Re: IWD 1.27 with brcmfmac not working for roaming

[James Prestwood <prestwoj@gmail.com>]

Hi Martin,

On 10/23/24 5:02 AM, Martin Petzold wrote:
> Hi Arend and James,
>
> Am 21.10.24 um 20:26 schrieb Arend van Spriel:
>> On 10/21/2024 7:40 PM, Denis Kenzior wrote:
>>> Hi Arend,
>>>
>>>>
>>>> I have not seen patches for OWE in brcmfmac. Looking at the 
>>>> supported ciphers:
>>>
>>> OWE is an AKM.  It still uses CCMP/CMAC underneath.
>>
>> My bad. Always confused by those concepts.
>>
>>>>
>>>> Supported Ciphers:
>>>>   * WEP40 (00-0f-ac:1)
>>>>   * WEP104 (00-0f-ac:5)
>>>>   * TKIP (00-0f-ac:2)
>>>>   * CCMP-128 (00-0f-ac:4)
>>>>   * CMAC (00-0f-ac:6)
>>>>
>>>> The error message seems to match with the above.
>>>
>>> I've never seen support for OWE in brcmfmac mentioned.  OWE requires 
>>> CMD_AUTHENTICATE / CMD_ASSOCIATE (or CMD_EXTERNAL_AUTH) to derive 
>>> the PMK, so iwd can't support it on FullMAC.
>>
>> I have never seen any mention of OWE either. Regarding 
>> CMD_EXTERNAL_AUTH support I recently posted patches on linux-wireless 
>> list as RFT. There has been zero feedback and so I assume also zero 
>> interest. In order to use CMD_EXTERNAL_AUTH the firmware needs to 
>> advertise "sae_ext" in fwcap debugfs file. So if Martin can check 
>> that, ie:
>>
>> $ grep sae_ext /sys/kernel/debug/ieee80211/phy0/fwcap
>>
>>
> @James: Could please check the logs (PATCH WAS APPLIED):
>
> A. Initial boot and connect (device remained connected)

On this run I'm seeing an agent connecting and issuing an explicit 
connect call rather than IWD autoconnecting. This is fine, and will 
create a new .open profile.

Okt 23 12:39:35 tavla iwd[383]: src/agent.c:agent_free() agent free 
0xaaaadbf376a0
Okt 23 12:39:35 tavla iwd[383]: src/agent.c:agent_register() agent 
register called
Okt 23 12:39:35 tavla iwd[383]: src/agent.c:agent_register() agent :1.69 
path /agent/1420
Okt 23 12:39:35 tavla iwd[383]: src/network.c:network_connect()

> B. Reboot -> device does NOT connect

This tells me you have no profile in /var/lib/iwd

>
> -----
>
> tavla@tavla:~$ sudo ls -l /system/var/lib/iwd/
> insgesamt 4
> -rw------- 1 root root    0 23. Okt 12:39 XYZ-Gast.open
> drwx------ 2 root root 4096  4. Apr 2024  hotspot
> tavla@tavla:~$ sudo cat /system/var/lib/iwd/XYZ-Gast.open
> tavla@tavla:~$

IWD is looking in /var/lib/iwd as seen by:

Okt 23 12:35:58 tavla iwd[383]: src/storage.c:storage_create_dirs() 
Using state directory /var/lib/iwd

Not sure if you have /system/var/lib/iwd mounted there or what, but it 
seems IWD cannot find that profile. IWD will not autoconnect to a random 
open network without a profile. On your first boot you are forcing a 
connection which should generate a profile, but on the second boot no 
profile exists. So that is where I could check, where is the profile 
going? can you "ls" that directory on the _second_ boot to see if it exists?

>
> -----
>
> @Arend: Here the requested output (debugging enabled; PATCHES ALREADY 
> APPLIED!).
>
> -----
>
> tavla@tavla:~$ sudo cat /sys/kernel/debug/ieee80211/phy0/fwcap
> ap
> sta
> wme
> 802.11d
> 802.11h
> rm
> cqa
> ccx
> cac
> dualband
> ampdu
> ampdu_tx
> ampdu_rx
> amsdurx
> amsdutx
> radio_pwrsave
> btamp
> p2p
> proptxstatus
> mchan
> vht-prop-rates
> p2po
> anqpo
> txpwrcache
> stbc-tx
> stbc-rx-1ss
>
> -----
>
> Best regards,
>
> Martin