Re: Issues with WPA Enterprise + NetworkManager

[Beso <givemesugarr gmail com>]

2009/1/17 Thomas Rix <ThomasRix gmx de>:
>
>
> Helmut Schaa schrieb:
>>
>> Am Freitag, 16. Januar 2009 schrieb Dan Williams:
>>>
>>> On Thu, 2009-01-15 at 13:46 +0100, Thomas Rix wrote:
>>>>
>>>> I'm having trouble to connect to the wireless network at my university.
>>
>> [...]
>>
>>>> Connecting to my WLAN at home with WPA2-PSK works fine, so the driver
>>>> isn't the problem.
>>>
>>> The bug looks to be in KNetworkManager, since it's passing "ca_path"
>>> instead of the CA certificate you've given it.
>>
>> Nah, NetworkManager adds "ca_path", not KNetworkManager. However, KNM does
>> not serialize the cert correctly. That's why certificates are deactivated
>> currently.
>>
>>> You have two options: try to figure out from your distro why
>>> KNetworkManager isn't passing
>>> your chosen CA certificate to NM (it may have legitimate reasons for
>>> doing so), or you can add your CA certificate to the OpenSSL system CA
>>> directory for your distro, which is a bit complicated.
>>
>> If you want to use KNM with a ca_cert (which is not needed for PEAP but
>> highly
>> recommended) you have to copy it to the sytem CA directory as Dan
>> suggested.
>>
>
> If I find some time I will try this out. According to my university the CA
> cert is needed to connect. On Windows Vista (which I used before) I needed
> it to be able to connect to the AP. Without it was not possible.
>
i had a similar issue in the past, but it was due to the issue that my
university (for some unknown
reason needed both identity password and certificate to authenticate.
this wasn't possible with knm
but was possible with nm-applet, so i've done a patch to enable also
the password field. in this way
i've been able to connect properly.
now i've switched to nm-applet, due to knm not working anymore on
kde4+gentoo and to knm not
accessing kwallet anymore.

this is the patch i've done at that time:

Index: knetworkmanager/src/knetworkmanager-devicestore.cpp
===================================================================
--- knetworkmanager/src/knetworkmanager-dialogfab.cpp   (727634)
+++ knetworkmanager/src/knetworkmanager-devicestore.cpp (beso)

@@ -610,7 +610,7 @@
                cryptoWidget->EAPurlClient->setEnabled(method == EAP_TLS);
                cryptoWidget->EAPurlPrivate->setEnabled(method == EAP_TLS);

cryptoWidget->EAPleditPrivatePassword->setEnabled(method == EAP_TLS);
-               cryptoWidget->EAPleditPassword->setEnabled(method ==
EAP_PEAP || method == EAP_TTLS || (method == EAP_LEAP &&
enc->getLeapMethod() == "WPA-EAP") );
+               cryptoWidget->EAPleditPassword->setEnabled(method ==
EAP_PEAP || method == EAP_TLS  || method == EAP_TTLS || (method ==
EAP_LEAP && enc->getLeapMethod() == "WPA-EAP"));//this one
                cryptoWidget->EAPleditAnonIdentity->setEnabled(method
== EAP_PEAP || method == EAP_TTLS || (method == EAP_LEAP &&
enc->getLeapMethod() == "WPA-EAP") );
        }

-- 
dott. ing. beso