Wifi with WPA2-EAP MS-CHAPv2 authentication (username and password) during Debian installation
I am currently attempting to install Debian on my laptop computer. During the network configuration stage, I am prompted to "enter a passphrase for WPA/WPA2 PSK authentication". Unfortunately, I am on my school's network which requires both a username and a password, with the MS-CHAPv2 authentication protocol. What should I enter at the prompt?
I have an Ubuntu computer which can connect to this network. Here are the contents of /etc/NetworkManager/system-connections/NetworkName:
[ipv6]
method=auto
[connection]
id=NetworkName
uuid=3e728a68-a877-4681-bc0e-1e64b2ff6434
type=802-11-wireless
[802-11-wireless-security]
key-mgmt=wpa-eap
auth-alg=open
[802-11-wireless]
ssid=NetworkName
mode=infrastructure
mac-address=84:A6:C8:A9:67:DA
security=802-11-wireless-security
[802-1x]
eap=ttls;
identity=username
phase2-auth=mschapv2
password-flags=1
[ipv4]
method=auto
Curiously enough, the password I enter to connect to NetworkName doesn't appear anywhere.
EDIT 2: Screenshot of network connection process (in a live-boot Ubuntu)
debian wifi system-installation authentication wpa2-eap
asked May 25 '15 at 18:34
Alessandro PowerAlessandro Power
1808
bumped to the homepage by Community♦ 11 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
|
show 3 more comments
I am currently attempting to install Debian on my laptop computer. During the network configuration stage, I am prompted to "enter a passphrase for WPA/WPA2 PSK authentication". Unfortunately, I am on my school's network which requires both a username and a password, with the MS-CHAPv2 authentication protocol. What should I enter at the prompt?
I have an Ubuntu computer which can connect to this network. Here are the contents of /etc/NetworkManager/system-connections/NetworkName:
[ipv6]
method=auto
[connection]
id=NetworkName
uuid=3e728a68-a877-4681-bc0e-1e64b2ff6434
type=802-11-wireless
[802-11-wireless-security]
key-mgmt=wpa-eap
auth-alg=open
[802-11-wireless]
ssid=NetworkName
mode=infrastructure
mac-address=84:A6:C8:A9:67:DA
security=802-11-wireless-security
[802-1x]
eap=ttls;
identity=username
phase2-auth=mschapv2
password-flags=1
[ipv4]
method=auto
Curiously enough, the password I enter to connect to NetworkName doesn't appear anywhere.
EDIT 2: Screenshot of network connection process (in a live-boot Ubuntu)
debian wifi system-installation authentication wpa2-eap
asked May 25 '15 at 18:34
Alessandro PowerAlessandro Power
1808
bumped to the homepage by Community♦ 11 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
Is it possible that you are behind a captive portal at your school?
– user86969
May 25 '15 at 19:51
@Nasha My experience with captive portals is that you must first open a browser and then connect; that doesn't happen with my network, so I don't think there's a captive portal.
– Alessandro Power
May 25 '15 at 20:06
I suppose, your school is using Eduroam. Is this right? What I'd do is to use another image with proper desktop to install debian. There pretty clear guides on installing debian this way on debian-wiki. Eduroam and such networks, using PEAP-MSCHAPv2 model of authorization, are pretty easy to configure with any distribution using NetworkManager.
– Mikhail Krutov
May 25 '15 at 20:24
@MikhailKrutov Actually Eduroam is a separate network I can connect to, and is reserved for visiting students/academics.
– Alessandro Power
May 25 '15 at 20:28
@AlessandroPower, still I assume that your network is using same authentication model, and IMO non-gui configuration for NetworkManager is a huge pain. Please provide more details on how do you connect & authenticate.
– Mikhail Krutov
May 25 '15 at 20:32
|
show 3 more comments
I am currently attempting to install Debian on my laptop computer. During the network configuration stage, I am prompted to "enter a passphrase for WPA/WPA2 PSK authentication". Unfortunately, I am on my school's network which requires both a username and a password, with the MS-CHAPv2 authentication protocol. What should I enter at the prompt?
