PEAP+MSCHAPv2 WiFi authentication setup - Revision history

sixwheeledbeast: Redirected page to PEAP MSCHAPv2 WiFi authentication setup

2022-10-16T12:17:36Z

Redirected page to PEAP MSCHAPv2 WiFi authentication setup

← Older revision		Revision as of 12:17, 16 October 2022
Line 1:		Line 1:
-	~~== PEAP + MSCHAPv2 WiFi Authentication Setup ==~~	+	#REDIRECT [[PEAP_MSCHAPv2_WiFi_authentication_setup]]
-		+
-	Some educational sites using [[:wikipedia:eduroam\|Eduroam]] support this method. Some use EAP-TTLS+PAP where you need to activate TTLS/PAP support first using the cute Qt [https://bugs.maemo.org/show_bug.cgi?id=1635#c107 "WLAN tool" linked to this bug report]. Additionally you need the PR 1.2 firmware on your phone. PEAP + MSCHAPv2 is quite popular authentication method which is supported by the tablets, but some setup is needed. Therefore, bad out of the box experience is guaranteed. If you're uncertain, try if the step-by-step guide below works. If it doesn't - bummer.	+
-		+
-	~~Don't forget to install wpa_supplicant package!~~	+
-		+
-	~~(This example is for Eduroam for [[Nokia N900\|N900]]. Same works for [[Nokia 770\|770]], [[Nokia N800\|N800]] and [[Nokia N810\|N810]] too)~~	+
-	~~<pre>~~	+
-	~~Go Applications -> Settings -> Internet connections~~	+
-	~~[Connections]~~	+
-	~~[New]~~	+
-	~~[Next]~~	+
-	~~Connection name: eduroam~~	+
-	~~[Next]~~	+
-	~~Scan .. Wi-Fi ..~~	+
-	~~[Yes]~~	+
-	~~EAP type: PEAP~~	+
-	~~[Next]~~	+
-	~~EAP method: EAP MSCHAPv2~~	+
-	~~[Next]~~	+
-	~~User name: (username@domain)~~	+
-	~~password: (your password)~~	+
-	~~[Next]~~	+
-	~~[Advanced]~~	+
-	~~[EAP]~~	+
-	~~Use manual user name: [x]~~	+
-	~~Manual user name: (username@domain)~~	+
-	~~[Save]~~	+
-	~~[Finish]~~	+
-	~~</pre>~~	+
-		+
-	~~== Using WEP cipher suites ==~~	+
-	~~Some eduroam sites use WEP cipher suites in WPA mode. In this case, the N900 fails to connect instantly and the line~~	+
-		+
-	~~<pre>~~	+
-	~~Jul 5 10:42:34 Nokia-N900 wlancond[2695]: In WPA mode WEP is not allowed~~	+
-	~~</pre>~~	+
-		+
-	~~is logged to syslog. Whether this setup is active on a site can be investigated by running~~	+
-	~~<pre>~~	+
-	~~$ iwlist scan~~	+
-	~~[...]~~	+
-	~~wlan0 Scan completed :~~	+
-	~~[...]~~	+
-	~~ESSID:"eduroam"~~	+
-	~~[...]~~	+
-	~~IE: IEEE 802.11i/WPA2 Version 1~~	+
-	~~Group Cipher : WEP-104~~	+
-	~~IE: WPA Version 1~~	+
-	~~Group Cipher : WEP-104~~	+
-	~~[...]~~	+
-	~~</pre>~~	+
-		+
-	~~on a laptop.~~	+
-		+
-	~~Support was added to osso-wlan as of version 3.0.20 according to the changelog:~~	+
-	~~<pre>~~	+
-	~~osso-wlan (3.0.20) unstable; urgency=low~~	+
-		+
-	* Fixed: NB#159194 - Add support for WEP cipher in WPA mode to support	+
-	~~Eduroam, fixes the regression~~	+
-		+
-	~~-- Jin Qing <ext-qing.1.jin@nokia.com> Fri, 2 Jul 2010 10:34:40 +0300~~	+
-		+
-	~~osso-wlan (3.0.19) unstable; urgency=low~~	+
-		+
-	* Fixed: NB#159194 - Add support for WEP cipher in WPA mode to support	+
-	~~Eduroam~~	+
-		+
-	~~-- Sami Enne <ext-sami.enne@nokia.com> Wed, 2 Jun 2010 15:04:22 +0300~~	+
-	~~</pre>~~	+
-		+
-	Unfortunately, access to NB#159194 is restricted. But a diff of the source located at https://gitorious.org/community-ssu/osso-wlan reveals that the boolean gconf value <tt>/system/osso/connectivity/IAP/allow_wep_ciphers_in_WPA</tt>	+
