public inbox for development@lists.ipfire.org
 help / color / mirror / Atom feed
* hostapd not working in CU199
@ 2025-10-08 13:38 Adolf Belka
  2025-10-08 13:40 ` Michael Tremer
  0 siblings, 1 reply; 5+ messages in thread
From: Adolf Belka @ 2025-10-08 13:38 UTC (permalink / raw)
  To: IPFire: Development-List

Hi Michael,

As mentioned at the monthly conf call I tested out today the wireless function in CU199 but it won't start for me.

Basically the code overwrites the WPA Passphrase in hostapd.conf with a directory. In the WUI the passphrase is still correctly shown. It is correctly stored in the wlanap/settings file. It is just not correct in the hostapd.conf file.

The first time I tried the update the WPA Passphrase was replaced with /srv/web/ipfire/cgi-bin/

The second time I tried the update it was overwritten by / which is the version shown below.

The hostapd.conf with CU197 (with 63 character Passphrase redacted) was

-------------------------------------
driver=nl80211
######################### basic hostapd configuration ##########################
#
country_code=NL
country3=0x49 # indoor
ieee80211d=1
ieee80211h=1
channel=6

# Always advertise TPC
local_pwr_constraint=3
spectrum_mgmt_required=1
hw_mode=g
ieee80211n=1
wmm_enabled=1
ht_capab=
# Enable logging
logger_syslog=-1
logger_syslog_level=4
auth_algs=1
ctrl_interface=/var/run/hostapd
ctrl_interface_group=0
disassoc_low_ack=1

# SSID
ssid2="Jarnsaxa"
utf8_ssid=1

noscan=1
ieee80211w=0
######################### wpa hostapd configuration ############################
#
wpa=2
wpa_passphrase=***************************************************************
wpa_key_mgmt=WPA-PSK SAE
rsn_pairwise=CCMP
-------------------------------------

After the update the file contained

-------------------------------------
# Automatically generated configuration
# DO NOT EDIT
logger_syslog=-1
logger_syslog_level=4
driver=nl80211
country_code=NL
country3=0x49
ieee80211d=1
ieee80211h=1
channel=6
local_pwr_constraint=3
spectrum_mgmt_required=1
enable_background_radar=1
wmm_enabled=1
hw_mode=g
ieee80211n=1
ht_capab=[HT40+][HT40-] [GF] [RX-STBC1] [SHORT-GI-40] [TX-STBC] [MAX-AMSDU-7935] [SHORT-GI-20]
auth_algs=1
ctrl_interface=/var/run/hostapd
ctrl_interface_group=0
disassoc_low_ack=1
ssid2="Jarnsaxa"
utf8_ssid=1
noscan=1
ieee80211w=0
wpa=2
wpa_passphrase=/
wpa_key_mgmt=WPA-PSK WPA-PSK-SHA256 SAE
rsn_pairwise=CCMP
ssid_protection=1
extended_key_id=1
oce=7
interworking=1
access_network_type=0
internet=1
time_advertisement=2
multicast_to_unicast=1
-------------------------------------

The wireless log not surprisingly had a problem with the passphrase

15:00:00 hostapd:  blue0: interface state ENABLED->DISABLED
15:00:00 hostapd:  blue0: AP-DISABLED
15:00:00 hostapd:  blue0: CTRL-EVENT-TERMINATING
15:00:00 hostapd:  nl80211: deinit ifname=blue0 disabled_11b_rates=0
15:00:02 hostapd:  blue0: interface state UNINITIALIZED->COUNTRY_UPDATE
15:00:02 hostapd:  Driver does not support configured HT capability [MAX-AMSDU-7935]
15:00:02 hostapd:  blue0: interface state COUNTRY_UPDATE->DISABLED
15:00:02 hostapd:  blue0: AP-DISABLED
15:00:02 hostapd:  blue0: Unable to setup interface.
15:00:02 hostapd:  blue0: interface state DISABLED->DISABLED
15:00:02 hostapd:  blue0: AP-DISABLED
15:00:02 hostapd:  blue0: CTRL-EVENT-TERMINATING
15:00:02 hostapd:  hostapd_free_hapd_data: Interface blue0 wasn't started
15:00:02 hostapd:  nl80211: deinit ifname=blue0 disabled_11b_rates=0
15:04:57 hostapd:  Line 27: invalid WPA passphrase length 1 (expected 8..63)
15:04:57 hostapd:  WPA-PSK enabled, but PSK or passphrase is not configured.
15:04:57 hostapd:  2 errors found in configuration file '/etc/hostapd.conf'
15:04:57 hostapd:  Failed to set up interface with /etc/hostapd.conf
15:04:58 hostapd:  Failed to initialize interface

The log also mentions that the driver for the wireless chip in the Prime unit doesn't support a configured HT capability.
I am presuming that that issue is the second error hostapd found in the configuration file.

I have also just noticed that the hostapd.conf file that was used in CU197 is still physically present in /var/ipfire/wlanap/ while the new version is in /etc. Probably should delete the version from the old location if it is being replaced by the new version.

Regards,

Adolf.


^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: hostapd not working in CU199
  2025-10-08 13:38 hostapd not working in CU199 Adolf Belka
@ 2025-10-08 13:40 ` Michael Tremer
  2025-10-08 13:45   ` Adolf Belka
  0 siblings, 1 reply; 5+ messages in thread
From: Michael Tremer @ 2025-10-08 13:40 UTC (permalink / raw)
  To: Adolf Belka; +Cc: IPFire: Development-List

Hello Adolf,

Thank you for testing this.

Could you send me the output of “iw list” as well please?

Either I have an error somewhere checking for the [MAX-AMSDU-7935] capability, or the device claims to support it but actually doesn't.

