> I have the btgatt-server running where I can interact with it. Now I > increase the security (btgatt-server -s high ...) and when I try to > connect to the server I got it rejected (btmgmt - auth failed with > status 0x05 (Authentication Failed)). > > After that I manually paired and trusted both devices (bluetootctl - > agent - ...) and I see them as paired-devices. Then I repeat the process > (-s high), and again, I got the same authentication error. Should that > this second try work? am I missing something? > (I tried bluez-5.41 and 5.46 versions) > > Probably I am missing/missunderstanding something, so to put context on > what I am doing, what I am looking for is a way to only accept > connections of authenticated/paired devices (done beforehand or not does > not matter). Answering here, the problem is related with a dual device. Due to it is dual, the pairing is being done for the BDEDR bearer and not for the LE bearer. As tricky option, what I have done is disable bdedr. Another tricky option is create a lecc connection (hcitool lecc bdaddr) and then lunch the pair process. So, without doing any "tricky" operation, does anyone know if it is possible to force the authentication in one specific transport layer (BDEDR or LE)? I have seen that normally it is picked the "last used", but I would like to know if there is a way to specifically indicate it. So, in my case (without the trick), when I start a GATT server with security high, the connection is rejected due to authentication fail.��.n��������+%������w��{.n�����{����^n�r������&��z�ޗ�zf���h���~����������_��+v���)ߣ