Skip to Content.
Sympa Menu

cat-users - Re: [[cat-users]] Wired 802.1x authentication under Linux

cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Chronological Thread  
  • From: Tomasz Wolniewicz <address@concealed>
  • To: Benoit LE TEXIER <address@concealed>, address@concealed
  • Subject: Re: [[cat-users]] Wired 802.1x authentication under Linux
  • Date: Mon, 22 Dec 2025 20:12:59 +0100

Hi,

 What you describe is exactly what was missing when we were creating the installer many years ago. Then it appeared that the 802.1x support on the wired was forcing it on all connections (unlike it was in Windows), or perhaps we just missed the settings that you mention.

Of course there will be no problem to incorporate this in the installer. 

Thanks

Tomasz Wolniewicz


W dniu 22.12.2025 o 17:43, Benoit LE TEXIER (via cat-users Mailing List) pisze:
Hello,

It seems the 802.1x authentication on wired interface is not currently supported under Linux with the cateduroam installer. The python script creates a wireless connection despite it is a wired profile. MacOS and Windows installers are working well but it doesn't work for the Linux installer.

I discovered few interesting options in network-manager (I have tested under Ubuntu 24) that helped me to create a working profile:
  • connection.autoconnect-priority = 100       # The priority is high to make sure it is tested first on autoconnect
  • connection.autoconnect-retries = 1            # The number of retries to connect in case of problem before trying the next profile
  • 802-1x.auth-timeout = 10                           # The delay to wait in case no 802.1x is present on the link
  • 802-1x.optional = true                                # Indicate that 802.1x is not mandatory on this profile
Using this parameters, it is possible to define a wired 802.1x profile that is first tried when connecting the wire. If there is 802.1x on the link, the credentials are sent and the connection succeed. If no 802.1x is present on the link, the 802.1x authentication will fail and the next wired profile (without 802.x) will be used.

Do you think it could be possible to integrate such configuration in the cateduroam Linux installer for wired 802.1x profiles?

Best regards,
Benoit Le Texier.
To unsubscribe, send this message: mailto:address@concealed?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users
-- 
Tomasz Wolniewicz

Attachment: smime.p7s
Description: Kryptograficzna sygnatura S/MIME




Archive powered by MHonArc 2.6.24.

Top of Page