-Michael

> On 8 Oct 2025, at 14:38, Adolf Belka <adolf.belka@ipfire.org> wrote:
> 
> Hi Michael,
> 
> As mentioned at the monthly conf call I tested out today the wireless function in CU199 but it won't start for me.
> 
> Basically the code overwrites the WPA Passphrase in hostapd.conf with a directory. In the WUI the passphrase is still correctly shown. It is correctly stored in the wlanap/settings file. It is just not correct in the hostapd.conf file.
> 
> The first time I tried the update the WPA Passphrase was replaced with /srv/web/ipfire/cgi-bin/
> 
> The second time I tried the update it was overwritten by / which is the version shown below.
> 
> The hostapd.conf with CU197 (with 63 character Passphrase redacted) was
> 
> -------------------------------------
> driver=nl80211
> ######################### basic hostapd configuration ##########################
> #
> country_code=NL
> country3=0x49 # indoor
> ieee80211d=1
> ieee80211h=1
> channel=6
> 
> # Always advertise TPC
> local_pwr_constraint=3
> spectrum_mgmt_required=1
> hw_mode=g
> ieee80211n=1
> wmm_enabled=1
> ht_capab=
> # Enable logging
> logger_syslog=-1
> logger_syslog_level=4
> auth_algs=1
> ctrl_interface=/var/run/hostapd
> ctrl_interface_group=0
> disassoc_low_ack=1
> 
> # SSID
> ssid2="Jarnsaxa"
> utf8_ssid=1
> 
> noscan=1
> ieee80211w=0
> ######################### wpa hostapd configuration ############################
> #
> wpa=2
> wpa_passphrase=***************************************************************
> wpa_key_mgmt=WPA-PSK SAE
> rsn_pairwise=CCMP
> -------------------------------------
> 
> After the update the file contained
> 
> -------------------------------------
> # Automatically generated configuration
> # DO NOT EDIT
> logger_syslog=-1
> logger_syslog_level=4
> driver=nl80211
> country_code=NL
> country3=0x49
> ieee80211d=1
> ieee80211h=1
> channel=6
> local_pwr_constraint=3
> spectrum_mgmt_required=1
> enable_background_radar=1
> wmm_enabled=1
> hw_mode=g
> ieee80211n=1
> ht_capab=[HT40+][HT40-] [GF] [RX-STBC1] [SHORT-GI-40] [TX-STBC] [MAX-AMSDU-7935] [SHORT-GI-20]
> auth_algs=1
> ctrl_interface=/var/run/hostapd
> ctrl_interface_group=0
> disassoc_low_ack=1
> ssid2="Jarnsaxa"
> utf8_ssid=1
> noscan=1
> ieee80211w=0
> wpa=2
> wpa_passphrase=/
> wpa_key_mgmt=WPA-PSK WPA-PSK-SHA256 SAE
> rsn_pairwise=CCMP
> ssid_protection=1
> extended_key_id=1
> oce=7
> interworking=1
> access_network_type=0
> internet=1
> time_advertisement=2
> multicast_to_unicast=1
> -------------------------------------
> 
> The wireless log not surprisingly had a problem with the passphrase
> 
> 15:00:00 hostapd:  blue0: interface state ENABLED->DISABLED
> 15:00:00 hostapd:  blue0: AP-DISABLED
> 15:00:00 hostapd:  blue0: CTRL-EVENT-TERMINATING
> 15:00:00 hostapd:  nl80211: deinit ifname=blue0 disabled_11b_rates=0
> 15:00:02 hostapd:  blue0: interface state UNINITIALIZED->COUNTRY_UPDATE
> 15:00:02 hostapd:  Driver does not support configured HT capability [MAX-AMSDU-7935]
> 15:00:02 hostapd:  blue0: interface state COUNTRY_UPDATE->DISABLED
> 15:00:02 hostapd:  blue0: AP-DISABLED
> 15:00:02 hostapd:  blue0: Unable to setup interface.
> 15:00:02 hostapd:  blue0: interface state DISABLED->DISABLED
> 15:00:02 hostapd:  blue0: AP-DISABLED
> 15:00:02 hostapd:  blue0: CTRL-EVENT-TERMINATING
> 15:00:02 hostapd:  hostapd_free_hapd_data: Interface blue0 wasn't started
> 15:00:02 hostapd:  nl80211: deinit ifname=blue0 disabled_11b_rates=0
> 15:04:57 hostapd:  Line 27: invalid WPA passphrase length 1 (expected 8..63)
> 15:04:57 hostapd:  WPA-PSK enabled, but PSK or passphrase is not configured.
> 15:04:57 hostapd:  2 errors found in configuration file '/etc/hostapd.conf'
> 15:04:57 hostapd:  Failed to set up interface with /etc/hostapd.conf
> 15:04:58 hostapd:  Failed to initialize interface
> 
> The log also mentions that the driver for the wireless chip in the Prime unit doesn't support a configured HT capability.
> I am presuming that that issue is the second error hostapd found in the configuration file.
> 
> I have also just noticed that the hostapd.conf file that was used in CU197 is still physically present in /var/ipfire/wlanap/ while the new version is in /etc. Probably should delete the version from the old location if it is being replaced by the new version.
> 
> Regards,
> 
> Adolf.
> 



^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: hostapd not working in CU199
  2025-10-08 13:40 ` Michael Tremer
@ 2025-10-08 13:45   ` Adolf Belka
  2025-10-08 14:38     ` Michael Tremer
  0 siblings, 1 reply; 5+ messages in thread
From: Adolf Belka @ 2025-10-08 13:45 UTC (permalink / raw)
  To: Michael Tremer; +Cc: IPFire: Development-List

Hi Michael,

On 08/10/2025 15:40, Michael Tremer wrote:
> Hello Adolf,
> 
> Thank you for testing this.
> 
> Could you send me the output of “iw list” as well please?

