Bug 1072789

Summary: Network manager has broken WPA2 support
Product: [openSUSE] openSUSE Tumbleweed Reporter: Massimo Burcheri <massimo.burcheri>
Component: NetworkAssignee: openSUSE GNOME <os.gnome.maintainers>
Status: RESOLVED FIXED QA Contact: E-mail List <qa-bugs>
Severity: Normal    
Priority: P3 - Medium CC: ailin.nemui, arno.beekman, chcao, dimstar, faorg-1411, forgotten_7BWRdkqaMt, forgotten_MWQB5mPGMA, jshand2013, massimo.burcheri
Version: Current   
Target Milestone: ---   
Hardware: Other   
OS: Other   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Massimo Burcheri 2017-12-14 06:47:39 UTC
TW Update 13.12.2017 has broken network managers encryption support. Connection was failing and creating another connection does not provide any security items other than "None" in the applet.

Currently installed:
wpa_supplicant-2.6-4.2.src
NetworkManager-1.8.4-3.2.src
NetworkManager-applet-1.8.6-1.2.src

Using Wicked as a workaround is working.
Comment 1 Forgotten User MWQB5mPGMA 2017-12-15 08:05:19 UTC
Same problem here on multiple tumbleweed machines.

See also https://forums.opensuse.org/showthread.php/528426-No-Wi-Fi-security-available-in-NetworkManager-connection-editor

Used nmtui-edit as workaround.
Comment 2 Forgotten User 7BWRdkqaMt 2017-12-17 17:42:02 UTC
This is the log I get when I start nm-applet from terminal and I select secure network:
** (nm-applet:11403): WARNING **: Couldn't load UI builder resource /org/freedesktop/network-manager-applet/ws-wep-key.ui: The resource at “/org/freedesktop/network-manager-applet/ws-wep-key.ui” does not exist

** (nm-applet:11403): WARNING **: Couldn't load UI builder resource /org/freedesktop/network-manager-applet/ws-wep-key.ui: The resource at “/org/freedesktop/network-manager-applet/ws-wep-key.ui” does not exist

** (nm-applet:11403): WARNING **: Couldn't load UI builder resource /org/freedesktop/network-manager-applet/ws-leap.ui: The resource at “/org/freedesktop/network-manager-applet/ws-leap.ui” does not exist

** (nm-applet:11403): WARNING **: Couldn't load UI builder resource /org/freedesktop/network-manager-applet/ws-dynamic-wep.ui: The resource at “/org/freedesktop/network-manager-applet/ws-dynamic-wep.ui” does not exist

** (nm-applet:11403): WARNING **: Couldn't load UI builder resource /org/freedesktop/network-manager-applet/ws-wpa-psk.ui: The resource at “/org/freedesktop/network-manager-applet/ws-wpa-psk.ui” does not exist

** (nm-applet:11403): WARNING **: Couldn't load UI builder resource /org/freedesktop/network-manager-applet/ws-wpa-eap.ui: The resource at “/org/freedesktop/network-manager-applet/ws-wpa-eap.ui” does not exist
Comment 3 Barno B 2017-12-18 23:27:53 UTC
Same problem here:
Opensuse tumbleweed XFCE, latest dups

nmtui works for WPA/WPA2 personal not for WPA/WPA2 Enterprise.

the security option in nm-applet hasa only one option "None".
When a connection is setup using nmtui with security, opening and saving it from nm-applet sets it back to "None"
Comment 4 Rob A 2017-12-19 21:44:03 UTC
Likewise I haven't been able to connect to an existing or new WPA connection with nm-applet for 10 days.  Security of existing connections is 'None', new connections show a dialog requiring authentication but 'wi-fi security' is empty and 'connect' button disabled.

nmtui-edit shows the correct password, but nmtui-connect cannot connect.

