Wifi with WPA2-EAP MS-CHAPv2 authentication (username and password) during Debian installation

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP












4















I am currently attempting to install Debian on my laptop computer. During the network configuration stage, I am prompted to "enter a passphrase for WPA/WPA2 PSK authentication". Unfortunately, I am on my school's network which requires both a username and a password, with the MS-CHAPv2 authentication protocol. What should I enter at the prompt?



I have an Ubuntu computer which can connect to this network. Here are the contents of /etc/NetworkManager/system-connections/NetworkName:



[ipv6]
method=auto

[connection]
id=NetworkName
uuid=3e728a68-a877-4681-bc0e-1e64b2ff6434
type=802-11-wireless

[802-11-wireless-security]
key-mgmt=wpa-eap
auth-alg=open

[802-11-wireless]
ssid=NetworkName
mode=infrastructure
mac-address=84:A6:C8:A9:67:DA
security=802-11-wireless-security

[802-1x]
eap=ttls;
identity=username
phase2-auth=mschapv2
password-flags=1

[ipv4]
method=auto


Curiously enough, the password I enter to connect to NetworkName doesn't appear anywhere.



EDIT 2: Screenshot of network connection process (in a live-boot Ubuntu)
Screenshot










share|improve this question
























  • Is it possible that you are behind a captive portal at your school?

    – user86969
    May 25 '15 at 19:51











  • @Nasha My experience with captive portals is that you must first open a browser and then connect; that doesn't happen with my network, so I don't think there's a captive portal.

    – Alessandro Power
    May 25 '15 at 20:06











  • I suppose, your school is using Eduroam. Is this right? What I'd do is to use another image with proper desktop to install debian. There pretty clear guides on installing debian this way on debian-wiki. Eduroam and such networks, using PEAP-MSCHAPv2 model of authorization, are pretty easy to configure with any distribution using NetworkManager.

    – Mikhail Krutov
    May 25 '15 at 20:24












  • @MikhailKrutov Actually Eduroam is a separate network I can connect to, and is reserved for visiting students/academics.

    – Alessandro Power
    May 25 '15 at 20:28











  • @AlessandroPower, still I assume that your network is using same authentication model, and IMO non-gui configuration for NetworkManager is a huge pain. Please provide more details on how do you connect & authenticate.

    – Mikhail Krutov
    May 25 '15 at 20:32















4















I am currently attempting to install Debian on my laptop computer. During the network configuration stage, I am prompted to "enter a passphrase for WPA/WPA2 PSK authentication". Unfortunately, I am on my school's network which requires both a username and a password, with the MS-CHAPv2 authentication protocol. What should I enter at the prompt?



I have an Ubuntu computer which can connect to this network. Here are the contents of /etc/NetworkManager/system-connections/NetworkName:



[ipv6]
method=auto

[connection]
id=NetworkName
uuid=3e728a68-a877-4681-bc0e-1e64b2ff6434
type=802-11-wireless

[802-11-wireless-security]
key-mgmt=wpa-eap
auth-alg=open

[802-11-wireless]
ssid=NetworkName
mode=infrastructure
mac-address=84:A6:C8:A9:67:DA
security=802-11-wireless-security

[802-1x]
eap=ttls;
identity=username
phase2-auth=mschapv2
password-flags=1

[ipv4]
method=auto


Curiously enough, the password I enter to connect to NetworkName doesn't appear anywhere.



EDIT 2: Screenshot of network connection process (in a live-boot Ubuntu)
Screenshot










share|improve this question
























  • Is it possible that you are behind a captive portal at your school?

    – user86969
    May 25 '15 at 19:51











  • @Nasha My experience with captive portals is that you must first open a browser and then connect; that doesn't happen with my network, so I don't think there's a captive portal.

    – Alessandro Power
    May 25 '15 at 20:06











  • I suppose, your school is using Eduroam. Is this right? What I'd do is to use another image with proper desktop to install debian. There pretty clear guides on installing debian this way on debian-wiki. Eduroam and such networks, using PEAP-MSCHAPv2 model of authorization, are pretty easy to configure with any distribution using NetworkManager.