-	~~has to be flipped to true for this change to kick in:~~	+
-		+
-	~~<pre>~~	+
-	~~$ gconftool-2 --type bool -s '/system/osso/connectivity/IAP/allow_wep_ciphers_in_WPA' true~~	+
-	~~</pre>~~	+
-		+
-	Why this is not switched on by default and where this is documented is currently unknown. A reboot (or maybe just restarting wlanconfd) resolves the issue. Furthermore, implications on security should be investigated.	+
-		+
-	~~== Known working networks ==~~	+
-	* eduroam at FU Berlin, Germany	+
-	* eduroam at TU Berlin, Germany (note: for me it was necessary to use username@win.tu-berlin.de instead of username@tu-berlin.de)	+
-	* eduroam at JLU Giessen, Germany	+
-	* eduroam at TU Delft, the Netherlands	+
-	* eduroam at HRO Rotterdam, the Netherlands	+
-	* eduroam at HvA Amsterdam, the Netherlands	+
-	* tue-wpa2 at Eindhoven University of Technology, the Netherlands	+
-	* eduroam in Tampere, Finland	+
-	* LANGATON-WPA in Tampere, Finland	+
-	* AU-Wifi in Auburn, AL, USA	+
-	* AlmaWIFI in Bologna, Italy	+
-	* eduroam at KULeuven, Belgium	+
-	* eduroam at TU Vienna, Austria	+
-	* eduroam at University of Vienna, Austria	+
-	* eduroam at University of Graz, Austria	+
-	* eduroam at Klagenfurt University, Austria	+
-	* WIRELESS-PITTNET at University of Pittsburgh (work without @domain).	+
-	* eduroam at University of Gothenburg, Sweden	+
-	* eduroam at Chalmers University of Technology, Gothenburg, Sweden	+
-	* eduroam at KTH, Stockholm, Sweden	+
-	* eduroam at University of Copenhagen, Department of Mathematical Sciences	+
-	* eduroam at University of Bergen, Faculty of Mathematics and Natural Sciences	+
-	* eduroam at University of Reading, UK	+
-	* eduroam at RWTH Aachen University, Germany (works with @domain instead of +domain)	+
-	* eduroam at Chemnitz University of Technology, Germany (if it does not work, change your password)	+
-	* eduroam at University of Stuttgart, Germany	+
-	* eduroam at University of Warsaw, Faculty of Mathematics, Informatics and Mechanics	+
-	* eduroam at LTU, Luleå, Sweden	+
-	* eduroam ("802.1x") at University of Leipzig, Germany	+
-	* eduroam at QMUL (Queen Mary, University of London)	+
-	* eduroam at Linköping University, Sweden (LiU)	+
-	* eduroam at Lappeenranta University of Technology, Finland (LUT)	+
-	* eduroam at Aveiro University, Portugal (PT)	+
-	* eduroam at ETH Zürich, Switzerland	+
-	* eduroam at Universidad de Castilla-La Mancha (UCLM), Spain (es)	+
-	* eduroam at TU Braunschweig, Germany	+
-	* eduroam at Karlsruhe Institute of Technology (former University), Germany (use anonymous@kit.edu as manual username)	+
-	* sMobileNet at Hong Kong University of Science and Technology	+
-	* eduroam at University of Waterloo, Canada	+
-	* eduroam at University of Paderborn, Germany (instead of PEAP you have to use TLS)	+
-	* eduroam at University of Cambridge, UK	+
-	* eduroam at University of Heidelberg, Germany but NOT at DKFZ, Heidelberg, Germany	+
-	* eduroam at Ca' Foscari University of Venice, Italy (see notes about WEP above.)	+
-	~~[[Category:Connectivity]]~~	+
-	[[~~Category:WiFi~~]]	+

