Eduroam, again ... - maemo.org

Active Topics

Camera phone competition March 2023 "Endless" (35)
to General by Maemish - 5 hrs, 47 mins ago
TLS 1.2 for N9 is ready (28)
to MeeGo / Harmattan by smartblu9 - 7 hrs, 1 min ago
Maemo repository (3)
to Community by torsen - 22 hrs, 31 mins ago
Error after installing Leste on sdcard (11)
to Maemo 7 / Leste by Maemish - 1 day, 20 hrs ago
Introducing ubiboot N9 (multiboot OS loader) (1,393)
to Alternatives by smatkovi - 3 days, 2 hrs ago
more...

Page 1 of 2

Next >

Thread Tools

el^napo	2010-06-23 , 08:50
Posts: 40 \| Thanked: 4 times \| Joined on Dec 2009 @ Germany	#1

Hi guys,
I've got my n900 since January and I've got a 3G flat. Therefore I didn't mind that i can't connect to my University's (TU Munich) eduroam. But now, I want to connect my N900 to this eduroam network and I want to manage that ... But I've got a lot of problems.

First some informations:
The eduroam network uses a CA-Certificate an anonymous (outer?) identity and a user identity.
Instructions for Ubuntu (German)

After having installed Janne's QT-Program for hidden TTLS-PAP support, I set it up with following settings:
-installed "Deutsche Telekom Root CA 2" certificate
-TTLS-EAP-PAP
-my username username@mytum.de
-my password
-advanced eap settings: manual username: "anonymous@mwn.de"

and tried to connect ... And finally I got a network connection (not authentication) error.
So I fired up the terminal and entered "dmesg" and got the following information:

[ 5772.921295] ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 5773.834838] wlan0: authenticate with AP 00:03:52:5b:90:92
[ 5773.837341] wlan0: authenticated
[ 5773.837371] wlan0: associate with AP 00:03:52:5b:90:92
[ 5773.841979] wlan0: RX AssocResp from 00:03:52:5b:90:92 (capab=0xc31 status=0 aid=3)
[ 5773.842010] wlan0: associated
[ 5774.046264] ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 5784.147155] wlan0: no IPv6 routers present
[ 5894.164031] wlan0: disassociating by local choice (reason=3)
[ 5895.061462] wlan0: authenticate with AP 00:03:52:5b:90:92
[ 5895.186401] wlan0: authenticate with AP 00:03:52:5b:90:92
[ 5895.187896] wlan0: authenticated
[ 5895.187927] wlan0: associate with AP 00:03:52:5b:90:92
[ 5895.192718] wlan0: RX ReassocResp from 00:03:52:5b:90:92 (capab=0xc31 status=0 aid=3)
[ 5895.192749] wlan0: associated
[ 5925.330749] wlan0: deauthenticating by local choice (reason=3)
[ 5925.459960] wl1251: down
[ 5963.350341] slide (GPIO 71) is now open?

So I think there is a problem with the certificate because it's a local choice. And I think, I read that somewhere.

Can anybody help me?

greets napo

Quote & Reply |

dreizehn	2010-06-23 , 11:00
Posts: 6 \| Thanked: 0 times \| Joined on Dec 2009 @ Germany	#2

Try "username@mytum.de" in advanced eap settings: manual username instead of "anonymous@mwn.de"

Quote & Reply |

el^napo	2010-06-23 , 13:38
Posts: 40 \| Thanked: 4 times \| Joined on Dec 2009 @ Germany	#3

Hi,
I forgot to say, that I also tried this with no success.

[27713.733215] wl1251: 151 tx blocks at 0x3b788, 35 rx blocks at 0x3a780
[27713.748870] wl1251: firmware booted (Rev 4.0.4.3.7)
[27713.866424] ADDRCONF(NETDEV_UP): wlan0: link is not ready
[27714.991149] wl1251: down
[27718.561462] wl1251: 151 tx blocks at 0x3b788, 35 rx blocks at 0x3a780
[27718.576965] wl1251: firmware booted (Rev 4.0.4.3.7)
[27718.788116] ADDRCONF(NETDEV_UP): wlan0: link is not ready
[27719.756652] wlan0: authenticate with AP 00:0f:61:20:22:73
[27719.761505] wlan0: authenticated
[27719.761535] wlan0: associate with AP 00:0f:61:20:22:73
[27719.764556] wlan0: RX AssocResp from 00:0f:61:20:22:73 (capab=0xc31 status=0 aid=9)
[27719.764556] wlan0: associated
[27719.968048] ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[27722.854583] wlan0: deauthenticated
[27723.491241] wlan0: authenticate with AP 00:03:52:e4:50:33
[27723.686309] wlan0: authenticate with AP 00:03:52:e4:50:33
[27723.881561] wlan0: authenticate with AP 00:03:52:e4:50:33
[27724.076843] wlan0: authentication with AP 00:03:52:e4:50:33 timed out
[27724.725585] wlan0: authenticate with AP 00:0f:61:20:22:73
[27724.920532] wlan0: authenticate with AP 00:0f:61:20:22:73
[27725.115966] wlan0: authenticate with AP 00:0f:61:20:22:73
[27725.311248] wlan0: authentication with AP 00:0f:61:20:22:73 timed out
[27725.944458] wlan0: authenticate with AP 00:03:52:e5:f2:63
[27726.139434] wlan0: authenticate with AP 00:03:52:e5:f2:63
[27726.334655] wlan0: authenticate with AP 00:03:52:e5:f2:63
[27726.530029] wlan0: authentication with AP 00:03:52:e5:f2:63 timed out
[27727.178710] wlan0: authenticate with AP 00:03:52:ab:22:63
[27727.373748] wlan0: authenticate with AP 00:03:52:ab:22:63
[27727.569091] wlan0: authenticate with AP 00:03:52:ab:22:63
[27727.764404] wlan0: authentication with AP 00:03:52:ab:22:63 timed out
[27728.413085] wlan0: authenticate with AP 00:03:52:e4:50:33
[27728.608154] wlan0: authenticate with AP 00:03:52:e4:50:33
[27728.803466] wlan0: authenticate with AP 00:03:52:e4:50:33
[27728.999328] wlan0: authentication with AP 00:03:52:e4:50:33 timed out
[27730.311492] wlan0: authenticate with AP 00:0f:61:20:22:73
[27730.506591] wlan0: authenticate with AP 00:0f:61:20:22:73
[27730.701873] wlan0: authenticate with AP 00:0f:61:20:22:73
[27730.897125] wlan0: authentication with AP 00:0f:61:20:22:73 timed out
[27730.951843] wlan0: no IPv6 routers present
[27731.576965] wlan0: authenticate with AP 00:03:52:e4:50:33
[27731.772216] wlan0: authenticate with AP 00:03:52:e4:50:33
[27731.967529] wlan0: authenticate with AP 00:03:52:e4:50:33
[27732.162841] wlan0: authentication with AP 00:03:52:e4:50:33 timed out
[27732.342834] wl1251: down
[27895.545623] slide (GPIO 71) is now open

