Active Topics

 


Reply
Thread Tools
Posts: 13 | Thanked: 18 times | Joined on Jan 2010
#11
I figured out that there is a list of certificates stored in /etc/secure/s/certman.common-ca
Sadly, I cannot simply remove the offending certificate as the file is signed. Guess I'll just have to settle for filing a bug report and let someone else fix it
 
Posts: 13 | Thanked: 18 times | Joined on Jan 2010
#12
 

The Following User Says Thank You to Zhentar For This Useful Post:
Posts: 45 | Thanked: 1 time | Joined on Dec 2009
#13
My company uses LEAP, N900 keeps asking me WEP key, but it only has username and password.
 
Posts: 77 | Thanked: 181 times | Joined on Nov 2009 @ Winchester, UK
#14
I just wanted to say that I'm seeing the same problem at IBM in the UK (with EAP-TLS).

I've attached my syslog to your bug.

Let's hope this gets fixed in a future update.
 
Posts: 14 | Thanked: 7 times | Joined on Jan 2010 @ New York City
#15
Sorry to bump this old thread, but my school just switched to a WPA2 + PEAP + MSCHAPv2 type network and I tried the steps listed in the wiki, putting the manual username and whatnot to no avail.

However, according to here,

https://bugs.maemo.org/show_bug.cgi?id=7764

a fix is coming in PR 1.2 so the wait begins!
 
Posts: 35 | Thanked: 11 times | Joined on Nov 2009
#16
I'm also sorry to bump this old thread, but I just wanted to close this thread out.

I finally got back to this problem today, and got it working. My problem was in the configuration settings, I could not use the "username@domain" format, I had to use "domain\username".

Thanks for everyone who made suggestions. I updated the first post to show the settings that worked, hopefully that will be useful to someone.
 
Posts: 4 | Thanked: 1 time | Joined on May 2010
#17
Originally Posted by revamped View Post
I'm also sorry to bump this old thread, but I just wanted to close this thread out.

I finally got back to this problem today, and got it working. My problem was in the configuration settings, I could not use the "username@domain" format, I had to use "domain\username".

Thanks for everyone who made suggestions. I updated the first post to show the settings that worked, hopefully that will be useful to someone.
I always typed in my credentials as domain\username and it doesn't work for me (and I tried it the other way username@domain and I tried it one way in the first username field and the other in the EAP advanced field and vice versa and versa vice and... you get the idea). And yes, I do have PR 1.2 installed.

I was given permission to view the actual server logs and I confirmed that it knows my username and I am actually successfully authenticating, but then the very next log entry shows why I'm not able to get access to our WLAN:

Network Policy Server discarded the request for a user.
Authentication Type: EAP
EAP Type: -
Account Session Identifier: -
Reason Code: 1
Reason: An internal error occurred. Check the system event log for additional information.
 
Posts: 19 | Thanked: 1 time | Joined on Jun 2010 @ California, USA
#18
WiFi gurus please help!

my work has WPA2-enterprise/PEAP/MSCHAP WiFi for personal devices. When I try to setup connection I see the following error in syslog file:

May 24 09:50:34 Nokia-N900 EAP[1573]: certman_main.cpp(174): ERROR Invalid certificate '/C=US/O=RSA Data Security, Inc./OU=Secure Server Certification Authority'
May 24 09:50:34 Nokia-N900 EAP[1573]: certman_main.cpp(174): ERROR Invalid certificate '/C=WW/O=beTRUSTed/CN=beTRUSTed Root CAs/CN=beTRUSTed Root CA'
May 24 09:50:34 Nokia-N900 EAP[1573]: certman_main.cpp(174): ERROR Invalid certificate '/C=DE/ST=Hamburg/L=Hamburg/O=TC TrustCenter for Security in Data Networks GmbH/OU=TC TrustCenter Class 2 CA/emailAddress=certificate@trustcenter.de'
May 24 09:50:34 Nokia-N900 EAP[1573]: certman_main.cpp(174): ERROR Invalid certificate '/C=ES/ST=BARCELONA/L=BARCELONA/O=IPS Seguridad CA/OU=Certificaciones/CN=IPS SERVIDORES/emailAddress=ips@mail.ips.es'
May 24 09:50:35 Nokia-N900 EAP[1573]: certman_main.cpp(174): ERROR Invalid certificate '/C=DE/ST=Hamburg/L=Hamburg/O=TC TrustCenter for Security in Data Networks GmbH/OU=TC TrustCenter Class 3 CA/emailAddress=certificate@trustcenter.de'
May 24 09:50:35 Nokia-N900 EAP[1573]: certman_main.cpp(259): ERROR /O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)00/CN=VeriSign Time Stamping Authority CA verification fails
May 24 09:50:35 Nokia-N900 EAP[1573]: Server certificate not valid (error 18=self signed certificate)
May 24 09:50:35 Nokia-N900 wlancond[1158]: Disassociating
May 24 09:50:35 Nokia-N900 kernel: [ 490.121276] wlan0: disassociating by local choice (reason=3)
May 24 09:50:35 Nokia-N900 wlancond[1158]: Scan issued
May 24 09:50:35 Nokia-N900 wlancond[1158]: SIOCGIWAP: 00:00:00:00:00:00
May 24 09:50:35 Nokia-N900 EAP[1573]: EAP 2.0.39+0m5 quitting.
May 24 09:50:35 Nokia-N900 icd2 0.87+fremantle10+0m5[1238]: EAP: [aa05dd8f-c513-4a01-8aed-c5895fb44151] Error sending stop request: Cannot create EAP stop request (org.freedesktop.DBus.Error.NoMemory)
May 24 09:50:35 Nokia-N900 icd2 0.87+fremantle10+0m5[1238]: EAP: [aa05dd8f-c513-4a01-8aed-c5895fb44151] EAPd stop failed
May 24 09:50:35 Nokia-N900 icd2 0.87+fremantle10+0m5[1238]: EAP: [aa05dd8f-c513-4a01-8aed-c5895fb44151] authentication failed because EAP_FAILED received: EAP authentication failed (com.nokia.icd.error.wlan_authentication_failed)
IT refused to provide me with certificate but from what I have seen when connecting Windows Vista laptop this self-sighned certificate expired last year. I know nothing about WiFi encription and certificates but judging from the fact that all other devices I tried( iphone, linux laptop and vista laptop) connect without any problem I guess certificate is not required for this type of connection. So two questions:

1) is it conclusive from the syslog that the lack of certificate is the reason I can not connect?
2) Is there any way to tell n900 to ignore certificate for this type of connection?

many thanks in advance.
Attached Images
 
 
Posts: 1 | Thanked: 0 times | Joined on Sep 2012
#19
I had the same problem attempting to connect to my university's WPA2-enterprise/PEAP/MSCHAPV2 WiFi on the n9. After trying a lot of things, putting in the manual username in the advanced settings seemed to make it work, using the username@domain format.

Hope this helps some people
 
Reply


 
Forum Jump


All times are GMT. The time now is 13:46.