I am using a laptop (Xiaomi Air 12, Intel) with debian buster (linux 4.19.0-6-amd64). I am using nm (1.14.6-2+deb10u1) with the plasma-applet (4:5.14.5-1) and wpa_supplicant (2:2.7+git20190128+0c1e29f-6+deb10u1). nm is working well with the internal wlan (intel). However, using a ralink usb stick, it fails to connect Jan 30 21:36:41 lina NetworkManager[663]: <info> [1580416601.5122] device (wlx7cdd902eXXXX): supplicant interface state: ready -> authenticating Jan 30 21:36:41 lina kernel: [ 1157.342652] wlx7cdd902eXXXX: authenticated Jan 30 21:36:46 lina kernel: [ 1162.344096] wlx7cdd902eXXXX: aborting authentication with 98:9b:cb:12:XX:XX by local choice (Reason: 3=DEAUTH_LEAVING) Jan 30 21:36:46 lina NetworkManager[663]: <info> [1580416606.5911] device (wlx7cdd902eXXXX): supplicant interface state: authenticating -> disconnected Jan 30 21:36:46 lina NetworkManager[663]: <info> [1580416606.6926] device (wlx7cdd902eXXXX): supplicant interface state: disconnected -> scanning A more detailed log can be found at https://pastebin.com/Pvdj29QA Another log for a different time is at https://pastebin.com/ajxCZT8F The problem seems to be connected to the long (predictable) device name (wich is automatically created by the system). This has already been discussed here: https://unix.stackexchange.com/questions/386925/aborting-authentication-by-local-choice-reason-3-deauth-leaving-when-trying Therefore I used my own udev script to give a name to the device. Then, connection can be established with an upto 14 character name (e.g. "ab345678901234") but not with a 15 character name (e.g. "ab3456789012345"). Unfortunately, the predictable device name generated by the system has exactly 15 chracters. I then tested if disabling MAC Address Randomization (for scans) helps. I added [device] wifi.scan-rand-mac-address=no to /etc/NetworkManager/NetworkManager.conf. With this option, it worked even for 15 char names. But only if I dont define a "cloned MAC- address" in the nm gui (plasma). In the case that I used a short device name defined by my own udev script, it worked with and without defining a "cloned MAC-address". So it seems the problem arises if - the device name is longer than 14 chars AND - MAC addess is cloned. I also tried to start the connection via /etc/network/interfaces. This works even for the 15 character device name. However, I was not able to start the connection via e/n/i with a cloned MAC (didnt find a suitable syntax). Therefore I could not check, if the problem is really connected to a cloned MAC. Regards, Juergen _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap
