Eduroam

From Gentoo Wiki
Jump to:navigation Jump to:search
This article is a stub. You can help by expanding it.
Resources
Article status
This article needs wikification.

eduroam (education roaming) is an international Wi-Fi internet access roaming service for users in research, higher education and further education. [1] Eduroam is based on 802.1x. This article will describe how to configure Gentoo to connect to eduroam.

Configuration

CAT

The eduroam Configuration Assistant Tool (CAT) has been developed to help organizations offering their users eduroam access.  The tool builds customized installers for a range of popular PC and smartphone platforms and enhances the security for the end user. [2]

The installer can be downloaded at https://cat.eduroam.org/.

NetworkManager (nmcli)

The connection can also be added manually into NetworkManager using nmcli.

FILE eduroam-setup.sh
#!/bin/bash
 
CONNAME="eduroam"
USERNAME="firstname.surname@tuni.fi"
PASSWORD=""
 
nmcli connection add type wifi con-name $CONNAME        \
        connection.permissions $USER                    \
        802-11-wireless.ssid $CONNAME                   \
        802-11-wireless-security.key-mgmt wpa-eap       \
        802-11-wireless-security.group ccmp,tkip        \
        802-11-wireless-security.pairwise ccmp          \
        802-11-wireless-security.proto rsn              \
        802-1x.altsubject-matches DNS:wifi.tuni.fi      \
        802-1x.anonymous-identity anonymous@tuni.fi     \
        802-1x.eap peap                                 \
        802-1x.identity $USERNAME                       \
        802-1x.password $PASSWORD                       \
        802-1x.phase2-auth mschapv2                     \
        ipv4.method auto                                \
        ipv6.addr-gen-mode stable-privacy               \
        ipv6.method auto

This script is tested at Tampere University, Finland. Configuration may differ at different institutions, especially parameters 802-1x.altsubject-matches DNS:wifi.tuni.fi and 802-1x.anonymous-identity anonymous@tuni.fi seem like they are specific for Tampere University.

https://www.roam.fi/ is also a networking project like eduroam working in Finland. The upper script works also for roam.fi, only the SSID is different. Please set variableCONNAME="roam.fi".

Warning
Beware of the risks of storing passwords in configuration files or scripts, it can be a security issue. Follow standard best practices, do not use the same password for different accounts. Never store sensitive credentials in plain text files.

KDE Plasma settings

Below are screenshots from KDE Plasma desktop environment system settings program regarding eduroam wi-fi configuration.

External Links

https://eduroam.org/

https://cat.eduroam.org/#

References