Problem with Eduroam Connection

[VulgarBulgar]

Hello everyone!

For about the past month I've had problems with connecting to eduroam. Essentially I'll connect and after >5 minutes my connection will disconnect, I should note that it's only eduroam that has this problem, but then again it's the only wpa2-eap network I use. I was thinking it might be a problem between caused by the powersaving options but when I tested for that it wasn't the case. I use NetworkManager with wpa_supplicant if it makes any difference.

Here's some select output from dmesg:

Code: Select all

[Jan28 00:49] wlp6s0: authenticate with ${BSSID_1}
[  +0.498109] wlp6s0: send auth to ${BSSID_1} (try 1/3)
[  +0.023181] wlp6s0: authenticated
[  +0.000620] wlp6s0: associate with ${BSSID_1} (try 1/3)
[  +0.020707] wlp6s0: RX AssocResp from ${BSSID_1} (capab=0x1111 status=0 aid=6)
[  +0.029944] wlp6s0: associated
[  +0.213434] wlp6s0: Limiting TX power to 23 (23 - 0) dBm as advertised by ${BSSID_1}
[ +34.033058] wlp6s0: deauthenticating from ${BSSID_1} by local choice (Reason: 3=DEAUTH_LEAVING)
[  +2.870163] wlp6s0: authenticate with ${BSSID_2}
[  +0.172071] wlp6s0: send auth to ${BSSID_2} (try 1/3)
[  +0.003605] wlp6s0: authenticated
[  +0.000481] wlp6s0: associate with ${BSSID_2} (try 1/3)
[  +0.047195] wlp6s0: RX AssocResp from ${BSSID_2} (capab=0x1411 status=0 aid=2)
[  +0.032869] wlp6s0: associated
[  +0.112733] wlp6s0: Limiting TX power to 20 (20 - 0) dBm as advertised by ${BSSID_2}
[Jan28 00:50] wlp6s0: deauthenticating from ${BSSID_2} by local choice (Reason: 3=DEAUTH_LEAVING)
[  +2.880898] wlp6s0: authenticate with ${BSSID_1}
[  +0.034900] wlp6s0: send auth to ${BSSID_1} (try 1/3)
[  +0.003516] wlp6s0: authenticated
[  +0.003710] wlp6s0: associate with ${BSSID_1} (try 1/3)
[  +0.017594] wlp6s0: RX AssocResp from ${BSSID_1} (capab=0x1111 status=0 aid=3)
[  +0.034074] wlp6s0: associated
[  +0.053878] wlp6s0: Limiting TX power to 23 (23 - 0) dBm as advertised by ${BSSID_1}
[ +33.995137] wlp6s0: deauthenticating from ${BSSID_1} by local choice (Reason: 3=DEAUTH_LEAVING)
[Jan28 00:51] wlp6s0: authenticate with ${BSSID_2}
[  +0.032212] wlp6s0: send auth to ${BSSID_2} (try 1/3)
[  +0.003566] wlp6s0: authenticated
[  +0.006703] wlp6s0: associate with ${BSSID_2} (try 1/3)
[  +0.014000] wlp6s0: RX AssocResp from ${BSSID_2} (capab=0x1411 status=0 aid=1)
[  +0.034059] wlp6s0: associated
[  +0.063666] wlp6s0: Limiting TX power to 20 (20 - 0) dBm as advertised by ${BSSID_2}
[ +33.992225] wlp6s0: deauthenticating from ${BSSID_2} by local choice (Reason: 3=DEAUTH_LEAVING)
[  +2.850887] wlp6s0: authenticate with ${BSSID_1}
[  +0.036953] wlp6s0: send auth to ${BSSID_1} (try 1/3)
[  +0.003495] wlp6s0: authenticated
[  +0.004866] wlp6s0: associate with ${BSSID_1} (try 1/3)
[  +0.016275] wlp6s0: RX AssocResp from ${BSSID_1} (capab=0x1111 status=0 aid=3)
[  +0.033502] wlp6s0: associated
[  +0.055976] wlp6s0: Limiting TX power to 23 (23 - 0) dBm as advertised by ${BSSID_1}
[Jan28 00:52] wlp6s0: deauthenticating from ${BSSID_1} by local choice (Reason: 3=DEAUTH_LEAVING)
[  +2.820854] wlp6s0: authenticate with ${BSSID_2}
[  +0.034304] wlp6s0: send auth to ${BSSID_2} (try 1/3)
[  +0.040987] wlp6s0: authenticated
[  +0.003478] wlp6s0: associate with ${BSSID_2} (try 1/3)
[  +0.035970] wlp6s0: RX AssocResp from ${BSSID_2} (capab=0x1411 status=0 aid=1)
[  +0.033885] wlp6s0: associated
[  +0.000090] wlp6s0: Limiting TX power to 20 (20 - 0) dBm as advertised by ${BSSID_2}
[ +34.053868] wlp6s0: deauthenticating from ${BSSID_2} by local choice (Reason: 3=DEAUTH_LEAVING)
[  +2.826893] wlp6s0: authenticate with ${BSSID_1}
[  +0.036929] wlp6s0: send auth to ${BSSID_1} (try 1/3)
[  +0.003577] wlp6s0: authenticated
[  +0.005581] wlp6s0: associate with ${BSSID_1} (try 1/3)
[  +0.015508] wlp6s0: RX AssocResp from ${BSSID_1} (capab=0x1111 status=0 aid=1)
[  +0.034805] wlp6s0: associated
[  +0.000097] wlp6s0: Limiting TX power to 23 (23 - 0) dBm as advertised by ${BSSID_1}
[Jan28 00:53] wlp6s0: deauthenticating from ${BSSID_1} by local choice (Reason: 3=DEAUTH_LEAVING)

