SliTaz Forum

PEAP/TTLS Wifi configuration (eg. eduroam) Failing

(6 posts) (4 voices)

• Started 9 years ago by K3nn3th
• Latest reply from K3nn3th
• This topic is not resolved

Tags:

No tags yet.

1. 

   K3nn3th
   

   offline

   Member

   Hey folks,

   I'm having trouble trying to connect to a PEAP secured network with slitaz (where one uses a username + password to connect) via WiFi.
   I tried to set up a network condig file for /etc/init.d/network.sh but i cant get it to work.

   trying to use wpa_supplicant also yielded no success yet.

   What is the easiest way to do this?

   maybe somebody can recommend a setup.
   here's my config:
   ------------------------------------------------
   # /etc/network.conf: SliTaz system wide networking configuration.
   # Config file used by: /etc/init.d/network.sh
   #

   # Set default interface.
   INTERFACE="eth0"

   # Dynamic IP address.
   # Enable/disable DHCP client at boot time.
   DHCP="yes"

   # Static IP address.
   # Enable/disable static IP at boot time.
   STATIC="no"

   # Set IP address and netmask for a static IP.
   IP="192.168.0.6"
   NETMASK="255.255.255.0"

   # Set broadcast address
   BROADCAST="192.168.0.255"

   # Set route gateway for a static IP.
   GATEWAY="192.168.0.1"

   # Set domain name
   DOMAIN=""

   # Set DNS server for a static IP.
   DNS_SERVER="192.168.0.1"

   # Wifi connection.
   # Enable/disable wireless connection at boot time.
   WIFI="yes"

   # Wifi interface (iwconfig) and ESSID.
   WIFI_INTERFACE="wlan0"
   WIFI_ESSID="eduroam"
   WIFI_KEY=""
   WIFI_KEY_TYPE="PEAP"
   WIFI_AP="MSCHAP2"
   WIFI_MODE="managed"
   WIFI_CHANNEL=""
   WPA_DRIVER=""

   # Wifi network requiring a user and password
   WIFI_IDENTITY="allan"
   WIFI_PASSWORD="XXXXXXX" // changed for obvious reasons

   Posted 9 years ago #
2. 

   Aleksej
   

   offline

   Coder-hobbyist

   Hi K3nn3th,

   Really I'm not a Pro in the Wi-Fi setup, and can't setup your case in my home. I only hope this can help you.

   Read /etc/wpa_supplicant.conf carefully. It is very long and have some hints about PEAP:

   # EAP-PEAP/MSCHAPv2 configuration for RADIUS servers that use the new peaplabel
   # (e.g., Radiator)
   #network={
   # ssid="example"
   # key_mgmt=WPA-EAP
   # eap=PEAP
   # identity="user@example.com"
   # password="foobar"
   # ca_cert="/etc/cert/ca.pem"
   # phase1="peaplabel=1"
   # phase2="auth=MSCHAPV2"
   # priority=10
   #}

   So, it seems like you need to uncomment (remove "#" from begin) these lines, and fill your values, and maybe restart Wi-Fi (how?) in your SliTaz.

   Posted 9 years ago #
3. 

   K3nn3th
   

   offline

   Member

   yeah i found that, too. but cant get it work. i get:

   TLS: Server used client certificate
   wlan0: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=10 depth=0 subject='/C=DE/O=Otto-von-Guericke-Universitaet Magdeburg/OU=Universitaetsrechenzentrum/CN=radius1.netz.uni-magdeburg.de' err='Server used client certificate'
   SSL: SSL3 alert: write (local SSL3 detected an error):fatal:certificate unknown
   OpenSSL: openssl_handshake - SSL_connect error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
   wlan0: CTRL-EVENT-EAP-FAILURE EAP authentication failed
   wlan0: Authentication with 00:23:04:36:1a:21 timed out.

   thanks though..

   Another thing:
   i found out slitaz's /etc/init.d/network.sh uses wpa_supplicant, aswell.

   It'd be nice to use that, so i could just add another fitting .config for network.sh to my collection.

   can anyone help me with this?

   my current config looks like this:

   ----------------------------------------------------------------

   # /etc/network.conf: SliTaz system wide networking configuration.
   # Config file used by: /etc/init.d/network.sh
   #

   # Set default interface.
   INTERFACE="wlan0"

   # Dynamic IP address.
   # Enable/disable DHCP client at boot time.
   DHCP="yes"

   # Set broadcast address
   BROADCAST="192.168.0.255"

   # Wifi connection.
   # Enable/disable wireless connection at boot time.
   WIFI="yes"

   # Wifi interface (iwconfig) and ESSID.
   WIFI_INTERFACE="wlan0"
   WIFI_ESSID="OvGU-802.1X"
   WIFI_KEY=""
   WIFI_KEY_TYPE="WPA-EAP"
   WIFI_AP="any"
   WIFI_MODE="managed"
   WIFI_CHANNEL=""
   WPA_DRIVER="nl80211"

   # Wifi network requiring a user and password
   WIFI_IDENTITY="allan"
   WIFI_PASSWORD="XXX"

   ----------------------------------------------------------------

   my output is this:

   #sudo /etc/init.d/network.sh restart /home/tux/.network/UniversityWifi
   stopping all interfaces
   Killing all daemons
   killall: udhcpc: no process killed
   Shutting down wifi card
   ifconfig: SIOCSIFFLAGS: Operation not possible due to RF-kill
   Configuring wlan0... [ Done ]
   Starting udhcpc client on: wlan0...
   Selected interface 'wlan0'
   Failed to connect to non-global ctrl_ifname: wlan0 error: Connection refused

   Posted 9 years ago #
4. 

