On Mon, 2007-11-26 at 13:14 +0100, Johannes Berg wrote: > > what works: > > connect to a hidden ssid with ap_scan=1 in wpa_supplicant.conf > > what does not work: > > connect to a hidden ssid with ap_scan=2 in wpa_supplicant.conf > > --- > > for non mac80211 drivers its the opposite ie. ap_scan=2 can connect to > > hidden ssid while ap_scan=1 works > > (thats also whats documented in the wpa_supplicant docs and what nm uses). > > > > so NM can't support mac80211 and non mac80211 drivers at the same time > > without ugly hacks due to this issue. > > That's weird. But why does it use ap_scan=2 to start with? With > mac80211, ap_scan=1 is *much* much better because it lets wpa_supplicant > control much of roaming, mac80211 really is designed that way. Because in the case of hidden SSIDs, wpa_supplicant pretty much says to use ap_scan=2. There are a few problems here: 1) Historically, some drivers worked better with ap_scan=1 (madwifi), others worked better with ap_scan=2 (many fullmac drivers) 2) scan_ssid=1 hasn't worked consistently on all drivers because it's pretty new and many drivers don't support it yet. This is supposed to make the driver/firmware send out probe request for the SSID in question. So basically, we're up shit creek without a paddle. You have to use ap_scan=2 on some cards because they don't support specific-ssid scanning (with scan_ssid=1) to find the BSS you want to connect to, but some cards can handle ap_scan=1+scan_ssid=1 OK. NM has logic to cache the BSSIDs of APs you've connected to before, and to match those up with an SSID when it sees them in the scan list if the AP isn't broadcasting the SSID. Unfortunately, that information isn't available to wpa_supplicant because wpa_supplicant doesn't have an interface to handle that sort of thing. Therefore, when faced with an a request to connect to a hidden network, wpa_supplicant must rely _entirely_ on the driver Doing The Right Thing with scan_ssid=1 or ap_scan=2, and that almost never works due to inconsistency in driver implementation. Dan > I don't see why ap_scan=2 doesn't work though, can you enable some > wpa_supplicant debugging and send me the logs? Or can you turn off > encryption and see if you can connect to a hidden SSID? I'd think it > should work because we do a directed scan so the probe response should > tell us the SSID. > > johannes - To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html