and rarely it does this:

Code: Select all

[Jan28 01:53] wlp6s0: authenticate with ${BSSID_1}
[  +0.032188] wlp6s0: send auth to ${BSSID_1} (try 1/3)
[  +0.003462] wlp6s0: authenticated
[  +0.000274] wlp6s0: associate with ${BSSID_1} (try 1/3)
[  +0.020951] wlp6s0: RX AssocResp from ${BSSID_1} (capab=0x1411 status=0 aid=1)
[  +0.035604] wlp6s0: associated
[  +0.000079] wlp6s0: Limiting TX power to 20 (20 - 0) dBm as advertised by ${BSSID_1}
[ +33.943680] wlp6s0: deauthenticating from ${BSSID_1} by local choice (Reason: 3=DEAUTH_LEAVING)
[  +2.987855] wlp6s0: authenticate with ${BSSID_2}
[  +0.034886] wlp6s0: send auth to ${BSSID_2} (try 1/3)
[  +0.003659] wlp6s0: authenticated
[  +0.003220] wlp6s0: associate with ${BSSID_2} (try 1/3)
[  +0.018311] wlp6s0: RX AssocResp from ${BSSID_2} (capab=0x1111 status=0 aid=6)
[  +0.034251] wlp6s0: associated
[  +0.052214] wlp6s0: Limiting TX power to 23 (23 - 0) dBm as advertised by ${BSSID_2}
[Jan28 01:54] wlp6s0: deauthenticating from ${BSSID_2} by local choice (Reason: 3=DEAUTH_LEAVING)
[  +2.907037] wlp6s0: authenticate with ${BSSID_1}
[  +0.032286] wlp6s0: send auth to ${BSSID_1} (try 1/3)
[  +0.003592] wlp6s0: authenticated
[  +0.003105] wlp6s0: associate with ${BSSID_1} (try 1/3)
[  +0.018184] wlp6s0: RX AssocResp from ${BSSID_1} (capab=0x1411 status=0 aid=2)
[  +0.035318] wlp6s0: associated
[  +0.050943] wlp6s0: Limiting TX power to 20 (20 - 0) dBm as advertised by ${BSSID_1}
[ +33.965969] wlp6s0: deauthenticating from ${BSSID_1} by local choice (Reason: 3=DEAUTH_LEAVING)
[  +2.990683] wlp6s0: authenticate with ${BSSID_3}
[  +0.162505] wlp6s0: send auth to ${BSSID_3} (try 1/3)
[  +0.003482] wlp6s0: authenticated
[  +0.002882] wlp6s0: associate with ${BSSID_3} (try 1/3)
[  +0.019277] wlp6s0: RX AssocResp from ${BSSID_3} (capab=0x1411 status=0 aid=1)
[  +0.034675] wlp6s0: associated
[  +0.000217] wlp6s0: Limiting TX power to 20 (20 - 0) dBm as advertised by ${BSSID_3}
[Jan28 01:55] wlp6s0: deauthenticating from ${BSSID_3} by local choice (Reason: 3=DEAUTH_LEAVING)
[  +3.392735] wlp6s0: authenticate with ${BSSID_1}
[  +0.033320] wlp6s0: send auth to ${BSSID_1} (try 1/3)
[  +0.003524] wlp6s0: authenticated
[  +0.002874] wlp6s0: associate with ${BSSID_1} (try 1/3)
[  +0.047764] wlp6s0: RX AssocResp from ${BSSID_1} (capab=0x1411 status=0 aid=2)
[  +0.034149] wlp6s0: associated
[  +0.052122] wlp6s0: Limiting TX power to 20 (20 - 0) dBm as advertised by ${BSSID_1}
[Jan28 01:56] wlp6s0: deauthenticating from ${BSSID_1} by local choice (Reason: 3=DEAUTH_LEAVING)
[  +2.990354] wlp6s0: authenticate with ${BSSID_4}
[  +0.495002] wlp6s0: send auth to ${BSSID_4} (try 1/3)
[  +0.010896] wlp6s0: send auth to ${BSSID_4} (try 2/3)
[  +0.014826] wlp6s0: send auth to ${BSSID_4} (try 3/3)
[  +0.011212] wlp6s0: authentication with ${BSSID_4} timed out
[  +1.463564] wlp6s0: authenticate with ${BSSID_5}
[  +0.498205] wlp6s0: send auth to ${BSSID_5} (try 1/3)
[  +0.010537] wlp6s0: send auth to ${BSSID_5} (try 2/3)
[  +0.010365] wlp6s0: send auth to ${BSSID_5} (try 3/3)
[  +0.011352] wlp6s0: authentication with ${BSSID_5} timed out
[  +1.503782] wlp6s0: authenticate with ${BSSID_6}
[  +0.179987] wlp6s0: send auth to ${BSSID_6} (try 1/3)
[  +0.009999] wlp6s0: send auth to ${BSSID_6} (try 2/3)
[  +0.010339] wlp6s0: send auth to ${BSSID_6} (try 3/3)
[  +0.010193] wlp6s0: authentication with ${BSSID_6} timed out

