<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hello,
<br>
<br>
We use 802.X authentication with certificates stored on smart card, this seems to be working with wpa_supplicant, however I'm a bit confused when it comes to wpa_supplicant and the (if any) relation with dhclient.
<br>
<br>
Today we use NetworkManager to handle the connections, however NM is not able to pass the needed pkcs11 options to wpa_supplicant, and therefore I'm currently trying to use wpa_supplicant in "standalone" mode.
<br>
<br>
So the procedure today is basically, <br>
- Stop NM. <br>
- Stop dhclient (started by NM) <br>
- Stop wpa_supplicant (started by NM)<br>
- Start wpa_supplicant <br>
- Start wpa_gui to connect and enter pin. <br>
- Start dhclient on the interface we just brought up. <br>
<br>
This feels rather messy, although as a sysadmin you can live with it, however as a regular user you can not.
<br>
<br>
Basically I have two questions, <br>
- Since dhclient already is started by NM with dbussupport, why cant wpa_supplicant/gui talk to dhclient and request an ip when a successful connection is made, should I manually have to start dhclient whenever I've connected through wpa_supplicant, or am I
missing something ? <br>
- Does anybody have any suggestions at all how to make this easy and workable for a regular user ?
<br>
<br>
We use Rhel 6. <br>
It's a shame that NM can't handle certificates stored on smart cards - that would have been the ultimate solution.
<br>
<div>
<div style="font-family: Tahoma; font-size: 13px;"><span style="font-family: Times New Roman; font-weight: bold;"><br>
Patrik Martinsson<br>
<br>
</span><font color="black" face="Tahoma" size="2"><span dir="ltr" style="font-size: 10pt;"><font face="Times New Roman" size="2"><span style="font-size: 16px;"><font size="2">ITi</font><br>
<br>
<font size="2"><b>SMHI</b></font><br>
<font size="2">Telefon 011 - 495 84 17 Fax 011 - 495 83 50<br>
Mobil 011 - 495 84 17 Epost <a target="_blank" href="mailto:Per.Unden@smhi.se" tabindex="0">
Patrik.Martinsson@smhi.se</a><br>
601 76 Norrköping Besöksadress Folkborgsvägen 1<br>
<a target="_blank" href="http://www.smhi.se" tabindex="0">www.smhi.se</a></font> </span>
</font></span></font></div>
</div>
</div>
</body>
</html>