[pkg-wpa-devel] r941 - /wpasupplicant/trunk/debian/README.modes
kelmo-guest at users.alioth.debian.org
kelmo-guest at users.alioth.debian.org
Wed Dec 26 09:50:59 UTC 2007
Author: kelmo-guest
Date: Wed Dec 26 09:50:59 2007
New Revision: 941
URL: http://svn.debian.org/wsvn/pkg-wpa/?sc=1&rev=941
Log:
update readme.modes
Modified:
wpasupplicant/trunk/debian/README.modes
Modified: wpasupplicant/trunk/debian/README.modes
URL: http://svn.debian.org/wsvn/pkg-wpa/wpasupplicant/trunk/debian/README.modes?rev=941&op=diff
==============================================================================
--- wpasupplicant/trunk/debian/README.modes (original)
+++ wpasupplicant/trunk/debian/README.modes Wed Dec 26 09:50:59 2007
@@ -265,19 +265,26 @@
iface eth1 inet manual
wpa-driver wext
- wpa-roam /path/to/wpa_supplicant.conf
+ wpa-roam /etc/wpa_supplicant/wpa_supplicant.conf
Two daemons are spawned from the above example; wpa_supplicant and wpa_cli. It
-is required to provide a wpa_supplicant.conf. A good starting point is provided
-by an example configuration file:
-
+is required to provide a wpa_supplicant.conf containing a minimal amout of
+global options, and any known network blocks that should be connected to
+without interaction. A good starting point is provided by an example
+configuration file:
+
+ # copy the template to /etc/wpa_supplicant/
cp /usr/share/doc/wpasupplicant/examples/wpa-roam.conf \
/etc/wpa_supplicant/wpa_supplicant.conf
+ # set group ownership to netdev to allow users from that group
+ # to interact with wpa_supplicant
+ chown root:netdev /etc/wpa_supplicant/wpa_supplicant.conf
+
NOTE: it is critical that the used wpa_supplicant.conf defines the location of
the 'ctrl_interface' so that a communication socket is created for the
- wpa_cli (wpa-roam daemon) to attach. The mentioned example conf file,
- /usr/share/doc/wpasupplicant/examples/wpa-roam.conf, has this set to a
+ wpa_cli (wpa-roam daemon) to attach. The mentioned example configuration,
+ /usr/share/doc/wpasupplicant/examples/wpa-roam.conf, has been set to a
sane default.
It is required to edit this configuration file, and add the network blocks for
@@ -298,22 +305,22 @@
===================
network={
ssid="foo"
+ key_mgmt=NONE
# this id_str will notify /sbin/wpa_action to 'ifup uni'
id_str="uni"
- key_mgmt=NONE
}
network={
ssid="bar"
+ psk=123456789...
# this id_str will notify /sbin/wpa_action to 'ifup home_static'
id_str="home_static"
- psk=123456789...
}
network={
ssid=""
- # no 'id_str' is given, /sbin/wpa_action will 'ifup default'
key_mgmt=NONE
+ # no 'id_str' parameter is given, /sbin/wpa_action will 'ifup default'
}
/etc/network/interfaces
@@ -503,7 +510,7 @@
Hidden ssids
============
-For reference, see #358137 [0]. In order to be able to associate to hidden
+For reference, see #358137 [1]. In order to be able to associate to hidden
ssids, please try to set the option 'ap_scan=1' in the global section, and
'scan_ssid=1' in your network block section of your wpa_supplicant.conf file.
If you are using the managed mode, you can do so by these stanzas:
@@ -513,15 +520,15 @@
wpa-scan-ssid 1
# ... additional options for your setup
-According to #368770 [1], association can take a very long time under certain
+According to #368770 [2], association can take a very long time under certain
circumstances. In some cases, setting the parameter 'ap_scan=2' in the
config file, (or using a 'wpa-ap-scan 2' stanza, which is equivalent) can
greatly help to speed up association. Please note that setting ap_scan to the
value of 2 also requires that all networks have a precisely defined security
policy for for key_mgmt, pairwise, group and proto network policy variables.
-[0] http://bugs.debian.org/358137
-[1] http://bugs.debian.org/368770
+[1] http://bugs.debian.org/358137
+[2] http://bugs.debian.org/368770
5. Security Considerations
@@ -534,7 +541,6 @@
containing such data are only readable by their owner. For example:
chmod 0600 /etc/network/interfaces
- # substitute the path of your wpa_supplicant.conf file
chmod 0600 /etc/wpa_supplicant/wpa_supplicant.conf
By default, /etc/network/interfaces is world readable, and thus unsuitable for
More information about the Pkg-wpa-devel
mailing list