mirror of
https://github.com/spr-networks/super.git
synced 2026-04-25 04:45:51 +03:00
[GH-ISSUE #45] [UI Fix] Warn when overwriting a pending device entry #9
Labels
No labels
blocked
bug
documentation
enhancement
fixed
fixed ✅
hardening
implemented
installer
multicast
p1
p2
pending
podman
pull-request
security
testing
v1
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/super#9
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @rgov on GitHub (Aug 1, 2022).
Original GitHub issue: https://github.com/spr-networks/super/issues/45
I can only have one device in "pending" state (where the MAC address is unassigned until the device connects) at a time. If I try to add another one, it silently replaces the first.
It should be possible to have multiple pending devices because they will connect with different passwords and therefore can be differentiated.
@lts-rad commented on GitHub (Aug 5, 2022):
This is a limitation of WPA3 support and using the wildcard MAC to accept a new device without knowing it's MAC address. ahead of time. When a device does authenticate successfully, the "pending" identifier is assigned to that device's MAC address.
Essentially -- WPA3 is a zero knowledge authentication protocol. The server must know the same password as the client ahead of time, otherwise the server has to have the client reconnect and retry if the server guesses the wrong password. So only one password at a time can be used with the password assigned to the wildcard MAC.
This differs from WPA2 where it would be possible to run multiple PBKDF2 hashes to find a matching password.
As a work around, a user can specify the MAC address of multiple new devices before they connect.
Docs might need to better reflect this
@rgov commented on GitHub (Aug 5, 2022):
Thanks for context. I think not only docs but a UI alert should appear and get confirmation before proceeding to delete a previously configured host.
@lts-po commented on GitHub (Sep 8, 2022):
fixed in dev
github.com/spr-networks/super@15bfa14296