Using Cisco LEAP

crackers · #1 1st May 2005, 03:38 AM

My workplace is using Cisco WAPs, which use the Windows Active Directory as the login verification source (aka LDAP). Well, these little beasties require you to use LEAP (proprietary) authentication to get onto the network and get your DHCP info.

The bad news is that the Cisco utilities, etc. are built for kernel 2.4 - obviously, a no starter for newer kernels.

The good news is that if you can endure a little manual pain, you can get your wireless (e.g. laptop) to work...

1. Disable IPv6 - put this line in /etc/modprobe.conf:

Code:

alias net-pf-10 off

2. Download from the freshrpms.net RH9 repsitory the following RPMs and install:

Code:

libsigc++10-1.0.4-fr3.i386.rpm
gtkmm-1.2.10-fr3.i386.rpm

3. Download the latest Linux package from Cisco - if you don't want to "register," you'll probably have to Google for any place else the tarball might be. I can't give you a direct link because there's session info in it and I'm paranoid. The tarball I used is linux-acu-driver-v21.tar.gz.Unpack the tarball and, as root, run the install script.

4. Put your PCMCIA card in. I'm using the Cisco card with the Aeronet 350 chip - I do not know if any other chipset will work. Wait until dhclient terminates (without connecting, of course).

5. Go to /opt/cisco/bin and run these applications:

Code:

bcard
acu

The acu app is a GUI for doing the authentication, so you'll need some information from your network admin to fill in a couple of pieces of information.

6. When you successfully authenticate, a garbled message showing a DHCP address will show up at the bottom of the unresizable UI. This is the application trying to make a syscall (which breaks, naturally) to the kernel to set the DHCP address. You can safely ignore it. Close the application.

7. Run

Code:

/sbin/dhclient -1 -q -cf /etc/dhclient-ethX.conf -lf /var/lib/dhcp/dhclient-ethX.leases -pf /var/run/dhclient-ethX.pid ethX

where ethX is the network interface the PCMCIA uses.

Now if I could only get xsupplicant to work, I'll dump the Cisco utilities like a hot rock...

zeky · #2 9th May 2005, 02:49 PM

Thank you for this great article, it works like a charm now

The only thing that's bothering me if that if i disconnect eth0 (cable) it doesn't automaticly switch to eth1... but hey... it works

crackers · #3 14th May 2005, 11:56 PM

Just disconnecting a cable doesn't bring the eth0 interface down - all you've done is disconnect the cable. If you plug it back in, the interface is still "live" and will reconnect. You'd have to write a script that constantly checks to see if packets are actually going out over eth0 and, if they're not, bring down eth0 (/sbin/ifdown eth0) and then bring eth1 up. It can be done but it's not necessarily trivial...

Where it gets interesting for me is I have eth0 (wire), eth1 (built-in wireless Intel), and eth2 (Cisco PCMCIA). eth0, of course, works anywhere there's a wire; eth1 is set up for my home WAP; and eth2 is set up as above for the office. That "allow users to enable/disable" option is quite handy...

laghaie · #4 30th November 2005, 04:41 PM

I've installed the latest build of Fedora & I downloaded the Cisco 350 drivers/utility package.

After installing libsigc++ and gtkmm and the installer only gets to this point.

Do you accept this license (y/n)?
y
ldcmd ldconfig
Checking for libsigc++ ...
libsigc++ found.
Checking for gtkmm ...
libgtkmm found.

Continuing ...

Cannot locate source in
Please enter the path to your kernel sources:

I found an article online about linux sources that suggested the following command:
yum install kernel-devel
After this command a folder was created in /usr/src/* and after running the install script I recieved the following error.

Do you accept this license (y/n)?
y
ldcmd ldconfig
Checking for libsigc++ ...
libsigc++ found.
Checking for gtkmm ...
libgtkmm found.

Continuing ...

Please wait , Compiling driver modules using sources in /usr/src/linux-2.6.11-1.1369_FC4
install: line 391: cc: command not found
install: line 392: cc: command not found
install: line 393: cc: command not found
Now attempting to determine how many Ethernet cards you have installed.
You already have a non-Aironet Ethernet adapter.
Your system is configured with kernel PCMCIA services
cp: cannot stat `airo.o': No such file or directory
cp: cannot stat `airo_cs.o': No such file or directory
cp: cannot stat `mpi350.o': No such file or directory

Installing the utilities:
There is one or more problems with running the ACU.
If you have not installed the correct versions of the
libraries, please install them and re-run this script.

If this is not the case, you might be using an unsupported configuration.
RedHat 7.3, RedHat 9.0 and Suse 9.0 are supported.

I've since removed the directory under /usr/src/* and thus I am back to my original problem.

"...Cannot locate source in
Please enter the path to your kernel sources:..."

laghaie · #5 30th November 2005, 05:48 PM

Additional Information:
I found this article on how to install the correct kernel source files and followed it.
http://www.mjmwired.net/resources/mj...html#kernelsrc

I also followed the instructions above and made sure the correct versions of libsigc++ and gtkmm where installed
[root@dec-tlab-ws18 linux]# rpm -q libsigc++10
libsigc++10-1.0.4-fr3
[root@dec-tlab-ws18 linux]# rpm -q gtkmm
gtkmm-1.2.10-fr3

However I am still recieving this error:
Do you accept this license (y/n)?
y
ldcmd ldconfig
Checking for libsigc++ ...
libsigc++ found.
Checking for gtkmm ...
libgtkmm found.

Continuing ...

Please wait , Compiling driver modules using sources in /usr/src/linux-2.6.11-1.1369_FC4
install: line 391: cc: command not found
install: line 392: cc: command not found
install: line 393: cc: command not found
Now attempting to determine how many Ethernet cards you have installed.
You already have a non-Aironet Ethernet adapter.
Your system is configured with kernel PCMCIA services
cp: cannot stat `airo.o': No such file or directory
cp: cannot stat `airo_cs.o': No such file or directory
cp: cannot stat `mpi350.o': No such file or directory

Installing the utilities:
There is one or more problems with running the ACU.
If you have not installed the correct versions of the
libraries, please install them and re-run this script.

If this is not the case, you might be using an unsupported configuration.
RedHat 7.3, RedHat 9.0 and Suse 9.0 are supported.

laghaie · #6 30th November 2005, 06:32 PM

Just in case anyone's wondering whats on line 391, 392 & 393 on the install script here it is:

LINE:388> echo "Please wait , Compiling driver modules using sources in ${SRCDIR}"
LINE:389>
LINE:390> fixrh70
LINE:391> eval ${MPICMP}
LINE:392> eval ${AIROCMP}
LINE:393> eval ${AIROCSCMP}
LINE:394> # eval ${CBCMP}
LINE:395> copy_drivers

brunson · #7 30th November 2005, 08:36 PM

Quote:

install: line 391: cc: command not found
install: line 392: cc: command not found
install: line 393: cc: command not found

Your makefile should be trying to use gcc, not cc. There's several things you can try. First, run the configure script, if there is one. Second, export a shell variable "CC=gcc" according to your shell variant. Third, edit the make file and replace cc with gcc.

laghaie · #8 1st December 2005, 06:16 AM

Thank you Brunson for posting help so soon...

I dont have any patience

I took off to Fry's and purchased Suse 10.0 and even though I had a similar error the wireless worked.

I am still confused on what gcc or cc is.