Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FS#4093 - Error with 802.11r enabled: Daemon.err hostapd: nl80211: kernel reports: key addition failed #9071

Open
openwrt-bot opened this issue Oct 20, 2021 · 18 comments
Labels
flyspray kernel pull request/issue with Linux kernel related changes

Comments

@openwrt-bot
Copy link

NilsRo:

Supply the following if possible:

  • TP-Link C6 and Netgear r7800 (but read from it in every combination)
  • have this since using OpenWRT 19.07
  • Enable 802.11r with Generate PMK locally but it happens also if manually configured

Wed Oct 20 08:13:57 2021 daemon.err hostapd: nl80211: kernel reports: key addition failed
Wed Oct 20 08:13:57 2021 daemon.info hostapd: wlan0: STA 14:c8:8b:XX:XX:XX IEEE 802.11: associated (aid 1)
Wed Oct 20 08:13:57 2021 daemon.notice hostapd: wlan0: AP-STA-CONNECTED 14:c8:8b:66:46:f7

https://forum.openwrt.org/t/daemon-err-hostapd-nl80211-kernel-reports-key-addition-failed-is-this-a-problem/100370/6

@aparcar aparcar added the kernel pull request/issue with Linux kernel related changes label Feb 22, 2022
@NilsRo
Copy link

NilsRo commented Feb 28, 2022

Still happens with 21.02.2

Mon Feb 28 08:00:51 2022 daemon.debug hostapd: wlan1: STA 86:f4:68:0f:81:c7 IEEE 802.11: binding station to interface 'wlan1'
Mon Feb 28 08:00:51 2022 daemon.debug hostapd: wlan1: STA 86:f4:68:0f:81:c7 IEEE 802.11: authentication OK (FT)
Mon Feb 28 08:00:51 2022 daemon.debug hostapd: wlan1: STA 86:f4:68:0f:81:c7 MLME: MLME-AUTHENTICATE.indication(86:f4:68:0f:81:c7, FT)
Mon Feb 28 08:00:51 2022 daemon.err hostapd: nl80211: kernel reports: key addition failed
Mon Feb 28 08:00:51 2022 daemon.debug hostapd: wlan1: STA 86:f4:68:0f:81:c7 IEEE 802.11: binding station to interface 'wlan1'
Mon Feb 28 08:00:51 2022 daemon.debug hostapd: wlan1: STA 86:f4:68:0f:81:c7 IEEE 802.11: authentication OK (FT)
Mon Feb 28 08:00:51 2022 daemon.debug hostapd: wlan1: STA 86:f4:68:0f:81:c7 MLME: MLME-AUTHENTICATE.indication(86:f4:68:0f:81:c7, FT)
Mon Feb 28 08:00:51 2022 daemon.err hostapd: nl80211: kernel reports: key addition failed
Mon Feb 28 08:00:51 2022 daemon.debug hostapd: wlan1: STA 86:f4:68:0f:81:c7 IEEE 802.11: binding station to interface 'wlan1'
Mon Feb 28 08:00:51 2022 daemon.debug hostapd: wlan1: STA 86:f4:68:0f:81:c7 IEEE 802.11: authentication OK (FT)
Mon Feb 28 08:00:51 2022 daemon.debug hostapd: wlan1: STA 86:f4:68:0f:81:c7 MLME: MLME-AUTHENTICATE.indication(86:f4:68:0f:81:c7, FT)
Mon Feb 28 08:00:51 2022 daemon.err hostapd: nl80211: kernel reports: key addition failed

@wsldankers
Copy link

I get the same error (on openwrt-21.02.2-ramips-mt7621-dlink_dir-860l-b1).

@StSaens
Copy link

StSaens commented Apr 22, 2022

Also on OpenWrt 22.03-SNAPSHOT r19257-968c1dedc2 / LuCI openwrt-22.03 branch git-22.083.69105-af8e91c
Target Platform: ipq806x/generic (r7800)
Kernel Version: 5.10.110

@ff-mgk
Copy link

ff-mgk commented Jun 8, 2022

Also on
OpenWrt 21.02.3 r16554-1d4dea6d4f / LuCI openwrt-21.02 branch git-22.119.37126-a993714
5.4.188 #0 SMP Sat Apr 16 12:59:34 2022 mips GNU/Linux

@andybjackson
Copy link

Also still on
OpenWrt SNAPSHOT r20020-ebfe66e494 / LuCI Master git-22.175.85555-37477ca
lantiq/xrx200 xRX200 rev 1.2 & ramips/mt7621 MediaTek MT7621 ver:1 eco:3

@pepsinio
Copy link

I have exactly the same setup (R7800 and C6) and exactly the same issue!

@mastum
Copy link

mastum commented Aug 1, 2022

Same error also with 22.03.0-rc6 r19590 and DIR-882 A1, has someone been able to understand the cause?

@ishanjain28
Copy link

This is also happening on,

  1. TP-Link Archer A7 v5 / OpenWrt 21.02.2 r16495-bf0c965af0 / Qualcomm Atheros QCA956X ver 1 rev 0
  2. TP-Link Archer A6 v3 / OpenWrt 21.02.3 r16554-1d4dea6d4f / MediaTek MT7621 ver:1 eco:3
ft_over_ds = 0
ft_psk_generate_local = 1

on both APs

@plantroon
Copy link

This is also happening on TP-Link Archer C7 v5 / OpenWrt 22.03.0 r19685-512e76967f / Qualcomm Atheros QCA956X ver 1 rev 0

@andybjackson
Copy link

Still on OpenWrt SNAPSHOT r20746-a67f484e67.