Here is the output

# iw list
Wiphy phy0
	wiphy index: 0
	max # scan SSIDs: 4
	max scan IEs length: 2257 bytes
	max # sched scan SSIDs: 0
	max # match sets: 0
	Retry short long limit: 2
	Coverage class: 0 (up to 0m)
	Device supports RSN-IBSS.
	Supported Ciphers:
		* WEP40 (00-0f-ac:1)
		* WEP104 (00-0f-ac:5)
		* TKIP (00-0f-ac:2)
		* CCMP-128 (00-0f-ac:4)
		* CCMP-256 (00-0f-ac:10)
		* GCMP-128 (00-0f-ac:8)
		* GCMP-256 (00-0f-ac:9)
		* CMAC (00-0f-ac:6)
		* CMAC-256 (00-0f-ac:13)
		* GMAC-128 (00-0f-ac:11)
		* GMAC-256 (00-0f-ac:12)
	Available Antennas: TX 0 RX 0
	Supported interface modes:
		 * IBSS
		 * managed
		 * AP
		 * AP/VLAN
		 * monitor
		 * mesh point
	Band 1:
		Capabilities: 0x2fe
			HT20/HT40
			SM Power Save disabled
			RX Greenfield
			RX HT20 SGI
			RX HT40 SGI
			TX STBC
			RX STBC 2-streams
			Max AMSDU length: 3839 bytes
			No DSSS/CCK HT40
		Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
		Minimum RX AMPDU time spacing: 2 usec (0x04)
		HT TX/RX MCS rate indexes supported: 0-15, 32
		Bitrates (non-HT):
			* 1.0 Mbps
			* 2.0 Mbps (short preamble supported)
			* 5.5 Mbps (short preamble supported)
			* 11.0 Mbps (short preamble supported)
			* 6.0 Mbps
			* 9.0 Mbps
			* 12.0 Mbps
			* 18.0 Mbps
			* 24.0 Mbps
			* 36.0 Mbps
			* 48.0 Mbps
			* 54.0 Mbps
		Frequencies:
			* 2412.0 MHz [1] (20.0 dBm)
			* 2417.0 MHz [2] (20.0 dBm)
			* 2422.0 MHz [3] (20.0 dBm)
			* 2427.0 MHz [4] (20.0 dBm)
			* 2432.0 MHz [5] (20.0 dBm)
			* 2437.0 MHz [6] (20.0 dBm)
			* 2442.0 MHz [7] (20.0 dBm)
			* 2447.0 MHz [8] (20.0 dBm)
			* 2452.0 MHz [9] (20.0 dBm)
			* 2457.0 MHz [10] (20.0 dBm)
			* 2462.0 MHz [11] (20.0 dBm)
			* 2467.0 MHz [12] (20.0 dBm) (no IR)
			* 2472.0 MHz [13] (20.0 dBm) (no IR)
			* 2484.0 MHz [14] (20.0 dBm) (no IR)
	Band 2:
		Capabilities: 0x2fe
			HT20/HT40
			SM Power Save disabled
			RX Greenfield
			RX HT20 SGI
			RX HT40 SGI
			TX STBC
			RX STBC 2-streams
			Max AMSDU length: 3839 bytes
			No DSSS/CCK HT40
		Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
		Minimum RX AMPDU time spacing: 2 usec (0x04)
		HT TX/RX MCS rate indexes supported: 0-15, 32
		Bitrates (non-HT):
			* 6.0 Mbps
			* 9.0 Mbps
			* 12.0 Mbps
			* 18.0 Mbps
			* 24.0 Mbps
			* 36.0 Mbps
			* 48.0 Mbps
			* 54.0 Mbps
		Frequencies:
			* 5180.0 MHz [36] (20.0 dBm) (no IR)
			* 5190.0 MHz [38] (20.0 dBm) (no IR)
			* 5200.0 MHz [40] (20.0 dBm) (no IR)
			* 5210.0 MHz [42] (20.0 dBm) (no IR)
			* 5220.0 MHz [44] (20.0 dBm) (no IR)
			* 5230.0 MHz [46] (20.0 dBm) (no IR)
			* 5240.0 MHz [48] (20.0 dBm) (no IR)
			* 5250.0 MHz [50] (20.0 dBm) (no IR, radar detection)
			* 5260.0 MHz [52] (20.0 dBm) (no IR, radar detection)
			* 5270.0 MHz [54] (20.0 dBm) (no IR, radar detection)
			* 5280.0 MHz [56] (20.0 dBm) (no IR, radar detection)
			* 5290.0 MHz [58] (20.0 dBm) (no IR, radar detection)
			* 5300.0 MHz [60] (20.0 dBm) (no IR, radar detection)
			* 5310.0 MHz [62] (20.0 dBm) (no IR, radar detection)
			* 5320.0 MHz [64] (20.0 dBm) (no IR, radar detection)
			* 5500.0 MHz [100] (20.0 dBm) (no IR, radar detection)
			* 5510.0 MHz [102] (20.0 dBm) (no IR, radar detection)
			* 5520.0 MHz [104] (20.0 dBm) (no IR, radar detection)
			* 5530.0 MHz [106] (20.0 dBm) (no IR, radar detection)
			* 5540.0 MHz [108] (20.0 dBm) (no IR, radar detection)
			* 5550.0 MHz [110] (20.0 dBm) (no IR, radar detection)
			* 5560.0 MHz [112] (20.0 dBm) (no IR, radar detection)
			* 5570.0 MHz [114] (20.0 dBm) (no IR, radar detection)
			* 5580.0 MHz [116] (20.0 dBm) (no IR, radar detection)
			* 5590.0 MHz [118] (20.0 dBm) (no IR, radar detection)
			* 5600.0 MHz [120] (20.0 dBm) (no IR, radar detection)
			* 5610.0 MHz [122] (20.0 dBm) (no IR, radar detection)
			* 5620.0 MHz [124] (20.0 dBm) (no IR, radar detection)
			* 5630.0 MHz [126] (20.0 dBm) (no IR, radar detection)
			* 5640.0 MHz [128] (20.0 dBm) (no IR, radar detection)
			* 5650.0 MHz [130] (20.0 dBm) (no IR, radar detection)
			* 5660.0 MHz [132] (20.0 dBm) (no IR, radar detection)
			* 5670.0 MHz [134] (20.0 dBm) (no IR, radar detection)
			* 5680.0 MHz [136] (20.0 dBm) (no IR, radar detection)
			* 5690.0 MHz [138] (20.0 dBm) (no IR, radar detection)
			* 5700.0 MHz [140] (20.0 dBm) (no IR, radar detection)
			* 5745.0 MHz [149] (20.0 dBm) (no IR)
			* 5755.0 MHz [151] (20.0 dBm) (no IR)
			* 5765.0 MHz [153] (20.0 dBm) (no IR)
			* 5775.0 MHz [155] (20.0 dBm) (no IR)
			* 5785.0 MHz [157] (20.0 dBm) (no IR)
			* 5795.0 MHz [159] (20.0 dBm) (no IR)
			* 5805.0 MHz [161] (20.0 dBm) (no IR)
			* 5825.0 MHz [165] (20.0 dBm) (no IR)
			* 4920.0 MHz [184] (disabled)
			* 4940.0 MHz [188] (disabled)
			* 4960.0 MHz [192] (disabled)
			* 4980.0 MHz [196] (disabled)
	Supported commands:
		 * new_interface
		 * set_interface
		 * new_key
		 * start_ap
		 * new_station
		 * new_mpath
		 * set_mesh_config
		 * set_bss
		 * authenticate
		 * associate
		 * deauthenticate
		 * disassociate
		 * join_ibss
		 * join_mesh
		 * remain_on_channel
		 * set_tx_bitrate_mask
		 * frame
		 * frame_wait_cancel
		 * set_wiphy_netns
		 * set_channel
		 * probe_client
		 * set_noack_map
		 * register_beacons
		 * start_p2p_device
		 * set_mcast_rate
		 * testmode
		 * connect
		 * disconnect
		 * set_qos_map
		 * set_multicast_to_unicast
	software interface modes (can always be added):
		 * AP/VLAN
		 * monitor
	valid interface combinations:
		 * #{ AP, mesh point } <= 8,
		   total <= 8, #channels <= 1
	HT Capability overrides:
		 * MCS: ff ff ff ff ff ff ff ff ff ff
		 * maximum A-MSDU length
		 * supported channel width
		 * short GI for 40 MHz
		 * max A-MPDU length exponent
		 * min MPDU start spacing
	Device supports TX status socket option.
	Device supports HT-IBSS.
	Device supports SAE with AUTHENTICATE command
	Device supports low priority scan.
	Device supports scan flush.
	Device supports AP scan.
	Device supports per-vif TX power setting
	Driver supports full state transitions for AP/GO clients
	Driver supports a userspace MPM
	Device supports configuring vdev MAC-addr on create.
	max # scan plans: 1
	max scan plan interval: -1
	max scan plan iterations: 0
	Supported TX frame types:
		 * IBSS: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
		 * managed: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
		 * AP: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
		 * AP/VLAN: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
		 * mesh point: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
		 * P2P-client: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
		 * P2P-GO: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
		 * P2P-device: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
	Supported RX frame types:
		 * IBSS: 0x40 0xb0 0xc0 0xd0
		 * managed: 0x40 0xb0 0xd0
		 * AP: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
		 * AP/VLAN: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
		 * mesh point: 0xb0 0xc0 0xd0
		 * P2P-client: 0x40 0xd0
		 * P2P-GO: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
		 * P2P-device: 0x40 0xd0
	Supported extended features:
		* [ RRM ]: RRM
		* [ FILS_STA ]: STA FILS (Fast Initial Link Setup)
		* [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records
		* [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211
		* [ TXQS ]: FQ-CoDel-enabled intermediate TXQs
		* [ SCAN_RANDOM_SN ]: use random sequence numbers in scans
		* [ SCAN_MIN_PREQ_CONTENT ]: use probe request with only rate IEs in scans
		* [ CONTROL_PORT_NO_PREAUTH ]: disable pre-auth over nl80211 control port support
		* [ DEL_IBSS_STA ]: deletion of IBSS station support
		* [ SCAN_FREQ_KHZ ]: scan on kHz frequency support
		* [ CONTROL_PORT_OVER_NL80211_TX_STATUS ]: tx status for nl80211 control port support
		* [ POWERED_ADDR_CHANGE ]: can change MAC address while up


Regards,

Adolf.

