From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4chbGJ4tBXz32lV for ; Wed, 08 Oct 2025 14:38:16 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519) (Client CN "mail01.haj.ipfire.org", Issuer "R13" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4chbGF2KzDz2xLw for ; Wed, 08 Oct 2025 14:38:13 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4chbGB4Ql2z1fv; Wed, 08 Oct 2025 14:38:09 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1759934292; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=8nODPkVbqFYxvg3Q3gK6/hccCMHQ38dwr2F2O4qBujY=; b=ReeKx+Gg0qiZszq440ewLjbp4Qoxptz+nJYU6BrlRCV1JaYHyST0W4NekoSt/pndhKH8xN BQhyZbsUguRIAsJ3QYDxotU69v5ddC3yvHI0fzhAe7ARTnbO9VS2E+xDH3gkSnR5tPjp0g lnRxgIyTynY6adwY4ELKjzcpUSX2E3K7ZvcuH/oFsLHAbbEfPiHB2Uohqaz5x+KidMjOdp 1BgX7yjQQEtzR7MtDm16hxOQPNbD8jSiJz2dt+WvUzwISduSbXpuAvadlDIA6/DkvXnmGe 7w7CSOP29m02VBC70PqboTNo7HrrYnUfCwXLeDw6mTtXedYRGjxsADm3VWnc2A== DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1759934292; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=8nODPkVbqFYxvg3Q3gK6/hccCMHQ38dwr2F2O4qBujY=; b=TbU8RXAtDs6dor3Y+v0Epcozow2pL6IUVK0aKl5Wwf7N/Uh8PtPaXfs0vKUghYZAtByu76 KZk5HmRDVm/LDgAw== Content-Type: text/plain; charset=utf-8 Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: Mime-Version: 1.0 Subject: Re: hostapd not working in CU199 From: Michael Tremer In-Reply-To: <116580b6-d16f-406d-b029-0df2277a5f80@ipfire.org> Date: Wed, 8 Oct 2025 15:38:03 +0100 Cc: "IPFire: Development-List" Content-Transfer-Encoding: quoted-printable Message-Id: References: <116580b6-d16f-406d-b029-0df2277a5f80@ipfire.org> To: Adolf Belka Thank you. That confirms it. This change will fix it. Most of the bits have been wrong. I have no = idea what happened there=E2=80=A6 = https://git.ipfire.org/?p=3Dipfire-2.x.git;a=3Dcommitdiff;h=3D0c6f6f182d0b= 2ac78d869582e7e2e2f8babecab5 On my system this also changes some settings. Best, -Michael > On 8 Oct 2025, at 14:45, Adolf Belka wrote: >=20 > Hi Michael, >=20 > On 08/10/2025 15:40, Michael Tremer wrote: >> Hello Adolf, >> Thank you for testing this. >> Could you send me the output of =E2=80=9Ciw list=E2=80=9D as well = please? >=20 > Here is the output >=20 > # iw list > Wiphy phy0 > wiphy index: 0 > max # scan SSIDs: 4 > max scan IEs length: 2257 bytes > max # sched scan SSIDs: 0 > max # match sets: 0 > Retry short long limit: 2 > Coverage class: 0 (up to 0m) > Device supports RSN-IBSS. > Supported Ciphers: > * WEP40 (00-0f-ac:1) > * WEP104 (00-0f-ac:5) > * TKIP (00-0f-ac:2) > * CCMP-128 (00-0f-ac:4) > * CCMP-256 (00-0f-ac:10) > * GCMP-128 (00-0f-ac:8) > * GCMP-256 (00-0f-ac:9) > * CMAC (00-0f-ac:6) > * CMAC-256 (00-0f-ac:13) > * GMAC-128 (00-0f-ac:11) > * GMAC-256 (00-0f-ac:12) > Available Antennas: TX 0 RX 0 > Supported interface modes: > * IBSS > * managed > * AP > * AP/VLAN > * monitor > * mesh point > Band 1: > Capabilities: 0x2fe > HT20/HT40 > SM Power Save disabled > RX Greenfield > RX HT20 SGI > RX HT40 SGI > TX STBC > RX STBC 2-streams > Max AMSDU length: 3839 bytes > No DSSS/CCK HT40 > Maximum RX AMPDU length 65535 bytes (exponent: 0x003) > Minimum RX AMPDU time spacing: 2 usec (0x04) > HT TX/RX MCS rate indexes supported: 0-15, 32 > Bitrates (non-HT): > * 1.0 Mbps > * 2.0 Mbps (short preamble supported) > * 5.5 Mbps (short preamble supported) > * 11.0 Mbps (short preamble supported) > * 6.0 Mbps > * 9.0 Mbps > * 12.0 Mbps > * 18.0 Mbps > * 24.0 Mbps > * 36.0 Mbps > * 48.0 Mbps > * 54.0 Mbps > Frequencies: > * 2412.0 MHz [1] (20.0 dBm) > * 2417.0 MHz [2] (20.0 dBm) > * 2422.0 MHz [3] (20.0 dBm) > * 2427.0 MHz [4] (20.0 dBm) > * 2432.0 MHz [5] (20.0 dBm) > * 2437.0 MHz [6] (20.0 dBm) > * 2442.0 MHz [7] (20.0 dBm) > * 2447.0 MHz [8] (20.0 dBm) > * 2452.0 MHz [9] (20.0 dBm) > * 2457.0 MHz [10] (20.0 dBm) > * 2462.0 MHz [11] (20.0 dBm) > * 2467.0 MHz [12] (20.0 dBm) (no IR) > * 2472.0 MHz [13] (20.0 dBm) (no IR) > * 2484.0 MHz [14] (20.0 dBm) (no IR) > Band 2: > Capabilities: 0x2fe > HT20/HT40 > SM Power Save disabled > RX Greenfield > RX HT20 SGI > RX HT40 SGI > TX STBC > RX STBC 2-streams > Max AMSDU length: 3839 bytes > No DSSS/CCK HT40 > Maximum RX AMPDU length 65535 bytes (exponent: 0x003) > Minimum RX AMPDU time spacing: 2 usec (0x04) > HT TX/RX MCS rate indexes supported: 0-15, 32 > Bitrates (non-HT): > * 6.0 Mbps > * 9.0 Mbps > * 12.0 Mbps > * 18.0 Mbps > * 24.0 Mbps > * 36.0 Mbps > * 48.0 Mbps > * 54.0 Mbps > Frequencies: > * 5180.0 MHz [36] (20.0 dBm) (no IR) > * 5190.0 MHz [38] (20.0 dBm) (no IR) > * 5200.0 MHz [40] (20.0 dBm) (no IR) > * 5210.0 MHz [42] (20.0 dBm) (no IR) > * 5220.0 MHz [44] (20.0 dBm) (no IR) > * 5230.0 MHz [46] (20.0 dBm) (no IR) > * 5240.0 MHz [48] (20.0 dBm) (no IR) > * 5250.0 MHz [50] (20.0 dBm) (no IR, radar detection) > * 5260.0 MHz [52] (20.0 dBm) (no IR, radar detection) > * 5270.0 MHz [54] (20.0 dBm) (no IR, radar detection) > * 5280.0 MHz [56] (20.0 dBm) (no IR, radar detection) > * 5290.0 MHz [58] (20.0 dBm) (no IR, radar detection) > * 5300.0 MHz [60] (20.0 dBm) (no IR, radar detection) > * 5310.0 MHz [62] (20.0 dBm) (no IR, radar detection) > * 5320.0 MHz [64] (20.0 dBm) (no IR, radar detection) > * 5500.0 MHz [100] (20.0 dBm) (no IR, radar detection) > * 5510.0 MHz [102] (20.0 dBm) (no IR, radar detection) > * 5520.0 MHz [104] (20.0 dBm) (no IR, radar detection) > * 5530.0 MHz [106] (20.0 dBm) (no IR, radar detection) > * 5540.0 MHz [108] (20.0 dBm) (no IR, radar detection) > * 5550.0 MHz [110] (20.0 dBm) (no IR, radar detection) > * 5560.0 MHz [112] (20.0 dBm) (no IR, radar detection) > * 5570.0 MHz [114] (20.0 dBm) (no IR, radar detection) > * 5580.0 MHz [116] (20.0 dBm) (no IR, radar detection) > * 5590.0 MHz [118] (20.0 dBm) (no IR, radar detection) > * 5600.0 MHz [120] (20.0 dBm) (no IR, radar detection) > * 5610.0 MHz [122] (20.0 dBm) (no IR, radar detection) > * 5620.0 MHz [124] (20.0 dBm) (no IR, radar detection) > * 5630.0 MHz [126] (20.0 dBm) (no IR, radar detection) > * 5640.0 MHz [128] (20.0 dBm) (no IR, radar