How to use xsupplicant, wpa_supplicant for wpa/tkip/peap-mschapv2

weeds84 · 01-18-2005, 02:11 PM

I am trying to connect to my college's wireless network on a laptop with SUSE 9.2 x86_64 (FTP version) using an Atheros-based 802.11g card. The network uses PEAP-MSChapV2 with WPA/TKIP and an Entrust.net certificate. SUSE does not yet support 802.1X authentication using YaST, so I believe I need to setup wireless using xsupplicant and/or wpa_supplicant. I've played around with these but the example config files are a bit overwhelming. So my questions are:

1. Do I need to use both xsupplicant and wpa_supplicant or just one of them (and which one)?

2. What should my config file look like for each supplicant?

3. After I've properly setup the config files, command should I run? I know there's that -W flag to make xsupplicant use wpa_supplicant, but I don't know if I should use it or xsupplicant at all, for that matter.

I've tried a couple test configs and commands, but I got weird errors and have come to the conclusion that I am far from having a clue here. Please help.

weeds84 · 01-18-2005, 04:47 PM

Here is my wpa_supplicant config file:

Code:

ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=wheel
network={
	ssid="ScotZone"
	scan_ssid=1
	key_mgmt=WPA-EAP
	eap=PEAP
	pairwise=CCMP TKIP
	group=CCMP TKIP
	identity="jwietelmann"
	password="*********"
	ca_cert="/etc/cert/ca.pem"
	phase1="peaplabel=0"
	phase2="auth=MSCHAPV2"
}

But I have this problem:

Code:

doctorworm:~ # wpa_supplicant -i ath0 -c /home/jwietelmann/wpa_test.conf
ioctl[PRISM2_IOCTL_PRISM2_PARAM]: Operation not supported
ioctl[PRISM2_IOCTL_PRISM2_PARAM]: Operation not supported
Failed to enable WPA in the driver.
ioctl[PRISM2_IOCTL_HOSTAPD]: Operation not supported
ioctl[PRISM2_IOCTL_PRISM2_PARAM]: Operation not supported
ioctl[PRISM2_IOCTL_PRISM2_PARAM]: Operation not supported
Failed to disable WPA in the driver.
ioctl[PRISM2_IOCTL_PRISM2_PARAM]: Operation not supported
ioctl[PRISM2_IOCTL_PRISM2_PARAM]: Operation not supported
doctorworm:~ #

And here is my xsupplicant config file:

Code:

first_auth_command = <BEGIN_COMMAND>dhclient %i<END_COMMAND>
logfile = /var/log/xsupplicant.log
network_list = all
reauth_command = <BEGIN_COMMAND>echo "authenticated user %i"<END_COMMAND>
startup_command = <BEGIN_COMMAND>echo "starting up..."<END_COMMAND>

default {

  allow_types = all

  identity = <BEGIN_ID>jwietelmann<END_ID>

  eap-peap {
      root_cert = /home/jwietelmann/certificates/root.pem
      chunk_size = 1398
      random_file = /dev/urandom
      cncheck = wooster.edu
      cnexact = no
      session_resume = no

      eap-mschapv2 {
        username = <BEGIN_UNAME>jwietelmann<END_UNAME>
        password = <BEGIN_PASS>*************<END_PASS>

      }
  }
}

LoCusF · 03-13-2005, 05:17 AM

Look at this url. The instructions should be self explanatory.