Make sure you have CCMP and TKIP support in your kernel! Most distros probably
include this by default but those using Gentoo should double check.
Here is the network block that goes in wpa_supplicant.conf:
network={
mode=0
ssid="umd-secure"
scan_ssid=1
key_mgmt=WPA-EAP
proto=WPA2
pairwise=CCMP TKIP
group=CCMP TKIP
eap=TTLS
identity="yourdirectoryid"
password="yourdirectorypassword"
anonymous_identity="anonymous"
ca_cert="/etc/thawte_server_roots/ThawtePremiumServerCA.cer"
subject_match="CN=wireless.umd.edu"
phase2="auth=PAP"
}
you can get the certs for free from http://www.thawte.com/
Have fun!
~bernie