PCSC
Boston University
 

using BU 802.1x wireless with ubuntu

These instructions are not officially supported or regularly maintained. They were contributed by users in the community and we hope they will be helpful. Try at your own risk, or simply continue to use the vpn.

Hardy Heron(Ubuntu 8.04)

1. Update Ubuntu-Hardy using the update manager. Apply all the recent updates. (Note: This could mess up Compiz users as there is a bug in the recent updates for Ubuntu that will mess up Compiz-Fusion.)

2. Right click the network manager icon in the system tray and select 802.1x. Hopefully, a dialog window will pop up asking for your credentials and the connection details. Select WPA enterprise at the security option drop-down menu. Then select PEAP under EAP method option drop-down menu. Type your BU login name where it says "Identity" and the Kerberos password where it says "Password" (Right below Identity - not where it says private key).

3. Once done, hit Connect. It will struggle for a while, but will eventually connect. You should now be all set, until you try to disconnect/access another network. If you do, you will not be able to connect again to 802.1x until you reboot.

4. So, if you do want to connect again, reboot your computer. Right click network manager icon, select edit wireless networks, select 802.1x and remove it (i.e. delete the settings for 802.1x.).

5. Once you have completed step 4. Repeat steps 1 and 2. It might not work right away. If it stalls at the point where it says "Waiting for network key" when you hover over the network-manager icon, simply delete the settings for 802.1x again and retry steps 1 and 2. It should eventually work.

Using wpa_supplicant

1.Install wpa_supplicant with your package manager (Note: You must be connected to the internet through other means)

Debian/Ubuntu/Generic Apt-Get:
# apt-get install wpasupplicant

2.Locate wpa_supplicant
# updatedb && locate wpa_supplicant.conf

3.Backup wpa_supplicant.conf

#cp /etc/wpa_supplicant.conf /etc/wpa_supplicant.conf.back

4.Fill in new wpa_supplicant.conf (see Notes below).

# BU wireless. Does not need vpnc to go online.

network={
ssid="BU (802.1x)"
priority=15
key_mgmt=WPA-EAP
eap=PEAP MSCHAPV2
identity="yourloginname"
password="yourKerberos"
phase2="auth=MSCHAPV2"
}

# The BU website says to disable fast reconnect
fast_reauth=0

5.Run wpa_supplicant and hopefully connect

# wpa_supplicant -Bw -Dwext -i wlan0 -c/etc/wpa_supplicant

Notes

The actual command to use wpa_supplicant may differ based on the wireless drivers and the wireless interface. You might also want to change permissions of the wpa_supplicant file to only be read by root because the Kerberos login and password are stored in plain text. Using chmod, for example 'chmod 600 ./file', will only allow read/write access to root. If you change your kerberos password, remember to change the wpa_supplicant.conf file.