Wireless - Revision history

Nguenthe: /* netctl */ update ArchLinux path; also add domain_suffix_match for extra security

2018-06-20T01:58:56Z

netctl: update ArchLinux path; also add domain_suffix_match for extra security

← Older revision		Revision as of 20:58, 19 June 2018
Line 31:		Line 31:
	'key_mgmt=WPA-EAP'		'key_mgmt=WPA-EAP'
	'eap=PEAP'		'eap=PEAP'
	'ca_cert="/~~usr~~/~~share~~/~~ca-certificates/mozilla~~/GlobalSign_Root_CA.~~crt~~"'		'ca_cert="/etc/ssl/certs/GlobalSign_Root_CA.pem"'
			'domain_suffix_match="uwaterloo.ca"'
	)		)


	==== wicd ====		==== wicd ====

2014-09-23T04:11:58Z

instructions for wpa_supplicant config snippet

← Older revision		Revision as of 23:11, 22 September 2014
Line 59:		Line 59:

	==== wpa_supplicant ====		==== wpa_supplicant ====
			add this to a file in /etc/wpa_supplicant/.

	network={		network={
	ssid="eduroam"		ssid="eduroam"
Line 71:		Line 73:
	phase2="auth=MSCHAPV2"		phase2="auth=MSCHAPV2"
	}		}

2014-09-23T03:54:56Z

remove netcfg config (nobody should be using netcfg any more)

← Older revision		Revision as of 22:54, 22 September 2014
Line 12:		Line 12:
	and replace the password line with		and replace the password line with
	password=hash:HASH_HERE		password=hash:HASH_HERE

	==== netcfg ====
	Toss this into /etc/network.d/, making sure you edit identity and password. sudo netcfg eduroam

	CONNECTION='wireless'
	INTERFACE=wlan0
	SECURITY='wpa-configsection'
	IP='dhcp'
	CONFIGSECTION='
	ssid="eduroam"
	proto=RSN
	key_mgmt=WPA-EAP
	pairwise=CCMP
	group=CCMP
	eap=PEAP
	identity="userid@uwaterloo.ca"
	password="hunter2"
	ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
	phase2="auth=MSCHAPV2"'

2014-09-23T03:54:15Z

modify netctl config based on qllam's working config

← Older revision		Revision as of 22:54, 22 September 2014
Line 34:		Line 34:

	==== netctl ====		==== netctl ====
	Toss this into /etc/netctl/, making sure you edit identity and password. ~~sudo~~ ~~netctl~~ ~~start~~ ~~eduroam~~		Toss this into /etc/netctl/, making sure you edit identity and password. Replace wlan0 with the correct interface. Your correct interface can probably be seen in the output of
			ip link
			and probably is the one that starts with 'w'.

			To connect, run sudo netctl start eduroam

	Connection='wireless'		Connection='wireless'
Line 41:		Line 45:
	IP='dhcp'		IP='dhcp'
	WPAConfigSection=(		WPAConfigSection=(
	~~ssid~~="~~eduroam~~"		'identity="userid@uwaterloo.ca"'
	proto=RSN
⚫	key_mgmt=WPA-EAP
	pairwise=CCMP
	group=CCMP
⚫	eap=PEAP
	identity="userid@uwaterloo.ca"
	'password="hunter2"'		'password="hunter2"'
			'ssid="eduroam"'
⚫	ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
		⚫	'key_mgmt=WPA-EAP'
	phase2="auth=MSCHAPV2"
		⚫	'eap=PEAP'
		⚫	'ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"'
	)		)

2014-09-10T03:46:45Z

add information about MSCHAPv2 hashing; add profiles for wpa_supplicant and netctl

@@ Line 8: / Line 8: @@
 === Linux ===
 ==== netcfg ====
 Toss this into /etc/network.d/, making sure you edit identity and password. sudo netcfg eduroam
@@ Line 22: / Line 27: @@
      group=CCMP
      eap=PEAP
      identity="userid@uwaterloo.ca"
      password="hunter2"
      ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
      phase2="auth=MSCHAPV2"
 ==== wicd ====
@@ Line 51: / Line 76: @@
      phase2="auth=MSCHAPV2"
+ }
 The previous setup has been [http://wiki.csclub.uwaterloo.ca/Wireless?oldid=2297 archived] for posterity.

