Database Info

WPA Enterprise Auth - confirmed working

WiFi on campus here uses WPA enterprise auth - good. I was shocked when I saw that the phone seemingly didn't support it. Network didn't even appear in the list, and Add Network only supports WPA Personal / WEP. How Apple of them. But WHY? It's wpa_supplicant behind the scenes.
I've been using campus wifi successfully for a few days now. It seems to integrate well enough - the wifi settings menu doesn't seem to break at all, the enterprise-authed network and status are listed correctly including the 'lock' icon, etc.
These instructions are slightly modified from being specific to the particular university (posted locally too, you see). If you can rub some braincells together, this can be adapted. The parts regarding a certificates file may or may not be needed in your setup, for example.
* Get a root shell
* cd /data/misc/wifi/
* cat wpa_supplicant.conf
* The existing supplicant config is displayed - copy and paste it into a text editor (the beginning bits are important, as are your existing networks)
* Paste in a working wpa_supplicant.conf section for your network at the end
* Fill in username and password in the new section. Replace the path for cacerts.pem with /data/misc/wifi/cacerts.pem
* Save the new config onto the SD card
* Save the cacerts.pem (same site) onto the SD card also
* On the handset: In the settings/storage menu, disable the SD card for USB storage (otherwise, can't access it from the shell)
* rm wpa_supplicant.conf
* cp would be used here normally, but it isn't in the stock image: dd if=/sdcard/wpa_supplicant.conf of=wpa_supplicant.conf
* chmod 666 wpa_supplicant.conf (Warning! Readable/Writable by EVERYONE! Use 664 such that only root can write it if you want, but this will possibly disallow changes by the settings app - if chown was available, ownership would be reverted back to wifi:wifi)
* dd if=/sdcard/cacerts.pem of=cacerts.pem
* chmod 444 cacerts.pem (needs to be readable by wifi user)
* The network should appear in the wifi menu and connect if you enable wifi. Reboot if not maybe?
Problems:
* Permissions are a bit wonky due to lack of chown. The process would be cleaner with busybox installed (possible with root), but this process is written to work on a stock RC29 handset.
* It will almost surely fail following an update. Try not to give up root before the WiFi UI is patched
* Maybe there's a reason that enterprise auth is absent from the settings UI
* WiFi settings page may or may not break. WiFi settings page may or may not undo your changes.
A quick troubleshooting tip: if you've dealt with wpa_supplicant before, note that wpa_cli is available to root. Helpful to diagnose any issues that crop up.
Enjoy.

How Apple of them. But WHY? It's wpa_supplicant behind the scenes
Click to expand...
Click to collapse
I suspect it's because the majority of consumers only access wifi networks secured through psk or mac-address. iirc my university used mac-address too. Not sure if that's changed by now. In any case, I wouldn't hold my breath for official support on the G1. Maybe on some future Android device with enterprise in mind.
Anyway, good tips and good first post. Welcome to the forum

busybox has chown

WPA2
Can I ask a question?
The SSID for your campus wifi is not broadcasted, correct? if this is true, then it won't show up and the only way to get access is to add it manually.
Now when you go to add it manually, did you try to change the type of security before you flipped out the keyboard? Just wondering since WPA2 is clearly seen if you have the keyboard in and if you have it out it looks like WPA2 isn't an option but if you try to move the security box with a swipe up with your finger, WPA2 will be shown. I haven't had a single problem attaching to my home or work network using WPA2 PSK since RC19 and beyond.

Yep, busybox has chown - which makes the whole thing cleaner and safer. My instructions were written originally with no assumptions as to previous modding, incl how to get telnet.
The wifi network here does broadcast, but is filtered out due to "unsupported" security. Add network lists wpa2 personal but not enterprise.

I modified my wpa_supplicant.conf file using your instructions and it worked!
Thanks!
Dave

vSymm said:
How Apple of them. But WHY? It's wpa_supplicant behind the scenes.
Click to expand...
Click to collapse
Because there's a substantial amount of UI work that needs to be done for WPA2-Enterprise compared with the relatively common WPA2-PSK.
My advice? If official support is something you'd like, go write it and submit a patch to the Android devs.

Not working
I can't get this to work. It says "failed to start wifi".
My non-enterprise wifi won't even work now. It connects but apps say network error.
I am trying to connect to my university's wifi that is "Secure 802.1X authentication and EAP-TTLS with PAP inner-authentication (anonymous)"
Can anyone give me an example config for this? It doesn't use a certificate.

