Latest revision as of 12:05, 23 March 2023

NURDs Inventory

Owner	Space
Status	Infrastructure
Hostname	spacenet
Tool	No
Tool category

{{{Name}}}Property "Tool Name" (as page type) with input value "{{{Name}}}" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process. Property "Tool Image" (as page type) with input value "File:{{{Picture}}}" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process. {{{Picture}}} {{{InventoryOwner}}}Property "Tool Owner" (as page type) with input value "{{{InventoryOwner}}}" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process. {{{Location}}}Property "Tool Location" (as page type) with input value "{{{Location}}}" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process.

What is it

SpaceFED is an inter-(hacker)space federated authentication platform which currently offers the following services:

spacenet - federated authentication using RADIUS, useful for 802.1X and more
spacesaml - federated authentication for cloudservices

We have implemented SpaceNET on the E4200 access point. This means we have an LDAP with users, hashes and other stuff, and a FreeRADIUS server for wireless authentication (802.1x) which uses the fore-mentioned LDAP to authenticate. This all runs on nurdservices.

Also, in the future we can use SpaceSAML to authenticate our webservices (mediawiki, gallery, i dunno) against this database.

Where is it

There are 3 AP's:

The E4200 in the space
A US Robotics 5453 AP in the open area on the 1st floor to cover the central hall. Hostname nurds-ap-02.
A US Robotics 5453 AP in the server room on the 2nd floor. Hostname nurds-ap-01.

How do I use it

New users

You will need to start by logging in to the LDAP from within the network with their new LDAP user account.

The reason for this is that passwords of new accounts are set in the field sambaLMPassword, but spacenet works with the NTPassword field. Changing your password via the FusionDirectory web interface changes both these fields to the same new value. You can also just re-enter your old password.

Linux

To log into SpaceNet (SSID spacenet) follow these steps, except the WPA supplicant settings there are complete bullshit. The correct ones are

network={
        ssid="spacenet"
        key_mgmt=WPA-EAP
        eap=PEAP
        anonymous_identity="anonymous@nurdspace.nl"
        phase2="auth=MSCHAPV2"

        # set correct username, password, and path to cert file:
        identity="username@nurdspace.nl"
        password="yada"
        ca_cert="/etc/wpa_supplicant/spacenet.pem"
}

Certificate file:

https://space.nurdspace.nl/~zarya/radius.nurdspace.nl.crt

Windows

To log into SpaceNet (SSID spacenet) follow these steps.

Android

To configure this on new aged android devices loading of the certificate is required!

Hotspot name: spacenet
Security: WPA/WPA2-Enterprise
Method: PEAP
Phase 2 Authentication: MSCHAPv2
CA Certificate: load the file presented above
Online certificate status: Require certificate status
Domain: radius.nurdspace.nl
Identity: <username>@nurdspace.nl
Anonymous Identity: guest@nurdspace.nl
Password: <Your Password>

Maintenance

Todo list

@@ Line 108: / Line 108: @@
 == Todo list ==
-* Check local radius instance
-* AP Upgrade