[SOLVED] netctl + eduroam (Lund University)

tfla · 2013-10-10 20:59:14

Hey there.

My laptop doesn't want to connect to eduroam with netctl. The uni website tells me to use WPA/WPA Enterprise for "wireless security", TTLS for "authentication", PAP as "inner authentication-method", my uid and "@lu.se" appended as both anonymous identity and user identity, and they specify the certificate as the one seen in the config below (all settings from the guide for connecting with NetworkManager).
Have I misunderstood something or is this something I will have to talk to with the technical crew on-campus?

Here's my /etc/netctl/wlp2s0-eduroam:

Description='Eduroam university'
Interface=wlp2s0
Connection=wireless
Security=wpa-configsection
IP=dhcp
ESSID=eduroam
WPAConfigSection=(
    'ssid="eduroam"'
    'key_mgmt=WPA-EAP'
    'eap=TTLS'
    'group=TKIP'
    'anonymous_identity="my_uid@lu.se"'
    'identity="my_uid@lu.se"'
    'password="my_password"'
    'ca_cert="/etc/ssl/certs/GTE_CyberTrust_Global_Root.pem"'
    'phase2="auth=PAP"'
)

Last edited by tfla (2013-10-17 11:25:35)

cfr · 2013-10-11 01:02:28

Did you read https://wiki.archlinux.org/index.php/Netctl#Eduroam?

EDIT: Actually, I guess that's what you based your config on - sorry, I didn't scroll down to see the alternate setup below.

Last edited by cfr (2013-10-11 01:04:30)

tfla · 2013-10-11 09:13:53

Yeah, that's what I based the configuration on. It appears the eduroams differ slightly in their implementation on different locations though. I can't see what I've done wrong though, so I will probably just have to talk to the school staff?

Thanks for the reply.

Knusperkeks · 2013-10-11 13:43:41

I also had problems connecting to eduroam-networks until i added 'scan_ssid=1' to WPAConfigSection.
Maybe it helps you

R00KIE · 2013-10-11 14:01:07

Make sure that 'group=TKIP' is actually supported by the AP, in case of doubt, comment or delete that line and give it a try.

tfla · 2013-10-17 11:23:22

So, the uni had changed the required certificate without updating the documentation on their web-site. Problem solved and here's a config that works for LU students:

Description='Eduroam university'
Interface=wlp2s0
Connection=wireless
Security=wpa-configsection
IP=dhcp
ESSID=eduroam
WPAConfigSection=(
    'ssid="eduroam"'
    'key_mgmt=WPA-EAP'
    'eap=TTLS'
    'anonymous_identity="STiL-id@lu.se"'
    'identity="STiL-id@lu.se"'
    'password="<STiL-password>"'
    'ca_cert="/etc/ssl/certs/AddTrust_External_Root.pem"'
    'phase2="auth=PAP"'
)

I removed the TKIP group since it isn't mentioned in the documentation, thanks R00KIE.

tfla · 2014-09-02 08:48:10

Well, new semester = new troubles. Couldn't connect without adding scan_ssid=1 this time (thank you Knusperkeks and the writers of man wpa_supplicant), and they seem to have changed the phase 2 authentication to MSCHAPv2 and the eap to PEAP, so here is the new config that works for me if anyone needs it:

Description='Eduroam university'
Interface=wlp2s0
Connection=wireless
Security=wpa-configsection
IP=dhcp
ESSID=eduroam
WPAConfigSection=(
    'ssid="eduroam"'
    'scan_ssid=1'
    'key_mgmt=WPA-EAP'
    'eap=PEAP'
    'anonymous_identity="<STiL-id>@lu.se"'
    'identity="<STiL-id>@lu.se"'
    'password="<STiL-password>'
    'ca_cert="/etc/ssl/certs/AddTrust_External_Root.pem"'
    'phase2="auth=MSCHAPv2"'
)

The wpa_supplicant manual mentions a phase1="peaplabel=0", not sure what that does and connecting seems to work without it.

tfla · 2016-09-09 12:16:21

PSA: There's now a script that configures eduroam for NetworkManager and/or wpasupplicant to be found here: https://cat.eduroam.org/

Alad · 2016-09-09 12:34:53

I don't always find necrobumps useful, but when I do, it's about eduroam. Thanks.

Arch Linux

#1 2013-10-10 20:59:14

[SOLVED] netctl + eduroam (Lund University)

#2 2013-10-11 01:02:28

Re: [SOLVED] netctl + eduroam (Lund University)

#3 2013-10-11 09:13:53

Re: [SOLVED] netctl + eduroam (Lund University)

#4 2013-10-11 13:43:41

Re: [SOLVED] netctl + eduroam (Lund University)

#5 2013-10-11 14:01:07

Re: [SOLVED] netctl + eduroam (Lund University)

#6 2013-10-17 11:23:22

Re: [SOLVED] netctl + eduroam (Lund University)

#7 2014-09-02 08:48:10

Re: [SOLVED] netctl + eduroam (Lund University)

#8 2016-09-09 12:16:21

Re: [SOLVED] netctl + eduroam (Lund University)

#9 2016-09-09 12:34:53

Re: [SOLVED] netctl + eduroam (Lund University)

Board footer