    – Mikhail Krutov
    May 25 '15 at 20:24












  • @MikhailKrutov Actually Eduroam is a separate network I can connect to, and is reserved for visiting students/academics.

    – Alessandro Power
    May 25 '15 at 20:28











  • @AlessandroPower, still I assume that your network is using same authentication model, and IMO non-gui configuration for NetworkManager is a huge pain. Please provide more details on how do you connect & authenticate.

    – Mikhail Krutov
    May 25 '15 at 20:32













4












4








4








I am currently attempting to install Debian on my laptop computer. During the network configuration stage, I am prompted to "enter a passphrase for WPA/WPA2 PSK authentication". Unfortunately, I am on my school's network which requires both a username and a password, with the MS-CHAPv2 authentication protocol. What should I enter at the prompt?



I have an Ubuntu computer which can connect to this network. Here are the contents of /etc/NetworkManager/system-connections/NetworkName:



[ipv6]
method=auto

[connection]
id=NetworkName
uuid=3e728a68-a877-4681-bc0e-1e64b2ff6434
type=802-11-wireless

[802-11-wireless-security]
key-mgmt=wpa-eap
auth-alg=open

[802-11-wireless]
ssid=NetworkName
mode=infrastructure
mac-address=84:A6:C8:A9:67:DA
security=802-11-wireless-security

[802-1x]
eap=ttls;
identity=username
phase2-auth=mschapv2
password-flags=1

[ipv4]
method=auto


Curiously enough, the password I enter to connect to NetworkName doesn't appear anywhere.



EDIT 2: Screenshot of network connection process (in a live-boot Ubuntu)
Screenshot










share|improve this question
















I am currently attempting to install Debian on my laptop computer. During the network configuration stage, I am prompted to "enter a passphrase for WPA/WPA2 PSK authentication". Unfortunately, I am on my school's network which requires both a username and a password, with the MS-CHAPv2 authentication protocol. What should I enter at the prompt?



I have an Ubuntu computer which can connect to this network. Here are the contents of /etc/NetworkManager/system-connections/NetworkName:



[ipv6]
method=auto

[connection]
id=NetworkName
uuid=3e728a68-a877-4681-bc0e-1e64b2ff6434
type=802-11-wireless

[802-11-wireless-security]
key-mgmt=wpa-eap
auth-alg=open

[802-11-wireless]
ssid=NetworkName
mode=infrastructure
mac-address=84:A6:C8:A9:67:DA
security=802-11-wireless-security

[802-1x]
eap=ttls;
identity=username
phase2-auth=mschapv2
password-flags=1

[ipv4]
method=auto


Curiously enough, the password I enter to connect to NetworkName doesn't appear anywhere.



EDIT 2: Screenshot of network connection process (in a live-boot Ubuntu)
Screenshot







debian wifi system-installation authentication wpa2-eap






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited May 25 '15 at 20:44







Alessandro Power

















asked May 25 '15 at 18:34









Alessandro PowerAlessandro Power

1808




1808












  • Is it possible that you are behind a captive portal at your school?

    – user86969
    May 25 '15 at 19:51











  • @Nasha My experience with captive portals is that you must first open a browser and then connect; that doesn't happen with my network, so I don't think there's a captive portal.

    – Alessandro Power
    May 25 '15 at 20:06











  • I suppose, your school is using Eduroam. Is this right? What I'd do is to use another image with proper desktop to install debian. There pretty clear guides on installing debian this way on debian-wiki. Eduroam and such networks, using PEAP-MSCHAPv2 model of authorization, are pretty easy to configure with any distribution using NetworkManager.

    – Mikhail Krutov
    May 25 '15 at 20:24












  • @MikhailKrutov Actually Eduroam is a separate network I can connect to, and is reserved for visiting students/academics.