@andybjackson
Copy link

Progress being made/reported by MW Vogel (Fodiator) here:
https://forum.openwrt.org/t/daemon-err-hostapd-nl80211-kernel-reports-key-addition-failed-is-this-a-problem/100370/32

@andybjackson
Copy link

andybjackson commented Dec 12, 2022

Snapshot seems now incorporates mac80211: update to linux 6.1-rc8 5. Updating my WiFi infra produces daemon.notice hostapd: phy0-ap0: AP-STA-CONNECTED [snip MAC addr] auth_alg=ft.

I still get key addition failed, but it seems not to prevent, or be correlated with failure of, Fast Transition.

The pattern as I roam away and back (with buttery fast transitions) is now:

Mon Dec 12 11:57:40 2022 daemon.err hostapd: nl80211: kernel reports: key addition failed
Mon Dec 12 11:57:40 2022 daemon.notice hostapd: phy0-ap0: STA-OPMODE-N_SS-CHANGED [-mac snip-] 1
Mon Dec 12 11:57:40 2022 daemon.notice hostapd: phy0-ap0: STA-OPMODE-N_SS-CHANGED [-mac snip-] 2
Mon Dec 12 11:57:40 2022 daemon.info hostapd: phy0-ap0: STA [-mac snip-] IEEE 802.11: associated (aid 1)
Mon Dec 12 11:57:40 2022 daemon.notice hostapd: phy0-ap0: AP-STA-CONNECTED [-mac snip-] auth_alg=ft
Mon Dec 12 11:57:52 2022 daemon.notice hostapd: phy0-ap0: AP-STA-DISCONNECTED [-mac snip-]
Mon Dec 12 11:57:52 2022 daemon.err hostapd: nl80211: kernel reports: key addition failed
Mon Dec 12 11:57:52 2022 daemon.notice hostapd: phy0-ap0: STA-OPMODE-N_SS-CHANGED [-mac snip-] 1
Mon Dec 12 11:57:52 2022 daemon.notice hostapd: phy0-ap0: STA-OPMODE-N_SS-CHANGED [-mac snip-] 2
Mon Dec 12 11:57:52 2022 daemon.info hostapd: phy0-ap0: STA [-mac snip-] IEEE 802.11: associated (aid 1)
Mon Dec 12 11:57:52 2022 daemon.notice hostapd: phy0-ap0: AP-STA-CONNECTED [-mac snip-] auth_alg=ft

Does anyone know what STA-OPMODE-N_SS-CHANGED means?

Note this is under WPA2+PSK and not yet WPA3+SAE. At least not yet working for me. Guessing the latter still has something to do with 802.11w Protected Management Frames or/& the extra authentication exchange WPA3 involves.

@IterableTrucks
Copy link

still happening on belink rt3200 with OpenWrt 23.05.0 r23497-6637af95aa

@black-dragon74
Copy link

black-dragon74 commented Feb 6, 2024

People often miss it, check if PMK R1 Push is enabled?

@felipecrs
Copy link

People often miss it, check if PMK R1 Push is enabled?

I tried enabling it in my two APs but the same issue still shows up in my logs.

@bro2020
Copy link

bro2020 commented Mar 16, 2024

OpenWrt r25565-dea42f67ab
Xiaomi Mi Router AX3000T
MERCUSYS MR90X v1
I get messages like this in the log
At the same time, when I walk between points, my phone is simultaneously connected to both

Sat Mar 16 21:47:40 2024 daemon.err hostapd: nl80211: kernel reports: key addition failed
Sat Mar 16 21:47:40 2024 daemon.info hostapd: phy1-ap0: STA b6:ed:c1:ff:ff:ff IEEE 802.11: associated (aid 1)
Sat Mar 16 21:47:40 2024 daemon.notice hostapd: phy1-ap0: AP-STA-CONNECTED b6:ed:c1:ff:ff:ff auth_alg=ft

PS: Everything worked after adding the lines

        option 80211ai '1'                                                              
        option fils '1'

@icecream42
Copy link
Contributor

OpenWrt r25565-dea42f67ab Xiaomi Mi Router AX3000T MERCUSYS MR90X v1 I get messages like this in the log At the same time, when I walk between points, my phone is simultaneously connected to both

Sat Mar 16 21:47:40 2024 daemon.err hostapd: nl80211: kernel reports: key addition failed
Sat Mar 16 21:47:40 2024 daemon.info hostapd: phy1-ap0: STA b6:ed:c1:ff:ff:ff IEEE 802.11: associated (aid 1)
Sat Mar 16 21:47:40 2024 daemon.notice hostapd: phy1-ap0: AP-STA-CONNECTED b6:ed:c1:ff:ff:ff auth_alg=ft

PS: Everything worked after adding the lines

        option 80211ai '1'                                                              
        option fils '1'

Did you compile hostapd with FILS support? It looks like it's only enabled in wpa_supplicants full and p2p config by default.

@bro2020
Copy link

bro2020 commented Mar 19, 2024

Did you compile hostapd with FILS support?

Oh no. I downloaded a ready-made snapshot for my router models

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
flyspray kernel pull request/issue with Linux kernel related changes
Projects
None yet
Development

No branches or pull requests