maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   SailfishOS (https://talk.maemo.org/forumdisplay.php?f=52)
-   -   Wifi connection to wpa2 ttls pap network (https://talk.maemo.org/showthread.php?t=92057)

flyapen 2013-12-17 07:52
Wifi connection to wpa2 ttls pap network
 
Hi everyone,

I'm new on this forum, just changed from my trusty android phone to a brand new jolla phone. I have a small question regarding wifi.

Has anyone been able to connect to a wpa2 network with ttls and pap security? I can connect to my home wifi network without any issues but when I try to connect to the wifi network at work I immediately get the message "Sorry. Could not connect to the selected network.".

Thanks.

taixzo 2013-12-17 08:04
Re: Wifi connection to wpa2 ttls pap network
 
I also have this issue, trying to connect to wpa2 with ttls and mschapv2, using Sailfish on an N9, gives me the same message.

jsiren 2013-12-17 08:34
Re: Wifi connection to wpa2 ttls pap network
 
Same thing with the eduroam network at UEF. https://www.eduroam.org/

flyapen 2013-12-17 08:38
Re: Wifi connection to wpa2 ttls pap network
 
Quote:
Originally Posted by jsiren (Post 1397446)
Same thing with the eduroam network at UEF. https://www.eduroam.org/
I'm trying eduroam as well at work.

Raim 2013-12-17 17:49
Re: Wifi connection to wpa2 ttls pap network
 
Same for me with eduroam and also other local WLAN network at the university. There are no new log entries in wpa_supplicant.log when I try it. journalctl does not give much either. Only related entry could be this:

Code:
Dec 17 18:47:22 localhost alien_bridge_se[1339]: WifiModel::updateServiceList

Stuarty 2013-12-18 11:02
Re: Wifi connection to wpa2 ttls pap network
 
The installed packages include wpa_supplicant-2.0-1.2.1.armv7hl
The Freien Universität Berlin has a page on linux with eduroam. There's a sample eduroam-wireless.conf and instructions. I think I know how to edit the sample .conf for my own university but I don't know how to run wpa_supplicant so that it connects, stays connected through restarts or leaving and then returning to an area served by the network. And I don't know what effect this will have on the battery.

Basically I feel like I have the jigsaw pieces but don't know how to put them together.

jsiren 2013-12-18 12:20
Re: Wifi connection to wpa2 ttls pap network
 
wpa_supplicant is running anyway, it's what enables you to connect to WLAN at all.

I edited wpa_supplicant.conf and added this section:

network={
ssid="eduroam"
key_mgmt=WPA-EAP
eap=PEAP
identity="username@domain"
ca_cert="/etc/pki/tls/certs/ca-bundle.crt"
phase1="peaplabel=0"
phase2="auth=MSCHAPV2"
priority=2
}

I haven't tested this in eduroam yet. Restarting wpa_supplicant didn't produce any new errors, and I was still able to connect to my existing WLAN (whew, because while fingerterm is good, nothing beats a full size keyboard and a large screen (or two) for serious admin work). I'll see what happens once I get back to UEF.

Replace username@domain with your username and the domain of your university as per eduroam's instructions.

gaelic 2013-12-18 13:49
Re: Wifi connection to wpa2 ttls pap network
 
Quote:
Originally Posted by jsiren (Post 1398133)
wpa_supplicant is running anyway, it's what enables you to connect to WLAN at all.

I edited wpa_supplicant.conf and added this section:

network={
ssid="eduroam"
key_mgmt=WPA-EAP
eap=PEAP
identity="username@domain"
ca_cert="/etc/pki/tls/certs/ca-bundle.crt"
phase1="peaplabel=0"
phase2="auth=MSCHAPV2"
priority=2
}

I haven't tested this in eduroam yet. Restarting wpa_supplicant didn't produce any new errors, and I was still able to connect to my existing WLAN (whew, because while fingerterm is good, nothing beats a full size keyboard and a large screen (or two) for serious admin work). I'll see what happens once I get back to UEF.

Replace username@domain with your username and the domain of your university as per eduroam's instructions.
I've tested that already this morning. Not working in my case as (i guess) wpa_supplicant.conf is ignored or overwritten by connection manager.

jsiren 2013-12-18 14:30
Re: Wifi connection to wpa2 ttls pap network
 
Quote:
Originally Posted by gaelic (Post 1398195)
I've tested that already this morning. Not working in my case as (i guess) wpa_supplicant.conf is ignored or overwritten by connection manager.
So it seems. Also, libeap doesn't seem to be installed by default, although it does exist in the repository. connmanctl is also missing.

gaelic 2013-12-23 10:04
Re: Wifi connection to wpa2 ttls pap network
 
have a look at this:

http://talk.maemo.org/showpost.php?p...postcount=2186

it worked for me & eduroam:

a) activate devel-mode
b) use the terminal on the device or ssh to the device
c) install vim or any other text editor
d) vim /var/lib/connman/wifi_eduroam.config

Code:
[service_eduroam]
Type=wifi
Name=eduroam
EAP=peap
CACertFile=/etc/ssl/certs/ca-bundle.crt
Phase2=MSCHAPV2
Identity=user@domain
Passphrase=yoursecret
e) turn on/off wlan (or reboot phone)

jsiren 2013-12-23 13:31
Re: Wifi connection to wpa2 ttls pap network
 
Quote:
Originally Posted by gaelic (Post 1399878)
have a look at this:

Code:
[service_eduroam]
Type=wifi
Name=eduroam
EAP=peap
CACertFile=/etc/ssl/certs/ca-bundle.crt
Phase2=MSCHAPV2
Identity=user@domain
Passphrase=yoursecret
Does this have to contain the plaintext password? I'm not really comfortable with the idea of saving my university password in a plaintext file on my phone.

hlub 2013-12-23 13:49
Re: Wifi connection to wpa2 ttls pap network
 
If you look at the /var/lib/connman/*/settings files you'll see that the plaintext passwords of all your stored wifi connections are there already.

jsiren 2013-12-23 13:59
Re: Wifi connection to wpa2 ttls pap network
 
Quote:
Originally Posted by hlub (Post 1399993)
If you look at the /var/lib/connman/*/settings files you'll see that the plaintext passwords of all your stored wifi connections are there already.
I can see that. Ordinarily I wouldn't mind it so much, but the eduroam login is keyed to a lot of other things as well, so I'd prefer to be asked every time. Is that an option?

mvdheijd 2014-02-07 10:23
Re: Wifi connection to wpa2 ttls pap network
 
Quote:
Originally Posted by gaelic (Post 1399878)
have a look at this:

http://talk.maemo.org/showpost.php?p...postcount=2186

it worked for me & eduroam:

a) activate devel-mode
b) use the terminal on the device or ssh to the device
c) install vim or any other text editor
d) vim /var/lib/connman/wifi_eduroam.config

Code:
[service_eduroam]
Type=wifi
Name=eduroam
EAP=peap
CACertFile=/etc/ssl/certs/ca-bundle.crt
Phase2=MSCHAPV2
Identity=user@domain
Passphrase=yoursecret
e) turn on/off wlan (or reboot phone)
I tried this solution, but when I try to connect I still get the "Sorry could not connect" error. The wpa_supplicant log doesn't change when attempting to connect, so it isn't even trying.

Do I need to connect from the CLI with connman to make this work?

Does anyone have any ideas on how to debug this?
(currently still on 1.0.2.5, will probably update this weekend)


All times are GMT. The time now is 06:47.

vBulletin® Version 3.8.8