    – Alessandro Power
    May 25 '15 at 20:28











  • @AlessandroPower, still I assume that your network is using same authentication model, and IMO non-gui configuration for NetworkManager is a huge pain. Please provide more details on how do you connect & authenticate.

    – Mikhail Krutov
    May 25 '15 at 20:32

















  • Is it possible that you are behind a captive portal at your school?

    – user86969
    May 25 '15 at 19:51











  • @Nasha My experience with captive portals is that you must first open a browser and then connect; that doesn't happen with my network, so I don't think there's a captive portal.

    – Alessandro Power
    May 25 '15 at 20:06











  • I suppose, your school is using Eduroam. Is this right? What I'd do is to use another image with proper desktop to install debian. There pretty clear guides on installing debian this way on debian-wiki. Eduroam and such networks, using PEAP-MSCHAPv2 model of authorization, are pretty easy to configure with any distribution using NetworkManager.

    – Mikhail Krutov
    May 25 '15 at 20:24












  • @MikhailKrutov Actually Eduroam is a separate network I can connect to, and is reserved for visiting students/academics.

    – Alessandro Power
    May 25 '15 at 20:28











  • @AlessandroPower, still I assume that your network is using same authentication model, and IMO non-gui configuration for NetworkManager is a huge pain. Please provide more details on how do you connect & authenticate.

    – Mikhail Krutov
    May 25 '15 at 20:32
















Is it possible that you are behind a captive portal at your school?

– user86969
May 25 '15 at 19:51





Is it possible that you are behind a captive portal at your school?

– user86969
May 25 '15 at 19:51













@Nasha My experience with captive portals is that you must first open a browser and then connect; that doesn't happen with my network, so I don't think there's a captive portal.

– Alessandro Power
May 25 '15 at 20:06





@Nasha My experience with captive portals is that you must first open a browser and then connect; that doesn't happen with my network, so I don't think there's a captive portal.

– Alessandro Power
May 25 '15 at 20:06













I suppose, your school is using Eduroam. Is this right? What I'd do is to use another image with proper desktop to install debian. There pretty clear guides on installing debian this way on debian-wiki. Eduroam and such networks, using PEAP-MSCHAPv2 model of authorization, are pretty easy to configure with any distribution using NetworkManager.

– Mikhail Krutov
May 25 '15 at 20:24






I suppose, your school is using Eduroam. Is this right? What I'd do is to use another image with proper desktop to install debian. There pretty clear guides on installing debian this way on debian-wiki. Eduroam and such networks, using PEAP-MSCHAPv2 model of authorization, are pretty easy to configure with any distribution using NetworkManager.

– Mikhail Krutov
May 25 '15 at 20:24














@MikhailKrutov Actually Eduroam is a separate network I can connect to, and is reserved for visiting students/academics.

– Alessandro Power
May 25 '15 at 20:28





@MikhailKrutov Actually Eduroam is a separate network I can connect to, and is reserved for visiting students/academics.

– Alessandro Power
May 25 '15 at 20:28













@AlessandroPower, still I assume that your network is using same authentication model, and IMO non-gui configuration for NetworkManager is a huge pain. Please provide more details on how do you connect & authenticate.

– Mikhail Krutov
May 25 '15 at 20:32





@AlessandroPower, still I assume that your network is using same authentication model, and IMO non-gui configuration for NetworkManager is a huge pain. Please provide more details on how do you connect & authenticate.

– Mikhail Krutov
May 25 '15 at 20:32










1 Answer
1






active

oldest

votes


















0














I doubt the live-cd has the full fledged wpa-supplicant package on board. I would suggest putting the bigger cd/usb image so you can install without network. After that you can configure wpa_supplicant with the following config:



network=
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
eap=TTLS
identity="yourusername@institute.com"
password="yourpassword"
phase2="auth=MSCHAPV2"



instead of your password in plaintext you can change the entry with:
password=hash:yourhash where yourhash was obtained by running your password through:



echo -n "yourpassword" | iconv -t utf16le | openssl md4


Different institutes have different settings but this usually works.