Dec 19 21:26:52 ostw NetworkManager[1433]: <debug> [1513718812.6345] device[0x55edc7ab2ce0] (wlp2s0): add_pending_action (1): 'queued-state-change-disconnected'
Dec 19 21:26:52 ostw NetworkManager[1433]: <warn>  [1513718812.6344] device (wlp2s0): Activation: failed for connection 'mywifi'
Dec 19 21:26:52 ostw NetworkManager[1433]: <debug> [1513718812.6325] policy: connection 'mywifi' failed to autoconnect; 4 tries left
Dec 19 21:26:52 ostw NetworkManager[1433]: <debug> [1513718812.6323] device[0x55edc7ab2ce0] (wlp2s0): remove_pending_action (0): 'activation-0x55edc7b3c6b0'
Dec 19 21:26:52 ostw NetworkManager[1433]: <debug> [1513718812.6323] active-connection[0x55edc7b3c6b0]: check-master-ready: not signalling (state deactivated, no master)
Dec 19 21:26:52 ostw NetworkManager[1433]: <debug> [1513718812.6319] active-connection[0x55edc7b3c6b0]: set state deactivated (was activating)
Dec 19 21:26:52 ostw NetworkManager[1433]: <info>  [1513718812.6314] device (wlp2s0): state change: config -> failed (reason 'ssid-not-found', internal state 'managed')
Dec 19 21:26:52 ostw NetworkManager[1433]: <warn>  [1513718812.6313] device (wlp2s0): Activation: (wifi) association took too long, failing activation
Dec 19 21:26:45 ostw NetworkManager[1433]: <info>  [1513718805.4668] device (wlp2s0): supplicant interface state: authenticating -> disconnected
Dec 19 21:26:45 ostw kernel: wlp2s0: authentication with 00:18:aa:aa:aa:aa timed out
Dec 19 21:26:44 ostw kernel: wlp2s0: send auth to 00:18:aa:aa:aa:aa (try 3/3)
Dec 19 21:26:43 ostw kernel: wlp2s0: send auth to 00:18:aa:aa:aa:aa (try 2/3)
Dec 19 21:26:42 ostw NetworkManager[1433]: <debug> [1513718802.7569] device[0x55edc7ab2ce0] (wlp2s0): wifi-scan: scanning-state: idle
Dec 19 21:26:42 ostw NetworkManager[1433]: <info>  [1513718802.7568] device (wlp2s0): supplicant interface state: scanning -> authenticating
Dec 19 21:26:42 ostw kernel: wlp2s0: send auth to 00:18:aa:aa:aa:aa (try 1/3)
Dec 19 21:26:42 ostw kernel: wlp2s0: authenticate with 00:18:aa:aa:aa:aa
Dec 19 21:26:41 ostw NetworkManager[1433]: <debug> [1513718801.7534] device[0x55edc7ab2ce0] (wlp2s0): wifi-scan: scan-done callback: successful
Dec 19 21:26:38 ostw NetworkManager[1433]: <debug> [1513718798.4796] device[0x55edc7ab2ce0] (wlp2s0): wifi-scan: scanning-state: scanning
Dec 19 21:26:38 ostw NetworkManager[1433]: <info>  [1513718798.4795] device (wlp2s0): supplicant interface state: disconnected -> scanning
Dec 19 21:26:33 ostw NetworkManager[1433]: <info>  [1513718793.4743] device (wlp2s0): supplicant interface state: authenticating -> disconnected
Dec 19 21:26:33 ostw kernel: wlp2s0: authentication with 00:18:aa:aa:aa:aa timed out
Dec 19 21:26:32 ostw kernel: wlp2s0: send auth to 00:18:aa:aa:aa:aa (try 3/3)
Dec 19 21:26:31 ostw kernel: wlp2s0: send auth to 00:18:aa:aa:aa:aa (try 2/3)
Dec 19 21:26:30 ostw NetworkManager[1433]: <debug> [1513718790.7057] device[0x55edc7ab2ce0] (wlp2s0): wifi-scan: scan-done callback: successful
Dec 19 21:26:30 ostw NetworkManager[1433]: <debug> [1513718790.6976] device[0x55edc7ab2ce0] (wlp2s0): wifi-scan: scanning-state: idle
Dec 19 21:26:30 ostw kernel: wlp2s0: send auth to 00:18:aa:aa:aa:aa (try 1/3)
Dec 19 21:26:30 ostw NetworkManager[1433]: <info>  [1513718790.6976] device (wlp2s0): supplicant interface state: scanning -> authenticating
Dec 19 21:26:30 ostw kernel: wlp2s0: authenticate with 00:18:aa:aa:aa:aa
Dec 19 21:26:27 ostw NetworkManager[1433]: <debug> [1513718787.4242] device[0x55edc7ab2ce0] (wlp2s0): wifi-scan: scanning-state: scanning
Dec 19 21:26:27 ostw NetworkManager[1433]: <info>  [1513718787.4241] device (wlp2s0): supplicant interface state: disconnected -> scanning
Dec 19 21:26:27 ostw NetworkManager[1433]: <debug> [1513718787.4180] sup-iface[0x7f8ea0007bc0,wlp2s0]: assoc[0x55edc7b84600]: association request successful
Dec 19 21:26:27 ostw NetworkManager[1433]: <info>  [1513718787.4036] device (wlp2s0): supplicant interface state: disabled -> disconnected
Dec 19 21:26:27 ostw NetworkManager[1433]: <debug> [1513718787.3824] device[0x55edc7ab2ce0] (wlp2s0): activation-stage: complete activate_stage2_device_config,2 (id 3692)
Dec 19 21:26:27 ostw NetworkManager[1433]: <debug> [1513718787.3823] sup-iface[0x7f8ea0007bc0,wlp2s0]: assoc[0x55edc7b84600]: starting association...
Dec 19 21:26:27 ostw NetworkManager[1433]: <info>  [1513718787.3823] Config: added 'psk' value '<hidden>'
Dec 19 21:26:27 ostw NetworkManager[1433]: <info>  [1513718787.3823] Config: added 'key_mgmt' value 'WPA-PSK'
Dec 19 21:26:27 ostw NetworkManager[1433]: <info>  [1513718787.3823] Config: added 'scan_ssid' value '1'
Dec 19 21:26:27 ostw NetworkManager[1433]: <info>  [1513718787.3822] Config: added 'ssid' value 'mywifi'
Dec 19 21:26:27 ostw NetworkManager[1433]: <info>  [1513718787.3822] device (wlp2s0): Activation: (wifi) connection 'mywifi' has security, and secrets exist.  No new secrets needed.

