Re: WPA status 2006-01-08

2006-01-08 Thread Derek Frye
Congratulations, this is what many people are waiting for! I'd test, but 
haven't a wpa-ready driver (bcm43xx).


Thanks!
--Derek
___
NetworkManager-list mailing list
NetworkManager-list@gnome.org
http://mail.gnome.org/mailman/listinfo/networkmanager-list


Re: WPA status 2006-01-08

2006-01-08 Thread Robert Love
On Sun, 2006-01-08 at 16:48 -0500, Dan Williams wrote:

> That's about it.  If you've got a relatively recent wpa_supplicant (say,
> from the last couple weeks or so), and you've got a WPA-capable card &
> driver (see below *), you should be set for WPA Personal (WPA1)
> Preshared-Key connections.  I've tested them, and it works.
> 
> I'd like to clean things up, get stuff working reliably, then move on to
> adding WPA2-PSK/CCMP connections (ie, using AES).  After than, we start
> doing 802.1x authentication, RADIUS, and possibly LEAP.  Oh, and
> Bluetooth DUN, now that I have a Bluetooth phone.

We should all tip our hat to Dan.  Excellent work!

Robert Love


___
NetworkManager-list mailing list
NetworkManager-list@gnome.org
http://mail.gnome.org/mailman/listinfo/networkmanager-list


WPA status 2006-01-08

2006-01-08 Thread Dan Williams
This will be likely be the last WPA-related status update email, which
means that the job is mostly done :)

Major Changes since Jan 3rd
---

1) Starting from example code from Kay Sievers (thanks!), I've written
the supplicant manager code.  Instead of writing a config file, we
connect to the supplicant's control sockets.  It's cleaner this way.

2) WPA-related options have been enabled in the Gnome applet

3) Minor WPA-related bugs have been fixed in both the Gnome applet and
NetworkManager itself


What's left to be done?
---

1) Bug fixes

2) Whack drivers into shape

That's about it.  If you've got a relatively recent wpa_supplicant (say,
from the last couple weeks or so), and you've got a WPA-capable card &
driver (see below *), you should be set for WPA Personal (WPA1)
Preshared-Key connections.  I've tested them, and it works.

I'd like to clean things up, get stuff working reliably, then move on to
adding WPA2-PSK/CCMP connections (ie, using AES).  After than, we start
doing 802.1x authentication, RADIUS, and possibly LEAP.  Oh, and
Bluetooth DUN, now that I have a Bluetooth phone.

Cheers,
Dan


*) Your driver probably doesn't support WPA quite enough; you'll need a
driver that does WEXT-18 or higher.  This means that it needs to set the
enc_capa bits on return from the SIOCGIWRANGE call, which only hostap
seems to do right now.

The attached patch works for ipw2100, but only because it can already do
WPA.  It was simply not telling NM that it could.  Other drivers may
need substantial changes to work with WEXT-18's enhanced encryption API.
Drivers that _may_ work with few changes: ipw2100, ipw2200, atmel,
prism54.  Drivers that need lots of fixup: orinoco, airo, bcm43xx.

--- ipw2100.c.nowpa	2006-01-08 14:04:00.0 -0500
+++ ipw2100.c	2006-01-08 15:47:37.0 -0500
@@ -7236,7 +7236,7 @@
 
 	/* Set the Wireless Extension versions */
 	range->we_version_compiled = WIRELESS_EXT;
-	range->we_version_source = 16;
+	range->we_version_source = 18;
 
 //  range->retry_capa;  /* What retry options are supported */
 //  range->retry_flags; /* How to decode max/min retry limit */
@@ -7262,6 +7262,11 @@
 	}
 	range->num_frequency = val;
 
+#if WIRELESS_EXT > 17
+	range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |
+		IW_ENC_CAPA_CIPHER_TKIP | IW_ENC_CAPA_CIPHER_CCMP;
+#endif /* WIRELESS_EXT > 17 */
+
 	IPW_DEBUG_WX("GET Range\n");
 
 	return 0;
___
NetworkManager-list mailing list
NetworkManager-list@gnome.org
http://mail.gnome.org/mailman/listinfo/networkmanager-list


NM HEAD 1.708 report

2006-01-08 Thread Bill Moss

2.6.14-1.1653_FC4.netdev.6, using ipw2200

1. Built 1.708

2. Built wpa_supplicant-0.4.7 with the following .config file using only 
wireless extensions and no specific wireless driver


CONFIG_DRIVER_WEXT=y
CONFIG_DRIVER_WIRED=y
CONFIG_WIRELESS_EXTENSION=y
CONFIG_IEEE8021X_EAPOL=y
CONFIG_EAP_MD5=y
CONFIG_EAP_MSCHAPV2=y
CONFIG_EAP_TLS=y
CONFIG_EAP_PEAP=y
CONFIG_EAP_TTLS=y
CONFIG_EAP_GTC=y
CONFIG_EAP_OTP=y
CONFIG_EAP_SIM=y
CONFIG_EAP_AKA=y
CONFIG_EAP_PSK=y
CONFIG_EAP_PAX=y
CONFIG_EAP_LEAP=y
CONFIG_CTRL_IFACE=y

copied wpa_supplicant to /usr/sbin

3. Connected to home network (ESSID not hidden) using static WEP.

Comment: Use of wpa supplicant seems to add a second to so to the 
connect time but otherwise it works.


--
Bill Moss
Professor, Mathematical Sciences
Clemson University

___
NetworkManager-list mailing list
NetworkManager-list@gnome.org
http://mail.gnome.org/mailman/listinfo/networkmanager-list