#!/bin/bash my_name=$0 function setup_environment { bf="" n="" ORGANISATION="Univ. degli Studi di Milano" URL="your local eduroam support page" SUPPORT="eduroam@unimi.it" if [ ! -z "$DISPLAY" ] ; then if which zenity 1>/dev/null 2>&1 ; then ZENITY=`which zenity` elif which kdialog 1>/dev/null 2>&1 ; then KDIALOG=`which kdialog` else if tty > /dev/null 2>&1 ; then if echo $TERM | grep -E -q "xterm|gnome-terminal|lxterminal" ; then bf=""; n=""; fi else find_xterm if [ -n "$XT" ] ; then $XT -e $my_name fi fi fi fi } function split_line { echo $1 | awk -F '\\\\n' 'END { for(i=1; i <= NF; i++) print $i }' } function find_xterm { terms="xterm aterm wterm lxterminal rxvt gnome-terminal konsole" for t in $terms do if which $t > /dev/null 2>&1 ; then XT=$t break fi done } function ask { T="eduroam CAT" # if ! [ -z "$3" ] ; then # T="$T: $3" # fi if [ ! -z $KDIALOG ] ; then if $KDIALOG --yesno "${1}\n${2}?" --title "$T" ; then return 0 else return 1 fi fi if [ ! -z $ZENITY ] ; then if $ZENITY --question --text="${1}\n${2}?" --title="$T" ; then return 0 else return 1 fi fi yes=Y no=N yes1=`echo $yes | awk '{ print toupper($0) }'` no1=`echo $no | awk '{ print toupper($0) }'` if [ $3 == "0" ]; then def=$yes else def=$no fi echo ""; while true do split_line "$1" read -p "${bf}$2 ${yes}/${no}? [${def}]:$n " answer if [ -z "$answer" ] ; then answer=${def} fi answer=`echo $answer | awk '{ print toupper($0) }'` case "$answer" in ${yes1}) return 0 ;; ${no1}) return 1 ;; esac done } function alert { if [ ! -z $KDIALOG ] ; then $KDIALOG --sorry "${1}" return fi if [ ! -z $ZENITY ] ; then $ZENITY --warning --text="$1" return fi echo "$1" } function show_info { if [ ! -z $KDIALOG ] ; then $KDIALOG --msgbox "${1}" return fi if [ ! -z $ZENITY ] ; then $ZENITY --info --width=500 --text="$1" return fi echo "$1" } function confirm_exit { if [ ! -z $KDIALOG ] ; then if $KDIALOG --yesno \"Really quit?\" ; then exit 1 fi fi if [ ! -z $ZENITY ] ; then if $ZENITY --question --text=\"Really quit?\" ; then exit 1 fi fi } function prompt_nonempty_string { prompt=$2 if [ ! -z $ZENITY ] ; then if [ $1 -eq 0 ] ; then H="--hide-text " fi if ! [ -z "$3" ] ; then D="--entry-text=$3" fi elif [ ! -z $KDIALOG ] ; then if [ $1 -eq 0 ] ; then H="--password" else H="--inputbox" fi fi out_s=""; if [ ! -z $ZENITY ] ; then while [ ! "$out_s" ] ; do out_s=`$ZENITY --entry --width=300 $H $D --text "$prompt"` if [ $? -ne 0 ] ; then confirm_exit fi done elif [ ! -z $KDIALOG ] ; then while [ ! "$out_s" ] ; do out_s=`$KDIALOG $H "$prompt" "$3"` if [ $? -ne 0 ] ; then confirm_exit fi done else while [ ! "$out_s" ] ; do read -p "${prompt}: " out_s done fi echo $out_s; } function user_cred { PASSWORD="a" PASSWORD1="b" if ! USER_NAME=`prompt_nonempty_string 1 "enter your userid"` ; then exit 1 fi while [ "$PASSWORD" != "$PASSWORD1" ] do if ! PASSWORD=`prompt_nonempty_string 0 "enter your password"` ; then exit 1 fi if ! PASSWORD1=`prompt_nonempty_string 0 "repeat your password"` ; then exit 1 fi if [ "$PASSWORD" != "$PASSWORD1" ] ; then alert "passwords do not match" fi done } setup_environment show_info "This installer has been prepared for ${ORGANISATION}\n\nMore information and comments:\n\nEMAIL: ${SUPPORT}\nWWW: ${URL}\n\nInstaller created with software from the GEANT project." if ! ask "This installer will only work properly if you are a member of ${bf}Univ. degli Studi di Milano.