Arch Linux

deivi

Member

Registered: 2020-05-24

Posts: 19

EDUROAM IWD EAP-PEAP-MSCHAPV2 not working

Hi,

I am trying to eduroam at University and I am unable to get it right. I am using systemd-networkd and iwd.
This issue is also discussed here but no proper solution was given.

/var/lib/iwd/eduroam.8021x

[Security]
EAP-Method=PEAP
EAP-Identity=netmaster@uc3m.es
EAP-PEAP-CACert=/var/lib/iwd/eduroamcert.pem
EAP-PEAP-Phase2-Method=MSCHAPV2
EAP-PEAP-Phase2-Identity=<myusername>@uc3m.es
EAP-PEAP-Phase2-Password=<mypassword>
EAP-PEAP-ServerDomainMask=*.uc3m.es

[Settings]
AutoConnect=false

I have set the Environment=IWD_TLS_DEBUG=TRUE property in the [Service] section in iwd.service

This is what I get debugging:

> journalctl -u iwd.service

Starting Wireless service...
Wireless daemon version 1.9
station: Network configuration is disabled.
Started Wireless service.
rfkill id 1 can't be matched to a wiphy
Wiphy: 0, Name: phy0
Permanent Address: c0:e4:34:f7:09:7b
Bands: 2.4 GHz 5 GHz
Ciphers: CCMP TKIP
Supported iftypes: ad-hoc station ap p2p-c>
Wiphy phy0 will only use the default interface
hardware_rekey not supported
4-Way handshake failed for ifindex: 2, reason: 15
4-Way handshake failed for ifindex: 2, reason: 15

I always get: "4-Way handshake failed for ifindex: 2, reason: 15".

> networkctl

IDX LINK  TYPE     OPERATIONAL SETUP     
  1 lo    loopback carrier     unmanaged 
  2 wlan0 wlan     dormant     configured

2 links listed.

It seems to connect but it can't route. NOTE: the username or password I am using is not incorrect. Neither the certificate. I am using them to connect on my phone and it works perfectly.

Here is the python script where I took the config variables from.

I need to be able to connect to this network ASAP.
Thank you.

Last edited by deivi (2020-09-15 16:27:55)