[Résolu] Impossible d'ouvrir un point d'accès Wi-Fi sécurisé

Bbahamut00 · 11 août 2022

Bonjour,

j'essaie d'ouvrir un point d'accès Wi-Fi pour partage de connexion, mais j'y arrive seulement si je ne mets aucune protection au réseau Wi-Fi. J'ai une Fedora 36 installée sur un laptop Dell Latitude 5420 connecté en ethernet. En pratique (remarque: ma Fedora est configurée en anglais):

- System Settings > Connections
- Clic sur + (Add a new connection)
- Je sélectionne Wi-Fi (shared)
- Dans l'onglet Security > WPA3 Personal, ajout mot de passe, store password for all users.

Sur cette configuration, quand je démarre la connexion, je reste bloqué à "Configuring interface" qui ne se termine jamais. Quelque chose bloque du côté de ma Fedora.

Si je change Security en WPA/WPA2 Personal (et le reste identique), la connexion s'établit instantanément quand je la démarre. Par contre, mon smartphone Android n'arrive jamais à se connecter à ce réseau une fois le mot de passe saisi, et finit par abandonner (sans avertissement) au bout d'une ou deux minutes.

Si je change Securiry en None (donc pas de mot de passe), j'établit la connexion instantanément, et mon Android se connecte sans problème. Mais évidemment je ne veux pas partager une connection sans mot de passe.

Une piste? Ne serait-ce que pour trouver des logs d'erreur?

Nicosss · 11 août 2022

Quelle est la puce WiFi utilisée ?

$ lspci -nnk | grep -iA3 "Network"

Tu peux regarder les logs système au fil de l'eau avec la commande

$ sudo journalctl -f

Bbahamut00 · 15 août 2022

Bonjour,

voici la puce WiFi:

00:14.3 Network controller [0280]: Intel Corporation Wi-Fi 6 AX201 [8086:a0f0] (rev 20)
        Subsystem: Intel Corporation Device [8086:4070]
        Kernel driver in use: iwlwifi
        Kernel modules: iwlwifi

Voici le log quand j'essaie de démarrer la connexion partagé en WPA3:

Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7059] device (wlp0s20f3): Activation: starting connection 'Wireless connection test' (e744d092-d7c3-4e73-b059-b6da104e7223)
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7060] audit: op="connection-activate" uuid="e744d092-d7c3-4e73-b059-b6da104e7223" name="Wireless connection test" pid=1281 uid=1000 result="success"
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7063] device (wlp0s20f3): state change: disconnected -> prepare (reason 'none', sys-iface-state: 'managed')
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7114] device (wlp0s20f3): set-hw-addr: reset MAC address to F8:5E:A0:14:FF:82 (preserve)
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7147] device (wlp0s20f3): state change: prepare -> config (reason 'none', sys-iface-state: 'managed')
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7150] device (wlp0s20f3): Activation: (wifi) access point 'Wireless connection test' has security, but secrets are required.
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7150] device (wlp0s20f3): state change: config -> need-auth (reason 'none', sys-iface-state: 'managed')
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7177] device (wlp0s20f3): state change: need-auth -> prepare (reason 'none', sys-iface-state: 'managed')
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7190] device (wlp0s20f3): state change: prepare -> config (reason 'none', sys-iface-state: 'managed')
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7193] device (wlp0s20f3): Activation: (wifi) connection 'Wireless connection test' has security, and secrets exist.  No new secrets needed.
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7194] Config: added 'ssid' value 'my_shared_connection_test'
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7194] Config: added 'mode' value '2'
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7194] Config: added 'frequency' value '2462'
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7195] Config: added 'key_mgmt' value 'SAE'
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7195] Config: added 'psk' value '<hidden>'
Aug 15 11:54:35 fedora NetworkManager[916]: <info>  [1660557275.7195] Config: added 'ieee80211w' value '2'
Aug 15 11:54:35 fedora wpa_supplicant[1010]: Note: nl80211 driver interface is not designed to be used with ap_scan=2; this can result in connection failures
Aug 15 11:54:35 fedora wpa_supplicant[1010]: Could not generate WPA IE.
Aug 15 11:54:35 fedora wpa_supplicant[1010]: WPA initialization failed.
Aug 15 11:54:35 fedora wpa_supplicant[1010]: Interface initialization failed
Aug 15 11:54:35 fedora wpa_supplicant[1010]: wlp0s20f3: interface state UNINITIALIZED->DISABLED
Aug 15 11:54:35 fedora wpa_supplicant[1010]: wlp0s20f3: AP-DISABLED
Aug 15 11:54:35 fedora wpa_supplicant[1010]: wlp0s20f3: Unable to setup interface.
Aug 15 11:54:35 fedora wpa_supplicant[1010]: Failed to initialize AP interface
Aug 15 11:54:35 fedora wpa_supplicant[1010]: wlp0s20f3: interface state DISABLED->DISABLED
Aug 15 11:54:35 fedora wpa_supplicant[1010]: wlp0s20f3: AP-DISABLED
Aug 15 11:54:35 fedora wpa_supplicant[1010]: hostapd_free_hapd_data: Interface wlp0s20f3 wasn't started
Aug 15 11:54:35 fedora wpa_supplicant[1010]: wlp0s20f3: CTRL-EVENT-DISCONNECTED bssid=f8:5e:a0:14:ff:82 reason=3 locally_generated=1
Aug 15 11:54:55 fedora NetworkManager[916]: <info>  [1660557295.9763] device (wlp0s20f3): state change: config -> deactivating (reason 'user-requested', sys-iface-state: 'managed')

