====== Eduroam configuration at TU Berlin ======

===== Configuration script =====

<code bash>
tub_cert_dir='/usr/local/share/certs/tu-berlin.de'
tub_cert="${tub_cert_dir}/tu-cert.pem"
tub_cert_url='https://www.tubit.tu-berlin.de/fileadmin/a40000000/tubIT/Trustcenter/chain.txt'
mkdir -- "${tub_cert_dir}"
fetch -o "${tub_cert}" "${tub_cert_url}"

tubit_username='xxx'
tubit_password='password'

cat << EOF >> /etc/wpa_supplicant.conf
network={
    ssid="eduroam"
    key_mgmt=WPA-EAP
    pairwise=CCMP
    group=CCMP TKIP
    eap=PEAP
    ca_cert="${tub_cert}"
    identity="${tubit_username}@win.tu-berlin.de"
    domain_suffix_match="tubit.tu-berlin.de"
    phase2="auth=MSCHAPV2"
    password="${tubit_password}"
}
EOF
</code>

===== Troubleshooting =====

  * Set "fast_reauth" to 0 in /etc/wpa_supplicant.conf.

===== See also =====

  * [[https://www.freebsd.org/cgi/man.cgi?wpa_supplicant.conf|wpa_supplicant.conf(5)]]
  * [[https://unix.stackexchange.com/a/447990/128489|TU Berlin eduroam - How to get Wireless LAN working with wpa_supplicant.conf and hashed password (Unix & Linux Stack Exchange)]]

----

{{tag>HowTo}}