wpa_supplicant.log:
wlp2s0: SME: Trying to authenticate with 00:18:aa:aa:aa:aa (SSID='mywifi' freq=2472 MHz)
wlp2s0: SME: Trying to authenticate with 00:18:aa:aa:aa:aa (SSID='mywifi' freq=2472 MHz)
wlp2s0: SME: Trying to authenticate with 00:18:aa:aa:aa:aa (SSID='mywifi' freq=2472 MHz)
wlp2s0: SME: Trying to authenticate with 00:18:aa:aa:aa:aa (SSID='mywifi' freq=2472 MHz)
wlp2s0: CTRL-EVENT-DISCONNECTED bssid=00:18:aa:aa:aa:aa reason=3 locally_generated=1
wlp2s0: SME: Trying to authenticate with 00:18:aa:aa:aa:aa (SSID='mywifi' freq=2472 MHz)
wlp2s0: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="mywifi" auth_failures=1 duration=10 reason=CONN_FAILED
wlp2s0: CTRL-EVENT-SSID-REENABLED id=0 ssid="mywifi"
wlp2s0: SME: Trying to authenticate with 00:18:aa:aa:aa:aa (SSID='mywifi' freq=2472 MHz)
wlp2s0: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="mywifi" auth_failures=2 duration=20 reason=CONN_FAILED
wlp2s0: Reject scan trigger since one is already pending
wlp2s0: Reject scan trigger since one is already pending
Comment 5 Rob A 2017-12-19 21:55:58 UTC
wicked is not working for me:

wicked ifstatus all
wicked: /org/opensuse/Network/Interface.getManagedObjects failed. Server responds:
wicked: org.freedesktop.DBus.Error.ServiceUnknown: The name org.opensuse.Network was not provided by any .service files
wicked: Couldn't refresh list of active network interfaces
Comment 6 Rob A 2017-12-22 22:39:24 UTC
It seems nmtui-edit now needs to be run as root to add a connection, and 'Available to all users' is needed for nmtui-connect to work (even for connections that were previously configured for the current user with nm-applet).
Comment 7 Ailin Nemui 2017-12-27 15:32:03 UTC
same
Comment 8 Dominique Leuenberger 2017-12-27 16:05:29 UTC
Apologies for the delay here guys... I think I tracked this down to the switch of the buildsystem to meson - which in turn does not produce complete binaries (yet)

A set of test packages should shortly land in a test repo at
https://download.opensuse.org/repositories/home:/dimstar:/boo1072789/openSUSE_Factory

Please give those a test-spin and if things are back to working for you, I'll submit those into the distro asap.
Comment 9 Barno B 2017-12-27 16:08:55 UTC
3 dup's later still the same here as well

Is anyone looking into this, or is this supposed to be fixed by the Gnome devs?

I get the feeling a certain file containing a list of security protocols isn't properly loading. I cloned the source code, but it takes a while to trace everything...
Comment 10 Barno B 2017-12-27 16:11:21 UTC
(In reply to Barno B from comment #9)
> 3 dup's later still the same here as well
> 
> Is anyone looking into this, or is this supposed to be fixed by the Gnome
> devs?
> 
> I get the feeling a certain file containing a list of security protocols
> isn't properly loading. I cloned the source code, but it takes a while to
> trace everything...

oops i was writing this at the same time as Dominque's answer...

I'll check out the test files now, thanks Dominique!
Comment 11 Barno B 2017-12-27 16:26:28 UTC
(In reply to Barno B from comment #9)
> 3 dup's later still the same here as well
> 
> Is anyone looking into this, or is this supposed to be fixed by the Gnome
> devs?
> 
> I get the feeling a certain file containing a list of security protocols
> isn't properly loading. I cloned the source code, but it takes a while to
> trace everything...

Hi Dominique,

Thanks for the test files, they seem to work like a charm here!

I did a vendor switch on these files:
NetworkManager-applet
NetworkManager-applet-lang
NetworkManager-connection-editor
libnma0
nma-data

and additionally installed this one:
NetworkManager-applet-debuginfo

using the yast panel. It finished without any errors, and immediately when I opened NetworkManager-applet all the security options were showing up!
I can select the one I need and enter a password, which show up in nmtui.
Seems like a nice xmas present to me...

gr
Arno
Comment 12 Dominique Leuenberger 2017-12-27 17:07:35 UTC
Thanks for the tests - they match what I could reproduce in a VM

The fix is en route to Tumbleweed proper and already showed up in the Tumbleweed-Update channel.