After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 769661 - 802.1x authentication does not work for Ethernet connections
802.1x authentication does not work for Ethernet connections
Status: RESOLVED FIXED
Product: NetworkManager
Classification: Platform
Component: nm-applet
1.2.x
Other Linux
: Normal major
: ---
Assigned To: NetworkManager maintainer(s)
NetworkManager maintainer(s)
Depends on:
Blocks:
 
 
Reported: 2016-08-09 09:28 UTC by Martin Evald
Modified: 2016-08-18 15:46 UTC
See Also:
GNOME target: ---
GNOME version: ---


Attachments
[PATCH] applet: fix handling of 802.1x secrets for ethernet connections (1.30 KB, patch)
2016-08-11 13:33 UTC, Beniamino Galvani
none Details | Review

Description Martin Evald 2016-08-09 09:28:58 UTC
See https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1579246

Basically what happens is that you get presented with an endless series of password dialogs instead of getting connected, unless you manually add your password in plaintext(!!) to the network configuration file.
Comment 1 Sebastien Bacher 2016-08-09 09:36:36 UTC
Description from the launchpad bug (which has a bit more content)

"If you use a 802.1x autentication in NetworkManager, the NetworkManager never save password on /etc/NetworkManager/system-connections/MySecureNetworkAlias,

As a workarround you can add the password manualy in file /etc/NetworkManager/system-connections/MySecureNetworkAlias (using $ sudo vi)

[802-1x]
altsubject-matches=
ca-cert=/mycert.cer
eap=peap;
identity=DOMAIN\\USER
password=MyPassword <--- this is the line
phase2-altsubject-matches=
phase2-auth=mschapv2

The log is:

may 06 16:24:06 jared-laptop NetworkManager[976]: <info> [1462569846.8763] device (enp8s0): state change: need-auth -> prepare (reason 'none') [60 40 0]
may 06 16:24:06 jared-laptop NetworkManager[976]: <info> [1462569846.8767] device (enp8s0): state change: prepare -> config (reason 'none') [40 50 0]
may 06 16:24:06 jared-laptop NetworkManager[976]: <info> [1462569846.8770] device (enp8s0): Activation: (ethernet) connection 'MySecureNetworkAlias' has security, but secrets are required.
may 06 16:24:06 jared-laptop NetworkManager[976]: <info> [1462569846.8770] device (enp8s0): state change: config -> need-auth (reason 'none') [50 60 0]
may 06 16:24:07 jared-laptop gnome-session[1599]: nm-applet-Message: No keyring secrets found for Produban/802-1x; asking user."
Comment 2 Sebastien Bacher 2016-08-11 08:29:40 UTC
similar report on fedora24, https://bugzilla.redhat.com/show_bug.cgi?id=1344688
Comment 3 Beniamino Galvani 2016-08-11 13:33:37 UTC
Created attachment 333114 [details] [review]
[PATCH] applet: fix handling of 802.1x secrets for ethernet connections
Comment 4 Beniamino Galvani 2016-08-11 13:50:22 UTC
The nm-applet patch above should fix the problem, can anybody test it please?
Comment 5 Sebastien Bacher 2016-08-11 21:44:00 UTC
Thanks, I've asked for feedback in the Ubuntu bug
Comment 6 Martin Evald 2016-08-18 08:00:19 UTC
I have tested the patch, and it solves the issue for me.
Comment 7 Beniamino Galvani 2016-08-18 15:46:21 UTC
Merged:

4eecd6409730b0e03b7cca0e21d2f7f35302965b
fd8786449b62be465c37c68bf8c534c567f7be5e