Et le log quand je démarre la connexion partagée en WPA2:

Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7709] device (wlp0s20f3): Activation: starting connection 'Wireless connection test' (e744d092-d7c3-4e73-b059-b6da104e7223)
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7710] audit: op="connection-activate" uuid="e744d092-d7c3-4e73-b059-b6da104e7223" name="Wireless connection test" pid=1281 uid=1000 result="success"
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7712] device (wlp0s20f3): state change: disconnected -> prepare (reason 'none', sys-iface-state: 'managed')
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7765] device (wlp0s20f3): set-hw-addr: reset MAC address to F8:5E:A0:14:FF:82 (preserve)
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7788] device (wlp0s20f3): state change: prepare -> config (reason 'none', sys-iface-state: 'managed')
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7791] device (wlp0s20f3): Activation: (wifi) access point 'Wireless connection test' has security, but secrets are required.
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7791] device (wlp0s20f3): state change: config -> need-auth (reason 'none', sys-iface-state: 'managed')
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7809] device (wlp0s20f3): state change: need-auth -> prepare (reason 'none', sys-iface-state: 'managed')
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7821] device (wlp0s20f3): state change: prepare -> config (reason 'none', sys-iface-state: 'managed')
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7824] device (wlp0s20f3): Activation: (wifi) connection 'Wireless connection test' has security, and secrets exist.  No new secrets needed.
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7825] Config: added 'ssid' value 'my_shared_connection_test'
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7825] Config: added 'mode' value '2'
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7825] Config: added 'frequency' value '2462'
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7825] Config: added 'key_mgmt' value 'WPA-PSK WPA-PSK-SHA256 SAE'
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.7826] Config: added 'psk' value '<hidden>'
Aug 15 11:57:59 fedora wpa_supplicant[1010]: Note: nl80211 driver interface is not designed to be used with ap_scan=2; this can result in connection failures
Aug 15 11:57:59 fedora wpa_supplicant[1010]: wlp0s20f3: interface state UNINITIALIZED->ENABLED
Aug 15 11:57:59 fedora wpa_supplicant[1010]: wlp0s20f3: AP-ENABLED
Aug 15 11:57:59 fedora wpa_supplicant[1010]: wlp0s20f3: CTRL-EVENT-CONNECTED - Connection to f8:5e:a0:14:ff:82 completed [id=0 id_str=]
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.8149] device (wlp0s20f3): supplicant interface state: disconnected -> completed
Aug 15 11:57:59 fedora kernel: IPv6: ADDRCONF(NETDEV_CHANGE): wlp0s20f3: link becomes ready
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.8149] device (wlp0s20f3): Activation: (wifi) Stage 2 of 5 (Device Configure) successful. Started Wi-Fi Hotspot "my_shared_connection_test"
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.8149] device (p2p-dev-wlp0s20f3): supplicant management interface state: disconnected -> completed
Aug 15 11:57:59 fedora audit[889]: NETFILTER_CFG table=firewalld:11 family=1 entries=5 op=nft_register_rule pid=889 subj=system_u:system_r:firewalld_t:s0 comm="firewalld"
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.8181] device (wlp0s20f3): state change: config -> ip-config (reason 'none', sys-iface-state: 'managed')
Aug 15 11:57:59 fedora audit[3126]: NETFILTER_CFG table=nm-shared-wlp0s20f3:12 family=2 entries=12 op=nft_register_chain pid=3126 subj=system_u:system_r:iptables_t:s0 comm="nft"
Aug 15 11:57:59 fedora avahi-daemon[783]: Joining mDNS multicast group on interface wlp0s20f3.IPv4 with address 10.42.0.1.
Aug 15 11:57:59 fedora avahi-daemon[783]: New relevant interface wlp0s20f3.IPv4 for mDNS.
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.8327] dnsmasq-manager: starting dnsmasq...
Aug 15 11:57:59 fedora avahi-daemon[783]: Registering new address record for 10.42.0.1 on wlp0s20f3.IPv4.
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.8341] device (wlp0s20f3): state change: ip-config -> ip-check (reason 'none', sys-iface-state: 'managed')
Aug 15 11:57:59 fedora avahi-daemon[783]: Joining mDNS multicast group on interface wlp0s20f3.IPv6 with address fe80::cb90:9810:36a5:481e.
Aug 15 11:57:59 fedora avahi-daemon[783]: New relevant interface wlp0s20f3.IPv6 for mDNS.
Aug 15 11:57:59 fedora avahi-daemon[783]: Registering new address record for fe80::cb90:9810:36a5:481e on wlp0s20f3.*.
Aug 15 11:57:59 fedora dnsmasq[3129]: started, version 2.86 cachesize 150
Aug 15 11:57:59 fedora dnsmasq[3129]: compile time options: IPv6 GNU-getopt DBus no-UBus no-i18n IDN2 DHCP DHCPv6 no-Lua TFTP conntrack ipset auth cryptohash DNSSEC loop-detect inotify dumpfile
Aug 15 11:57:59 fedora dnsmasq[3129]: chown of PID file /run/nm-dnsmasq-wlp0s20f3.pid failed: Operation not permitted
Aug 15 11:57:59 fedora dnsmasq-dhcp[3129]: DHCP, IP range 10.42.0.10 -- 10.42.0.254, lease time 1h
Aug 15 11:57:59 fedora dnsmasq[3129]: reading /etc/resolv.conf
Aug 15 11:57:59 fedora dnsmasq[3129]: using nameserver 127.0.0.53#53
Aug 15 11:57:59 fedora dnsmasq[3129]: cleared cache
Aug 15 11:57:59 fedora systemd[1]: Starting NetworkManager-dispatcher.service - Network Manager Script Dispatcher Service...
Aug 15 11:57:59 fedora systemd[1]: Started NetworkManager-dispatcher.service - Network Manager Script Dispatcher Service.
Aug 15 11:57:59 fedora audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.8420] device (wlp0s20f3): state change: ip-check -> secondaries (reason 'none', sys-iface-state: 'managed')
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.8421] device (wlp0s20f3): state change: secondaries -> activated (reason 'none', sys-iface-state: 'managed')
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.8424] device (wlp0s20f3): Activation: successful, device activated.
Aug 15 11:57:59 fedora systemd[1]: iscsi.service: Unit cannot be reloaded because it is inactive.
Aug 15 11:57:59 fedora NetworkManager[916]: <info>  [1660557479.8623] audit: op="statistics" interface="wlp0s20f3" ifindex=3 args="2000" pid=1281 uid=1000 result="success"
Aug 15 11:57:59 fedora plasmashell[1281]: Could not find the Plasmoid for Plasma::FrameSvgItem(0x557970779d50) QQmlContext(0x55796db7be00) QUrl("file:///usr/share/plasma/plasmoids/org.kde.plasma.notifications/contents/ui/global/Globals.qml")
Aug 15 11:57:59 fedora plasmashell[1281]: Could not find the Plasmoid for Plasma::FrameSvgItem(0x557970779d50) QQmlContext(0x55796db7be00) QUrl("file:///usr/share/plasma/plasmoids/org.kde.plasma.notifications/contents/ui/global/Globals.qml")
Aug 15 11:57:59 fedora plasmashell[1281]: file:///usr/share/plasma/plasmoids/org.kde.plasma.notifications/contents/ui/NotificationItem.qml:220:21: QML SelectableLabel: Binding loop detected for property "implicitWidth"
Aug 15 11:58:03 fedora NetworkManager[916]: <info>  [1660557483.7825] audit: op="statistics" interface="enp0s31f6" ifindex=2 args="0" pid=1281 uid=1000 result="success"
Aug 15 11:58:03 fedora NetworkManager[916]: <info>  [1660557483.7925] audit: op="statistics" interface="wlp0s20f3" ifindex=3 args="0" pid=1281 uid=1000 result="success"

