HOWTO: Wireless Security - WPA1, WPA2, LEAP, etc.

[wieman01]

Thanks

Is it possible to run a RADIUS server in Ubuntu? (Never mind, I searched the Repos, it is) My router is capable of using a RADIUS server, so maybe I'll see if I can get that to fly. Chances are I won't though, so if someone else out there has access to an already setup RADIUS server, that would be helpful.

edit: i gave up on the setting-up-a-RADIUS-server idea, so if someone could test it, thanks

You router certainly has a RADUIS setting, however, you need to set up a RADUIS to support it. The RADIUS function only allows you to connect to a dedicated RADIUS server. I am sure you would be able to set it up using Ubuntu. I would do it, unfortunately I will be on the road in the next couple of weeks.

EDIT:
I asked other users to help me with testing a while ago... Perhaps we can make use of this thread. Feel free to join in. Really like to see this go ahead.

[compwiz18]

I just finished incorporating all the info into connection-manager on the first page of this thread, and it works like a charm at least for wpa2 and hidden essid and static ips, and normal unsecured visible dhcp.

And I'll put a note on my thread asking for users to test. maybe between us we can get a couple.

thanks again.

[wieman01]

I just finished incorporating all the info into connection-manager on the first page of this thread, and it works like a charm at least for wpa2 and hidden essid and static ips, and normal unsecured visible dhcp.

And I'll put a note on my thread asking for users to test. maybe between us we can get a couple.

thanks again.

Man, that's great. I will give it a go soon & post a link to your site/package after testing it myself. Good job, buddy.

[compwiz18]

I need to finish the GUI, I'll do that tomorrow. But the hard part (the part that does the work) is finished. I hope to release it by December 25. But I'll PM it to you first (as soon as it is done) so you can have a look and make sure it works.

[usererror]

I am having a heck of a time getting this to work in my network environment:

We use the following:

EAP-FAST (using our active directory username and password)
Dynamic WEP
802.1x Authentication
Open Authentication.

I tried using the EAP-FAST (untested one in the howto) and it does not connect me. Does anyone else have this type of network environment?

[wieman01]

Have you tried this?

auto wlan0
iface wlan0 inet dhcp
wpa-driver wext
wpa-conf managed
wpa-ssid <your_essid>
wpa-ap-scan 1
wpa-group WEP104 WEP40
wpa-key-mgmt IEEE8021X
wpa-eap FAST
wpa-identity <your_user_name>
wpa-password <your_password>
wpa-phase1 fast_provisioning=1
wpa-pac-file /path/to/eap-pac-file

You also need the stuff in 'green'.

[usererror]

Wieman01,

I think I had the green code, but the WEP part you have posted I did not have. I'll try this today and post back, thank you for your assistance!

[wieman01]

No worries, I am glad you help us out as well. Would love to see this work as well because this would help a lot of other users as you can image (including me of course).

[iceman1234]

VERY good HOWTO. It worked the first time, after reading the very important rule about WPA-PSK

Again, many thx.
cheers

[Lysi]

finally, I got it working as well. Thx 4 the HOWTO.

One thing bothers me still, because I haven't totally understood the process yet.

is /etc/wpa_supplicant/wpa_supplicant.conf necessary? it is used in other threads herein the forum. because everything is configured /etc/network/interfaces and it works without it.
and one more thing to add here. maybe it helps someone else.

if you have a password including bash special characters, e.g.
234$42er24r
then, a backslash in front of $ is necessary to remove its bash interpretation,

wpa_passphrase "NET1" "234\$42er24r"
network={
        ssid="NET1"
        #psk="234$42er24r"
        psk=d95df02d0eece531d1d266ea4aa8c61691be8cc66ebde7e2810df676b1439d97
}

it took me some time to realize that I always got the wrong network psk