Comment 17 for bug 459716

The following happens in the wpa_supplicant, driver_wext.c lines 2115 and further

#ifdef CONFIG_IEEE80211W
 switch (params->mgmt_frame_protection) {
 case NO_MGMT_FRAME_PROTECTION:
  value = IW_AUTH_MFP_DISABLED;
  break;
 case MGMT_FRAME_PROTECTION_OPTIONAL:
  value = IW_AUTH_MFP_OPTIONAL;
  break;
 case MGMT_FRAME_PROTECTION_REQUIRED:
  value = IW_AUTH_MFP_REQUIRED;
  break;
 };
 if (wpa_driver_wext_set_auth_param(drv, IW_AUTH_MFP, value) < 0)
  ret = -1;
#endif /* CONFIG_IEEE80211W */

the ndiswrapper wireless driver (and maybe others?) does not implement IW_AUTH_MFP, and returns -EOPNOTSUPP;

A fix is needed for ndiswrapper, which can be, for now, to accept the first two frame protection values, and fail on IW_AUTH_MFP_REQUIRED only.