4

I was struggling for awhile searching for a good wpa_supplicant.conf to get access to the "eduroam" Wireless LAN network at the TU Berlin.

Since I know for sure, that it is not trivial and that the bash-script actually saves your password in plain text I want to present the solution to this problem in the answer.

So that anyone in the future can follow a real guide to get eduroam working and not the fuzzy solution the tubIT presents you.


The tubIT solution (namely Configuration Assistant Tool or direct here for the tubIT version) does not work properly (securely) with wpa_supplicant nor is it build to do so.

cat was created with a (the) network manager (GNOME freedesktop NetworkManager) in mind.

  • @RuiFRibeiro This was a self-answered question, just took a while to write it down. Couldn't tag it as such, since I don't have the reputation. And I might add this was like 5 hours of work, screaming and hate. – Patrick Abraham Jun 5 '18 at 13:18
  • To access Eduroam WIFI use the simple script provided by them here: cat.eduroam.org – Kiwy Jun 5 '18 at 14:42
  • @Kiwy cat.eduroam.org is a script based on network manager. And also does not encrypt your password if it is forced to use wpa_supplicant. This is even stated in the question itself. – Patrick Abraham Jun 5 '18 at 16:45
5

The question how to hash your password, so you can store it without running the danger of someone sneaking into your files to grab your TU password.

Since you don't want to be enrolled in some random course.

Jokes aside, to hash your password is a good idea and won't hurt you. To do so just type the following line into your terminal:

echo -n plaintext_password_here | iconv -t utf16le | openssl md4

For Mac this would be

echo -n plaintext_password_here | iconv -t UTF-16LE | openssl md4

This will output a hashed version of your password which we will use in the wpa_supplicant.conf

If you can't copy it from the terminal, because you don't have X running add | tee ~/hashed_pw at the end to pipe the stdout to a file then you can use vim to open both files at the same time and yy the line to the other file.


Now add the following network to your wpa_supplicant.conf

network={
    ssid="eduroam"
    key_mgmt=WPA-EAP
    pairwise=CCMP
    group=CCMP TKIP
    eap=PEAP
    identity="YOUR_USERNAME@win.tu-berlin.de"
    domain_suffix_match="tubit.tu-berlin.de"
    phase2="auth=MSCHAPV2"
    password=hash:YOUR_HASHED_PASSWORD
}

The hashed password needs to be there plain without ""!

If I missed something or if there is any way to improve this guide, please comment or edit!


As a finishing touch an example:

network={
    ssid="eduroam"
    key_mgmt=WPA-EAP
    pairwise=CCMP
    group=CCMP TKIP
    eap=PEAP
    identity="angi.m@win.tu-berlin.de"
    domain_suffix_match="tubit.tu-berlin.de"
    phase2="auth=MSCHAPV2"
    password=hash:00000000000000000000000000000000
}
  • The current version might need an update due to new certificates. Have to check it. – Patrick Abraham May 22 at 13:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.