssid=1 >> noscan=1 >> ieee80211w=0 >> wpa=2 >> wpa_passphrase=/ >> wpa_key_mgmt=WPA-PSK WPA-PSK-SHA256 SAE >> rsn_pairwise=CCMP >> ssid_protection=1 >> extended_key_id=1 >> oce=7 >> interworking=1 >> access_network_type=0 >> internet=1 >> time_advertisement=2 >> multicast_to_unicast=1 >> ------------------------------------- >> >> The wireless log not surprisingly had a problem with the passphrase >> >> 15:00:00 hostapd: blue0: interface state ENABLED->DISABLED >> 15:00:00 hostapd: blue0: AP-DISABLED >> 15:00:00 hostapd: blue0: CTRL-EVENT-TERMINATING >> 15:00:00 hostapd: nl80211: deinit ifname=blue0 disabled_11b_rates=0 >> 15:00:02 hostapd: blue0: interface state UNINITIALIZED->COUNTRY_UPDATE >> 15:00:02 hostapd: Driver does not support configured HT capability [MAX-AMSDU-7935] >> 15:00:02 hostapd: blue0: interface state COUNTRY_UPDATE->DISABLED >> 15:00:02 hostapd: blue0: AP-DISABLED >> 15:00:02 hostapd: blue0: Unable to setup interface. >> 15:00:02 hostapd: blue0: interface state DISABLED->DISABLED >> 15:00:02 hostapd: blue0: AP-DISABLED >> 15:00:02 hostapd: blue0: CTRL-EVENT-TERMINATING >> 15:00:02 hostapd: hostapd_free_hapd_data: Interface blue0 wasn't started >> 15:00:02 hostapd: nl80211: deinit ifname=blue0 disabled_11b_rates=0 >> 15:04:57 hostapd: Line 27: invalid WPA passphrase length 1 (expected 8..63) >> 15:04:57 hostapd: WPA-PSK enabled, but PSK or passphrase is not configured. >> 15:04:57 hostapd: 2 errors found in configuration file '/etc/hostapd.conf' >> 15:04:57 hostapd: Failed to set up interface with /etc/hostapd.conf >> 15:04:58 hostapd: Failed to initialize interface >> >> The log also mentions that the driver for the wireless chip in the Prime unit doesn't support a configured HT capability. >> I am presuming that that issue is the second error hostapd found in the configuration file. >> >> I have also just noticed that the hostapd.conf file that was used in CU197 is still physically present in /var/ipfire/wlanap/ while the new version is in /etc. Probably should delete the version from the old location if it is being replaced by the new version. >> >> Regards, >> >> Adolf. >> >