wpa2 enterprise with no certificate at (k)ubuntu26.04 - cannot connect
https://askubuntu.com/questions/1567738/wpa2-enterprise-with-no-certificate-at-kubuntu26-04-cannot-connect
I just installed kubuntu 26.04; but then I just cannot connect to my University WPA2 enterprise wifi (like I could with 25.20, 24.04 and 22.04), signal eduroam.
This signal is configured with wpa2 enterprise, mschapv2 and peap, but no CA certificate.
At NetworkManager I (no longer? I cannot recall in previous kubuntu versions...) do not have a square to tick "No CA certificate" (initially I thought leaving it blank would mean "No certificate").
The command nm-connection-editor does show a window where I have such square - I save the configuration for eduroam, but I cannot devise where it is saved.
In fact, I can see a file netplan-NM-44fa4c25-2dc7-4a52-b83e-adcd7dd39185-eduroam.nmconnection at /run/NetworkManager/system-connections, but this file does not contain a line , e.g.,
system-ca-cert=false
(or whatever line I should provide to say there is no CA certificate).
Also, this file is created at run time.
Yet, at /etc/NetworkManager/system-connections I produced a file netplan-NM-44fa4c25-2dc7-4a52-b83e-adcd7dd39185-eduroam.nmconnection with such line - but I could not devise how to convince the system to use this configuration file when I call for a connection to eduroam.
Currently I see some alternatives, that I do not know exactly how to put in action:
i) the NetworkManager to be instructed to not use a certificate, even if it is does not present this option at its configuration window
ii) the gui issued by the nm-connection-editor command to record a configuration file that does become used
iii) to connect by the nmcli command, but to use a specific configuration file
I googled around , but I must miss some detail here.
Thank you,
J.
As indicated, I add to the original question my new comments:
Thanks heynnema and Andrei Borzenkov for inputs.
a) I tried netplan apply and retested, no difference (so I learn there is a /etc/netplan/ directory with some .yaml configuration files); b) I thought my problem might be the CA certificate - well I might not be sure of this. I try to connect to eduroam and it keeps asking for my password, again and again. I do get this eduroam connection through windows 10 (dual boot machine). c) If I understand, this issue of CA certificate might not be the culprit. So I report what I observe at trying to log and I also write below the log "with journactl" with the "relevant lines" (sorry for the length):
"
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.7625] audit: op="connection-activate" uuid="44fa4c25-2dc7-4a52-b83e-adcd7dd39185" name="eduroam" pid=1873 uid=1000 result="success"
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.7753] audit: op="statistics" interface="wlp0s20f3" ifindex=2 args="0" pid=1873 uid=1000 result="success"
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8335] device (wlp0s20f3): state change: deactivating -> disconnected (reason 'new-activation', managed-type: 'full')
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8337] dhcp4 (wlp0s20f3): canceled DHCP transaction
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8338] dhcp4 (wlp0s20f3): activation: beginning transaction (timeout in 45 seconds)
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8338] dhcp4 (wlp0s20f3): state changed no lease
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8531] manager: NetworkManager state is now DISCONNECTED
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8532] device (wlp0s20f3): Activation: starting connection 'eduroam' (44fa4c25-2dc7-4a52-b83e-adcd7dd39185)
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8537] device (wlp0s20f3): supplicant interface state: completed -> disconnected
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8537] device (p2p-dev-wlp0s20f3): supplicant management interface state: completed -> disconnected
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8549] device (wlp0s20f3): state change: disconnected -> prepare (reason 'none', managed-type: 'full')
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8561] manager: NetworkManager state is now CONNECTING
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8562] device (wlp0s20f3): state change: prepare -> config (reason 'none', managed-type: 'full')
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8564] device (wlp0s20f3): Activation: (wifi) access point 'eduroam' has security, but secrets are required.
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8564] device (wlp0s20f3): state change: config -> need-auth (reason 'none', managed-type: 'full')
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8570] device (wlp0s20f3): state change: need-auth -> prepare (reason 'none', managed-type: 'full')
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8571] device (wlp0s20f3): state change: prepare -> config (reason 'none', managed-type: 'full')
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8572] device (wlp0s20f3): Activation: (wifi) connection 'eduroam' has security, and secrets exist. No new secrets needed.
