[FS#3147] 802.11w settings on LUCI WIFI page doesn't work properly and causes serious connection problems

[OpenWrt Bugs]

THIS IS AN AUTOMATED MESSAGE, DO NOT REPLY.

The following task has a new comment added:

FS#3147 - 802.11w settings on LUCI WIFI page doesn't work properly and causes serious connection problems
User who did this - Mark A. Ziesemer (ziesemer)

----------
See also: https://community.intel.com/t5/Wireless/WPA2-Enterprise-unable-to-connect-in-Windows-10-version-2004/m-p/1187887#M29624

I have spent significant time recently trying to troubleshoot this, and just managed to find this ticket with some different keywords ("wpad intel radius").  Assuming this is the same issue - I've not been able to reproduce this outside of an Intel wireless adapter (including 8265 or 9260), and not outside of Windows 10 - specifically, version 2004 (works in 1909).

As of yesterday, I was finally able to reproduce the configurations on an enterprise wireless access point, and was able to determine that this does not appear to be reproducible outside of using OpenWrt.

In some network traces I've completed with Intel, an OTA trace shows multiple rounds of the EAPOL 4-way handshake being attempted.  OpenWrt sends message 1, the client responds with message 2, but OpenWrt never sends the 3rd message.  It's as if OpenWrt does not properly receive or handle message 2, and repeats sending message 1.  The client then re-sends message 2, but OpenWrt never sends message 3.  This happens a total of 4 times, before OpenWrt then sends a deauthentication.

I had tried changing the 802.11w settings via Luci, but did not yet confirm if the settings were actually taking - which given the description here, might be the issue.  Will investigate further and report back!
----------

More information can be found at the following URL:
https://bugs.openwrt.org/index.php?do=details&task_id=3147#comment8712

You are receiving this message because you have requested it from the Flyspray bugtracking system.  If you did not expect this message or don't want to receive mails in future, you can change your notification settings at the URL shown above.