> 
> Either I have an error somewhere checking for the [MAX-AMSDU-7935] capability, or the device claims to support it but actually doesn't.
> 
> -Michael
> 
>> On 8 Oct 2025, at 14:38, Adolf Belka <adolf.belka@ipfire.org> wrote:
>>
>> Hi Michael,
>>
>> As mentioned at the monthly conf call I tested out today the wireless function in CU199 but it won't start for me.
>>
>> Basically the code overwrites the WPA Passphrase in hostapd.conf with a directory. In the WUI the passphrase is still correctly shown. It is correctly stored in the wlanap/settings file. It is just not correct in the hostapd.conf file.
>>
>> The first time I tried the update the WPA Passphrase was replaced with /srv/web/ipfire/cgi-bin/
>>
>> The second time I tried the update it was overwritten by / which is the version shown below.
>>
>> The hostapd.conf with CU197 (with 63 character Passphrase redacted) was
>>
>> -------------------------------------
>> driver=nl80211
>> ######################### basic hostapd configuration ##########################
>> #
>> country_code=NL
>> country3=0x49 # indoor
>> ieee80211d=1
>> ieee80211h=1
>> channel=6
>>
>> # Always advertise TPC
>> local_pwr_constraint=3
>> spectrum_mgmt_required=1
>> hw_mode=g
>> ieee80211n=1
>> wmm_enabled=1
>> ht_capab=
>> # Enable logging
>> logger_syslog=-1
>> logger_syslog_level=4
>> auth_algs=1
>> ctrl_interface=/var/run/hostapd
>> ctrl_interface_group=0
>> disassoc_low_ack=1
>>
>> # SSID
>> ssid2="Jarnsaxa"
>> utf8_ssid=1
>>
>> noscan=1
>> ieee80211w=0
>> ######################### wpa hostapd configuration ############################
>> #
>> wpa=2
>> wpa_passphrase=***************************************************************
>> wpa_key_mgmt=WPA-PSK SAE
>> rsn_pairwise=CCMP
>> -------------------------------------
>>
>> After the update the file contained
>>
>> -------------------------------------
>> # Automatically generated configuration
>> # DO NOT EDIT
>> logger_syslog=-1
>> logger_syslog_level=4
>> driver=nl80211
>> country_code=NL
>> country3=0x49
>> ieee80211d=1
>> ieee80211h=1
>> channel=6
>> local_pwr_constraint=3
>> spectrum_mgmt_required=1
>> enable_background_radar=1
>> wmm_enabled=1
>> hw_mode=g
>> ieee80211n=1
>> ht_capab=[HT40+][HT40-] [GF] [RX-STBC1] [SHORT-GI-40] [TX-STBC] [MAX-AMSDU-7935] [SHORT-GI-20]
>> auth_algs=1
>> ctrl_interface=/var/run/hostapd
>> ctrl_interface_group=0
>> disassoc_low_ack=1
>> ssid2="Jarnsaxa"
>> utf8_ssid=1
>> noscan=1
>> ieee80211w=0
>> wpa=2
>> wpa_passphrase=/
>> wpa_key_mgmt=WPA-PSK WPA-PSK-SHA256 SAE
>> rsn_pairwise=CCMP
>> ssid_protection=1
>> extended_key_id=1
>> oce=7
>> interworking=1
>> access_network_type=0
>> internet=1
>> time_advertisement=2
>> multicast_to_unicast=1
>> -------------------------------------
>>
>> The wireless log not surprisingly had a problem with the passphrase
>>
>> 15:00:00 hostapd:  blue0: interface state ENABLED->DISABLED
>> 15:00:00 hostapd:  blue0: AP-DISABLED
>> 15:00:00 hostapd:  blue0: CTRL-EVENT-TERMINATING
>> 15:00:00 hostapd:  nl80211: deinit ifname=blue0 disabled_11b_rates=0
>> 15:00:02 hostapd:  blue0: interface state UNINITIALIZED->COUNTRY_UPDATE
>> 15:00:02 hostapd:  Driver does not support configured HT capability [MAX-AMSDU-7935]
>> 15:00:02 hostapd:  blue0: interface state COUNTRY_UPDATE->DISABLED
>> 15:00:02 hostapd:  blue0: AP-DISABLED
>> 15:00:02 hostapd:  blue0: Unable to setup interface.
>> 15:00:02 hostapd:  blue0: interface state DISABLED->DISABLED
>> 15:00:02 hostapd:  blue0: AP-DISABLED
>> 15:00:02 hostapd:  blue0: CTRL-EVENT-TERMINATING
>> 15:00:02 hostapd:  hostapd_free_hapd_data: Interface blue0 wasn't started
>> 15:00:02 hostapd:  nl80211: deinit ifname=blue0 disabled_11b_rates=0
>> 15:04:57 hostapd:  Line 27: invalid WPA passphrase length 1 (expected 8..63)
>> 15:04:57 hostapd:  WPA-PSK enabled, but PSK or passphrase is not configured.
>> 15:04:57 hostapd:  2 errors found in configuration file '/etc/hostapd.conf'
>> 15:04:57 hostapd:  Failed to set up interface with /etc/hostapd.conf
>> 15:04:58 hostapd:  Failed to initialize interface
>>
>> The log also mentions that the driver for the wireless chip in the Prime unit doesn't support a configured HT capability.
>> I am presuming that that issue is the second error hostapd found in the configuration file.
>>
>> I have also just noticed that the hostapd.conf file that was used in CU197 is still physically present in /var/ipfire/wlanap/ while the new version is in /etc. Probably should delete the version from the old location if it is being replaced by the new version.
>>
>> Regards,
>>
>> Adolf.
>>
> 



^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: hostapd not working in CU199
  2025-10-08 13:45   ` Adolf Belka
@ 2025-10-08 14:38     ` Michael Tremer
  2025-10-08 19:57       ` Adolf Belka
  0 siblings, 1 reply; 5+ messages in thread
From: Michael Tremer @ 2025-10-08 14:38 UTC (permalink / raw)
  To: Adolf Belka; +Cc: IPFire: Development-List

Thank you. That confirms it.

This change will fix it. Most of the bits have been wrong. I have no idea what happened there…

  https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=0c6f6f182d0b2ac78d869582e7e2e2f8babecab5

On my system this also changes some settings.

Best,
-Michael

> On 8 Oct 2025, at 14:45, Adolf Belka <adolf.belka@ipfire.org> wrote:
> 
> Hi Michael,
> 
> On 08/10/2025 15:40, Michael Tremer wrote:
>> Hello Adolf,
>> Thank you for testing this.
>> Could you send me the output of “iw list” as well please?
> 
> Here is the output
> 
> # iw list
> Wiphy phy0
> wiphy index: 0
> max # scan SSIDs: 4
> max scan IEs length: 2257 bytes
> max # sched scan SSIDs: 0
> max # match sets: 0
> Retry short long limit: 2
> Coverage class: 0 (up to 0m)
> Device supports RSN-IBSS.
> Supported Ciphers:
> * WEP40 (00-0f-ac:1)
> * WEP104 (00-0f-ac:5)
> * TKIP (00-0f-ac:2)
> * CCMP-128 (00-0f-ac:4)
> * CCMP-256 (00-0f-ac:10)
> * GCMP-128 (00-0f-ac:8)
> * GCMP-256 (00-0f-ac:9)
> * CMAC (00-0f-ac:6)
> * CMAC-256 (00-0f-ac:13)
> * GMAC-128 (00-0f-ac:11)
> * GMAC-256 (00-0f-ac:12)
> Available Antennas: TX 0 RX 0
> Supported interface modes:
> * IBSS
> * managed
> * AP
> * AP/VLAN
> * monitor
> * mesh point
> Band 1:
> Capabilities: 0x2fe
> HT20/HT40
> SM Power Save disabled
> RX Greenfield
> RX HT20 SGI
> RX HT40 SGI
> TX STBC
> RX STBC 2-streams
> Max AMSDU length: 3839 bytes
> No DSSS/CCK HT40
> Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
> Minimum RX AMPDU time spacing: 2 usec (0x04)
> HT TX/RX MCS rate indexes supported: 0-15, 32
> Bitrates (non-HT):
> * 1.0 Mbps
> * 2.0 Mbps (short preamble supported)
> * 5.5 Mbps (short preamble supported)
> * 11.0 Mbps (short preamble supported)
> * 6.0 Mbps
> * 9.0 Mbps
> * 12.0 Mbps
> * 18.0 Mbps
> * 24.0 Mbps
> * 36.0 Mbps
> * 48.0 Mbps
> * 54.0 Mbps
> Frequencies:
> * 2412.0 MHz [1] (20.0 dBm)
> * 2417.0 MHz [2] (20.0 dBm)
> * 2422.0 MHz [3] (20.0 dBm)
> * 2427.0 MHz [4] (20.0 dBm)
> * 2432.0 MHz [5] (20.0 dBm)
> * 2437.0 MHz [6] (20.0 dBm)
> * 2442.0 MHz [7] (20.0 dBm)
> * 2447.0 MHz [8] (20.0 dBm)
> * 2452.0 MHz [9] (20.0 dBm)
> * 2457.0 MHz [10] (20.0 dBm)
> * 2462.0 MHz [11] (20.0 dBm)
> * 2467.0 MHz [12] (20.0 dBm) (no IR)
> * 2472.0 MHz [13] (20.0 dBm) (no IR)
> * 2484.0 MHz [14] (20.0 dBm) (no IR)
> Band 2:
> Capabilities: 0x2fe
> HT20/HT40
> SM Power Save disabled
> RX Greenfield
> RX HT20 SGI
> RX HT40 SGI
> TX STBC
> RX STBC 2-streams
> Max AMSDU length: 3839 bytes
> No DSSS/CCK HT40
> Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
> Minimum RX AMPDU time spacing: 2 usec (0x04)
> HT TX/RX MCS rate indexes supported: 0-15, 32
> Bitrates (non-HT):
> * 6.0 Mbps
> * 9.0 Mbps
> * 12.0 Mbps
> * 18.0 Mbps
> * 24.0 Mbps
> * 36.0 Mbps
> * 48.0 Mbps
> * 54.0 Mbps
> Frequencies:
> * 5180.0 MHz [36] (20.0 dBm) (no IR)
> * 5190.0 MHz [38] (20.0 dBm) (no IR)
> * 5200.0 MHz [40] (20.0 dBm) (no IR)
> * 5210.0 MHz [42] (20.0 dBm) (no IR)
> * 5220.0 MHz [44] (20.0 dBm) (no IR)
> * 5230.0 MHz [46] (20.0 dBm) (no IR)
> * 5240.0 MHz [48] (20.0 dBm) (no IR)
> * 5250.0 MHz [50] (20.0 dBm) (no IR, radar detection)
> * 5260.0 MHz [52] (20.0 dBm) (no IR, radar detection)
> * 5270.0 MHz [54] (20.0 dBm) (no IR, radar detection)
> * 5280.0 MHz [56] (20.0 dBm) (no IR, radar detection)
> * 5290.0 MHz [58] (20.0 dBm) (no IR, radar detection)
> * 5300.0 MHz [60] (20.0 dBm) (no IR, radar detection)
> * 5310.0 MHz [62] (20.0 dBm) (no IR, radar detection)
> * 5320.0 MHz [64] (20.0 dBm) (no IR, radar detection)
> * 5500.0 MHz [100] (20.0 dBm) (no IR, radar detection)
> * 5510.0 MHz [102] (20.0 dBm) (no IR, radar detection)
> * 5520.0 MHz [104] (20.0 dBm) (no IR, radar detection)
> * 5530.0 MHz [106] (20.0 dBm) (no IR, radar detection)
> * 5540.0 MHz [108] (20.0 dBm) (no IR, radar detection)
> * 5550.0 MHz [110] (20.0 dBm) (no IR, radar detection)
> * 5560.0 MHz [112] (20.0 dBm) (no IR, radar detection)
> * 5570.0 MHz [114] (20.0 dBm) (no IR, radar detection)
> * 5580.0 MHz [116] (20.0 dBm) (no IR, radar detection)
> * 5590.0 MHz [118] (20.0 dBm) (no IR, radar detection)
> * 5600.0 MHz [120] (20.0 dBm) (no IR, radar detection)
> * 5610.0 MHz [122] (20.0 dBm) (no IR, radar detection)
> * 5620.0 MHz [124] (20.0 dBm) (no IR, radar detection)
> * 5630.0 MHz [126] (20.0 dBm) (no IR, radar detection)
> * 5640.0 MHz [128] (20.0 dBm) (no IR, radar detection)
> * 5650.0 MHz [130] (20.0 dBm) (no IR, radar detection)
> * 5660.0 MHz [132] (20.0 dBm) (no IR, radar detection)
> * 5670.0 MHz [134] (20.0 dBm) (no IR, radar detection)
> * 5680.0 MHz [136] (20.0 dBm) (no IR, radar detection)
> * 5690.0 MHz [138] (20.0 dBm) (no IR, radar detection)
> * 5700.0 MHz [140] (20.0 dBm) (no IR, radar detection)
> * 5745.0 MHz [149] (20.0 dBm) (no IR)
> * 5755.0 MHz [151] (20.0 dBm) (no IR)
> * 5765.0 MHz [153] (20.0 dBm) (no IR)
> * 5775.0 MHz [155] (20.0 dBm) (no IR)
> * 5785.0 MHz [157] (20.0 dBm) (no IR)
> * 5795.0 MHz [159] (20.0 dBm) (no IR)
> * 5805.0 MHz [161] (20.0 dBm) (no IR)
> * 5825.0 MHz [165] (20.0 dBm) (no IR)
> * 4920.0 MHz [184] (disabled)
> * 4940.0 MHz [188] (disabled)
> * 4960.0 MHz [192] (disabled)
> * 4980.0 MHz [196] (disabled)
> Supported commands:
> * new_interface
> * set_interface
> * new_key
> * start_ap
> * new_station
> * new_mpath
> * set_mesh_config
> * set_bss
> * authenticate
> * associate
> * deauthenticate
> * disassociate
> * join_ibss
> * join_mesh
> * remain_on_channel
> * set_tx_bitrate_mask
> * frame
> * frame_wait_cancel
> * set_wiphy_netns
> * set_channel
> * probe_client
> * set_noack_map
> * register_beacons
> * start_p2p_device
> * set_mcast_rate
> * testmode
> * connect
> * disconnect
> * set_qos_map
> * set_multicast_to_unicast
> software interface modes (can always be added):
> * AP/VLAN
> * monitor
> valid interface combinations:
> * #{ AP, mesh point } <= 8,
>   total <= 8, #channels <= 1
> HT Capability overrides:
> * MCS: ff ff ff ff ff ff ff ff ff ff
> * maximum A-MSDU length
> * supported channel width
> * short GI for 40 MHz
> * max A-MPDU length exponent
> * min MPDU start spacing
> Device supports TX status socket option.
> Device supports HT-IBSS.
> Device supports SAE with AUTHENTICATE command
> Device supports low priority scan.
> Device supports scan flush.
> Device supports AP scan.
> Device supports per-vif TX power setting
> Driver supports full state transitions for AP/GO clients
> Driver supports a userspace MPM
> Device supports configuring vdev MAC-addr on create.
> max # scan plans: 1
> max scan plan interval: -1
> max scan plan iterations: 0
> Supported TX frame types:
> * IBSS: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
