Arch Linux

Haptic

Member

Registered: 2009-09-03

Posts: 149

[SOLVED]More options for the wireless-wpa-configsection in netcfg

I would like to use netcfg to connect to my universities public network, but I need more parameters.

Here is all I need to input:

Network Name: PAL2.0
Wireless Security: WPA Enterprise
EAP Method / Authentication: PEAP
Key Type (if present): TKIP
Phase2 Type / Inner Authentication: MSCHAPV2
Identity / Username: Your Purdue Login
Password: Your Purdue Password
Anonymous Identity: (leave blank)
Client Certificate File (if present): (None)
CA Certificate File: Click it, then enter:
Location: /etc/ssl/certs/Thawte_Premium_Server_CA.pem
Alternatively: /usr/share/ca-certificates/mozilla/Thawte_Premium_Server_CA.crt
Private Key File: (None)
Private Key Password: (leave blank)
PEAP Version (if present): Automatic

Here is what wireless-wpa-configsection gives me

    ssid="PAL2.0-Instructions"
    key_mgmt=WPA-EAP
    eap=PEAP
    group=TKIP
    pairwise=TKIP MSCHAPV2
    anonymous_identity=""
    identity=""
    password=""
    priority=1
    phase2="auth=PAP"'

Also, is there a way to avoid me typing my password in plain text?

Last edited by Haptic (2011-10-10 20:20:36)

Gusar

Member

Registered: 2009-08-25

Posts: 3,605

Re: [SOLVED]More options for the wireless-wpa-configsection in netcfg

You can put whatever you want in the wpa-configsection, that part is effectively a wpa_supplicant config file and you can use everything wpa_supplicant supports.
We don't use certificates here, so my netcfg profile file looks like this:

CONNECTION="wireless"
INTERFACE="wlan0"
SECURITY="wpa-configsection"
ESSID="eduroam"
IP="dhcp"
DHCP_TIMEOUT="30"
CONFIGSECTION='
	ssid="eduroam"
	key_mgmt=WPA-EAP
	eap=PEAP
	phase2="auth=MSCHAPV2"
	identity="identity_here"
	password=hash:hash_of_password_here'

You just add your certificate stuff in there, according to wpa_supplicant documentation. Note how I have a hash of the password there, instead of plaintext. It's a NT hash. You can create it by installing python2-smbpasswd from AUR, then use this little script:

#!/usr/bin/env python2

import smbpasswd
import sys

print 'NT hash:', smbpasswd.nthash(sys.argv[1])

There's also perl-crypt-smbhash in Arch, if perl is more your thing.

Last edited by Gusar (2011-08-21 18:11:16)