Bug 377279

Summary:	Login failure on WPA2 Enterprise PEAP network does not cause login prompt to be shown
Product:	[Plasma] plasmashell	Reporter:	Erin of Yukis <erin-kde>
Component:	Networking in general	Assignee:	Jan Grulich <jgrulich>
Status:	RESOLVED WAITINGFORINFO
Severity:	normal	CC:	nate, saleemsaarah
Priority:	NOR
Version First Reported In:	5.18.0
Target Milestone:	1.0
Platform:	Neon
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description Erin of Yukis 2017-03-06 10:55:54 UTC

Due to the password policy of my university I had to change my password over the holidays. Today I tried to connect to my university network (part of the [eduroam](https://www.eduroam.org/) initiative) and it simply wouldn't work – it would simply retry connecting all the time. After using a mobile hotspot for a while I decided to analyze the problem more thoroughly and, by reading the system logs (attached below), realized that the password was wrong…
Maybe this could be made more user-friendly? I suppose CTRL-REQ-IDENTITY-0 and CTRL-REQ-PASSWORD-0 (if you have access to that) could both be used to detect that the user's login credentials need to be updated.
If this is a problem on the `NetworkManager` side, please just let me know and I'll submit a new bug report against their bug tracker instead.

Thanks for the awesome new connection settings! :-)


Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <warn>  [1488796835.7349] device (wlp2s0): Activation: (wifi) association took too long
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.7350] device (wlp2s0): state change: config -> need-auth (reason 'none') [50 60 0]
Mär 06 11:40:35 Alexander-NB kernel: wlp2s0: deauthenticating from 5c:a4:8a:1e:21:7e by local choice (Reason: 3=DEAUTH_LEAVING)
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <warn>  [1488796835.7395] device (wlp2s0): Activation: (wifi) asking for new secrets
Mär 06 11:40:35 Alexander-NB wpa_supplicant[1547]: wlp2s0: CTRL-EVENT-DISCONNECTED bssid=5c:a4:8a:1e:21:7e reason=3 locally_generated=1
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <warn>  [1488796835.7605] sup-iface[0x55bbbd090240,wlp2s0]: connection disconnected (reason -3)
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.7607] device (wlp2s0): supplicant interface state: associated -> disconnected
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.7975] device (wlp2s0): state change: need-auth -> prepare (reason 'none') [60 40 0]
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.7980] device (wlp2s0): state change: prepare -> config (reason 'none') [40 50 0]
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.8009] device (wlp2s0): Activation: (wifi) connection 'eduroam' has security, and secrets exist.  No new secrets needed.
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.8010] Config: added 'ssid' value 'eduroam'
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.8010] Config: added 'scan_ssid' value '1'
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.8010] Config: added 'key_mgmt' value 'WPA-EAP'
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.8010] Config: added 'password' value '<hidden>'
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.8011] Config: added 'eap' value 'PEAP'
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.8011] Config: added 'fragment_size' value '1266'
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.8011] Config: added 'phase2' value 'auth=MSCHAPV2'
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.8011] Config: added 'identity' value '<hidden>'
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.8011] Config: added 'bgscan' value 'simple:30:-65:300'
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.8011] Config: added 'proactive_key_caching' value '1'
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.8025] sup-iface[0x55bbbd090240,wlp2s0]: config: set interface ap_scan to 1
Mär 06 11:40:35 Alexander-NB NetworkManager[878]: <info>  [1488796835.8113] device (wlp2s0): supplicant interface state: disconnected -> scanning
Mär 06 11:40:37 Alexander-NB wpa_supplicant[1547]: FT: Invalid key management type (1)
Mär 06 11:40:37 Alexander-NB wpa_supplicant[1547]: wlp2s0: SME: Trying to authenticate with 5c:a4:8a:1e:21:7e (SSID='eduroam' freq=5180 MHz)
Mär 06 11:40:37 Alexander-NB kernel: wlp2s0: authenticate with 5c:a4:8a:1e:21:7e
Mär 06 11:40:37 Alexander-NB kernel: wlp2s0: send auth to 5c:a4:8a:1e:21:7e (try 1/3)
Mär 06 11:40:37 Alexander-NB kernel: wlp2s0: authenticated
Mär 06 11:40:37 Alexander-NB wpa_supplicant[1547]: wlp2s0: Trying to associate with 5c:a4:8a:1e:21:7e (SSID='eduroam' freq=5180 MHz)
Mär 06 11:40:37 Alexander-NB NetworkManager[878]: <info>  [1488796837.1859] device (wlp2s0): supplicant interface state: scanning -> authenticating
Mär 06 11:40:37 Alexander-NB kernel: wlp2s0: associate with 5c:a4:8a:1e:21:7e (try 1/3)
Mär 06 11:40:37 Alexander-NB kernel: wlp2s0: RX AssocResp from 5c:a4:8a:1e:21:7e (capab=0x1111 status=0 aid=159)
Mär 06 11:40:37 Alexander-NB kernel: wlp2s0: associated
Mär 06 11:40:37 Alexander-NB wpa_supplicant[1547]: wlp2s0: Associated with 5c:a4:8a:1e:21:7e
Mär 06 11:40:37 Alexander-NB wpa_supplicant[1547]: wlp2s0: CTRL-EVENT-EAP-STARTED EAP authentication started
Mär 06 11:40:37 Alexander-NB NetworkManager[878]: <info>  [1488796837.2053] device (wlp2s0): supplicant interface state: authenticating -> associating
Mär 06 11:40:37 Alexander-NB NetworkManager[878]: <info>  [1488796837.2055] device (wlp2s0): supplicant interface state: associating -> associated
Mär 06 11:40:37 Alexander-NB wpa_supplicant[1547]: wlp2s0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Mär 06 11:40:37 Alexander-NB wpa_supplicant[1547]: wlp2s0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Mär 06 11:40:37 Alexander-NB wpa_supplicant[1547]: wlp2s0: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA SSL CA 3' hash=beb8efe9b1a73c841b375a90e5fff8048848e3a2af66f6c4dd7b938d6fe8c5d8
Mär 06 11:40:37 Alexander-NB wpa_supplicant[1547]: wlp2s0: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='<hidden>' hash=<hidden>
Mär 06 11:40:37 Alexander-NB wpa_supplicant[1547]: wlp2s0: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:<hidden>
Mär 06 11:40:37 Alexander-NB wpa_supplicant[1547]: wlp2s0: EAP-MSCHAPV2: failure message: '' (retry allowed, error 691)
Mär 06 11:40:37 Alexander-NB wpa_supplicant[1547]: wlp2s0: CTRL-REQ-IDENTITY-0:Identity needed for SSID eduroam
Mär 06 11:40:37 Alexander-NB wpa_supplicant[1547]: wlp2s0: CTRL-REQ-PASSWORD-0:Password needed for SSID eduroam
Mär 06 11:40:37 Alexander-NB kernel: wlp2s0: Limiting TX power to 17 dBm as advertised by 5c:a4:8a:1e:21:7e
Mär 06 11:40:39 Alexander-NB org.kde.kwalletd5[2341]: openAsync for  ":1.185"
Mär 06 11:40:39 Alexander-NB org.kde.kwalletd5[2341]: openAsync for  ":1.185"
Mär 06 11:40:40 Alexander-NB ntpd[1917]: error resolving pool 1.debian.pool.ntp.org: Temporary failure in name resolution (-3)

Comment 1 Erin of Yukis 2017-03-06 10:57:41 UTC

network-manager version: 1.6.2-1
wpasupplicant version:   2:2.4-1

Comment 2 Ben Cooksley 2024-12-23 18:23:35 UTC

Bulk transfer as requested in T17796

Comment 3 Nate Graham 2025-05-19 19:41:41 UTC

Thanks for the bug report, and I'm sorry we weren't able to get to this yet. A lot of things have changed since then; can you still reproduce the issue with Plasma 6.3.5 or later?

Thanks again!