2013-11-08T10:01:24Z

← Older revision		Revision as of 05:01, 8 November 2013
Line 4:		Line 4:
	== Rosetta Stone ==		== Rosetta Stone ==
	See IST's page http://ist.uwaterloo.ca/cs/wireless.html for Windows and other devices.		See IST's page http://ist.uwaterloo.ca/cs/wireless.html for Windows and other devices.

			The ca_cert line is only needed to verify the authenticity of the eduroam AP, and is otherwise not actually needed to connect to it. Keep in mind that removing it from your config means that you are technically vulnerable to someone creating a fake eduroam access point and using it to grab your Quest login, though honestly the chances of this ever happening on campus are extremely unlikely.

	=== Linux ===		=== Linux ===

2012-02-27T17:50:16Z

Rosetta Stone

← Older revision		Revision as of 12:50, 27 February 2012
Line 3:		Line 3:

	== Rosetta Stone ==		== Rosetta Stone ==
			See IST's page http://ist.uwaterloo.ca/cs/wireless.html for Windows and other devices.

	=== Linux ===		=== Linux ===

2012-02-27T17:48:28Z

netcfg

← Older revision		Revision as of 12:48, 27 February 2012
Line 11:		Line 11:
	INTERFACE=wlan0		INTERFACE=wlan0
	SECURITY='wpa-configsection'		SECURITY='wpa-configsection'
	# Uncomment this if your ssid is hidden
	#HIDDEN=yes
	IP='dhcp'		IP='dhcp'
	CONFIGSECTION='		CONFIGSECTION='

2012-02-27T17:47:05Z

added eduroam configs for netcfg(arch linux), wicd

← Older revision		Revision as of 12:47, 27 February 2012
Line 1:		Line 1:
	'''csc-wireless no longer exists. Members are advised to use ~~uw-wireless~~ or uw-~~secure~~.'''		'''csc-wireless no longer exists. Members are advised to use eduroam or uw-unsecured.'''


			== Rosetta Stone ==

			=== Linux ===
			==== netcfg ====
			Toss this into /etc/network.d/, making sure you edit identity and password. sudo netcfg eduroam

			CONNECTION='wireless'
			INTERFACE=wlan0
			SECURITY='wpa-configsection'
			# Uncomment this if your ssid is hidden
			#HIDDEN=yes
			IP='dhcp'
			CONFIGSECTION='
			ssid="eduroam"
			proto=RSN
			key_mgmt=WPA-EAP
			pairwise=CCMP
			group=CCMP
			eap=PEAP
			#anonymous_identity="anonymous"
			identity="userid@uwaterloo.ca"
			password="hunter2"
			ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
			phase2="auth=MSCHAPV2"
			priority=1'

			==== wicd ====
			Toss this into /etc/wicd/encryption/templates/ and edit /etc/wicd/encryption/templates/active to include a line with eduroam.

			name = Eduroam UW
			author = Steven She
			version = 1
			require username Username password Password
			-----
			ctrl_interface=/var/run/wpa_supplicant
			network={
			ssid="$_ESSID"
			scan_ssid="$_SCAN"
			proto=RSN
			key_mgmt=WPA-EAP
			pairwise=CCMP
			group=CCMP
			eap=PEAP
			identity="$_USERNAME"
			password="$_PASSWORD"
			ca_cert="/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt"
			phase2="auth=MSCHAPV2"
			}

	The previous setup has been [http://wiki.csclub.uwaterloo.ca/Wireless?oldid=2297 archived] for posterity.		The previous setup has been [http://wiki.csclub.uwaterloo.ca/Wireless?oldid=2297 archived] for posterity.

2010-03-23T00:15:41Z

add to Systems category

← Older revision		Revision as of 19:15, 22 March 2010
Line 2:		Line 2:

	The previous setup has been [http://wiki.csclub.uwaterloo.ca/Wireless?oldid=2297 archived] for posterity.		The previous setup has been [http://wiki.csclub.uwaterloo.ca/Wireless?oldid=2297 archived] for posterity.

			[[Category:Systems]]