   Anonymous
   

   offline

   Unregistered

   I don't get it. Do you want Static IP or not?

   Because once you have:

   # Static IP address.
   # Enable/disable static IP at boot time.
   STATIC="no"

   and then further down the line you have:

   # Set IP address and netmask for a static IP.
   IP="192.168.0.6"
   NETMASK="255.255.255.0"

   From this, it seems to me that it comes a conflict - on one hand you disable the Static IP and then you set a static IP. I know that intuitively it should work - but in my experience with SliTaz and WiFi, that's rarely the case.

   So try these:
   Either put STATIC="yes"
   or leave it like it is but then put IP="" and NETMASK="" and make sure you have dhcp enabled.

   Good luck.

   Posted 9 years ago #
5. 

   mojo
   

   offline

   Key Master

   @K3nn3th
   Try these configurations.
   For WIFI_ESSID="eduroam" change WIFI_IDENTITY="allan@ovgu.de"

   # /etc/network.conf: SliTaz system wide networking configuration.
   # Config file used by: /etc/init.d/network.sh
   #

   # Set default interface.
   INTERFACE="wlan0"

   # Dynamic IP address.
   # Enable/disable DHCP client at boot time.
   DHCP="yes"

   # Static IP address.
   # Enable/disable static IP at boot time.
   STATIC="no"

   # Set IP address and netmask for a static IP.
   IP="192.168.0.6"
   NETMASK="255.255.255.0"

   # Set broadcast address
   BROADCAST="192.168.0.255"

   # Set route gateway for a static IP.
   GATEWAY="192.168.0.1"

   # Set domain name
   DOMAIN=""

   # Set DNS server for a static IP.
   DNS_SERVER="192.168.0.1"

   # Wifi connection.
   # Enable/disable wireless connection at boot time.
   WIFI="yes"

   # Wifi interface (iwconfig) and ESSID.
   WIFI_INTERFACE="wlan0"
   WIFI_ESSID="OvGU-802.1X"
   WIFI_KEY=""
   WIFI_KEY_TYPE="any"
   WIFI_AP=""
   WIFI_MODE="managed"
   WIFI_CHANNEL=""
   WPA_DRIVER=""

   # Wifi network requiring a user and password
   WIFI_IDENTITY="allan"
   WIFI_PASSWORD="your.password"

   Create path to install Deutsche Telekom Root CA 2 certificate in pem format.
   Open terminal login as root user.
   mkdir -p /etc/cert
cd /etc/cert
wget http://www.uni-magdeburg.de/wlan/zertifikate/Telekom.pem
   Open /etc/init.d/network.sh in text editor as root.
   http://hg.slitaz.org/slitaz-boot-scripts/file/8a6c5a33f76e/etc/init.d/network.sh#l97
   Between line 100 and 101 add the lines in italics:
   network={
   98 ssid="$WIFI_ESSID"
   99 key_mgmt=WPA-EAP
   100 scan_ssid=1
   eap=PEAP
   ca_certs="/etc/cert/Telekom.pem"
   phase1="peaplabel=0"
   phase2="auth=MSCHAPV2"
   101 identity="$WIFI_IDENTITY"
   102 password="$WIFI_PASSWORD"
   103 }

   There are many other potential configurations if this fails. The simple solution is to contact it-service or find an advanced linux user or group. Request a wpa_supplicant.conf that works to authenticate on the system with your linux box after entering your identity and password.

   Reference:
   http://www.urz.ovgu.de/Unsere+Leistungen/Datennetz/Campus/WLAN.html
   http://www.urz.ovgu.de/Unsere+Leistungen/Datennetz/Campus/WLAN/Zertifikate.html
   http://www.urz.ovgu.de/Unsere+Leistungen/Datennetz/Extern/eduroam.html
   http://www.urz.ovgu.de/Unsere+Leistungen/Datennetz/Campus/WLAN/Anleitungen/Linux+802_1X-p-1810.html

   Posted 9 years ago #
6. 

   K3nn3th
   

   offline

   Member

   okay, i'm still having this problem..
   It's amazing it seems no other users are experiencing this (or not using eduroam or similar authenticating networks)

   i set up a custom config file like follwing:

   #ctrl_interface=/var/run/wpa_supplicant
   #ap_scan=1
   #update_config=1

   network={
   ssid="eduroam"
   scan_ssid=1
   key_mgmt=WPA-EAP
   eap=TTLS
   anonymous_identity="anonymous@st.ovgu.de"
   identity="kenneth.allan@st.ovgu.de"
   password="*****"
   phase2="auth=MSCHAPV2"
   ca_cert="/etc/cert/Telekom.pem"
   priority=20
   }

   running the following command yields

   $ sudo /usr/bin/wpa_supplicant -Dwext -i wlan0 -c /home/tux/.network/eduroam.conf
   Password:
   Successfully initialized wpa_supplicant
   wlan0: Trying to associate with 6c:9c:ed:87:7f:a3 (SSID='eduroam' freq=2462 MHz)
   wlan0: Authentication with 6c:9c:ed:87:7f:a3 timed out.
   ioctl[SIOCSIWMLME]: Invalid argument
   wlan0: CTRL-EVENT-DISCONNECTED bssid=6c:9c:ed:87:7f:a3 reason=3 locally_generated=1
   wlan0: Trying to associate with 6c:9c:ed:87:7f:a3 (SSID='eduroam' freq=2462 MHz)

   it keeps repeating after that.

   any ideas what else i could try?

   Posted 8 years ago #

RSS feed for this topic

Reply

You must log in to post.