> * managed: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
> * AP: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
> * AP/VLAN: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
> * mesh point: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
> * P2P-client: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
> * P2P-GO: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
> * P2P-device: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
> Supported RX frame types:
> * IBSS: 0x40 0xb0 0xc0 0xd0
> * managed: 0x40 0xb0 0xd0
> * AP: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
> * AP/VLAN: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
> * mesh point: 0xb0 0xc0 0xd0
> * P2P-client: 0x40 0xd0
> * P2P-GO: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
> * P2P-device: 0x40 0xd0
> Supported extended features:
> * [ RRM ]: RRM
> * [ FILS_STA ]: STA FILS (Fast Initial Link Setup)
> * [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records
> * [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211
> * [ TXQS ]: FQ-CoDel-enabled intermediate TXQs
> * [ SCAN_RANDOM_SN ]: use random sequence numbers in scans
> * [ SCAN_MIN_PREQ_CONTENT ]: use probe request with only rate IEs in scans
> * [ CONTROL_PORT_NO_PREAUTH ]: disable pre-auth over nl80211 control port support
> * [ DEL_IBSS_STA ]: deletion of IBSS station support
> * [ SCAN_FREQ_KHZ ]: scan on kHz frequency support
> * [ CONTROL_PORT_OVER_NL80211_TX_STATUS ]: tx status for nl80211 control port support
> * [ POWERED_ADDR_CHANGE ]: can change MAC address while up
> 
> 
> Regards,
> 
> Adolf.
> 
>> Either I have an error somewhere checking for the [MAX-AMSDU-7935] capability, or the device claims to support it but actually doesn't.
>> -Michael
>>> On 8 Oct 2025, at 14:38, Adolf Belka <adolf.belka@ipfire.org> wrote:
>>> 
>>> Hi Michael,
>>> 
>>> As mentioned at the monthly conf call I tested out today the wireless function in CU199 but it won't start for me.
>>> 
>>> Basically the code overwrites the WPA Passphrase in hostapd.conf with a directory. In the WUI the passphrase is still correctly shown. It is correctly stored in the wlanap/settings file. It is just not correct in the hostapd.conf file.
>>> 
>>> The first time I tried the update the WPA Passphrase was replaced with /srv/web/ipfire/cgi-bin/
>>> 
>>> The second time I tried the update it was overwritten by / which is the version shown below.
>>> 
>>> The hostapd.conf with CU197 (with 63 character Passphrase redacted) was
>>> 
>>> -------------------------------------
>>> driver=nl80211
>>> ######################### basic hostapd configuration ##########################
>>> #
>>> country_code=NL
>>> country3=0x49 # indoor
>>> ieee80211d=1
>>> ieee80211h=1
>>> channel=6
>>> 
>>> # Always advertise TPC
>>> local_pwr_constraint=3
>>> spectrum_mgmt_required=1
>>> hw_mode=g
>>> ieee80211n=1
>>> wmm_enabled=1
>>> ht_capab=
>>> # Enable logging
>>> logger_syslog=-1
>>> logger_syslog_level=4
>>> auth_algs=1
>>> ctrl_interface=/var/run/hostapd
>>> ctrl_interface_group=0
>>> disassoc_low_ack=1
>>> 
>>> # SSID
>>> ssid2="Jarnsaxa"
>>> utf8_ssid=1
>>> 
>>> noscan=1
>>> ieee80211w=0
>>> ######################### wpa hostapd configuration ############################
>>> #
>>> wpa=2
>>> wpa_passphrase=***************************************************************
>>> wpa_key_mgmt=WPA-PSK SAE
>>> rsn_pairwise=CCMP
>>> -------------------------------------
>>> 
>>> After the update the file contained
>>> 
>>> -------------------------------------
>>> # Automatically generated configuration
>>> # DO NOT EDIT
>>> logger_syslog=-1
>>> logger_syslog_level=4
>>> driver=nl80211
>>> country_code=NL
>>> country3=0x49
>>> ieee80211d=1
>>> ieee80211h=1
>>> channel=6
>>> local_pwr_constraint=3
>>> spectrum_mgmt_required=1
>>> enable_background_radar=1
>>> wmm_enabled=1
>>> hw_mode=g
>>> ieee80211n=1
>>> ht_capab=[HT40+][HT40-] [GF] [RX-STBC1] [SHORT-GI-40] [TX-STBC] [MAX-AMSDU-7935] [SHORT-GI-20]
>>> auth_algs=1
>>> ctrl_interface=/var/run/hostapd
>>> ctrl_interface_group=0
>>> disassoc_low_ack=1
>>> ssid2="Jarnsaxa"
>>> utf8_ssid=1
>>> noscan=1
>>> ieee80211w=0
>>> wpa=2
>>> wpa_passphrase=/
>>> wpa_key_mgmt=WPA-PSK WPA-PSK-SHA256 SAE
>>> rsn_pairwise=CCMP
>>> ssid_protection=1
>>> extended_key_id=1
>>> oce=7
>>> interworking=1
>>> access_network_type=0
>>> internet=1
>>> time_advertisement=2
>>> multicast_to_unicast=1
>>> -------------------------------------
>>> 
>>> The wireless log not surprisingly had a problem with the passphrase
>>> 
>>> 15:00:00 hostapd:  blue0: interface state ENABLED->DISABLED
>>> 15:00:00 hostapd:  blue0: AP-DISABLED
>>> 15:00:00 hostapd:  blue0: CTRL-EVENT-TERMINATING
>>> 15:00:00 hostapd:  nl80211: deinit ifname=blue0 disabled_11b_rates=0
>>> 15:00:02 hostapd:  blue0: interface state UNINITIALIZED->COUNTRY_UPDATE
>>> 15:00:02 hostapd:  Driver does not support configured HT capability [MAX-AMSDU-7935]
>>> 15:00:02 hostapd:  blue0: interface state COUNTRY_UPDATE->DISABLED
>>> 15:00:02 hostapd:  blue0: AP-DISABLED
>>> 15:00:02 hostapd:  blue0: Unable to setup interface.
>>> 15:00:02 hostapd:  blue0: interface state DISABLED->DISABLED
>>> 15:00:02 hostapd:  blue0: AP-DISABLED
>>> 15:00:02 hostapd:  blue0: CTRL-EVENT-TERMINATING
>>> 15:00:02 hostapd:  hostapd_free_hapd_data: Interface blue0 wasn't started
>>> 15:00:02 hostapd:  nl80211: deinit ifname=blue0 disabled_11b_rates=0
>>> 15:04:57 hostapd:  Line 27: invalid WPA passphrase length 1 (expected 8..63)
>>> 15:04:57 hostapd:  WPA-PSK enabled, but PSK or passphrase is not configured.
>>> 15:04:57 hostapd:  2 errors found in configuration file '/etc/hostapd.conf'
>>> 15:04:57 hostapd:  Failed to set up interface with /etc/hostapd.conf
>>> 15:04:58 hostapd:  Failed to initialize interface
>>> 
>>> The log also mentions that the driver for the wireless chip in the Prime unit doesn't support a configured HT capability.
>>> I am presuming that that issue is the second error hostapd found in the configuration file.
>>> 
>>> I have also just noticed that the hostapd.conf file that was used in CU197 is still physically present in /var/ipfire/wlanap/ while the new version is in /etc. Probably should delete the version from the old location if it is being replaced by the new version.
>>> 
>>> Regards,
>>> 
>>> Adolf.
>>> 
> 
> 



