[kwlug-disc] eduroam and ArchLinux

Nick Guenther nguenthe at uwaterloo.ca
Tue Jan 6 13:17:41 EST 2015


I don't know how many of you have eduroam access like I do, but if you  
do you might find this useful:

ArchLinux has rearranged most of its PKI certs into a small number of  
aggregate files. This netctl template is updated to work with the  
arrangement. Make sure to fill in your $USERNAME and $PASSWORD. If you  
are not at @uwaterloo.ca, you should be able to just change that to  
the site of your school and have it work as well, though other schools  
might use different phase2 systems, I'm not sure.

[kousu at galleon ~]$ sudo cat /etc/netctl/wlp3s0-eduroam
[sudo] password for kousu:
Description='A wireless connection using a custom network block configuration'
Interface=wlp3s0
Connection=wireless
Security=wpa-configsection
IP=dhcp
WPAConfigSection=(
     'ssid="eduroam"'
     'scan_ssid=1'
     'proto=RSN'
     'key_mgmt=WPA-EAP'
     'pairwise=CCMP'
     'group=CCMP'
     'eap=PEAP'
     'identity="$USERNAME at uwaterloo.ca"'
     'password="$PASSWORD"'
     'ca_cert="/usr/share/ca-certificates/trust-source/mozilla.trust.crt"'
     'phase2="auth=MSCHAPV2"'
)

$ #you can run this with
$ netctl switch-to wlp3s0-eduroam

(also posted at http://pastebin.com/xarSXpDb)

-- 
Nick Guenther
4B Stats/CS
University of Waterloo











More information about the kwlug-disc mailing list