202.40.139.109: /* PEAP + MSCHAPv2 WiFi Authentication Setup */ wpa-supplicant is necessary for EAP authentication!

2012-10-01T07:34:31Z

PEAP + MSCHAPv2 WiFi Authentication Setup: wpa-supplicant is necessary for EAP authentication!

← Older revision		Revision as of 07:34, 1 October 2012
Line 2:		Line 2:

	Some educational sites using [[:wikipedia:eduroam\|Eduroam]] support this method. Some use EAP-TTLS+PAP where you need to activate TTLS/PAP support first using the cute Qt [https://bugs.maemo.org/show_bug.cgi?id=1635#c107 "WLAN tool" linked to this bug report]. Additionally you need the PR 1.2 firmware on your phone. PEAP + MSCHAPv2 is quite popular authentication method which is supported by the tablets, but some setup is needed. Therefore, bad out of the box experience is guaranteed. If you're uncertain, try if the step-by-step guide below works. If it doesn't - bummer.		Some educational sites using [[:wikipedia:eduroam\|Eduroam]] support this method. Some use EAP-TTLS+PAP where you need to activate TTLS/PAP support first using the cute Qt [https://bugs.maemo.org/show_bug.cgi?id=1635#c107 "WLAN tool" linked to this bug report]. Additionally you need the PR 1.2 firmware on your phone. PEAP + MSCHAPv2 is quite popular authentication method which is supported by the tablets, but some setup is needed. Therefore, bad out of the box experience is guaranteed. If you're uncertain, try if the step-by-step guide below works. If it doesn't - bummer.
		+
		+	Don't forget to install wpa_supplicant package!

	(This example is for Eduroam for [[Nokia N900\|N900]]. Same works for [[Nokia 770\|770]], [[Nokia N800\|N800]] and [[Nokia N810\|N810]] too)		(This example is for Eduroam for [[Nokia N900\|N900]]. Same works for [[Nokia 770\|770]], [[Nokia N800\|N800]] and [[Nokia N810\|N810]] too)

157.138.190.224: Section 'Using WEP cipher suites' added, 'Known working networks' ammended.

2012-07-05T12:11:14Z

Section 'Using WEP cipher suites' added, 'Known working networks' ammended.

← Older revision		Revision as of 12:11, 5 July 2012
Line 27:		Line 27:
	[Finish]		[Finish]
	</pre>		</pre>
		+
		+	== Using WEP cipher suites ==
		+	Some eduroam sites use WEP cipher suites in WPA mode. In this case, the N900 fails to connect instantly and the line
		+
		+	<pre>
		+	Jul 5 10:42:34 Nokia-N900 wlancond[2695]: In WPA mode WEP is not allowed
		+	</pre>
		+
		+	is logged to syslog. Whether this setup is active on a site can be investigated by running
		+	<pre>
		+	$ iwlist scan
		+	[...]
		+	wlan0 Scan completed :
		+	[...]
		+	ESSID:"eduroam"
		+	[...]
		+	IE: IEEE 802.11i/WPA2 Version 1
		+	Group Cipher : WEP-104
		+	IE: WPA Version 1
		+	Group Cipher : WEP-104
		+	[...]
		+	</pre>
		+
		+	on a laptop.
		+
		+	Support was added to osso-wlan as of version 3.0.20 according to the changelog:
		+	<pre>
		+	osso-wlan (3.0.20) unstable; urgency=low
		+
		+	* Fixed: NB#159194 - Add support for WEP cipher in WPA mode to support
		+	Eduroam, fixes the regression
		+
		+	-- Jin Qing <ext-qing.1.jin@nokia.com> Fri, 2 Jul 2010 10:34:40 +0300
		+
		+	osso-wlan (3.0.19) unstable; urgency=low
		+
		+	* Fixed: NB#159194 - Add support for WEP cipher in WPA mode to support
		+	Eduroam
		+
		+	-- Sami Enne <ext-sami.enne@nokia.com> Wed, 2 Jun 2010 15:04:22 +0300
		+	</pre>
		+
		+	Unfortunately, access to NB#159194 is restricted. But a diff of the source located at https://gitorious.org/community-ssu/osso-wlan reveals that the boolean gconf value <tt>/system/osso/connectivity/IAP/allow_wep_ciphers_in_WPA</tt>
		+	has to be flipped to true for this change to kick in:
		+
		+	<pre>
		+	$ gconftool-2 --type bool -s '/system/osso/connectivity/IAP/allow_wep_ciphers_in_WPA' true
		+	</pre>
		+
		+	Why this is not switched on by default and where this is documented is currently unknown. A reboot (or maybe just restarting wlanconfd) resolves the issue. Furthermore, implications on security should be investigated.

	== Known working networks ==		== Known working networks ==
Line 71:		Line 121:
	* eduroam at University of Cambridge, UK		* eduroam at University of Cambridge, UK
	* eduroam at University of Heidelberg, Germany but NOT at DKFZ, Heidelberg, Germany		* eduroam at University of Heidelberg, Germany but NOT at DKFZ, Heidelberg, Germany
		+	* eduroam at Ca' Foscari University of Venice, Italy (see notes about WEP above.)
	[[Category:Connectivity]]		[[Category:Connectivity]]
	[[Category:WiFi]]		[[Category:WiFi]]

193.174.52.90: /* Known working networks */

2012-05-23T15:21:42Z

Known working networks

← Older revision		Revision as of 15:21, 23 May 2012
Line 70:		Line 70:
	* eduroam at University of Paderborn, Germany (instead of PEAP you have to use TLS)		* eduroam at University of Paderborn, Germany (instead of PEAP you have to use TLS)
	* eduroam at University of Cambridge, UK		* eduroam at University of Cambridge, UK
		+	* eduroam at University of Heidelberg, Germany but NOT at DKFZ, Heidelberg, Germany
	[[Category:Connectivity]]		[[Category:Connectivity]]
	[[Category:WiFi]]		[[Category:WiFi]]

143.50.39.26: /* Known working networks */

2012-05-21T08:35:12Z

Known working networks

← Older revision		Revision as of 08:35, 21 May 2012
Line 43:		Line 43:
	* eduroam at TU Vienna, Austria		* eduroam at TU Vienna, Austria
	* eduroam at University of Vienna, Austria		* eduroam at University of Vienna, Austria
		+	* eduroam at University of Graz, Austria
	* eduroam at Klagenfurt University, Austria		* eduroam at Klagenfurt University, Austria
	* WIRELESS-PITTNET at University of Pittsburgh (work without @domain).		* WIRELESS-PITTNET at University of Pittsburgh (work without @domain).

mrpete: /* Known working networks */

2011-11-24T14:18:32Z

Known working networks

← Older revision		Revision as of 14:18, 24 November 2011
Line 68:		Line 68:
	* eduroam at University of Waterloo, Canada		* eduroam at University of Waterloo, Canada
	* eduroam at University of Paderborn, Germany (instead of PEAP you have to use TLS)		* eduroam at University of Paderborn, Germany (instead of PEAP you have to use TLS)
		+	* eduroam at University of Cambridge, UK
	[[Category:Connectivity]]		[[Category:Connectivity]]
	[[Category:WiFi]]		[[Category:WiFi]]

109.91.32.155: /* Known working networks */

2011-09-14T15:23:59Z

Known working networks

← Older revision		Revision as of 15:23, 14 September 2011
Line 67:		Line 67:
	* sMobileNet at Hong Kong University of Science and Technology		* sMobileNet at Hong Kong University of Science and Technology
	* eduroam at University of Waterloo, Canada		* eduroam at University of Waterloo, Canada
		+	* eduroam at University of Paderborn, Germany (instead of PEAP you have to use TLS)
	[[Category:Connectivity]]		[[Category:Connectivity]]
	[[Category:WiFi]]		[[Category:WiFi]]

129.97.120.216: /* Known working networks */

2011-09-12T17:20:04Z

Known working networks

← Older revision		Revision as of 17:20, 12 September 2011
Line 66:		Line 66:
	* eduroam at Karlsruhe Institute of Technology (former University), Germany (use anonymous@kit.edu as manual username)		* eduroam at Karlsruhe Institute of Technology (former University), Germany (use anonymous@kit.edu as manual username)
	* sMobileNet at Hong Kong University of Science and Technology		* sMobileNet at Hong Kong University of Science and Technology
		+	* eduroam at University of Waterloo, Canada
	[[Category:Connectivity]]		[[Category:Connectivity]]
	[[Category:WiFi]]		[[Category:WiFi]]

143.89.190.35 at 15:36, 2 September 2011

2011-09-02T15:36:04Z

← Older revision		Revision as of 15:36, 2 September 2011
Line 65:		Line 65:
	* eduroam at TU Braunschweig, Germany		* eduroam at TU Braunschweig, Germany
	* eduroam at Karlsruhe Institute of Technology (former University), Germany (use anonymous@kit.edu as manual username)		* eduroam at Karlsruhe Institute of Technology (former University), Germany (use anonymous@kit.edu as manual username)
-	~~== Not Work ==~~
	* sMobileNet at Hong Kong University of Science and Technology		* sMobileNet at Hong Kong University of Science and Technology
	[[Category:Connectivity]]		[[Category:Connectivity]]
	[[Category:WiFi]]		[[Category:WiFi]]

202.40.139.109 at 04:17, 31 August 2011

2011-08-31T04:17:15Z

← Older revision		Revision as of 04:17, 31 August 2011
Line 65:		Line 65:
	* eduroam at TU Braunschweig, Germany		* eduroam at TU Braunschweig, Germany
	* eduroam at Karlsruhe Institute of Technology (former University), Germany (use anonymous@kit.edu as manual username)		* eduroam at Karlsruhe Institute of Technology (former University), Germany (use anonymous@kit.edu as manual username)
		+	== Not Work ==
		+	* sMobileNet at Hong Kong University of Science and Technology
	[[Category:Connectivity]]		[[Category:Connectivity]]
	[[Category:WiFi]]		[[Category:WiFi]]