User:Grimler/eduroam

From postmarketOS Wiki

Connecting to eduroam through the GUI on phosh does not work. Error message says something like:

Authentication required authentication type of wifi network eduroam not supported

Connecting with the "eduroam Configuration Assistant Tool" does work, but requires you to install some python packages (py3-dbus and something else). To connect without installing anything extra you first need to obtain the eduroam certificate, by for example asking you IT department, or by extracting it from the eduroam CAT script. After that you can run (change the username and cert path):

$ nmcli connection add type wifi con-name eduroam ssid "eduroam" -- wifi-sec.group "ccmp,tkip" wifi-sec.key-mgmt wpa-eap wifi-sec.pairwise ccmp wifi-sec.proto rsn 802-1x.identity USER@INSTITUTE.com 802-1x.ca-cert PATH-TO-CERT.pem 802-1x.eap peap 802-1x.phase2-auth mschapv2

CAT tool adds something like 802-1x.altsubject-matches "DNS:radius-wpa-1.lan.kth.se" as well, but seem to work without this option for me. If the command succeeds without errors, you can then connect to eduroam with

$ nmcli connection up eduroam --ask

and it will then ask for your password/network secret.

This command is based on the command in this gist, and modified to match what I get with the CAT script.

See also

User:Newbyte/eduroam