Re: WPA2 Enterprise (and other things)

[Jon Escombe <lists dresco co uk>]

Robert Love <rml <at> novell.com> writes:

> 
> On Wed, 2006-03-22 at 12:30 +0000, Jon Escombe wrote:
> 
> > 1) WPA2 Enterprise connection works fine when all the credentials 
> > are entered (using TLS & a private key file/password), however it 
> > won't reconnect without entering the credentials again each time 
> > (doesn't appear to launch wpa_spplicant).
> 
> I'll take a look at this.
> 
> Can you explain what is happening in detail?  What are you doing and
> what does NM do?
> 
> Can you attach the output from the daemon?
> 

Apologies in advance, am posting here from gmane - so a bit restricted on line
lengths/attachments etc. If you need the full log then I can send it to you
off-list.

If I select "connect to other wireless network" and enter the full details for
my WPA2 network (ssid, wpa2 enterprise, tls, identity, private key file,
password) then I see the following output from NM and the connection succeeds:

Activation (ath0) started...
Activation (ath0) Stage 1 of 5 (Device Prepare) scheduled...
Activation (ath0) Stage 1 of 5 (Device Prepare) started...
Activation (ath0) Stage 2 of 5 (Device Configure) scheduled...
Activation (ath0) Stage 1 of 5 (Device Prepare) complete.
Activation (ath0) Stage 2 of 5 (Device Configure) starting...
Activation (ath0/wireless): access point '*****' is encrypted, and a key exists.
 No new key needed.
SUP: sending command 'INTERFACE_ADD ath0 madwifi /var/run/wpa_supplicant '
SUP: response was 'OK'
SUP: sending command 'AP_SCAN 1'
SUP: response was 'OK'
SUP: sending command 'ADD_NETWORK'
SUP: response was '0'
SUP: sending command 'SET_NETWORK 0 ssid ********'
SUP: response was 'OK'
SUP: sending command 'SET_NETWORK 0 proto WPA2'
SUP: response was 'OK'
SUP: sending command 'SET_NETWORK 0 key_mgmt WPA-EAP'
SUP: response was 'OK'
SUP: sending command 'SET_NETWORK 0 eap TLS'
SUP: response was 'OK'
SUP: sending command 'SET_NETWORK 0 identity "********"'
SUP: response was 'OK'
SUP: sending command 'SET_NETWORK 0 private_key "********.pfx"'
SUP: response was 'OK'
SUP: sending command 'SET_NETWORK 0 private_key_passwd <key>'
SUP: response was 'OK'
SUP: sending command 'ENABLE_NETWORK 0'
SUP: response was 'OK'
Activation (ath0) Stage 2 of 5 (Device Configure) complete.
wpa_supplicant(22087): Global control interface '/var/run/wpa_supplicant-global'

If I then (for example) switch away from this connection and back again, I see
only the following output. Doesn't prompt me for any credentials, just waits at
this point:

Activation (ath0) started...
Activation (ath0) Stage 1 of 5 (Device Prepare) scheduled...
Activation (ath0) Stage 1 of 5 (Device Prepare) started...
Activation (ath0) Stage 2 of 5 (Device Configure) scheduled...
Activation (ath0) Stage 1 of 5 (Device Prepare) complete.
Activation (ath0) Stage 2 of 5 (Device Configure) starting...
Activation (ath0/wireless): access point '*****' is encrypted, but NO valid key
exists.  New key needed.
Activation (ath0) New wireless user key requested for network '*****'.
Activation (ath0) Stage 2 of 5 (Device Configure) complete.

Regards,
Jon.