I have an Ubuntu computer which can connect to this network. Here are the contents of /etc/NetworkManager/system-connections/NetworkName:
[ipv6]
method=auto
[connection]
id=NetworkName
uuid=3e728a68-a877-4681-bc0e-1e64b2ff6434
type=802-11-wireless
[802-11-wireless-security]
key-mgmt=wpa-eap
auth-alg=open
[802-11-wireless]
ssid=NetworkName
mode=infrastructure
mac-address=84:A6:C8:A9:67:DA
security=802-11-wireless-security
[802-1x]
eap=ttls;
identity=username
phase2-auth=mschapv2
password-flags=1
[ipv4]
method=auto
Curiously enough, the password I enter to connect to NetworkName doesn't appear anywhere.
EDIT 2: Screenshot of network connection process (in a live-boot Ubuntu)
debian wifi system-installation authentication wpa2-eap
asked May 25 '15 at 18:34
Alessandro PowerAlessandro Power
1808
I am currently attempting to install Debian on my laptop computer. During the network configuration stage, I am prompted to "enter a passphrase for WPA/WPA2 PSK authentication". Unfortunately, I am on my school's network which requires both a username and a password, with the MS-CHAPv2 authentication protocol. What should I enter at the prompt?
I have an Ubuntu computer which can connect to this network. Here are the contents of /etc/NetworkManager/system-connections/NetworkName:
[ipv6]
method=auto
[connection]
id=NetworkName
uuid=3e728a68-a877-4681-bc0e-1e64b2ff6434
type=802-11-wireless
[802-11-wireless-security]
key-mgmt=wpa-eap
auth-alg=open
[802-11-wireless]
ssid=NetworkName
mode=infrastructure
mac-address=84:A6:C8:A9:67:DA
security=802-11-wireless-security
[802-1x]
eap=ttls;
identity=username
phase2-auth=mschapv2
password-flags=1
[ipv4]
method=auto
Curiously enough, the password I enter to connect to NetworkName doesn't appear anywhere.
EDIT 2: Screenshot of network connection process (in a live-boot Ubuntu)
debian wifi system-installation authentication wpa2-eap
debian wifi system-installation authentication wpa2-eap
asked May 25 '15 at 18:34
Alessandro PowerAlessandro Power
1808
asked May 25 '15 at 18:34
Alessandro PowerAlessandro Power
1808
edited May 25 '15 at 20:44
Alessandro Power
asked May 25 '15 at 18:34
Alessandro PowerAlessandro Power
1808
asked May 25 '15 at 18:34
Alessandro PowerAlessandro Power
1808
asked May 25 '15 at 18:34
Alessandro PowerAlessandro Power
1808
1808
bumped to the homepage by Community♦ 11 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
bumped to the homepage by Community♦ 11 mins ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
Is it possible that you are behind a captive portal at your school?
– user86969
May 25 '15 at 19:51
@Nasha My experience with captive portals is that you must first open a browser and then connect; that doesn't happen with my network, so I don't think there's a captive portal.
– Alessandro Power
May 25 '15 at 20:06
I suppose, your school is using Eduroam. Is this right? What I'd do is to use another image with proper desktop to install debian. There pretty clear guides on installing debian this way on debian-wiki. Eduroam and such networks, using PEAP-MSCHAPv2 model of authorization, are pretty easy to configure with any distribution using NetworkManager.
– Mikhail Krutov
May 25 '15 at 20:24
@MikhailKrutov Actually Eduroam is a separate network I can connect to, and is reserved for visiting students/academics.
– Alessandro Power
May 25 '15 at 20:28
@AlessandroPower, still I assume that your network is using same authentication model, and IMO non-gui configuration for NetworkManager is a huge pain. Please provide more details on how do you connect & authenticate.
– Mikhail Krutov
May 25 '15 at 20:32
|
show 3 more comments
Is it possible that you are behind a captive portal at your school?
– user86969
May 25 '15 at 19:51
@Nasha My experience with captive portals is that you must first open a browser and then connect; that doesn't happen with my network, so I don't think there's a captive portal.
