"Static" wireless interface and runlevel 3

Todd Zullinger tmz at pobox.com
Wed Jan 28 03:23:41 UTC 2009


Geoffrey Leach wrote:
> OK, here's what I tried.
>
> Added ",keyfile" to the .conf. Rebooted. Accessed the connection
> editor and checked the box as indicated.  On apply, was prompted for
> a password. Without too much thought, gave it the root pw. That
> failed, and now the daemon password checker has me on its list and
> won't give me a second chance. Drat!
>
> Might have to do with policykit authorizations, but not obvious
> which!

I think the authorization that applies is:

    org.freedesktop.network-manager-settings.system.modify

In mine, Anyone and Console are both "no" and Active Console is "Admin
Authentication."  I think those are the defaults, but I don't really
know.  (I do know that I really dislike the polkit default of
remembering an authentication forever, even root authentications.
That seems like a huge problem waiting to happen.)

Hopefully you can poke around and get this worked out or someone else
will chime in with help.

Two alternatives to keep in mind in case neither of those things
occur:

* Try running su -c nm-connection-editor (or sudo, if you have that
setup).  Maybe that will let you bypass the policykit stuff?

* Create the keyfile config manually.  You can get all of the needed
info about a connection from gconf, except for the generated
passphrase.  The passphrase can be easily created using wpa_passphrase
utility to convert your ASCII passphrase into the longer format
stored by NM.

Mine looks something like this:

[802-11-wireless-security]
key-mgmt=wpa-psk
wep-tx-keyidx=0
psk=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

[connection]
id=System $Wireless_Name
uuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
type=802-11-wireless
autoconnect=true
timestamp=1230528724

[802-11-wireless]
ssid=000;000;000;000;
mode=infrastructure
channel=0
rate=0
tx-power=0
mtu=0
seen-bssids=00:00:00:00:00:00:00:00:00:00:00:00;
security=802-11-wireless-security

[ipv4]
method=auto
ignore-auto-routes=false
ignore-auto-dns=false

You can pull the data out of gconf in the
/system/networking/connections/ tree.

The keyfile is stored in /etc/NetworkManager/system-connections/ and
the filename is the same as the id field above (I'm not sure if it
matters that they match or not).

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
For every winner, there are dozens of losers. Odds are you're one of
them.
    -- Demotivators (www.despair.com)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 542 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20090127/d77e2693/attachment-0001.sig>


More information about the fedora-list mailing list