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8576] Config: added 'ssid' value 'eduroam'
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8576] Config: added 'scan_ssid' value '1'
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8576] Config: added 'bgscan' value 'simple:30:-65:300'
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8576] Config: added 'key_mgmt' value 'WPA-EAP FT-EAP FT-EAP-SHA384 WPA-EAP-SHA256'
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8576] Config: added 'password' value '<hidden>'
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8576] Config: added 'eap' value 'PEAP'
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8576] Config: added 'fragment_size' value '1266'
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8576] Config: added 'phase2' value 'auth=MSCHAPV2'
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8577] Config: added 'identity' value 'iulek'
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8577] Config: added 'proactive_key_caching' value '1'
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8795] device (wlp0s20f3): supplicant interface state: disconnected -> authenticating
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.8795] device (p2p-dev-wlp0s20f3): supplicant management interface state: disconnected -> authenticating
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.9218] device (wlp0s20f3): supplicant interface state: authenticating -> associating
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.9219] device (p2p-dev-wlp0s20f3): supplicant management interface state: authenticating -> associating
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.9393] device (wlp0s20f3): supplicant interface state: associating -> associated
Jun 15 15:07:08 silicon NetworkManager[213851]: <info> [1781546828.9394] device (p2p-dev-wlp0s20f3): supplicant management interface state: associating -> associated
Jun 15 15:07:12 silicon NetworkManager[213851]: <info> [1781546832.0253] device (wlp0s20f3): supplicant interface state: associated -> disconnected
Jun 15 15:07:12 silicon NetworkManager[213851]: <info> [1781546832.0253] device (p2p-dev-wlp0s20f3): supplicant management interface state: associated -> disconnected
Jun 15 15:07:12 silicon NetworkManager[213851]: <info> [1781546832.1254] device (wlp0s20f3): supplicant interface state: disconnected -> scanning
Jun 15 15:07:12 silicon NetworkManager[213851]: <info> [1781546832.1255] device (p2p-dev-wlp0s20f3): supplicant management interface state: disconnected -> scanning
Jun 15 15:07:25 silicon NetworkManager[213851]: <info> [1781546845.6761] device (wlp0s20f3): supplicant interface state: scanning -> authenticating
Jun 15 15:07:25 silicon NetworkManager[213851]: <info> [1781546845.6761] device (p2p-dev-wlp0s20f3): supplicant management interface state: scanning -> authenticating
Jun 15 15:07:25 silicon NetworkManager[213851]: <info> [1781546845.7191] device (wlp0s20f3): supplicant interface state: authenticating -> associating
Jun 15 15:07:25 silicon NetworkManager[213851]: <info> [1781546845.7192] device (p2p-dev-wlp0s20f3): supplicant management interface state: authenticating -> associating
Jun 15 15:07:25 silicon NetworkManager[213851]: <info> [1781546845.7364] device (wlp0s20f3): supplicant interface state: associating -> associated
Jun 15 15:07:25 silicon NetworkManager[213851]: <info> [1781546845.7364] device (p2p-dev-wlp0s20f3): supplicant management interface state: associating -> associated
Jun 15 15:07:34 silicon NetworkManager[213851]: <warn> [1781546854.5693] device (wlp0s20f3): Activation: (wifi) association took too long
Jun 15 15:07:34 silicon NetworkManager[213851]: <info> [1781546854.5693] device (wlp0s20f3): state change: config -> need-auth (reason 'none', managed-type: 'full')
Jun 15 15:07:34 silicon NetworkManager[213851]: <warn> [1781546854.5695] device (wlp0s20f3): Activation: (wifi) asking for new secrets
Jun 15 15:07:34 silicon NetworkManager[213851]: <info> [1781546854.5967] device (wlp0s20f3): supplicant interface state: associated -> disconnected
Jun 15 15:07:34 silicon NetworkManager[213851]: <info> [1781546854.5967] device (p2p-dev-wlp0s20f3): supplicant management interface state: associated -> disconnected
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9711] device (wlp0s20f3): state change: need-auth -> prepare (reason 'none', managed-type: 'full')
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9715] device (wlp0s20f3): state change: prepare -> config (reason 'none', managed-type: 'full')
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9719] device (wlp0s20f3): Activation: (wifi) connection 'eduroam' has security, and secrets exist. No new secrets needed.
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9728] Config: added 'ssid' value 'eduroam'
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9728] Config: added 'scan_ssid' value '1'
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9728] Config: added 'bgscan' value 'simple:30:-65:300'
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9728] Config: added 'key_mgmt' value 'WPA-EAP FT-EAP FT-EAP-SHA384 WPA-EAP-SHA256'
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9729] Config: added 'password' value '<hidden>'
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9729] Config: added 'eap' value 'PEAP'
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9729] Config: added 'fragment_size' value '1266'
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9729] Config: added 'phase2' value 'auth=MSCHAPV2'
