Connection to Eduroam using Eduroam CAT?
asked 2019-06-07 10:23:50 +0300
Hello,
Has anyone found a way to connect to eduroam trough the use of Eduroam CAT?
Thanks
2 Answers
answered 2019-06-08 00:39:32 +0300
It might work out of the box (it depends on how your institution's network is configured), however there are some issues with that approach: It might not work at other institutions or in other countries and it is insecure, because the certificate and the domain of the authentification server are not verified. That is what the CAT tools are for. The configuration file should look something like this:
[service_eduroam]
Type = wifi
Name = eduroam
EAP = <AUTHENTIFICATION> # probably peap or TTLS
Phase2 = <INNER_AUTHENTIFICATION> # probably pap or MSCHAPV2
DomainSuffixMatch = <SERVER_NAME> # radius server of your institution
CACertFile = <CERTIFICATE> # probably: /etc/ssl/certs/ca-bundle.crt
AnonymousIdentity = <ANONYMOUS@INSTITUTION> # probably eduroam@INSTITUTION or anonymous@INSTITUTION
Identity = <USER@INSTITUTION>
Passphrase = <PASSWORD>
The entries depend on the network configuration of your institution, they should be documented somewhere.
see also how-to-wpa-8021x-enterprise-eduroam-others-gui-wifi-support-needed-workaround and eduroam-support-broken
Comments
answered 2019-06-07 22:28:55 +0300
I've never used Eduroam CAT, as linux user it has always been easier to ignore eduroam install instructions and just configure a 802.11x connection (using the system's SSL certificates). ;)
Connecting eduroam on recent SailfishOS releases works flawlessly out of the box for me.
Just select "WPA-EAP" encryption and enter your identity (<login>@<instution>) & passphrase (the existing connection shows "WPA-EAP (PEAP)" as encryption, I assume PEAP has been auto-detected). No need to use Roamer or manually edit connman config files.</instution></login>
Comments
Thanks, i'm trying to get the provided certificates working
Mariusmssj ( 2019-06-08 15:38:41 +0300 )editStats
Asked: 2019-06-07 10:23:50 +0300
Seen: 328 times
Last updated: Jun 08 '19
No, but you can simply add a config file under /var/lib/connman/*.config. Roamer from openrepos can do that for you, however not all fields like Servername are provided via the interface. So better do it by hand.
Epicuri ( 2019-06-07 13:01:19 +0300 )editThe official website provides a .eap-config file (seems to be in xml format), so that is the file that I would use?
Mariusmssj ( 2019-06-07 14:40:18 +0300 )editDoes your university accidentally use PAP and TTLS? Because this is not working for me.. If it works for you, it would be nice if you could post a working config file.
Tzwenn ( 2019-06-24 19:20:32 +0300 )edit