Bug 1888050

Summary: Wlan's in a bridge won't do authentication properly when operating in AP mode
Product: Red Hat Enterprise Linux 8 Reporter: Philip Prindeville <philipp>
Component: wpa_supplicantAssignee: Davide Caratti <dcaratti>
Status: CLOSED ERRATA QA Contact: Ken Benoit <kbenoit>
Severity: medium Docs Contact:
Priority: unspecified    
Version: CentOS StreamCC: bstinson, carl, jwboyer, philipp, rvr, sukulkar
Target Milestone: rc   
Target Release: 8.0   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1915236 (view as bug list) Environment:
Last Closed: 2021-05-18 15:07:07 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1888051, 1888610, 1915236    
Attachments:
Description Flags
Backport of upstream fix to 1.27.3
none
Upstream fix on master none

Description Philip Prindeville 2020-10-13 21:47:54 UTC
Created attachment 1721325 [details]
Backport of upstream fix to 1.27.3

Description of problem:

When creating a bridge, and putting an Ethernet slave and a Wlan slave (which has been configured as an AP), authentication will always fail when connecting to that AP.


Version-Release number of selected component (if applicable):

2.9-2

How reproducible:

nmcli conn add con-name "Bridge 0" \
    type bridge ifname br0 \
    connection.autoconnect true \
    ipv4.method "manual" \
    ipv4.address "$LOCALIP/$LOCALPREFIX" \
    +ipv4.routes "224.0.0.0/4"

nmcli conn delete "Bridge slave 0"

nmcli conn add con-name "Bridge slave 0" \
    master "Bridge 0" \
    type ethernet ifname eth1

nmcli conn delete "Bridge slave 1"

nmcli conn add con-name "Bridge slave 1" \
    master "Bridge 0" \
    type wifi ifname wlan0 \
    mode ap ssid "$ssid" \
    802-11-wireless.band "bg" \
    802-11-wireless-security.key-mgmt "wpa-psk" \
    802-11-wireless-security.psk "$passphrase"

nmcli conn up "Bridge 0"

and now try to authenticate to that AP.

Steps to Reproduce:
1. Create bridge.
2. Add Ethernet and WLAN slaves (WLAN must be configured as AP).
3. Bring up bridge and try to connect to it.

Actual results:

Authentication fails.

Expected results:

Authentication should succeed.

Additional info:

Upstream commit is 1c58317f.

Comment 1 Philip Prindeville 2020-10-13 21:51:28 UTC
Sorry, mixing up NM and wpa_supplicant. Fix is to 2.9.

Comment 2 Philip Prindeville 2020-10-13 22:02:31 UTC
Created attachment 1721327 [details]
Upstream fix on master

Comment 6 Ken Benoit 2020-12-15 17:35:59 UTC
Using the setup steps provided in the description I configured an ethernet/wlan slave bridge as described on RHEL-8.4.0-20201212.n.0. After bringing up the bridge I was able to connect to the AP from a separate system and had no issues with communication. Marking as verified.

Comment 10 errata-xmlrpc 2021-05-18 15:07:07 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: wpa_supplicant security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:1686