Nicosss · 15 août 2022

Cette puce semble supporter le WPA3 d'après https://www.intel.fr/content/www/fr/fr/products/sku/130293/intel-wifi-6-ax201-gig/specifications.html . Par contre ça n'a pas l'air implémenté dans http://w1.fi/wpa_supplicant/ .

Je ne sais pas si cette information peut avoir un lien avec le problème de connexion

Aug 15 11:57:59 fedora wpa_supplicant[1010]: Note: nl80211 driver interface is not designed to be used with ap_scan=2; this can result in connection failures

Bbahamut00 · 28 août 2022

Je ne suis pas particulièrement attaché au WPA3, tant que je peux configurer une connexion sécurisé, le WPA2 me suffirait.

Bbahamut00 · 13 févr. 2023

Mise à jour après avoir enfin trouvé une solution ici:

~> nmcli device wifi hotspot ifname wlp0s20f3 
Device 'wlp0s20f3' successfully activated with 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'.
Hint: "nmcli dev wifi show-password" shows the Wi-Fi name and password.
~> nmcli device wifi show-password 
SSID: Hotspot-xxxxxxxx-lap
Security: WPA
Password: xxxxxxx

Cette fois-ci cette connexion permet bien de me connecter depuis mon smartphone Android et fournit une sécurité WPA2. Quand je regarde les paramètres dans le Network Manager je ne vois pas la différence avec mes tentatives manuelles. Néanmoins je marque le sujet résolu.

Nicosss · 13 févr. 2023

Bonne nouvelle du coup.

Par contre c'est étrange que ça n'affiche que WPA.

Bbahamut00 · 15 févr. 2023

Le Network Manager indique que c'est une configuration WPA/WPA2 Personal. Android indique que c'est une connexion WPA2/WPA3. Du coup je dirais que je suis sur du WPA2. 😉