I have a similar problem.
Well, the iwconfig man page says we should be able to use "iwconfig eth0 ap 00:60:1D:01:23:45" to actually associate with an Access point, but when I try, I get an error mesage.
[root@unknown001ff3ce7028 etc]# iwconfig eth1 ap 00:25:9C:3B:EF:F9
Error for wireless request "Set AP Address" (8B14) :
SET failed on device eth1 ; Invalid argument.
The AP is unsecured (open authentication) so I didn't set up any keys. wpa_supplicant is running but has no configured credentials (yet).
Other relevant facts:
Distro is Fedora 10
Platform is a Macbook Pro (Aluminum body)
Kernel is 126.96.36.199-170.2.94.fc10.i686
lspci shows that my BCM4328 is using wl as the driver
lsmod shows no "bc43" or "ssb" or "ndiswrapper" modules loaded.
lsmod does show "wl" is loaded
I built wl.ko from source I downloaded from http://www.broadcom.com/support/802.11/linux_sta.php
I am hand editing /etc/sysconfig/network-scripts/ifcfg-eth* by hand
I have disabled NetworkManager using chkconfig
"iwlist eth1 scanning" shows me the expected APs so the hardware is working
What else can I share that would help point to the problem?