detection) > * 5650.0 MHz [130] (20.0 dBm) (no IR, radar detection) > * 5660.0 MHz [132] (20.0 dBm) (no IR, radar detection) > * 5670.0 MHz [134] (20.0 dBm) (no IR, radar detection) > * 5680.0 MHz [136] (20.0 dBm) (no IR, radar detection) > * 5690.0 MHz [138] (20.0 dBm) (no IR, radar detection) > * 5700.0 MHz [140] (20.0 dBm) (no IR, radar detection) > * 5745.0 MHz [149] (20.0 dBm) (no IR) > * 5755.0 MHz [151] (20.0 dBm) (no IR) > * 5765.0 MHz [153] (20.0 dBm) (no IR) > * 5775.0 MHz [155] (20.0 dBm) (no IR) > * 5785.0 MHz [157] (20.0 dBm) (no IR) > * 5795.0 MHz [159] (20.0 dBm) (no IR) > * 5805.0 MHz [161] (20.0 dBm) (no IR) > * 5825.0 MHz [165] (20.0 dBm) (no IR) > * 4920.0 MHz [184] (disabled) > * 4940.0 MHz [188] (disabled) > * 4960.0 MHz [192] (disabled) > * 4980.0 MHz [196] (disabled) > Supported commands: > * new_interface > * set_interface > * new_key > * start_ap > * new_station > * new_mpath > * set_mesh_config > * set_bss > * authenticate > * associate > * deauthenticate > * disassociate > * join_ibss > * join_mesh > * remain_on_channel > * set_tx_bitrate_mask > * frame > * frame_wait_cancel > * set_wiphy_netns > * set_channel > * probe_client > * set_noack_map > * register_beacons > * start_p2p_device > * set_mcast_rate > * testmode > * connect > * disconnect > * set_qos_map > * set_multicast_to_unicast > software interface modes (can always be added): > * AP/VLAN > * monitor > valid interface combinations: > * #{ AP, mesh point } <=3D 8, > total <=3D 8, #channels <=3D 1 > HT Capability overrides: > * MCS: ff ff ff ff ff ff ff ff ff ff > * maximum A-MSDU length > * supported channel width > * short GI for 40 MHz > * max A-MPDU length exponent > * min MPDU start spacing > Device supports TX status socket option. > Device supports HT-IBSS. > Device supports SAE with AUTHENTICATE command > Device supports low priority scan. > Device supports scan flush. > Device supports AP scan. > Device supports per-vif TX power setting > Driver supports full state transitions for AP/GO clients > Driver supports a userspace MPM > Device supports configuring vdev MAC-addr on create. > max # scan plans: 1 > max scan plan interval: -1 > max scan plan iterations: 0 > Supported TX frame types: > * IBSS: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 = 0xc0 0xd0 0xe0 0xf0 > * managed: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 = 0xc0 0xd0 0xe0 0xf0 > * AP: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 0xc0 = 0xd0 0xe0 0xf0 > * AP/VLAN: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 = 0xc0 0xd0 0xe0 0xf0 > * mesh point: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 = 0xb0 0xc0 0xd0 0xe0 0xf0 > * P2P-client: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 = 0xb0 0xc0 0xd0 0xe0 0xf0 > * P2P-GO: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 0xb0 = 0xc0 0xd0 0xe0 0xf0 > * P2P-device: 0x00 0x10 0x20 0x30 0x40 0x50 0x60 0x70 0x80 0x90 0xa0 = 0xb0 0xc0 0xd0 0xe0 0xf0 > Supported RX frame types: > * IBSS: 0x40 0xb0 0xc0 