Adding WPA2 Entreprise

Question

Adding WPA2 Entreprise

irgusite opened this issue 10 years ago · 27 comments

Would it be possible to add WPA2 Entreprise support?

Answer 1 · 2014-12-17T02:03:03.000Z

I would love to add WPA2 Enterprise support, but unfortunately, I don't have access to a WPA2 Enterprise network. I don't know what's required to connect to that kind of network. Pull requests are welcome though.

Answer 2 · 2014-12-17T15:08:01.000Z

For WPA2-enterprise you have to use wpa_supplicant. I will try to code something simple but I don't know how you want it implemented.

A little example of the config file and the command to use to connect:

#/etc/wpa_supplicant.conf

network={
    ssid="ssid"
    proto=RSN
    key_mgmt=WPA-EAP
    pairwise=CCMP
    auth_alg=OPEN
    eap=MSCHAPV2
    identity="username"
    password="password"
}

Then you connect to the network with:

sudo wpa_supplicant -i wlan0 -c /etc/wpa_supplicant.conf

I use this to connect my raspi to my network.

Answer 3 · 2014-12-22T14:03:44.000Z

I managed to get the WPA2 Personal running without the wpa-supplicant, I'm not really sure what it does, I just figured out how it was hashing the passwords and implemented that in Python, that was I didn't have to use a different method to connect to WPA networks.

I don't know what the difference between WPA Personal and Enterprise is, I hope to get some time after the New Year to work on this, but I don't know where I could get access to a WPA Enterprise network to test it.

Answer 4 · 2014-12-22T18:40:46.000Z

The enterprise connections asks you for username and password and verifies if the couple exists in a database. That's the big lines of the functioning.

This couple has to be set in the wpa_supplicant file.

Philipp Schuler
irgusite@gmail.com
PGP: 0x9942BD22

Answer 5 · 2015-08-12T22:20:28.000Z

+1 I would also like to see this implemented - thanks!

Answer 6 · 2016-01-08T19:32:22.000Z

Hi! Is there any progres regarding Enterprise, please. This would make your work even more amazing!
Cheers!

Answer 7 · 2016-01-08T21:26:01.000Z

Actually not on my side, I had problems with my WPA2 entreprise installation and have not worked on it. I have only integrated the detection of the WPA2/entreprise.

Le 8 janvier 2016 20:32:26 GMT+01:00, DamianPe notifications@github.com a écrit :

Hi! Is there any progres regarding Enterprise, please. This would make
your work even more amazing!
Cheers!

Reply to this email directly or view it on GitHub:
#52 (comment)

Envoyé de mon appareil Android avec K-9 Mail. Veuillez excuser ma brièveté.

Answer 8 · 2016-01-08T21:42:22.000Z

Hi - I was watching this on github and saw your note. I ended up rolling
my own Enterprise mode for a different project. I didn't break it out to a
separate module but it should be easy enough to see & copy what I've done:

https://bitbucket.org/veggiebenz/pyspresso/src/1a15df69102ae96abd5fd352267445bd9dab0bae/ispresso.py?fileviewer=file-view-default

Starting around line 688 thru 833

Good luck, hope this helps.

Chris

On Fri, Jan 8, 2016 at 1:32 PM, DamianPe notifications@github.com wrote:

Hi! Is there any progres regarding Enterprise, please. This would make
your work even more amazing!
Cheers!

—
Reply to this email directly or view it on GitHub
#52 (comment).

Answer 9 · 2016-01-17T11:19:11.000Z

Hello irgusite,

Thanks for fast response and sorry for mine late one.
Is detection of WPA2 Enterprise included in main branch of your code? I have one available and when I read "encryption_type" it returns only "wpa2", exactly the same as while asking about regular WPA2 network (my personal one)...

Hi MrDadaGuy,

Thanks for your code, I appreciate your help, I didn't expect such a response :)
When I deal with detection of WPA2 Enterprise, I will take your code as an example :)

Answer 10 · 2016-01-17T11:29:36.000Z

Hi,
Yes, my main branch includes the detection. I don't know if I've pushed the code on github. I look at it when I'm back home :)

Le 17 janvier 2016 12:19:12 GMT+01:00, DamianPe notifications@github.com a écrit :

Hello irgusite,

Thanks for fast response and sorry for mine late one.
Is detection of WPA2 Enterprise included in main branch of your code? I
have one available and when I read "encryption_type" it returns only
"wpa2", exactly the same as while asking about regular WPA2 network (my
personal one)...

Hi MrDadaGuy,

Thanks for your code, I appreciate your help, I didn't expect such a
response :)
When I deal with detection of WPA2 Enterprise, I will take your code as
an example :)

Reply to this email directly or view it on GitHub:
#52 (comment)

Envoyé de mon appareil Android avec K-9 Mail. Veuillez excuser ma brièveté.

Answer 11 · 2016-01-17T16:07:44.000Z

@DamianPe So, yeah I've checked and the detection is included. The last thing to do is correct the integration tests. Because i've no WPA2/Entreprise wifi I can't correct it. Look at 88d62fd and 5e3805f to see the modifications ;)

Answer 12 · 2016-01-19T18:17:19.000Z

Thanks for checking that for me.
I tried to install tkat specific commit (the one with spelling errors
corrected) but for some reason it keeps returning an error. I have no idea
where is the fault. Can you quide me through, please?