${n}" "Continue" 1 ; then exit; fi if [ -d $HOME/.eduroam ] ; then if ! ask "Directory $HOME/.eduroam exists; some of its files may be overwritten." "Continue" 1 ; then exit; fi else mkdir $HOME/.eduroam fi # save certificates echo "-----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgIQZBvoIM4CCBPzLU0tldZ+ZzANBgkqhkiG9w0BAQUFADCB yjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJp U2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxW ZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0 aG9yaXR5IC0gRzUwHhcNMTAwMjA4MDAwMDAwWhcNMjAwMjA3MjM1OTU5WjCBvDEL MAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZW ZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQg aHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDE2MDQGA1UEAxMtVmVy aVNpZ24gQ2xhc3MgMyBJbnRlcm5hdGlvbmFsIFNlcnZlciBDQSAtIEczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdacYvAV9IGaQQhZjxOdF8mfUdza sVLv/+NB3eDfxCjG4615HycQmLi7IJfBKERBD+qpqFLPTU4bi7u1xHbZzFYG7rNV ICreFY1xy1TIbxfNiQDk3P/hwB9ocenHKS5+vDv85burJlSLZpDN9pK5MSSAvJ5s 1fx+0uFLjNxC+kRLX/gYtS4w9D0SmNNiBXNUppyiHb5SgzoHRsQ7AlYhv/JRT9Cm mTnprqU/iZucff5NYAclIPe712mDK4KTQzfZg0EbawurSmaET0qO3n40mY5o1so5 BptMs5pITRNGtFghBMT7oE2sLktiEuP7TfbJUQABH/weaoEqOOC5T9YtRQIDAQAB o4ICFTCCAhEwEgYDVR0TAQH/BAgwBgEB/wIBADBwBgNVHSAEaTBnMGUGC2CGSAGG +EUBBxcDMFYwKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9j cHMwKgYIKwYBBQUHAgIwHhocaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYTAO BgNVHQ8BAf8EBAMCAQYwbQYIKwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2Uv Z2lmMCEwHzAHBgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDov L2xvZ28udmVyaXNpZ24uY29tL3ZzbG9nby5naWYwNAYDVR0lBC0wKwYIKwYBBQUH AwEGCCsGAQUFBwMCBglghkgBhvhCBAEGCmCGSAGG+EUBCAEwNAYIKwYBBQUHAQEE KDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC52ZXJpc2lnbi5jb20wNAYDVR0f BC0wKzApoCegJYYjaHR0cDovL2NybC52ZXJpc2lnbi5jb20vcGNhMy1nNS5jcmww KAYDVR0RBCEwH6QdMBsxGTAXBgNVBAMTEFZlcmlTaWduTVBLSS0yLTcwHQYDVR0O BBYEFNebfNgioBX33a1fzimbWMO8RgC1MB8GA1UdIwQYMBaAFH/TZafC3ey78DAJ 80M5+gKvMzEzMA0GCSqGSIb3DQEBBQUAA4IBAQBxtX1zUkrd1000Ky6vlEalSVAC T/gvF3DyE9wfIYaqwk98NzzURniuXXhv0bpavBCrWDbFjGIVRWAXIeLVQqh3oVXY QwRR9m66SOZdTLdE0z6k1dYzmp8N5tdOlkSVWmzWoxZTDphDzqS4w2Z6BVxiEOgb Ett9LnZQ/9/XaxvMisxx+rNAVnwzeneUW/ULU/sOX7xo+68q7jA3eRaTJX9NEP9X +79uOzMh3nnchhdZLUNkt6Zmh+q8lkYZGoaLb9e3SQBb26O/KZru99MzrqP0nkzK XmnUG623kHdq2FlveasB+lXwiiFm5WVu/XzT3x7rfj8GkPsZC9MGAht4Q5mo -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIE0DCCBDmgAwIBAgIQJQzo4DBhLp8rifcFTXz4/TANBgkqhkiG9w0BAQUFADBf MQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsT LkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkw HhcNMDYxMTA4MDAwMDAwWhcNMjExMTA3MjM1OTU5WjCByjELMAkGA1UEBhMCVVMx FzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVz dCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2lnbiwgSW5jLiAtIEZv ciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJpU2lnbiBDbGFzcyAz IFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJAgIKXo1nmAMqudLO07cfLw8 RRy7K+D+KQL5VwijZIUVJ/XxrcgxiV0i6CqqpkKzj/i5Vbext0uz/o9+B1fs70Pb ZmIVYc9gDaTY3vjgw2IIPVQT60nKWVSFJuUrjxuf6/WhkcIzSdhDY2pSS9KP6HBR TdGJaXvHcPaz3BJ023tdS1bTlr8Vd6Gw9KIl8q8ckmcY5fQGBO+QueQA5N06tRn/ Arr0PO7gi+s3i+z016zy9vA9r911kTMZHRxAy3QkGSGT2RT+rCpSx4/VBEnkjWNH iDxpg8v+R70rfk/Fla4OndTRQ8Bnc+MUCH7lP59zuDMKz10/NIeWiu5T6CUVAgMB AAGjggGbMIIBlzAPBgNVHRMBAf8EBTADAQH/MDEGA1UdHwQqMCgwJqAkoCKGIGh0 dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTMuY3JsMA4GA1UdDwEB/wQEAwIBBjA9 BgNVHSAENjA0MDIGBFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVy aXNpZ24uY29tL2NwczAdBgNVHQ4EFgQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMwbQYI KwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2UvZ2lmMCEwHzAHBgUrDgMCGgQU j+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDovL2xvZ28udmVyaXNpZ24uY29t L3ZzbG9nby5naWYwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8v b2NzcC52ZXJpc2lnbi5jb20wPgYDVR0lBDcwNQYIKwYBBQUHAwEGCCsGAQUFBwMC BggrBgEFBQcDAwYJYIZIAYb4QgQBBgpghkgBhvhFAQgBMA0GCSqGSIb3DQEBBQUA A4GBABMC3fjohgDyWvj4IAxZiGIHzs73Tvm7WaGY5eE43U68ZhjTresY8g3JbT5K lCDDPLq9ZVTGr0SzEK0saz6r1we2uIFjxfleLuUqZ87NMwwq14lWAyMfs77oOghZ tOxFNfeKW/9mz1Cvxm1XjRl4t7mi0VfqH5pLr7rJjhJ+xr3/ -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIQGNrRniZ96LtKIVjNzGs7SjANBgkqhkiG9w0BAQUFADCB yjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJp U2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxW ZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0 aG9yaXR5IC0gRzUwHhcNMDYxMTA4MDAwMDAwWhcNMzYwNzE2MjM1OTU5WjCByjEL MAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZW ZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2ln biwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJp U2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9y aXR5IC0gRzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJAgIKXo1 nmAMqudLO07cfLw8RRy7K+D+KQL5VwijZIUVJ/XxrcgxiV0i6CqqpkKzj/i5Vbex t0uz/o9+B1fs70PbZmIVYc9gDaTY3vjgw2IIPVQT60nKWVSFJuUrjxuf6/WhkcIz SdhDY2pSS9KP6HBRTdGJaXvHcPaz3BJ023tdS1bTlr8Vd6Gw9KIl8q8ckmcY5fQG BO+QueQA5N06tRn/Arr0PO7gi+s3i+z016zy9vA9r911kTMZHRxAy3QkGSGT2RT+ rCpSx4/VBEnkjWNHiDxpg8v+R70rfk/Fla4OndTRQ8Bnc+MUCH7lP59zuDMKz10/ NIeWiu5T6CUVAgMBAAGjgbIwga8wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8E BAMCAQYwbQYIKwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2UvZ2lmMCEwHzAH BgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDovL2xvZ28udmVy aXNpZ24uY29tL3ZzbG9nby5naWYwHQYDVR0OBBYEFH/TZafC3ey78DAJ80M5+gKv MzEzMA0GCSqGSIb3DQEBBQUAA4IBAQCTJEowX2LP2BqYLz3q3JktvXf2pXkiOOzE p6B4Eq1iDkVwZMXnl2YtmAl+X6/WzChl8gGqCBpH3vn5fJJaCGkgDdk+bW48DW7Y 5gaRQBi5+MHt39tBquCWIMnNZBU4gcmU7qKEKQsTb47bDN0lAtukixlE0kF6BWlK WE9gyn6CagsCqiUXObXbf+eEZSqVir2G3l6BFoMtEMze/aiCKm0oHw0LxOXnGiYZ 4fQRbxC1lfznQgUy286dUV4otp6F01vvpX1FQHKOtw5rDgb7MzVIcbidJ4vEZV8N hnacRHr2lVz2XTIIM6RUthg/aFzyQkqFOFSDX9HoLPKsEdao7WNq -----END CERTIFICATE----- " > $HOME/.eduroam/ca.pem function run_python_script { python << EOF > /dev/null 2>&1 #-*- coding: utf-8 -*- import dbus import re import sys import uuid import os class EduroamNMConfigTool: def connect_to_NM(self): #connect to DBus try: self.bus = dbus.SystemBus() except dbus.exceptions.DBusException: print "Can't connect to DBus" sys.exit(2) #main service name self.system_service_name = "org.freedesktop.NetworkManager" #check NM version nm_version = self.check_nm_version() if nm_version == "0.9": self.settings_service_name = self.system_service_name self.connection_interface_name = "org.freedesktop.NetworkManager.Settings.Connection" #settings proxy sysproxy = self.bus.get_object(self.settings_service_name, "/org/freedesktop/NetworkManager/Settings") #settings intrface self.settings = dbus.Interface(sysproxy, "org.freedesktop.NetworkManager.Settings") elif nm_version == "0.8": #self.settings_service_name = "org.freedesktop.NetworkManagerUserSettings" self.settings_service_name = "org.freedesktop.NetworkManager" self.connection_interface_name = "org.freedesktop.NetworkManagerSettings.Connection" #settings proxy sysproxy = self.bus.get_object(self.settings_service_name, "/org/freedesktop/NetworkManagerSettings") #settings intrface self.settings = dbus.Interface(sysproxy, "org.freedesktop.NetworkManagerSettings") else: print "This Network Manager version is not supported" sys.exit(2) def check_opts(self): self.cacert_file = '${HOME}/.eduroam/ca.pem' self.pfx_file = '${HOME}/.eduroam/user.p12' if not os.path.isfile(self.cacert_file): print "Certificate file not found, looks like a CAT error" sys.exit(2) def check_nm_version(self): try: proxy = self.bus.get_object(self.system_service_name, "/org/freedesktop/NetworkManager") props = dbus.Interface(proxy, "org.freedesktop.DBus.Properties") version = props.Get("org.freedesktop.NetworkManager", "Version") except dbus.exceptions.DBusException: version = "0.8" if re.match(r'^0\.9', version): return "0.9" if re.match(r'^0\.8', version): return "0.8" else: return "Unknown version" def byte_to_string(self, barray): return "".join([chr(x) for x in barray]) def delete_existing_connections(self, ssid): "checks and deletes earlier connections" try: conns = self.settings.ListConnections() except dbus.exceptions.DBusException: print "DBus connection problem, a sudo might help" exit(3) for each in conns: con_proxy = self.bus.get_object(self.system_service_name, each) connection = dbus.Interface(con_proxy, "org.freedesktop.NetworkManager.Settings.Connection") try: connection_settings = connection.GetSettings() if connection_settings['connection']['type'] == '802-11-wireless': conn_ssid = self.byte_to_string(connection_settings['802-11-wireless']['ssid']) if conn_ssid == ssid: connection.Delete() except dbus.exceptions.DBusException: pass def add_connection(self,ssid): s_con = dbus.Dictionary({ 'type': '802-11-wireless', 'uuid': str(uuid.uuid4()), 'permissions': ['user:$USER'], 'id': ssid }) s_wifi = dbus.Dictionary({ 'ssid': dbus.ByteArray(ssid), 'security': '802-11-wireless-security' }) s_wsec = dbus.Dictionary({'key-mgmt': 'wpa-eap'}) s_8021x = dbus.Dictionary({ 'eap': ['peap'], 'identity': '$USER_NAME', 'ca-cert': dbus.ByteArray("file://" + self.cacert_file + "\0"), 'subject-match': 'eduroam', 'password': '$PASSWORD', 'phase2-auth': 'mschapv2', }) s_ip4 = dbus.Dictionary({'method': 'auto'}) s_ip6 = dbus.Dictionary({'method': 'auto'}) con = dbus.Dictionary({ 'connection': s_con, '802-11-wireless': s_wifi, '802-11-wireless-security': s_wsec, '802-1x': s_8021x, 'ipv4': s_ip4, 'ipv6': s_ip6 }) self.settings.AddConnection(con) def main(self): self.check_opts() ver = self.connect_to_NM() self.delete_existing_connections('eduroam') self.add_connection('eduroam') if __name__ == "__main__": ENMCT = EduroamNMConfigTool() ENMCT.main() EOF } function create_wpa_conf { cat << EOFW >> $HOME/.eduroam/eduroam.conf network={ ssid="eduroam" key_mgmt=WPA-EAP eap=PEAP ca_cert="${HOME}/.eduroam/ca.pem" identity="${USER_NAME}" subject_match="eduroam" phase2="auth=MSCHAPV2" password="${PASSWORD}" } EOFW chmod 600 $HOME/.eduroam/eduroam.conf } #prompt user for credentials user_cred if run_python_script ; then show_info "Installation successful" else show_info "Network Manager configuration failed, generating wpa_supplicant.conf" if [ -f $HOME/.eduroam/eduroam.conf ] ; then if ! ask "File $HOME/.eduroam/eduroam.conf exists; it will be overwritten." "Continue" 1 ; then confirm_exit; fi rm $HOME/.eduroam/eduroam.conf fi create_wpa_conf show_info "Output written to $HOME/.eduroam/eduroam.conf" fi