SliTaz Forum
You are not logged in.
Hey folks,
I'm having trouble trying to connect to a PEAP secured network with slitaz (where one uses a username + password to connect) via WiFi.
I tried to set up a network condig file for /etc/init.d/network.sh but i cant get it to work.
trying to use wpa_supplicant also yielded no success yet.
What is the easiest way to do this?
maybe somebody can recommend a setup.
here's my config:
------------------------------------------------
# /etc/network.conf: SliTaz system wide networking configuration.
# Config file used by: /etc/init.d/network.sh
#
# Set default interface.
INTERFACE="eth0"
# Dynamic IP address.
# Enable/disable DHCP client at boot time.
DHCP="yes"
# Static IP address.
# Enable/disable static IP at boot time.
STATIC="no"
# Set IP address and netmask for a static IP.
IP="192.168.0.6"
NETMASK="255.255.255.0"
# Set broadcast address
BROADCAST="192.168.0.255"
# Set route gateway for a static IP.
GATEWAY="192.168.0.1"
# Set domain name
DOMAIN=""
# Set DNS server for a static IP.
DNS_SERVER="192.168.0.1"
# Wifi connection.
# Enable/disable wireless connection at boot time.
WIFI="yes"
# Wifi interface (iwconfig) and ESSID.
WIFI_INTERFACE="wlan0"
WIFI_ESSID="eduroam"
WIFI_KEY=""
WIFI_KEY_TYPE="PEAP"
WIFI_AP="MSCHAP2"
WIFI_MODE="managed"
WIFI_CHANNEL=""
WPA_DRIVER=""
# Wifi network requiring a user and password
WIFI_IDENTITY="allan"
WIFI_PASSWORD="XXXXXXX" // changed for obvious reasons
Offline
Hi K3nn3th,
Really I'm not a Pro in the Wi-Fi setup, and can't setup your case in my home. I only hope this can help you.
Read /etc/wpa_supplicant.conf carefully. It is very long and have some hints about PEAP:
# EAP-PEAP/MSCHAPv2 configuration for RADIUS servers that use the new peaplabel
# (e.g., Radiator)
#network={
# ssid="example"
# key_mgmt=WPA-EAP
# eap=PEAP
# identity="user@example.com"
# password="foobar"
# ca_cert="/etc/cert/ca.pem"
# phase1="peaplabel=1"
# phase2="auth=MSCHAPV2"
# priority=10
#}
So, it seems like you need to uncomment (remove "#" from begin) these lines, and fill your values, and maybe restart Wi-Fi (how?) in your SliTaz.
Offline
yeah i found that, too. but cant get it work. i get:
TLS: Server used client certificate
wlan0: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=10 depth=0 subject='/C=DE/O=Otto-von-Guericke-Universitaet Magdeburg/OU=Universitaetsrechenzentrum/CN=radius1.netz.uni-magdeburg.de' err='Server used client certificate'
SSL: SSL3 alert: write (local SSL3 detected an error):fatal:certificate unknown
OpenSSL: openssl_handshake - SSL_connect error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
wlan0: CTRL-EVENT-EAP-FAILURE EAP authentication failed
wlan0: Authentication with 00:23:04:36:1a:21 timed out.
thanks though..
Another thing:
i found out slitaz's /etc/init.d/network.sh uses wpa_supplicant, aswell.
It'd be nice to use that, so i could just add another fitting .config for network.sh to my collection.
can anyone help me with this?
my current config looks like this:
----------------------------------------------------------------
# /etc/network.conf: SliTaz system wide networking configuration.
# Config file used by: /etc/init.d/network.sh
#
# Set default interface.
INTERFACE="wlan0"
# Dynamic IP address.
# Enable/disable DHCP client at boot time.
DHCP="yes"
# Set broadcast address
BROADCAST="192.168.0.255"
# Wifi connection.
# Enable/disable wireless connection at boot time.
WIFI="yes"
# Wifi interface (iwconfig) and ESSID.
WIFI_INTERFACE="wlan0"
WIFI_ESSID="OvGU-802.1X"
WIFI_KEY=""
WIFI_KEY_TYPE="WPA-EAP"
WIFI_AP="any"
WIFI_MODE="managed"
WIFI_CHANNEL=""
WPA_DRIVER="nl80211"
# Wifi network requiring a user and password
WIFI_IDENTITY="allan"
WIFI_PASSWORD="XXX"
----------------------------------------------------------------
my output is this:
#sudo /etc/init.d/network.sh restart /home/tux/.network/UniversityWifi
stopping all interfaces
Killing all daemons
killall: udhcpc: no process killed
Shutting down wifi card
ifconfig: SIOCSIFFLAGS: Operation not possible due to RF-kill
Configuring wlan0... [ Done ]
Starting udhcpc client on: wlan0...
Selected interface 'wlan0'
Failed to connect to non-global ctrl_ifname: wlan0 error: Connection refused
Offline
I don't get it. Do you want Static IP or not?