2016-01-17 17:07 GMT+01:00 irgusite notifications@github.com:

@DamianPe https://github.com/DamianPe So, yeah I've checked and the
detection is included. The last thing to do is correct the integration
tests. Because i've no WPA2/Entreprise wifi I can't correct it. Look at
88d62fd
88d62fd
and 5e3805f
5e3805f
to see the modifications ;)

—
Reply to this email directly or view it on GitHub
#52 (comment).

Answer 13 · 2016-01-19T18:19:23.000Z

@DamianPe I can. But waht error is it returning?

Answer 14 · 2016-01-19T18:24:53.000Z

@irgusite

Copy-paste from PuTTy:
root@raspberry:/home/pi# pip install git+git://github.com/rockymeza/wifi.git@5e 3805f98e29c57a7fd8ce240c444aa163c834d4
Downloading/unpacking git+git://github.com/rockymeza/wifi.git@5e3805f d8ce240c444aa163c834d4
Cloning git://github.com/rockymeza/wifi.git (to 5e3805f a163c834d4) to /tmp/pip-MErJ9y-build
Could not find a tag or branch '5e3805f98e29c57a7fd8ce240c444aa163c834d4', ass uming commit.
fatal: reference is not a tree: 5e3805f
Complete output from command /usr/bin/git checkout -q 5e3805f 0c444aa163c834d4:

Command /usr/bin/git checkout -q 5e3805f failed with error code 128 in /tmp/pip-MErJ9y-build
Storing complete log in /root/.pip/pip.log

Answer 15 · 2016-01-19T18:34:06.000Z

The commit doesn't exists on this repo as it's not merged. Try maybe git@github.com:irgusite/wifi.git.

Answer 16 · 2016-01-19T18:40:26.000Z

@irgusite
This worked perfectly, thank you! I Should have asked you several hours earlier ;)

Answer 17 · 2016-02-01T10:55:20.000Z

@irgusite
I have a problem again, unfortunately. Everything worked beautifully last time but my Raspberry Pi started to crash at boot and I had to format SD card, install brand new OS and I'm now restoring my config. I'm stuck at the commit of yours, I keep getting different errors from github, last one is:

ERROR: Repository not found.
fatal: Could not read from remote repository.

What am I doing wrong this time? Or maybe you have changed something?

Answer 18 · 2016-02-01T11:07:16.000Z

What command are you using? I've changed nothing since the last time :)

Le 1 février 2016 11:55:21 GMT+01:00, DamianPe notifications@github.com a écrit :

@irgusite
I have a problem again, unfortunately. Everything worked beautifully
last time but my Raspberry Pi started to crash at boot and I had to
format SD card, install brand new OS and I'm now restoring my config.
I'm stuck at the commit of yours, I keep getting different errors from
github, last one is:
ERROR: Repository not found.
fatal: Could not read from remote repository.
What am I doing wrong this time? Or maybe you have changed something?

Reply to this email directly or view it on GitHub:
#52 (comment)

Envoyé de mon appareil Android avec K-9 Mail. Veuillez excuser ma brièveté.

Answer 19 · 2016-02-01T11:45:59.000Z

I am using
pip install git+ssh://git@github.com:irgusite/wifi.git@5e3805f98e29c57a7fd8ce240c444aa163c834d4

Answer 20 · 2016-02-01T12:14:41.000Z

Okay so, I've tried and I can't clone the repo with ssh but it works with https so try with that and telle me if it's working. Could you also supply the iwlist scan output? Would be nice so I can add the test and and we could merge the changes to the main branch ;)

Answer 21 · 2016-02-01T12:21:00.000Z

OK, it worked with https, thanks!
Would you like to receive output from scan here or maybe on private? I don't think it should be pasted here :)

Answer 22 · 2016-02-01T12:22:08.000Z

Yes, send me a pm. Thank you :)

Le 1 février 2016 13:21:02 GMT+01:00, DamianPe notifications@github.com a écrit :

OK, it worked with https, thanks!
Would you like to receive output from scan here or maybe on private? I
don't think it should be pasted here :)

Reply to this email directly or view it on GitHub:
#52 (comment)

Envoyé de mon appareil Android avec K-9 Mail. Veuillez excuser ma brièveté.

Answer 23 · 2016-02-01T12:29:23.000Z

PMs on Github? Rather impossible. Maybe an e-mail but I don't have yours...
yet :)

2016-02-01 13:22 GMT+01:00 irgusite notifications@github.com:

Yes, send me a pm. Thank you :)

Le 1 février 2016 13:21:02 GMT+01:00, DamianPe notifications@github.com
a écrit :

OK, it worked with https, thanks!
Would you like to receive output from scan here or maybe on private? I
don't think it should be pasted here :)

Reply to this email directly or view it on GitHub:
#52 (comment)

Envoyé de mon appareil Android avec K-9 Mail. Veuillez excuser ma
brièveté.

—
Reply to this email directly or view it on GitHub
#52 (comment).

Answer 24 · 2016-02-01T12:57:51.000Z

irgusite (at) gmail ;)

Answer 25 · 2016-02-03T07:38:09.000Z

@irgusite
Have you received my e-mail?

Answer 26 · 2016-02-03T11:31:33.000Z

Yes I have, it seems you haven't got my answer. :) I will send it back :)

Le 3 février 2016 08:38:10 GMT+01:00, DamianPe notifications@github.com a écrit :

@irgusite
Have you received my e-mail?

Reply to this email directly or view it on GitHub:
#52 (comment)

Envoyé de mon appareil Android avec K-9 Mail. Veuillez excuser ma brièveté.

Answer 27 · 2016-02-03T17:07:26.000Z

Nope, I checked SPAM folder, nothing there from you either... Weird...