^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: hostapd not working in CU199
  2025-10-08 14:38     ` Michael Tremer
@ 2025-10-08 19:57       ` Adolf Belka
  0 siblings, 0 replies; 5+ messages in thread
From: Adolf Belka @ 2025-10-08 19:57 UTC (permalink / raw)
  To: Michael Tremer; +Cc: IPFire: Development-List

Hi Michael,

On 08/10/2025 16:38, Michael Tremer wrote:
> Thank you. That confirms it.
> 
> This change will fix it. Most of the bits have been wrong. I have no idea what happened there…
> 
>    https://git.ipfire.org/?p=ipfire-2.x.git;a=commitdiff;h=0c6f6f182d0b2ac78d869582e7e2e2f8babecab5

I just tested the change out with a new CU197 installation and restoring my previous CU197 backup. I then changed the password to only include the special characters you mentioned.

Tested wireless connection out with that CU197 system and successfully made a connection.

Then updated to CU199 and tested again and everything worked fine from immediately after updating and rebooting.

Regards,

Adolf.

> 
> On my system this also changes some settings.
> 
> Best,
> -Michael
> 
>> On 8 Oct 2025, at 14:45, Adolf Belka <adolf.belka@ipfire.org> wrote:
>>
>> Hi Michael,
>>
>> On 08/10/2025 15:40, Michael Tremer wrote:
>>> Hello Adolf,
>>> Thank you for testing this.
>>> Could you send me the output of “iw list” as well please?
>>
>> Here is the output
>>
>> # iw list
>> Wiphy phy0
>> wiphy index: 0
>> max # scan SSIDs: 4
>> max scan IEs length: 2257 bytes
>> max # sched scan SSIDs: 0
>> max # match sets: 0
>> Retry short long limit: 2
>> Coverage class: 0 (up to 0m)
>> Device supports RSN-IBSS.
>> Supported Ciphers:
>> * WEP40 (00-0f-ac:1)
>> * WEP104 (00-0f-ac:5)
>> * TKIP (00-0f-ac:2)
>> * CCMP-128 (00-0f-ac:4)
>> * CCMP-256 (00-0f-ac:10)
>> * GCMP-128 (00-0f-ac:8)
>> * GCMP-256 (00-0f-ac:9)
>> * CMAC (00-0f-ac:6)
>> * CMAC-256 (00-0f-ac:13)
>> * GMAC-128 (00-0f-ac:11)
>> * GMAC-256 (00-0f-ac:12)
>> Available Antennas: TX 0 RX 0
>> Supported interface modes:
>> * IBSS
>> * managed
>> * AP
>> * AP/VLAN
>> * monitor
>> * mesh point
>> Band 1:
>> Capabilities: 0x2fe
>> HT20/HT40
>> SM Power Save disabled
>> RX Greenfield
>> RX HT20 SGI
>> RX HT40 SGI
>> TX STBC
>> RX STBC 2-streams
>> Max AMSDU length: 3839 bytes
>> No DSSS/CCK HT40
>> Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
>> Minimum RX AMPDU time spacing: 2 usec (0x04)
>> HT TX/RX MCS rate indexes supported: 0-15, 32
>> Bitrates (non-HT):
>> * 1.0 Mbps
>> * 2.0 Mbps (short preamble supported)
>> * 5.5 Mbps (short preamble supported)
>> * 11.0 Mbps (short preamble supported)
>> * 6.0 Mbps
>> * 9.0 Mbps
>> * 12.0 Mbps
>> * 18.0 Mbps
>> * 24.0 Mbps
>> * 36.0 Mbps
>> * 48.0 Mbps
>> * 54.0 Mbps
>> Frequencies:
>> * 2412.0 MHz [1] (20.0 dBm)
>> * 2417.0 MHz [2] (20.0 dBm)
>> * 2422.0 MHz [3] (20.0 dBm)
>> * 2427.0 MHz [4] (20.0 dBm)
>> * 2432.0 MHz [5] (20.0 dBm)
>> * 2437.0 MHz [6] (20.0 dBm)
>> * 2442.0 MHz [7] (20.0 dBm)
>> * 2447.0 MHz [8] (20.0 dBm)
>> * 2452.0 MHz [9] (20.0 dBm)
>> * 2457.0 MHz [10] (20.0 dBm)
>> * 2462.0 MHz [11] (20.0 dBm)
>> * 2467.0 MHz [12] (20.0 dBm) (no IR)
>> * 2472.0 MHz [13] (20.0 dBm) (no IR)
>> * 2484.0 MHz [14] (20.0 dBm) (no IR)
>> Band 2:
>> Capabilities: 0x2fe
>> HT20/HT40
>> SM Power Save disabled
>> RX Greenfield
>> RX HT20 SGI
>> RX HT40 SGI
>> TX STBC
>> RX STBC 2-streams
>> Max AMSDU length: 3839 bytes
>> No DSSS/CCK HT40
>> Maximum RX AMPDU length 65535 bytes (exponent: 0x003)
>> Minimum RX AMPDU time spacing: 2 usec (0x04)
>> HT TX/RX MCS rate indexes supported: 0-15, 32
>> Bitrates (non-HT):
>> * 6.0 Mbps
>> * 9.0 Mbps
>> * 12.0 Mbps
>> * 18.0 Mbps
>> * 24.0 Mbps
>> * 36.0 Mbps
>> * 48.0 Mbps
>> * 54.0 Mbps
>> Frequencies:
>> * 5180.0 MHz [36] (20.0 dBm) (no IR)
>> * 5190.0 MHz [38] (20.0 dBm) (no IR)
>> * 5200.0 MHz [40] (20.0 dBm) (no IR)
>> * 5210.0 MHz [42] (20.0 dBm) (no IR)
>> * 5220.0 MHz [44] (20.0 dBm) (no IR)
>> * 5230.0 MHz [46] (20.0 dBm) (no IR)
>> * 5240.0 MHz [48] (20.0 dBm) (no IR)
>> * 5250.0 MHz [50] (20.0 dBm) (no IR, radar detection)
>> * 5260.0 MHz [52] (20.0 dBm) (no IR, radar detection)
>> * 5270.0 MHz [54] (20.0 dBm) (no IR, radar detection)
>> * 5280.0 MHz [56] (20.0 dBm) (no IR, radar detection)
>> * 5290.0 MHz [58] (20.0 dBm) (no IR, radar detection)
>> * 5300.0 MHz [60] (20.0 dBm) (no IR, radar detection)
>> * 5310.0 MHz [62] (20.0 dBm) (no IR, radar detection)
>> * 5320.0 MHz [64] (20.0 dBm) (no IR, radar detection)
>> * 5500.0 MHz [100] (20.0 dBm) (no IR, radar detection)
>> * 5510.0 MHz [102] (20.0 dBm) (no IR, radar detection)
>> * 5520.0 MHz [104] (20.0 dBm) (no IR, radar detection)
>> * 5530.0 MHz [106] (20.0 dBm) (no IR, radar detection)
>> * 5540.0 MHz [108] (20.0 dBm) (no IR, radar detection)
>> * 5550.0 MHz [110] (20.0 dBm) (no IR, radar detection)
>> * 5560.0 MHz [112] (20.0 dBm) (no IR, radar detection)
>> * 5570.0 MHz [114] (20.0 dBm) (no IR, radar detection)
>> * 5580.0 MHz [116] (20.0 dBm) (no IR, radar detection)
>> * 5590.0 MHz [118] (20.0 dBm) (no IR, radar detection)
>> * 5600.0 MHz [120] (20.0 dBm) (no IR, radar detection)
>> * 5610.0 MHz [122] (20.0 dBm) (no IR, radar detection)
>> * 5620.0 MHz [124] (20.0 dBm) (no IR, radar detection)
>> * 5630.0 MHz [126] (20.0 dBm) (no IR, radar detection)
>> * 5640.0 MHz [128] (20.0 dBm) (no IR, radar detection)
>> * 5650.0 MHz [130] (20.0 dBm) (no IR, radar detection)
>> * 5660.0 MHz [132] (20.0 dBm) (no IR, radar detection)
>> * 5670.0 MHz [134] (20.0 dBm) (no IR, radar detection)
>> * 5680.0 MHz [136] (20.0 dBm) (no IR, radar detection)
>> * 5690.0 MHz [138] (20.0 dBm) (no IR, radar detection)
>> * 5700.0 MHz [140] (20.0 dBm) (no IR, radar detection)
>> * 5745.0 MHz [149] (20.0 dBm) (no IR)
>> * 5755.0 MHz [151] (20.0 dBm) (no IR)
>> * 5765.0 MHz [153] (20.0 dBm) (no IR)
>> * 5775.0 MHz [155] (20.0 dBm) (no IR)
>> * 5785.0 MHz [157] (20.0 dBm) (no IR)
>> * 5795.0 MHz [159] (20.0 dBm) (no IR)
>> * 5805.0 MHz [161] (20.0 dBm) (no IR)
>> * 5825.0 MHz [165] (20.0 dBm) (no IR)
>> * 4920.0 MHz [184] (disabled)
>> * 4940.0 MHz [188] (disabled)
>> * 4960.0 MHz [192] (disabled)
>> * 4980.0 MHz [196] (disabled)
>> Supported commands:
>> * new_interface
>> * set_interface
>> * new_key
>> * start_ap
>> * new_station
>> * new_mpath
>> * set_mesh_config
>> * set_bss
>> * authenticate
>> * associate
>> * deauthenticate
>> * disassociate
>> * join_ibss
>> * join_mesh
>> * remain_on_channel
>> * set_tx_bitrate_mask
>> * frame
>> * frame_wait_cancel
>> * set_wiphy_netns
>> * set_channel
>> * probe_client
>> * set_noack_map
>> * register_beacons
>> * start_p2p_device
>> * set_mcast_rate
>> * testmode
>> * connect
>> * disconnect
>> * set_qos_map
>> * set_multicast_to_unicast
>> software interface modes (can always be added):
>> * AP/VLAN
>> * monitor
>> valid interface combinations:
>> * #{ AP, mesh point } <= 8,
>>    total <= 8, #channels <= 1
>> HT Capability overrides:
>> * MCS: ff ff ff ff ff ff ff ff ff ff
>> * maximum A-MSDU length
>> * supported channel width
>> * short GI for 40 MHz
>> * max A-MPDU length exponent
>> * min MPDU start spacing
>> Device supports TX status socket option.
>> Device supports HT-IBSS.
>> Device supports SAE with AUTHENTICATE command
>> Device supports low priority scan.
>> Device supports scan flush.
>> Device supports AP scan.