0xd0 > * managed: 0x40 0xb0 0xd0 > * AP: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0 > * AP/VLAN: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0 > * mesh point: 0xb0 0xc0 0xd0 > * P2P-client: 0x40 0xd0 > * P2P-GO: 0x00 0x20 0x40 0xa0 0xb0 0xc0 0xd0 > * P2P-device: 0x40 0xd0 > Supported extended features: > * [ RRM ]: RRM > * [ FILS_STA ]: STA FILS (Fast Initial Link Setup) > * [ CQM_RSSI_LIST ]: multiple CQM_RSSI_THOLD records > * [ CONTROL_PORT_OVER_NL80211 ]: control port over nl80211 > * [ TXQS ]: FQ-CoDel-enabled intermediate TXQs > * [ SCAN_RANDOM_SN ]: use random sequence numbers in scans > * [ SCAN_MIN_PREQ_CONTENT ]: use probe request with only rate IEs in = scans > * [ CONTROL_PORT_NO_PREAUTH ]: disable pre-auth over nl80211 control = port support > * [ DEL_IBSS_STA ]: deletion of IBSS station support > * [ SCAN_FREQ_KHZ ]: scan on kHz frequency support > * [ CONTROL_PORT_OVER_NL80211_TX_STATUS ]: tx status for nl80211 = control port support > * [ POWERED_ADDR_CHANGE ]: can change MAC address while up >=20 >=20 > Regards, >=20 > Adolf. >=20 >> Either I have an error somewhere checking for the [MAX-AMSDU-7935] = capability, or the device claims to support it but actually doesn't. >> -Michael >>> On 8 Oct 2025, at 14:38, Adolf Belka wrote: >>>=20 >>> Hi Michael, >>>=20 >>> As mentioned at the monthly conf call I tested out today the = wireless function in CU199 but it won't start for me. >>>=20 >>> Basically the code overwrites the WPA Passphrase in hostapd.conf = with a directory. In the WUI the passphrase is still correctly shown. It = is correctly stored in the wlanap/settings file. It is just not correct = in the hostapd.conf file. >>>=20 >>> The first time I tried the update the WPA Passphrase was replaced = with /srv/web/ipfire/cgi-bin/ >>>=20 >>> The second time I tried the update it was overwritten by / which is = the version shown below. >>>=20 >>> The hostapd.conf with CU197 (with 63 character Passphrase redacted) = was >>>=20 >>> ------------------------------------- >>> driver=3Dnl80211 >>> ######################### basic hostapd configuration = ########################## >>> # >>> country_code=3DNL >>> country3=3D0x49 # indoor >>> ieee80211d=3D1 >>> ieee80211h=3D1 >>> channel=3D6 >>>=20 >>> # Always advertise TPC >>> local_pwr_constraint=3D3 >>> spectrum_mgmt_required=3D1 >>> hw_mode=3Dg >>> ieee80211n=3D1 >>> wmm_enabled=3D1 >>> ht_capab=3D >>> # Enable logging >>> logger_syslog=3D-1 >>> logger_syslog_level=3D4 >>> auth_algs=3D1 >>> ctrl_interface=3D/var/run/hostapd >>> ctrl_interface_group=3D0 >>> disassoc_low_ack=3D1 >>>=20 >>> # SSID >>> ssid2=3D"Jarnsaxa" >>> utf8_ssid=3D1 >>>=20 >>> noscan=3D1 >>> ieee80211w=3D0 >>> ######################### wpa hostapd configuration = ############################ >>> # >>> wpa=3D2 >>> = wpa_passphrase=3D*********************************************************= ****** >>> wpa_key_mgmt=3DWPA-PSK SAE >>> rsn_pairwise=3DCCMP >>> ------------------------------------- >>>=20 >>> After the update the file contained >>>=20 >>> ------------------------------------- >>> # Automatically generated configuration >>> # DO NOT EDIT >>> logger_syslog=3D-1 >>> logger_syslog_level=3D4 >>> driver=3Dnl80211 >>> country_code=3DNL >>> country3=3D0x49 >>> ieee80211d=3D1 >>> ieee80211h=3D1 >>> channel=3D6 >>> local_pwr_constraint=3D3 >>> spectrum_mgmt_required=3D1 >>> enable_background_radar=3D1 >>> wmm_enabled=3D1 >>> hw_mode=3Dg >>> ieee80211n=3D1 >>> ht_capab=3D[HT40+][HT40-] [GF] [RX-STBC1] [SHORT-GI-40] [TX-STBC] = [MAX-AMSDU-7935] [SHORT-GI-20] >>> auth_algs=3D1 >>> ctrl_interface=3D/var/run/hostapd >>> ctrl_interface_group=3D0 >>> disassoc_low_ack=3D1 >>> ssid2=3D"Jarnsaxa" >>> utf8_ssid=3D1 >>> noscan=3D1 >>> ieee80211w=3D0 >>> wpa=3D2 >>> wpa_passphrase=3D/ >>> wpa_key_mgmt=3DWPA-PSK WPA-PSK-SHA256 SAE >>> rsn_pairwise=3DCCMP >>> ssid_protection=3D1 >>> extended_key_id=3D1 >>> oce=3D7 >>> interworking=3D1 >>> access_network_type=3D0 >>> internet=3D1 >>> time_advertisement=3D2 >>> multicast_to_unicast=3D1 >>> ------------------------------------- >>>=20 >>> The wireless log not surprisingly had a problem with the passphrase >>>=20 >>> 15:00:00 hostapd: blue0: interface state ENABLED->DISABLED >>> 15:00:00 hostapd: blue0: AP-DISABLED >>> 15:00:00 hostapd: blue0: CTRL-EVENT-TERMINATING >>> 15:00:00 hostapd: nl80211: deinit ifname=3Dblue0 = disabled_11b_rates=3D0 >>> 15:00:02 hostapd: blue0: interface state = UNINITIALIZED->COUNTRY_UPDATE >>> 15:00:02 hostapd: Driver does not support configured HT capability = [MAX-AMSDU-7935] >>> 15:00:02 hostapd: blue0: interface state COUNTRY_UPDATE->DISABLED >>> 15:00:02 hostapd: blue0: AP-DISABLED >>> 15:00:02 hostapd: blue0: Unable to setup interface. >>> 15:00:02 hostapd: blue0: interface state DISABLED->DISABLED >>> 15:00:02 hostapd: blue0: AP-DISABLED >>> 15:00:02 hostapd: blue0: CTRL-EVENT-TERMINATING >>> 15:00:02 hostapd: hostapd_free_hapd_data: Interface blue0 wasn't = started >>> 15:00:02 hostapd: nl80211: deinit ifname=3Dblue0 = disabled_11b_rates=3D0 >>> 15:04:57 hostapd: Line 27: invalid WPA passphrase length 1 = (expected 8..63) >>> 15:04:57 hostapd: WPA-PSK enabled, but PSK or passphrase is not = configured. >>> 15:04:57 hostapd: 2 errors found in configuration file = '/etc/hostapd.conf' >>> 15:04:57 hostapd: Failed to set up interface with /etc/hostapd.conf >>> 15:04:58 hostapd: Failed to initialize interface >>>=20 >>> The log also mentions that the driver for the wireless chip in the = Prime unit doesn't support a configured HT capability. >>> I am presuming that that issue is the second error hostapd found in = the configuration file. >>>=20 >>> I have also just noticed that the hostapd.conf file that was used in = CU197 is still physically present in /var/ipfire/wlanap/ while the new = version is in /etc. Probably should delete the version from the old = location if it is being replaced by the new version. >>>=20 >>> Regards, >>>=20 >>> Adolf. >>>=20 >=20 >=20