share|improve this answer
























    Your Answer








    StackExchange.ready(function()
    var channelOptions =
    tags: "".split(" "),
    id: "106"
    ;
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function()
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled)
    StackExchange.using("snippets", function()
    createEditor();
    );

    else
    createEditor();

    );

    function createEditor()
    StackExchange.prepareEditor(
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: false,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: null,
    bindNavPrevention: true,
    postfix: "",
    imageUploader:
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    ,
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    );



    );













    draft saved

    draft discarded


















    StackExchange.ready(
    function ()
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f205553%2fwifi-with-wpa2-eap-ms-chapv2-authentication-username-and-password-during-debia%23new-answer', 'question_page');

    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    I doubt the live-cd has the full fledged wpa-supplicant package on board. I would suggest putting the bigger cd/usb image so you can install without network. After that you can configure wpa_supplicant with the following config:



    network=
    ssid="eduroam"
    proto=RSN
    key_mgmt=WPA-EAP
    eap=TTLS
    identity="yourusername@institute.com"
    password="yourpassword"
    phase2="auth=MSCHAPV2"



    instead of your password in plaintext you can change the entry with:
    password=hash:yourhash where yourhash was obtained by running your password through:



    echo -n "yourpassword" | iconv -t utf16le | openssl md4


    Different institutes have different settings but this usually works.






    share|improve this answer





























      0














      I doubt the live-cd has the full fledged wpa-supplicant package on board. I would suggest putting the bigger cd/usb image so you can install without network. After that you can configure wpa_supplicant with the following config:



      network=
      ssid="eduroam"
      proto=RSN
      key_mgmt=WPA-EAP
      eap=TTLS
      identity="yourusername@institute.com"
      password="yourpassword"
      phase2="auth=MSCHAPV2"



      instead of your password in plaintext you can change the entry with:
      password=hash:yourhash where yourhash was obtained by running your password through:



      echo -n "yourpassword" | iconv -t utf16le | openssl md4


      Different institutes have different settings but this usually works.






      share|improve this answer



























        0












        0








        0







        I doubt the live-cd has the full fledged wpa-supplicant package on board. I would suggest putting the bigger cd/usb image so you can install without network. After that you can configure wpa_supplicant with the following config:



        network=
        ssid="eduroam"
        proto=RSN
        key_mgmt=WPA-EAP
        eap=TTLS
        identity="yourusername@institute.com"
        password="yourpassword"
        phase2="auth=MSCHAPV2"



        instead of your password in plaintext you can change the entry with:
        password=hash:yourhash where yourhash was obtained by running your password through:



        echo -n "yourpassword" | iconv -t utf16le | openssl md4


        Different institutes have different settings but this usually works.






        share|improve this answer















        I doubt the live-cd has the full fledged wpa-supplicant package on board. I would suggest putting the bigger cd/usb image so you can install without network. After that you can configure wpa_supplicant with the following config:



        network=
        ssid="eduroam"
        proto=RSN
        key_mgmt=WPA-EAP
        eap=TTLS
        identity="yourusername@institute.com"
        password="yourpassword"
        phase2="auth=MSCHAPV2"



        instead of your password in plaintext you can change the entry with:
        password=hash:yourhash where yourhash was obtained by running your password through:



        echo -n "yourpassword" | iconv -t utf16le | openssl md4


        Different institutes have different settings but this usually works.







        share|improve this answer














        share|improve this answer



        share|improve this answer








        edited Sep 6 '16 at 19:25









        HalosGhost

        3,72592236




        3,72592236










        answered Sep 6 '16 at 19:07









        frobnicatorfrobnicator

        313




        313



























            draft saved

            draft discarded
















































            Thanks for contributing an answer to Unix & Linux Stack Exchange!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid


            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.

            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f205553%2fwifi-with-wpa2-eap-ms-chapv2-authentication-username-and-password-during-debia%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown






            Popular posts from this blog

            How to check contact read email or not when send email to Individual?

            Bahrain

            Postfix configuration issue with fips on centos 7; mailgun relay