Re: [Bluez-devel] Error: Authentication Failure

[Jose Vasconcellos <jose@vasmac.com>]

Marcel Holtmann wrote:
...
>>> It's pretty easy to reproduce. I've tried with two USB dongles
>>> (CSR & Broadcom) and different headsets. Connect a device
>>> on Linux, then take the device and dongle and connect on
>>> Windows; when you go back with both to Linux you get this
>>> problem.
>>>
>>> You are right that one can remove the bonding manually but
>>> this is not obvious to the uninitiated and it requires a manual
>>> step. Plus, the message presented to the application is
>>> typically "Record not found" if the first connection is an SDP
>>> lookup.
>>>
>>> Perhaps in security.c in utils/hcid, the routine conn_complete
>>> should delete the cached entry if there's an error.
>>>       
>
> this is not an option, because it will be a security risk. We have to
> keep the old key until we actually generated a new one or someone
> deleted the old one. The only think that is possible it too improve the
> error message.
>
> These are also known errors and you can even switch BlueZ into a pairing
> once mode. This is because device should implement a pairing mode. That
> means that will never accept a pairing if they are not in that mode. So
> if the link key is a wrong one, it simply rejects the connection instead
> of starting a new pairing process.
>
> Regards
>
> Marcel
>   
Hi Marcel,

I'm not familiar with the security issues; that is not my focus.
I game a suggestion based on a cursory look at the source code.
There is a problem here and it looks like the Windows
environment can cope with this but Bluez can't. Granted this
is not very common condition.

Jose


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Bluez-devel mailing list
Bluez-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-devel