Because once you have:
# Static IP address.
# Enable/disable static IP at boot time.
STATIC="no"
and then further down the line you have:
# Set IP address and netmask for a static IP.
IP="192.168.0.6"
NETMASK="255.255.255.0"
From this, it seems to me that it comes a conflict - on one hand you disable the Static IP and then you set a static IP. I know that intuitively it should work - but in my experience with SliTaz and WiFi, that's rarely the case.
So try these:
Either put STATIC="yes"
or leave it like it is but then put IP="" and NETMASK="" and make sure you have dhcp enabled.
Good luck.
@K3nn3th
Try these configurations.
For WIFI_ESSID="eduroam" change WIFI_IDENTITY="allan@ovgu.de"
# /etc/network.conf: SliTaz system wide networking configuration.
# Config file used by: /etc/init.d/network.sh
#
# Set default interface.
INTERFACE="wlan0"
# Dynamic IP address.
# Enable/disable DHCP client at boot time.
DHCP="yes"
# Static IP address.
# Enable/disable static IP at boot time.
STATIC="no"
# Set IP address and netmask for a static IP.
IP="192.168.0.6"
NETMASK="255.255.255.0"
# Set broadcast address
BROADCAST="192.168.0.255"
# Set route gateway for a static IP.
GATEWAY="192.168.0.1"
# Set domain name
DOMAIN=""
# Set DNS server for a static IP.
DNS_SERVER="192.168.0.1"
# Wifi connection.
# Enable/disable wireless connection at boot time.
WIFI="yes"
# Wifi interface (iwconfig) and ESSID.
WIFI_INTERFACE="wlan0"
WIFI_ESSID="OvGU-802.1X"
WIFI_KEY=""
WIFI_KEY_TYPE="any"
WIFI_AP=""
WIFI_MODE="managed"
WIFI_CHANNEL=""
WPA_DRIVER=""
# Wifi network requiring a user and password
WIFI_IDENTITY="allan"
WIFI_PASSWORD="your.password"
Create path to install Deutsche Telekom Root CA 2 certificate in pem format.
Open terminal login as root user.
[c]mkdir -p /etc/cert[/c]
[c]cd /etc/cert[/c]
[c]wget http://www.uni-magdeburg.de/wlan/zertifikate/Telekom.pem[/c]
Open /etc/init.d/network.sh in text editor as root.
http://hg.slitaz.org/slitaz-boot-scripts/file/8a6c5a33f76e/etc/init.d/network.sh#l97
Between line 100 and 101 add the lines in italics:
network={
98 ssid="$WIFI_ESSID"
99 key_mgmt=WPA-EAP
100 scan_ssid=1
eap=PEAP
ca_certs="/etc/cert/Telekom.pem"
phase1="peaplabel=0"
phase2="auth=MSCHAPV2"
101 identity="$WIFI_IDENTITY"
102 password="$WIFI_PASSWORD"
103 }
There are many other potential configurations if this fails. The simple solution is to contact it-service or find an advanced linux user or group. Request a wpa_supplicant.conf that works to authenticate on the system with your linux box after entering your identity and password.
Reference:
http://www.urz.ovgu.de/Unsere+Leistungen/Datennetz/Campus/WLAN.html
http://www.urz.ovgu.de/Unsere+Leistungen/Datennetz/Campus/WLAN/Zertifikate.html
http://www.urz.ovgu.de/Unsere+Leistungen/Datennetz/Extern/eduroam.html
http://www.urz.ovgu.de/Unsere+Leistungen/Datennetz/Campus/WLAN/Anleitungen/Linux+802_1X-p-1810.html
Offline
okay, i'm still having this problem..
It's amazing it seems no other users are experiencing this (or not using eduroam or similar authenticating networks)
i set up a custom config file like follwing:
#ctrl_interface=/var/run/wpa_supplicant
#ap_scan=1
#update_config=1
network={
ssid="eduroam"
scan_ssid=1
key_mgmt=WPA-EAP
eap=TTLS
anonymous_identity="anonymous@st.ovgu.de"
identity="kenneth.allan@st.ovgu.de"
password="*****"
phase2="auth=MSCHAPV2"
ca_cert="/etc/cert/Telekom.pem"
priority=20
}
running the following command yields
$ sudo /usr/bin/wpa_supplicant -Dwext -i wlan0 -c /home/tux/.network/eduroam.conf
Password:
Successfully initialized wpa_supplicant
wlan0: Trying to associate with 6c:9c:ed:87:7f:a3 (SSID='eduroam' freq=2462 MHz)
wlan0: Authentication with 6c:9c:ed:87:7f:a3 timed out.
ioctl[SIOCSIWMLME]: Invalid argument
wlan0: CTRL-EVENT-DISCONNECTED bssid=6c:9c:ed:87:7f:a3 reason=3 locally_generated=1
wlan0: Trying to associate with 6c:9c:ed:87:7f:a3 (SSID='eduroam' freq=2462 MHz)
it keeps repeating after that.
any ideas what else i could try?
Offline
[ Generated in 0.016 seconds, 13 queries executed - Memory usage: 1.55 MiB (Peak: 1.77 MiB) ]