Lubos Kocman wrote:
> Hi,
>
> I need to find a way to connect to the network secured by 802.1x. The most
> important to me is to connect the wired network wich uses (Tunneled TLS
> authentication, CA certificate and PAP as the innner authentication. The
> second connection is Eduroam (WPA & WPA2 Enterprise with a certificate)
> I somewhere dig out information that the only supported way in solaris is to
> have atheros wifi and freeradius.
>
> My hardware is Thinkpad R60, Intel Pro Wireless 3945
>
> So I'm asking you:
>
> 1) Is atheros the only supported wifi to connect 802.1x secured networks?
>
I seem to recall WPA & WPA2 incorporate 802.1x, although they specify
more detail about specific algorithms for authentication than 802.1x
does. (802.1x is simply an "authentication transport" IIRC.) They also
modified the protocol somewhat to deal with the fact that WiFi is
inherently a broadcast media, so there isn't anything like a "physical
port" to protect. I'm not sure 802.1x by itself really makes sense in a
WiFi environment.
> 2) Is there any way to connect 802.1x secured WIRED networks
>
Not with Solaris today, I believe.
> 3) If not is there any chance that the situation will change in next few
> months?
>
Chance, yes. Likelihood? I don't think so. I think that wpad could
evolve to incorporate 802.1x, but that doing so would probably happen
only *after* extended the WiFi WPA support to includes support for full
WPA-Enterprise. (Basically, to do wired 802.1x, you pretty much need
the certificate & key management functions which are required for WPA
Enterprise, but which are missing from our current stack.)
I've not heard of many sites using 802.1x for WIRED authentication,
although it was certainly what 802.1x was originally designed for.
A savvy developer could potentially help out a lot here, but it would
require a high level of expertise and commitment.
> 4) If yes, please update information on the laptop community site.
>
I am not authoritative on this enough to update the site. But perhaps
the networking community would be more appropriate for these questions?
(Ask on networking-disc...@?)
-- Garrett
>
>
> I believe that this information is very important for many users.
>
> Thank you
>
> Lubos Kocman
> setuid at setuid.cc
> --
> This message posted from opensolaris.org
> _______________________________________________
> laptop-discuss mailing list
> laptop-discuss at opensolaris.org
>
