Eduroam, again ...
 

Hi guys,
I've got my n900 since January and I've got a 3G flat. Therefore I didn't mind that i can't connect to my University's (TU Munich) eduroam. But now, I want to connect my N900 to this eduroam network and I want to manage that ... But I've got a lot of problems.

First some informations:
The eduroam network uses a CA-Certificate an anonymous (outer?) identity and a user identity.
Instructions for Ubuntu (German)

After having installed Janne's QT-Program for hidden TTLS-PAP support, I set it up with following settings:
-installed "Deutsche Telekom Root CA 2" certificate
-TTLS-EAP-PAP
-my username username@mytum.de
-my password
-advanced eap settings: manual username: "anonymous@mwn.de"

and tried to connect ... And finally I got a network connection (not authentication) error.
So I fired up the terminal and entered "dmesg" and got the following information:
So I think there is a problem with the certificate because it's a local choice. And I think, I read that somewhere.

Can anybody help me?

greets napo

Re: Eduroam, again ...
 

Try "username@mytum.de" in advanced eap settings: manual username instead of "anonymous@mwn.de"

Re: Eduroam, again ...
 

Hi,
I forgot to say, that I also tried this with no success.
Errormesage:
"Authentication failed"

greets

Re: Eduroam, again ...
 

ok., my settings are similar. can you check that
>Erweiterte Einstellungen: EAP: Man Benutzern. verwenden< is set and that >Zertifikat< is set to keine?

sorry my n900 has german localisation

Re: Eduroam, again ...
 

So, german is not realy a problem for me :) (ich bin deutscher XD - merkt man doch am schlechten englisch ; studierst nicht zufällig auch an der TU München :D)

In advanced settings "manual username" is checked and was set to both version above. I also tried to set the username to the outer identity and the manual username to my username with no success. Certificate is installed - appears in Certification Manager (i think it's right so?) and not chosen in wlan settings (I can't choose any certificate there)

greets

Re: Eduroam, again ...
 

Have you installed all certificates? Telekom, TU München? Is trust set (Certificate Manager)?

Re: Eduroam, again ...
 

Yeah, i had problems connectiong to eduroam too (Tu Vienna, Austria), the trick is in the advanced settings, where you have to specify your username (the thing before the @). At least i think it is. I can't look it up because my N900 is under repair, but you will definitely get it to connect if you fool around enough with the settings. If it's not solved until i get my phone back i can tell you exactly what you have to set...

Re: Eduroam, again ...
 

Certificates are all installed and trusted ( I set trust to all [server,wlan and mail] and only wlan but nothing works). That means TU Munich only uses the Telekom root Certificate...

So wongdong, I really don't which settings I should try ... I tried all combinations of username@domain and anonymous@domain.
But i didn't tried all domains of the University (there's mwn.de, eduroam.mwn.de ...). I only tried the domain in the Ubuntu's manual ...

greetz napo

Re: Eduroam, again ...
 

The following settings work for me in the TU Munich network:
Encryption type: EAP-TTLS
EAP-TTLS settings: EAP-MSCHAPv2
Certificate: None
Username: lrz-kennung@ads.mwn.de
Password: The password you use to log into your campus.tum.de account

In advanced settings you also need to choose "override username" and set that to "anonymous@mwn.de"

You can find your LRZ-Kennung by logging into http://campus.tum.de and choosing the E-Mail addresses link on the start page. It should be a 7-character string ending in @mytum.de (third E-Mail address from the top).

Re: Eduroam, again ...
 

Thanks for your help,
i will try this tomorrow again. I used PAP till now ...

greetz napo

Re: Eduroam, again ...
 

Hi,

We can improve this wiki page to put the steps for all working eduroam and needed setting..

Re: Eduroam, again ...
 

Sorry, I don't think I can help you with the specifics of your problem, but here's a dump of the settings I have for working eduroam in my "Internet connections":

Connection name: Eduroam
Connection type: WLAN
Network name (SSID): eduroam
Network is hidden: [ ]
Network mode: Infrastructure
Security method: WPA with EAP
EAP type: PEAP
Select certificate: None
EAP method: EAP MSCHAPv2
Username: (my username with domain)
Password: (my password)
Prompt password at every login: [ ]
Advanced/EAP
Use manual user name: [×]
Manual user name: (my username with domain)
Require client authentication: [ ]

The one problem with this setup I have is that the "use manual user name" bit is really needed for it to work, but it means that the N900 never automatically connects to Eduroam, you have to manually connect. And if you drop out of WLAN range or something, you'll get switched back to phone network until you again manually connect. It'd be cool if someone who understood EAP could eliminate this problem, is it a "feature" of the N900 implementation?

Edit: found out that the non-connectivity is Bug 3399