– Alessandro Power
May 25 '15 at 20:06
I suppose, your school is using Eduroam. Is this right? What I'd do is to use another image with proper desktop to install debian. There pretty clear guides on installing debian this way on debian-wiki. Eduroam and such networks, using PEAP-MSCHAPv2 model of authorization, are pretty easy to configure with any distribution using NetworkManager.
– Mikhail Krutov
May 25 '15 at 20:24
@MikhailKrutov Actually Eduroam is a separate network I can connect to, and is reserved for visiting students/academics.
– Alessandro Power
May 25 '15 at 20:28
@AlessandroPower, still I assume that your network is using same authentication model, and IMO non-gui configuration for NetworkManager is a huge pain. Please provide more details on how do you connect & authenticate.
– Mikhail Krutov
May 25 '15 at 20:32
Is it possible that you are behind a captive portal at your school?
– user86969
May 25 '15 at 19:51
Is it possible that you are behind a captive portal at your school?
– user86969
May 25 '15 at 19:51
@Nasha My experience with captive portals is that you must first open a browser and then connect; that doesn't happen with my network, so I don't think there's a captive portal.
– Alessandro Power
May 25 '15 at 20:06
@Nasha My experience with captive portals is that you must first open a browser and then connect; that doesn't happen with my network, so I don't think there's a captive portal.
– Alessandro Power
May 25 '15 at 20:06
I suppose, your school is using Eduroam. Is this right? What I'd do is to use another image with proper desktop to install debian. There pretty clear guides on installing debian this way on debian-wiki. Eduroam and such networks, using PEAP-MSCHAPv2 model of authorization, are pretty easy to configure with any distribution using NetworkManager.
– Mikhail Krutov
May 25 '15 at 20:24
I suppose, your school is using Eduroam. Is this right? What I'd do is to use another image with proper desktop to install debian. There pretty clear guides on installing debian this way on debian-wiki. Eduroam and such networks, using PEAP-MSCHAPv2 model of authorization, are pretty easy to configure with any distribution using NetworkManager.
– Mikhail Krutov
May 25 '15 at 20:24
@MikhailKrutov Actually Eduroam is a separate network I can connect to, and is reserved for visiting students/academics.
– Alessandro Power
May 25 '15 at 20:28
@MikhailKrutov Actually Eduroam is a separate network I can connect to, and is reserved for visiting students/academics.
– Alessandro Power
May 25 '15 at 20:28
@AlessandroPower, still I assume that your network is using same authentication model, and IMO non-gui configuration for NetworkManager is a huge pain. Please provide more details on how do you connect & authenticate.
– Mikhail Krutov
May 25 '15 at 20:32
@AlessandroPower, still I assume that your network is using same authentication model, and IMO non-gui configuration for NetworkManager is a huge pain. Please provide more details on how do you connect & authenticate.
– Mikhail Krutov
May 25 '15 at 20:32
|
show 3 more comments
1 Answer
1
active
oldest
votes
I doubt the live-cd has the full fledged wpa-supplicant package on board. I would suggest putting the bigger cd/usb image so you can install without network. After that you can configure wpa_supplicant with the following config:
network={
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
eap=TTLS
identity="yourusername@institute.com"
password="yourpassword"
phase2="auth=MSCHAPV2"
}
instead of your password in plaintext you can change the entry with:
password=hash:yourhash where yourhash was obtained by running your password through:
echo -n "yourpassword" | iconv -t utf16le | openssl md4
Different institutes have different settings but this usually works.
edited Sep 6 '16 at 19:25
HalosGhost
3,72592236
answered Sep 6 '16 at 19:07
frobnicatorfrobnicator
313
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f205553%2fwifi-with-wpa2-eap-ms-chapv2-authentication-username-and-password-during-debia%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
I doubt the live-cd has the full fledged wpa-supplicant package on board. I would suggest putting the bigger cd/usb image so you can install without network. After that you can configure wpa_supplicant with the following config:
network={
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
eap=TTLS
identity="yourusername@institute.com"
password="yourpassword"
phase2="auth=MSCHAPV2"
}
instead of your password in plaintext you can change the entry with:
password=hash:yourhash where yourhash was obtained by running your password through:
echo -n "yourpassword" | iconv -t utf16le | openssl md4
Different institutes have different settings but this usually works.
