Publishing an EAP-TLS WPA2 Enterprise Setup Guide on the Wiki
Everyone, I've put together a step-by-step guide showing how to setup FreeRadius to provide a WPA2 Enterprise (EAP-TLS) secure wifi network. In addition, the guide shows how to get various clients onto the network (windows, android and apple devices). I would like to create a page on the official freeradius wiki for my guide, and place a link to it on the HOWTO (http://wiki.freeradius.org/guide/HOWTO) page. Does anyone know how I can gain permission to do so? (assuming permission is required) Or do I need to join the freeradius-developer list and ask there? If the guide would have to be vetted before hand - who would have to give the okay? (again, if required) If anyone can answer these questions, I would appreciate it. Regards, Jazz
On Jan 1, 2015, at 4:58 PM, Jasvinder S. Bahra <bbdl21548@blueyonder.co.uk> wrote:
I've put together a step-by-step guide showing how to setup FreeRadius to provide a WPA2 Enterprise (EAP-TLS) secure wifi network. In addition, the guide shows how to get various clients onto the network (windows, android and apple devices).
That’s good. There’s an EAP-TLS guide on www.freeradius.org, but it’s pretty old.
I would like to create a page on the official freeradius wiki for my guide, and place a link to it on the HOWTO (http://wiki.freeradius.org/guide/HOWTO) page. Does anyone know how I can gain permission to do so? (assuming permission is required) Or do I need to join the freeradius-developer list and ask there?
Sign up for a github account, and then use your github credentials to edit the wiki. No permission is required. We did have Facebook logins enabled for the Wiki. But… there was a steady stream of people vandalizing the wiki. So we turned that off.
If the guide would have to be vetted before hand - who would have to give the okay? (again, if required)
No vetting required. But other people will be free to edit it. Alan DeKok.
On 1 Jan 2015, at 16:58, Jasvinder S. Bahra <bbdl21548@blueyonder.co.uk> wrote:
Everyone,
I've put together a step-by-step guide showing how to setup FreeRadius to provide a WPA2 Enterprise (EAP-TLS) secure wifi network. In addition, the guide shows how to get various clients onto the network (windows, android and apple devices).
Anything that encourages people to stop using passwords for authentication is definitely useful.
I would like to create a page on the official freeradius wiki for my guide, and place a link to it on the HOWTO (http://wiki.freeradius.org/guide/HOWTO) page. Does anyone know how I can gain permission to do so? (assuming permission is required) Or do I need to join the freeradius-developer list and ask there?
You just need a GitHub account. Anyone can edit or create pages, the requirement for GitHub is just to protect against Spam edits, which we used to get a lot of.
If the guide would have to be vetted before hand - who would have to give the okay? (again, if required)
You get bonus points if you include a section on validating certificates without OCSP or a CRL :) If you want it reviewed just post the link to the list after you're done. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Everyone, It looks like I posted too soon. My guide describes how to configure windows and android clients to connect to a WPA2 Enterprise wifi network. I had done some research into getting apple devices onto it, and I believed I had all the information necessary to get ipad's, iphone's and ipod's etc onto the network. However, when I sat down to actually do so, I hit something of a brick wall. I believed all I needed to do was download a PC application from the apple website called the iPhone Configuration Utility (or iPCU), and use it to create a profile which configured the relevant devices wifi connection settings. It seems however, that the software has been deprecated - it hasn't been updated in years. I can find no reference to it on the apple website. It seems to have been replaced by an application named Configurator - which is only available for mac's. Does anyone know of a way to configure ipad's, iphone's and ipod's wifi settings, without tools such as iPCU or Configurator? Regards, Jazz
Hello,
It looks like I posted too soon.
My guide describes how to configure windows and android clients to connect to a WPA2 Enterprise wifi network.
I had done some research into getting apple devices onto it, and I believed I had all the information necessary to get ipad's, iphone's and ipod's etc onto the network. However, when I sat down to actually do so, I hit something of a brick wall.
I believed all I needed to do was download a PC application from the apple website called the iPhone Configuration Utility (or iPCU), and use it to create a profile which configured the relevant devices wifi connection settings.
It seems however, that the software has been deprecated - it hasn't been updated in years. I can find no reference to it on the apple website. It seems to have been replaced by an application named Configurator - which is only available for mac's.
Does anyone know of a way to configure ipad's, iphone's and ipod's wifi settings, without tools such as iPCU or Configurator?
Sure. There are web services which create the configuration files just like the Apple Configurator app does. Some are closed-source and expensive, but at least one is free and based on open-source software. You should check out https://802.1x-config.org It also has installers for Linux, if that is of any concern for you. Its Windows installers automate a big chunk of the server-side certificate installation. For EAP-TLS, it assumes that the client certificate is already installed on the client machine. Note that the tool never asks the end-user to upload sensitive information to the web site; also the OS X and iOS installers assume that the client certificate is already on the user's machine. Feel free to get back to me off-list for any questions regarding this tool. Greetings, Stefan Winter
Hi,
I believed all I needed to do was download a PC application from the apple website called the iPhone Configuration Utility (or iPCU), and use it to create a profile which configured the relevant devices wifi connection settings.
that *was* the case...its now 'apple configurator' and only available for OSX :-( bad Apple. bad Apple. anyway, not really an issue...as all it does is create an 'XML-ish' file - which can be modified as required (we have a local tool that takes our edited file and replaces the required username/email etc with what needs to be there based on some AD and LDAP queries).
Does anyone know of a way to configure ipad's, iphone's and ipod's wifi settings, without tools such as iPCU or Configurator?
there are free and commercial offerings that will do this - and Apples own enterprise management suite of course ;-) alan
participants (5)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Arran Cudbard-Bell -
Jasvinder S. Bahra -
Stefan Winter