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9729] Config: added 'identity' value 'iulek'
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9729] Config: added 'proactive_key_caching' value '1'
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9824] device (wlp0s20f3): supplicant interface state: disconnected -> scanning
Jun 15 15:07:57 silicon NetworkManager[213851]: <info> [1781546877.9825] device (p2p-dev-wlp0s20f3): supplicant management interface state: disconnected -> scanning
Jun 15 15:08:00 silicon NetworkManager[213851]: <info> [1781546880.7687] device (wlp0s20f3): supplicant interface state: scanning -> authenticating
Jun 15 15:08:00 silicon NetworkManager[213851]: <info> [1781546880.7688] device (p2p-dev-wlp0s20f3): supplicant management interface state: scanning -> authenticating
Jun 15 15:08:00 silicon NetworkManager[213851]: <info> [1781546880.8126] device (wlp0s20f3): supplicant interface state: authenticating -> associating
Jun 15 15:08:00 silicon NetworkManager[213851]: <info> [1781546880.8127] device (p2p-dev-wlp0s20f3): supplicant management interface state: authenticating -> associating
Jun 15 15:08:00 silicon NetworkManager[213851]: <info> [1781546880.8349] device (wlp0s20f3): supplicant interface state: associating -> associated
Jun 15 15:08:00 silicon NetworkManager[213851]: <info> [1781546880.8350] device (p2p-dev-wlp0s20f3): supplicant management interface state: associating -> associated
Jun 15 15:08:05 silicon NetworkManager[213851]: <info> [1781546885.8040] device (wlp0s20f3): supplicant interface state: associated -> disconnected
Jun 15 15:08:05 silicon NetworkManager[213851]: <info> [1781546885.8040] device (p2p-dev-wlp0s20f3): supplicant management interface state: associated -> disconnected
Jun 15 15:08:05 silicon NetworkManager[213851]: <info> [1781546885.9055] device (wlp0s20f3): supplicant interface state: disconnected -> scanning
Jun 15 15:08:05 silicon NetworkManager[213851]: <info> [1781546885.9055] device (p2p-dev-wlp0s20f3): supplicant management interface state: disconnected -> scanning
Jun 15 15:08:19 silicon NetworkManager[213851]: <info> [1781546899.4321] device (wlp0s20f3): supplicant interface state: scanning -> authenticating
Jun 15 15:08:19 silicon NetworkManager[213851]: <info> [1781546899.4322] device (p2p-dev-wlp0s20f3): supplicant management interface state: scanning -> authenticating
Jun 15 15:08:19 silicon NetworkManager[213851]: <info> [1781546899.4753] device (wlp0s20f3): supplicant interface state: authenticating -> associating
Jun 15 15:08:19 silicon NetworkManager[213851]: <info> [1781546899.4754] device (p2p-dev-wlp0s20f3): supplicant management interface state: authenticating -> associating
Jun 15 15:08:19 silicon NetworkManager[213851]: <info> [1781546899.4951] device (wlp0s20f3): supplicant interface state: associating -> associated
Jun 15 15:08:19 silicon NetworkManager[213851]: <info> [1781546899.4952] device (p2p-dev-wlp0s20f3): supplicant management interface state: associating -> associated
Jun 15 15:08:22 silicon NetworkManager[213851]: <info> [1781546902.6583] device (wlp0s20f3): supplicant interface state: associated -> disconnected
Jun 15 15:08:22 silicon NetworkManager[213851]: <info> [1781546902.6583] device (p2p-dev-wlp0s20f3): supplicant management interface state: associated -> disconnected
Jun 15 15:08:22 silicon NetworkManager[213851]: <info> [1781546902.7585] device (wlp0s20f3): supplicant interface state: disconnected -> scanning
Jun 15 15:08:22 silicon NetworkManager[213851]: <info> [1781546902.7585] device (p2p-dev-wlp0s20f3): supplicant management interface state: disconnected -> scanning
Jun 15 15:08:23 silicon NetworkManager[213851]: <warn> [1781546903.5690] device (wlp0s20f3): Activation: (wifi) association took too long
Jun 15 15:08:23 silicon NetworkManager[213851]: <info> [1781546903.5690] device (wlp0s20f3): state change: config -> need-auth (reason 'none', managed-type: 'full')
Jun 15 15:08:23 silicon NetworkManager[213851]: <warn> [1781546903.5692] device (wlp0s20f3): Activation: (wifi) asking for new secrets
Jun 15 15:08:25 silicon NetworkManager[213851]: <info> [1781546905.5123] device (wlp0s20f3): supplicant interface state: scanning -> inactive
Jun 15 15:08:25 silicon NetworkManager[213851]: <info> [1781546905.5123] device (p2p-dev-wlp0s20f3): supplicant management interface state: scanning -> inactive
Jun 15 15:08:26 silicon NetworkManager[213851]: <warn> [1781546906.2536] device (wlp0s20f3): no secrets: User canceled the secrets request.
Jun 15 15:08:26 silicon NetworkManager[213851]: <info> [1781546906.2536] device (wlp0s20f3): state change: need-auth -> failed (reason 'no-secrets', managed-type: 'full')
Jun 15 15:08:26 silicon NetworkManager[213851]: <info> [1781546906.2538] manager: NetworkManager state is now DISCONNECTED
Jun 15 15:08:26 silicon NetworkManager[213851]: <warn> [1781546906.2539] device (wlp0s20f3): Activation: failed for connection 'eduroam'
Jun 15 15:08:26 silicon NetworkManager[213851]: <info> [1781546906.2541] device (wlp0s20f3): state change: failed -> disconnected (reason 'none', managed-type: 'full')
Jun 15 15:08:28 silicon NetworkManager[213851]: <info> [1781546908.9803] policy: auto-activating connection 'acessoLivreUEPG' (6ca6770e-ad6c-4f89-8685-3ec9f427180e)
"
(acessoLivre - undesirable - is the signal it gets automatically if no success in with eduroam).
I hope this brings in more details. Please, let me know if you need more information. I also try to learn from the points you raise.
Thanx.
J.