UCD eduroam wpa_supplicant HOWTO

$Id: ucd_eduroam_wpa_supplicant_howto.txt,v 1.1 2008/11/04 14:57:55 fergal Exp $

This UCD is University College Dublin (see www.ucd.ie)

This is for people that aren't using a GUI and know what they're doing.

In your wpa_supplicant configuration file you need something like:

   network={
      ssid="eduroam"
      proto=WPA2 WPA
      key_mgmt=WPA-EAP
      pairwise=CCMP TKIP
      group=CCMP TKIP
      eap=TTLS
      ca_cert="/etc/ucd/cacert.crt"
      subject_match="CN=tweedledum.ucd.ie"
      phase2="auth=PAP"
      identity="username@ucd.ie"
      password="xxxxxxxxxxxxxxx"
   }

The CA certificate cacert.crt can be found at:

   http://www.ucd.ie/system/ssl/cacert.crt

The CN in the subject_match line really is tweedledum.ucd.ie.
The name was chosen to be memorable and free of semantics.

The example supports WPA2 with fallback to WPA. For more secure
communication with no fallback to WPA try:

   proto=WPA2
   pairwise=CCMP
   group=CCMP

If your GNU/Linux distribution provides a GUI that prompts for
username and password, you may get away with leaving the identity
and password out of the configuration. This is a Good Thing (TM).