Unable to Connect to Eduroam network with Solus

Matt_Nico

I'm having a very hard time trying to connect to my university's wireless network, and cannot seem to figure out how to get my laptop to connect. Does anyone have any experience with eduroam? I followed my universities guide to a t but it did not work link they only have a guide for ubuntu but in the past this guide worked for me. I fill out the network settings as is shown, and a pop up appears asking for my username and password which I enter, then the network is disconnected.

I have tried to connect with and without an anonymous ID and with and without a CA certificate.

Eduroam also offers a configuration tool as a python script, but when I try to run that I just get a syntax error back.

Is there anything weird going on with PEAP here? I just really need to be able to use the internet at my school.

The connection worked fine back in April of this year, but I needed to change my password over the summer and so need to reconnect. At first I only changed the password so I assumed things would work normally. The only other thing I can think of was the fairly significant update to Solus 4.4 at the beginning of the summer, but I can't think what would have caused that.

Any experience with eduroam would be greatly appreciated.

I first posted this to the Solus reddit

FAb7D

Matt_Nico
I don't know what it is, but maybe you need to disconect from that "UniversityOfWaterloo" first.
Anyway try with that pyton script but with:
python3 eduroam-linux-UoW.py

Matt_Nico

apologies i uploaded the incorrect second image, here is the correct one:

ReillyBrogan

There was an issue with wpa_supplicant after the recent OpenSSL upgrade. We've fixed this in unstable and the fixed version should be in the next sync. You can give the upgraded version a try with sudo eopkg it https://cdn.getsol.us/repo/unstable/w/wpa_supplicant/wpa_supplicant-2.10-23-1-x86_64.eopkg, but there might be dependency errors when installing it.

Matt_Nico

ReillyBrogan I attempted to connect again after changing to the unstable wpa_supplicant. But my problem still persists. I'll try again after the sync but I'm worried that this won't solve the problem. Would it be worth it to perhaps switch to iwd from wpa_supplicant? I'm not super well versed and so am not sure if this would cause other issues or not.

Matt_Nico

Thank you very much for the info! I'll be sure to try things after the next sync or with the unstable package. I'll let you know if the issue persists!

Matt_Nico

Matt_Nico I attempted to use the iwd packages to replace wpa_supplicant. However it repeatedly errored out saying that i needed to create 802.1x config files, following the instructions for creating one of those files I did so. However even after this the error continued to pop up. I still haven't been able to get either wpa_supplicant or iwd to work.

GZGavinZhao

Hi @Matt_Nico, I was the one who found the issue with eduroam and updated wpa_supplicant. If eduroam is still not working out-of-the-box for you (i.e. without iwd) after the sync, would you mind trying the following:

For the "CA Certificate" section, uncheck "No CA certificate is required" box and select the file /etc/ssl/certs/USERTrust_RSA_Certification_Authority.pem as the CA certificate. You can leave the CA certificate password as blank. If this doesn't work, can you send me the sha256sum value of your ca.pem file?
This may be a silly question, but did you reboot after installing the new wpa_supplicant? I noticed that for me I needed a reboot for the new version of wpa_supplicant to take effect.
I don't think "Anonymous Identity" needs to be filled in, but I doubt it would make a difference though.

Matt_Nico

GZGavinZhao Hi there, I tried using the CA certificate which you specified, as well as ensuring that I rebooted following the sync. Unfortunately eduroam is still not working for me, I followed the settings you set out as well but no dice.

I'm really at a loss as to what to do to try and resolve these issues.
At this point I'm considering a fresh install on my laptop to try and solve the issue, I've also noticed some other network related problems like the network menu on the taskbar to open but be completely blank, etc. Is it possible that there could be a problem with my install?

I wasn't able to finds the sha256sum value within the ca.pem file unfortunately, I did see something that said sha1? I looked at the USERTrust_RSA file and wasn't able to find a value in there either, am I looking at the right place?

FAb7D

....A window will pop up asking for your password again. ...

This window pop up on the browser? If yes there some noscript add on or anything that block it?

What is the output of
$ nmcli device wifi rescan && nmcli device wifi list ?

Matt_Nico

FAb7D No the window which pops up is a system window, which asks me to re input the username and password for the network.

I ran that command, here is the output that I received, not sure what significance it has

FAb7D

Matt_Nico Can you post also a photo of the right side of that output? and also the WiFi on Editin eduroam

Matt_Nico

FAb7D
Sorry I didn't realize there was another portion to the output, here it is!

As for the wifi screen in the edit section, here you go!

Thank you for helping me out

Matt_Nico

FAb7D Hi again,
When I have been trying to connect I have disconnected from the other network before, but I'll double check next time I am on campus. I tried to run that python script again using python3 and I think it ran?

It did seem to come back with some error, but I do not know if that actually meant anything or if it is because I ran the script while at home. I will try the network again tomorrow with the settings that the configuration tool created, although weirdly in my network connections tab it did not create a new entry for eduroam (I had deleted the old version to ensure clean creation).

Miko

I've never had luck with eduroam and linux, but in a month I'll see if Solus is anything better than other distros

My university says that you can modify the wpa_supplicant configuration file like that:

network={

ssid="eduroam"
key_mgmt=WPA-EAP
eap=TLS
ca_cert="/path/to/main/certificate"
identity="XXXXXXX@eduroam.your.uni.adress"
private_key="/path/to/generated/certificate"
private_key_passwd="passwordForGeneratedCertificate"

}

XXX is your indenty. I tried this with Ubuntu once after GUI didn't work but this method didn't either but who knows, maybe it will do for you

FAb7D

okay, let's see what happens tomorrow

Matt_Nico

FAb7D Hey again,

I tried to connect when I was on campus again but unfortunately things did not work, I ran the python script again after trying to connect in case it needed to "see" the network but the same thing came back in the terminal. I might just do a fresh install to clean things up on my laptop before continuing, I am not sure.

ReillyBrogan

https://bbs.archlinux.org/viewtopic.php?id=286417&p=2

It looks like this might be an incompatibility with OpenSSL 3.1. There are several solutions listed on that thread.

Matt_Nico

ReillyBrogan I will have to take a look at that thread, just glancing at it I am a bit concerned that it is over my head. Would it possibly be worth it to wait for an updated package?

also elusian I ran that command but unfortunately couldn't make sense of the output. Should I run it after attempting to connect to the network, or will running it at any time yield the same result?

I will be back on campus again tomorrow, so then I can try to follow the arch forum and do other troubleshooting

elusian

I was having issues too, and I followed the arch forum link.
However, following the instructions for the log showed that in my case it was an issue with a self signed certificate from my institution.

OpenSSL 3.1 had no issues in my case, so I'd start from
sudo journalctl -b0
to understand whether the issue is OpenSSL based