[pkg-wpa-devel] r941 - /wpasupplicant/trunk/debian/README.modes

[kelmo-guest at users.alioth.debian.org]

Author: kelmo-guest
Date: Wed Dec 26 09:50:59 2007
New Revision: 941

URL: http://svn.debian.org/wsvn/pkg-wpa/?sc=1&rev=941
Log:
update readme.modes

Modified:
    wpasupplicant/trunk/debian/README.modes

Modified: wpasupplicant/trunk/debian/README.modes
URL: http://svn.debian.org/wsvn/pkg-wpa/wpasupplicant/trunk/debian/README.modes?rev=941&op=diff
==============================================================================
--- wpasupplicant/trunk/debian/README.modes (original)
+++ wpasupplicant/trunk/debian/README.modes Wed Dec 26 09:50:59 2007
@@ -265,19 +265,26 @@
 
 iface eth1 inet manual
         wpa-driver wext
-        wpa-roam /path/to/wpa_supplicant.conf
+        wpa-roam /etc/wpa_supplicant/wpa_supplicant.conf
 
 Two daemons are spawned from the above example; wpa_supplicant and wpa_cli. It
-is required to provide a wpa_supplicant.conf. A good starting point is provided
-by an example configuration file:
-
+is required to provide a wpa_supplicant.conf containing a minimal amout of
+global options, and any known network blocks that should be connected to
+without interaction. A good starting point is provided by an example
+configuration file:
+
+        # copy the template to /etc/wpa_supplicant/
         cp /usr/share/doc/wpasupplicant/examples/wpa-roam.conf \
                 /etc/wpa_supplicant/wpa_supplicant.conf
 
+        # set group ownership to netdev to allow users from that group
+        # to interact with wpa_supplicant
+        chown root:netdev /etc/wpa_supplicant/wpa_supplicant.conf
+
 NOTE: it is critical that the used wpa_supplicant.conf defines the location of
       the 'ctrl_interface' so that a communication socket is created for the 
-      wpa_cli (wpa-roam daemon) to attach. The mentioned example conf file,
-      /usr/share/doc/wpasupplicant/examples/wpa-roam.conf, has this set to a
+      wpa_cli (wpa-roam daemon) to attach. The mentioned example configuration,
+      /usr/share/doc/wpasupplicant/examples/wpa-roam.conf, has been set to a
       sane default.
 
 It is required to edit this configuration file, and add the network blocks for
@@ -298,22 +305,22 @@
 ===================
 network={
         ssid="foo"
+        key_mgmt=NONE
         # this id_str will notify /sbin/wpa_action to 'ifup uni'
         id_str="uni"
-        key_mgmt=NONE
 }
 
 network={
         ssid="bar"
+        psk=123456789...
         # this id_str will notify /sbin/wpa_action to 'ifup home_static'
         id_str="home_static"
-        psk=123456789...
 }
 
 network={
         ssid=""
-        # no 'id_str' is given, /sbin/wpa_action will 'ifup default'
         key_mgmt=NONE
+        # no 'id_str' parameter is given, /sbin/wpa_action will 'ifup default'
 }
 
 /etc/network/interfaces
@@ -503,7 +510,7 @@
 Hidden ssids
 ============
 
-For reference, see #358137 [0]. In order to be able to associate to hidden
+For reference, see #358137 [1]. In order to be able to associate to hidden
 ssids, please try to set the option 'ap_scan=1' in the global section, and 
 'scan_ssid=1' in your network block section of your wpa_supplicant.conf file.
 If you are using the managed mode, you can do so by these stanzas:
@@ -513,15 +520,15 @@
         wpa-scan-ssid 1
         # ... additional options for your setup
 
-According to #368770 [1], association can take a very long time under certain
+According to #368770 [2], association can take a very long time under certain
 circumstances. In some cases, setting the parameter 'ap_scan=2' in the
 config file, (or using a 'wpa-ap-scan 2' stanza, which is equivalent) can
 greatly help to speed up association. Please note that setting ap_scan to the
 value of 2 also requires that all networks have a precisely defined security
 policy for for key_mgmt, pairwise, group and proto network policy variables.
 
-[0] http://bugs.debian.org/358137
-[1] http://bugs.debian.org/368770
+[1] http://bugs.debian.org/358137
+[2] http://bugs.debian.org/368770
 
 
 5. Security Considerations
@@ -534,7 +541,6 @@
 containing such data are only readable by their owner. For example:
 
         chmod 0600 /etc/network/interfaces
-        # substitute the path of your wpa_supplicant.conf file
         chmod 0600 /etc/wpa_supplicant/wpa_supplicant.conf
 
 By default, /etc/network/interfaces is world readable, and thus unsuitable for