Errormesage:
"Authentication failed"

greets

Quote & Reply |

dreizehn	2010-06-23 , 14:30
Posts: 6 \| Thanked: 0 times \| Joined on Dec 2009 @ Germany	#4

ok., my settings are similar. can you check that
>Erweiterte Einstellungen: EAP: Man Benutzern. verwenden< is set and that >Zertifikat< is set to keine?

sorry my n900 has german localisation

Quote & Reply |

el^napo	2010-06-23 , 15:23
Posts: 40 \| Thanked: 4 times \| Joined on Dec 2009 @ Germany	#5

So, german is not realy a problem for me

(ich bin deutscher XD - merkt man doch am schlechten englisch ; studierst nicht zufällig auch an der TU München

)

In advanced settings "manual username" is checked and was set to both version above. I also tried to set the username to the outer identity and the manual username to my username with no success. Certificate is installed - appears in Certification Manager (i think it's right so?) and not chosen in wlan settings (I can't choose any certificate there)

greets

Quote & Reply |

dreizehn	2010-06-24 , 07:10
Posts: 6 \| Thanked: 0 times \| Joined on Dec 2009 @ Germany	#6

Have you installed all certificates? Telekom, TU München? Is trust set (Certificate Manager)?

Quote & Reply |

wongdong	2010-06-24 , 07:19
Posts: 40 \| Thanked: 42 times \| Joined on Jan 2010 @ Vienna	#7

Originally Posted by dreizehn

Have you installed all certificates? Telekom, TU München? Is trust set (Certificate Manager)?

Yeah, i had problems connectiong to eduroam too (Tu Vienna, Austria), the trick is in the advanced settings, where you have to specify your username (the thing before the @). At least i think it is. I can't look it up because my N900 is under repair, but you will definitely get it to connect if you fool around enough with the settings. If it's not solved until i get my phone back i can tell you exactly what you have to set...

Quote & Reply |

el^napo	2010-06-24 , 15:09
Posts: 40 \| Thanked: 4 times \| Joined on Dec 2009 @ Germany	#8

Certificates are all installed and trusted ( I set trust to all [server,wlan and mail] and only wlan but nothing works). That means TU Munich only uses the Telekom root Certificate...

So wongdong, I really don't which settings I should try ... I tried all combinations of username@domain and anonymous@domain.
But i didn't tried all domains of the University (there's mwn.de, eduroam.mwn.de ...). I only tried the domain in the Ubuntu's manual ...

greetz napo

Quote & Reply |

chillip	2010-07-07 , 10:01
Posts: 111 \| Thanked: 230 times \| Joined on Jul 2010	#9

Originally Posted by el^napo

Certificates are all installed and trusted ( I set trust to all [server,wlan and mail] and only wlan but nothing works). That means TU Munich only uses the Telekom root Certificate...

So wongdong, I really don't which settings I should try ... I tried all combinations of username@domain and anonymous@domain.
But i didn't tried all domains of the University (there's mwn.de, eduroam.mwn.de ...). I only tried the domain in the Ubuntu's manual ...

greetz napo

The following settings work for me in the TU Munich network:
Encryption type: EAP-TTLS
EAP-TTLS settings: EAP-MSCHAPv2
Certificate: None
Username: lrz-kennung@ads.mwn.de
Password: The password you use to log into your campus.tum.de account

In advanced settings you also need to choose "override username" and set that to "anonymous@mwn.de"

You can find your LRZ-Kennung by logging into http://campus.tum.de and choosing the E-Mail addresses link on the start page. It should be a 7-character string ending in @mytum.de (third E-Mail address from the top).