Any help would be greatly appreciated!

[wanne32]

https://eduroam.org/configuration-assistant-tool-cat/

[VulgarBulgar]

https://eduroam.org/configuration-assistant-tool-cat/

As useful as that is, my university doesn't have a config and when I pestered them about it they didn't reply. Further yet it's not the only way to connect and what I had before worked well (until it didn't), so I know it works without having to deal with my IT department.

[logrusx]

when I pestered them about it they didn't reply.

Sounds familiar. Any chance we reside in one country?

what I had before worked well (until it didn't)

If that's true, it doesn't sound like you can do anything about it.

so I know it works without having to deal with my IT department.

No, you don't. And if we're talking about the same country you have to go out of your way to do the job of somebody else and make them actually apply the result...

Best Regards,
Georgi

[wanne32]

As useful as that is, my university doesn't have a config and when I pestered them about it they didn't reply. Further yet it's not the only way to connect and what I had before worked well (until it didn't), so I know it works without having to deal with my IT department.

It is not the only way. But it is almost impossible to configure PEAP/MSCHAPv2 by hand in a way that it isn't throwing passwords at everyone who asks.
I think subject_match/altsubject_match/domain_match are still undocumented in wpa_supplicnat and NetworkManager. Windows and Android doesn't allow so set it at all in the GUI and you have to supply xml-configs. I doubt that it is better on iOS/Mac.
Had to fight here for a while too. But published passwords help. Especially since most universities are required to use the same passwords as for important stuff like setting marks and exmatriculating.

Essentially I'll connect and after >5 minutes my connection will disconnect

Are you using ARM? Otherwise sounds like a problem that is AP related. I know that android and iOS have blacklists for faulty BSSIDs. So if there are a few working ones most people won't recognize.
I would test iwd just to double check:
For PEAP/MSCHAPV2 the Security part should look something like that:

Code: Select all

[Security]
EAP-Method=PEAP
EAP-Identity={anonymous_identity}
EAP-PEAP-CACert={ca_cert}
EAP-PEAP-ServerDomainMask={servers}
EAP-PEAP-Phase2-Method=MSCHAPV2
EAP-PEAP-Phase2-Identity={username}@{realm}
EAP-PEAP-Phase2-Password={password}