I’d like to report a WPA Enterprise & EAP Radius auth bug. Some clients (an iPhone and a MacBook) were getting kicked out of the wifi network and the devices prompted for new login. I’d spent some time troubleshooting the problem and here’s what I found out.
dmesg
[49605.559132] Rekeying PTK for STA ab:ab:ab:ab:ab:ab but driver can't safely do that.
[53770.070277] ath10k_pci 0000:02:00.0: Spurious quick kickout for STA ab:ab:ab:ab:ab:ab
syslog
kernel: [67413.047338] Rekeying PTK for STA ab:ab:ab:ab:ab:ab but driver can't safely do that.
I researched this issue and found a related thread on the OpenWRT forum: Wifi WPA2-Enterprise EAP-TLS connection drops - Installing and Using OpenWrt - OpenWrt Forum
I implemented a change to /etc/config/wireless where I added:
option eap_reauth_period '0'
to the WPA Enterprise wireless interfaces.
After adding this config & restarting the wireless interfaces the disconnect & login prompt issue is gone.
Hopefully this helps someone. Perhaps it would be worthwhile to add this as a default.