edited Sep 6 '16 at 19:25
HalosGhost
3,72592236
answered Sep 6 '16 at 19:07
frobnicatorfrobnicator
313
add a comment |
I doubt the live-cd has the full fledged wpa-supplicant package on board. I would suggest putting the bigger cd/usb image so you can install without network. After that you can configure wpa_supplicant with the following config:
network={
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
eap=TTLS
identity="yourusername@institute.com"
password="yourpassword"
phase2="auth=MSCHAPV2"
}
instead of your password in plaintext you can change the entry with:
password=hash:yourhash where yourhash was obtained by running your password through:
echo -n "yourpassword" | iconv -t utf16le | openssl md4
Different institutes have different settings but this usually works.
edited Sep 6 '16 at 19:25
HalosGhost
3,72592236
answered Sep 6 '16 at 19:07
frobnicatorfrobnicator
313
add a comment |
I doubt the live-cd has the full fledged wpa-supplicant package on board. I would suggest putting the bigger cd/usb image so you can install without network. After that you can configure wpa_supplicant with the following config:
network={
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
eap=TTLS
identity="yourusername@institute.com"
password="yourpassword"
phase2="auth=MSCHAPV2"
}
instead of your password in plaintext you can change the entry with:
password=hash:yourhash where yourhash was obtained by running your password through:
echo -n "yourpassword" | iconv -t utf16le | openssl md4
Different institutes have different settings but this usually works.
edited Sep 6 '16 at 19:25
HalosGhost
3,72592236
answered Sep 6 '16 at 19:07
frobnicatorfrobnicator
313
I doubt the live-cd has the full fledged wpa-supplicant package on board. I would suggest putting the bigger cd/usb image so you can install without network. After that you can configure wpa_supplicant with the following config:
network={
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
eap=TTLS
identity="yourusername@institute.com"
password="yourpassword"
phase2="auth=MSCHAPV2"
}
instead of your password in plaintext you can change the entry with:
password=hash:yourhash where yourhash was obtained by running your password through:
echo -n "yourpassword" | iconv -t utf16le | openssl md4
Different institutes have different settings but this usually works.
edited Sep 6 '16 at 19:25
HalosGhost
3,72592236
answered Sep 6 '16 at 19:07
frobnicatorfrobnicator
313
edited Sep 6 '16 at 19:25
HalosGhost
3,72592236
edited Sep 6 '16 at 19:25
HalosGhost
3,72592236
edited Sep 6 '16 at 19:25
HalosGhost
3,72592236
3,72592236
answered Sep 6 '16 at 19:07
frobnicatorfrobnicator
313
answered Sep 6 '16 at 19:07
frobnicatorfrobnicator
313
answered Sep 6 '16 at 19:07
frobnicatorfrobnicator
313
313
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f205553%2fwifi-with-wpa2-eap-ms-chapv2-authentication-username-and-password-during-debia%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Is it possible that you are behind a captive portal at your school?
– user86969
May 25 '15 at 19:51
@Nasha My experience with captive portals is that you must first open a browser and then connect; that doesn't happen with my network, so I don't think there's a captive portal.
– Alessandro Power
May 25 '15 at 20:06
I suppose, your school is using Eduroam. Is this right? What I'd do is to use another image with proper desktop to install debian. There pretty clear guides on installing debian this way on debian-wiki. Eduroam and such networks, using PEAP-MSCHAPv2 model of authorization, are pretty easy to configure with any distribution using NetworkManager.
– Mikhail Krutov
May 25 '15 at 20:24
@MikhailKrutov Actually Eduroam is a separate network I can connect to, and is reserved for visiting students/academics.
– Alessandro Power
May 25 '15 at 20:28
@AlessandroPower, still I assume that your network is using same authentication model, and IMO non-gui configuration for NetworkManager is a huge pain. Please provide more details on how do you connect & authenticate.
– Mikhail Krutov
May 25 '15 at 20:32