>> Device supports per-vif TX power setting
>> Driver supports full state transitions for AP/GO clients
>> Driver supports a userspace MPM
>> Device supports configuring vdev MAC-addr on create.
>> max # scan plans: 1
>> max scan plan interval: -1
>> max scan plan iterations: 0
>> Supported TX frame types:
>> * IBSS: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
>> * managed: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
>> * AP: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
>> * AP/VLAN: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
>> * mesh point: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
>> * P2P-client: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
>> * P2P-GO: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
>> * P2P-device: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 0xd0 0xe0 0xf0
>> Supported RX frame types:
>> * IBSS: 0x40 0xb0 0xc0 0xd0
>> * managed: 0x40 0xb0 0xd0
>> * AP: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
>> * AP/VLAN: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
>> * mesh point: 0xb0 0xc0 0xd0
>> * P2P-client: 0x40 0xd0
>> * P2P-GO: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0
>> * P2P-device: 0x40 0xd0
>> Supported extended features:
>> * [ RRM ]: RRM
>> * [ FILS_STA ]: STA FILS (Fast Initial Link Setup)
>> * [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records
>> * [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211
>> * [ TXQS ]: FQ-CoDel-enabled intermediate TXQs
>> * [ SCAN_RANDOM_SN ]: use random sequence numbers in scans
>> * [ SCAN_MIN_PREQ_CONTENT ]: use probe request with only rate IEs in scans
>> * [ CONTROL_PORT_NO_PREAUTH ]: disable pre-auth over nl80211 control port support
>> * [ DEL_IBSS_STA ]: deletion of IBSS station support
>> * [ SCAN_FREQ_KHZ ]: scan on kHz frequency support
>> * [ CONTROL_PORT_OVER_NL80211_TX_STATUS ]: tx status for nl80211 control port support
>> * [ POWERED_ADDR_CHANGE ]: can change MAC address while up
>>
>>
>> Regards,
>>
>> Adolf.
>>
>>> Either I have an error somewhere checking for the [MAX-AMSDU-7935] capability, or the device claims to support it but actually doesn't.
>>> -Michael
>>>> On 8 Oct 2025, at 14:38, Adolf Belka <adolf.belka@ipfire.org> wrote:
>>>>
>>>> Hi Michael,
>>>>
>>>> As mentioned at the monthly conf call I tested out today the wireless function in CU199 but it won't start for me.
>>>>
>>>> Basically the code overwrites the WPA Passphrase in hostapd.conf with a directory. In the WUI the passphrase is still correctly shown. It is correctly stored in the wlanap/settings file. It is just not correct in the hostapd.conf file.
>>>>
>>>> The first time I tried the update the WPA Passphrase was replaced with /srv/web/ipfire/cgi-bin/
>>>>
>>>> The second time I tried the update it was overwritten by / which is the version shown below.
>>>>
>>>> The hostapd.conf with CU197 (with 63 character Passphrase redacted) was
>>>>
>>>> -------------------------------------
>>>> driver=nl80211
>>>> ######################### basic hostapd configuration ##########################
>>>> #
>>>> country_code=NL
>>>> country3=0x49 # indoor
>>>> ieee80211d=1
>>>> ieee80211h=1
>>>> channel=6
>>>>
>>>> # Always advertise TPC
>>>> local_pwr_constraint=3
>>>> spectrum_mgmt_required=1
>>>> hw_mode=g
>>>> ieee80211n=1
>>>> wmm_enabled=1
>>>> ht_capab=
>>>> # Enable logging
>>>> logger_syslog=-1
>>>> logger_syslog_level=4
>>>> auth_algs=1
>>>> ctrl_interface=/var/run/hostapd
>>>> ctrl_interface_group=0
>>>> disassoc_low_ack=1
>>>>
>>>> # SSID
>>>> ssid2="Jarnsaxa"
>>>> utf8_ssid=1
>>>>
>>>> noscan=1
>>>> ieee80211w=0
>>>> ######################### wpa hostapd configuration ############################
>>>> #
>>>> wpa=2
>>>> wpa_passphrase=***************************************************************
>>>> wpa_key_mgmt=WPA-PSK SAE
>>>> rsn_pairwise=CCMP
>>>> -------------------------------------
>>>>
>>>> After the update the file contained
>>>>
>>>> -------------------------------------
>>>> # Automatically generated configuration
>>>> # DO NOT EDIT
>>>> logger_syslog=-1
>>>> logger_syslog_level=4
>>>> driver=nl80211
>>>> country_code=NL
>>>> country3=0x49
>>>> ieee80211d=1
>>>> ieee80211h=1
>>>> channel=6
>>>> local_pwr_constraint=3
>>>> spectrum_mgmt_required=1
>>>> enable_background_radar=1
>>>> wmm_enabled=1
>>>> hw_mode=g
>>>> ieee80211n=1
>>>> ht_capab=[HT40+][HT40-] [GF] [RX-STBC1] [SHORT-GI-40] [TX-STBC] [MAX-AMSDU-7935] [SHORT-GI-20]
>>>> auth_algs=1
>>>> ctrl_interface=/var/run/hostapd
>>>> ctrl_interface_group=0
>>>> disassoc_low_ack=1
>>>> ssid2="Jarnsaxa"
>>>> utf8_ssid=1
>>>> noscan=1
>>>> ieee80211w=0
>>>> wpa=2
>>>> wpa_passphrase=/
>>>> wpa_key_mgmt=WPA-PSK WPA-PSK-SHA256 SAE
>>>> rsn_pairwise=CCMP
>>>> ssid_protection=1
>>>> extended_key_id=1
>>>> oce=7
>>>> interworking=1
>>>> access_network_type=0
>>>> internet=1
>>>> time_advertisement=2
>>>> multicast_to_unicast=1
>>>> -------------------------------------
>>>>
>>>> The wireless log not surprisingly had a problem with the passphrase
>>>>
>>>> 15:00:00 hostapd:  blue0: interface state ENABLED->DISABLED
>>>> 15:00:00 hostapd:  blue0: AP-DISABLED
>>>> 15:00:00 hostapd:  blue0: CTRL-EVENT-TERMINATING
>>>> 15:00:00 hostapd:  nl80211: deinit ifname=blue0 disabled_11b_rates=0
>>>> 15:00:02 hostapd:  blue0: interface state UNINITIALIZED->COUNTRY_UPDATE
>>>> 15:00:02 hostapd:  Driver does not support configured HT capability [MAX-AMSDU-7935]
>>>> 15:00:02 hostapd:  blue0: interface state COUNTRY_UPDATE->DISABLED
>>>> 15:00:02 hostapd:  blue0: AP-DISABLED
>>>> 15:00:02 hostapd:  blue0: Unable to setup interface.
>>>> 15:00:02 hostapd:  blue0: interface state DISABLED->DISABLED
>>>> 15:00:02 hostapd:  blue0: AP-DISABLED
>>>> 15:00:02 hostapd:  blue0: CTRL-EVENT-TERMINATING
>>>> 15:00:02 hostapd:  hostapd_free_hapd_data: Interface blue0 wasn't started
>>>> 15:00:02 hostapd:  nl80211: deinit ifname=blue0 disabled_11b_rates=0
>>>> 15:04:57 hostapd:  Line 27: invalid WPA passphrase length 1 (expected 8..63)
>>>> 15:04:57 hostapd:  WPA-PSK enabled, but PSK or passphrase is not configured.
>>>> 15:04:57 hostapd:  2 errors found in configuration file '/etc/hostapd.conf'
>>>> 15:04:57 hostapd:  Failed to set up interface with /etc/hostapd.conf
>>>> 15:04:58 hostapd:  Failed to initialize interface
>>>>
>>>> The log also mentions that the driver for the wireless chip in the Prime unit doesn't support a configured HT capability.
>>>> I am presuming that that issue is the second error hostapd found in the configuration file.
>>>>
>>>> I have also just noticed that the hostapd.conf file that was used in CU197 is still physically present in /var/ipfire/wlanap/ while the new version is in /etc. Probably should delete the version from the old location if it is being replaced by the new version.
>>>>
>>>> Regards,
>>>>
>>>> Adolf.
>>>>
>>
>>
> 
> 



^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2025-10-08 19:57 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-10-08 13:38 hostapd not working in CU199 Adolf Belka
2025-10-08 13:40 ` Michael Tremer
2025-10-08 13:45   ` Adolf Belka
2025-10-08 14:38     ` Michael Tremer
2025-10-08 19:57       ` Adolf Belka

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox