The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <address@concealed>]

Hi Robert,

Ebejer has sent me off-list the evidence  that the installer is indeed broken, but his question is not really about that.

Tomasz

W dniu 18.04.2021 o 18:20, Grätz, Robert pisze:

Dear Ebejer,

>When I run the CAT tool, I get a wpa_supplicant file (which has some incorrect syntax in it but this is not a big deal and I clean this manually).

Could you describe the incorrect syntax error, please. Maybe explicit with the generated configuration? Maybe we have to fix this at our installer.

What are the error messages if you run [1].

[iwd]# station <device> connect eduroam

Best regards

Robert

[1]: https://wiki.archlinux.org/index.php/Iwd#Connect_to_a_network

---

Von: address@concealed <address@concealed> im Auftrag von JP Ebejer <address@concealed>
Gesendet: Freitag, 16. April 2021 23:48:59
An: address@concealed
Betreff: [ext] [[cat-users]] Help with setting up eduroam on Arch Linux using iwd

 

Dear all,

I have downloaded the CAT tool for my University (eduroam-linux-UoM.py) which I ran on ArchLinux.  My wireless wifi driver is iwlwifi.

When I run the CAT tool, I get a wpa_supplicant file (which has some incorrect syntax in it but this is not a big deal and I clean this manually).  I used the generated certificates, and details etc. in network manager applet (1.20) to try to set up eduroam.  However the network manager gives me the error "802.1x connections must have IWD provisioning files" as described in https://wiki.archlinux.org/index.php/NetworkManager.

I create an iwd config file (/var/lib/iwd/eduroam.8021x) with the following contents (mostly as described in https://wiki.archlinux.org/index.php/Iwd#Eduroam):

[Security]
EAP-Method=TTLS
address@concealed
EAP-TTLS-CACert="/home/fake.username/.cat_installer/ca.pem"
EAP-TTLS-Phase2-Method=Tunneled-PAP
address@concealed
EAP-TTLS-Phase2-Password=fake.password

[Settings]
AutoConnect=true

However I am unable to connect to eduroam using these details and NetworkManager/iwd.

Note that the wpa_supplicant file (after cleaning it up manually from some badly generated config):

network={
        ssid="eduroam"
        key_mgmt=WPA-EAP
        pairwise=CCMP
        group=CCMP TKIP
        eap=TTLS
        ca_cert="/home/fake.username/.cat_installer/ca.pem"
        identity="address@concealed"
        altsubject_match="DNS:wifiauth.um.edu.mt"
        phase2="auth=PAP"
        password="fake.password"
        anonymous_identity="address@concealed"
}

Any ideas what I am doing wrong and  how I can fix this to be able to connect to eduroam from Arch Linux using iwd?

Any help is appreciated, as I am stuck.

--

Dr Jean-Paul Ebejer | Senior Lecturer BSc (Hons) (Melita), MSc (Imperial), DPhil (Oxon.)

Centre for Molecular Medicine and Biobanking Office 320, Biomedical Sciences Building, University of Malta, Msida, MSD 2080.  MALTA. T: (00356) 2340 3263
Associate Member Department of Artificial Intelligence
Where am I?

  

          To unsubscribe, send this message:
          mailto:address@concealed?subject=unsubscribe%20cat-users
          Or use the following link:
          https://lists.geant.org/sympa/sigrequest/cat-users
      
      To unsubscribe,
        send this message:
        mailto:address@concealed?subject=unsubscribe%20cat-users
        Or use the following link:
        https://lists.geant.org/sympa/sigrequest/cat-users
    
-- 
Tomasz Wolniewicz    
          address@concealed        http://www.home.umk.pl/~twoln

Uniwersteckie Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika        Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750                  tel kom.: +48-693-032-576

Attachment: smime.p7s
Description: Kryptograficzna sygnatura S/MIME