Confirm that the permissions were set correctly on wpa_supplicant.conf
I'm sure you can find an example for that particular setup online somewhere.

happyface_0 said:
I can't get this to work. It says "failed to start wifi".
My non-enterprise wifi won't even work now. It connects but apps say network error.
I am trying to connect to my university's wifi that is "Secure 802.1X authentication and EAP-TTLS with PAP inner-authentication (anonymous)"
Can anyone give me an example config for this? It doesn't use a certificate.
Click to expand...
Click to collapse
try this:
adb shell
cd /data/misc/wifi
chown 1010:1010 wpa_supplicant.conf

Worked for me too, but the connection was really unstable. I've added the option bssid to wpa_supplicant.conf to prevent roaming. Now it works really well on my desk, but I haven´t tried the rest of the company.

need help connecting
I'm trying to connect to a campus network, I see the SSID detected (as following), and It tries to connect and aborts by itself.
my wpa_supplicant.conf shows this:
network={
ssid="Techwifi"
scan_ssid=1
key_mgmt=NONE
priority=2
}

hey guys,
will this also work with WPA2 and EAP/TTLS with PAP?
or do you know when this feature will be integrated?
thaks a lot

linulli said:
hey guys,
will this also work with WPA2 and EAP/TTLS with PAP?
or do you know when this feature will be integrated?
thaks a lot
Click to expand...
Click to collapse
Yes, I have it working.
Code:
network={
ssid="ssidname"
scan_ssid=1
key_mgmt=WPA-EAP
eap=TTLS
identity="user"
password="pass"
phase2="auth=PAP"
}
Note: It seems to drain my G1's battery pretty nicely and it starts to get hot after being connected for a bit. Also, my G1 added disabled=1 to the end of this network after the ADP1 v1.1 update, strange.

Thanks happyface_0,
so I will have a few minutes online.

Is there a way to alter your wpa_supplicant settings on an unrooted German G1 , or how can i downgrade and then alter the settings, does anyone know?

I'd love to know that too, i really want to use wifi at work.
Can we do anything to help you help us?

Maybe someone with a US RC33 can look if the WPA 2 Enterprise support finally made it into the gui of the G1 , then our problem would be solved ,
can´t find something on the net which says that WPA 2 Enterprise was part of the Internet .
So please can somebody look up his or her connection settings for wlan and tell us if WPA 2 Enterprise is available now?

Gedomania said:
Maybe someone with a US RC33 can look if the WPA 2 Enterprise support finally made it into the gui of the G1 , then our problem would be solved ,
can´t find something on the net which says that WPA 2 Enterprise was part of the Internet .
So please can somebody look up his or her connection settings for wlan and tell us if WPA 2 Enterprise is available now?
Click to expand...
Click to collapse
Neither WPA-Enterprise nor WPA-2 Enterprise are available yet without actually editing the wpa_supplicant configuration manually, even on RC33.

Hmm thats pretty sad, is it actually possible to write a program which can edit the Wpa_supplicant file so that we can manually insert the settings we need to get WPA 2 Enterprise working , even on phones without root?

[Request] Patch for enabling ad-hoc wifi networks in ROMs

Devs,
I use my office LAN connection as a net connection for my 32a Magic phone by creating an ad-hoc network and sharing the LAN connection - basically the opposite of WiFi tethering. I have been successfully using that by following the instructions at http://modmygphone.com/forums/showthread.php?t=22681 (which is applicable for all android phones, I guess). Ad-hoc networks are not enabled by default. The procedure requires changes in the "system/etc/wifi/tiwlan.ini" and "/data/misc/wifi/wpa_supplicant.conf" files.
Making these changes with the Magic touchscreen keyboard is quite tedious.
My request is for ROM developers to:
a) Enable this in their ROMs by default (I guess everyone would benefit from enabled ad-hoc wifi); OR
b) If someone could create a patch that overwrites these files with modified variants that is easy to apply over ANY other ROM (would be useful for those who tend to change ROMs often )
I searched for a solution and posted a question in Sapphire General, but no one chastised me/answered, so am reposting here (on second thoughts, I should have posted here in the first place).
Thanks!

post the modified files here, so ppl can create an update file.

+1 - it would be lovely to have a patch for that!

This would be great for someone like me in a country that charges a lot of money for 3G. Hope it gets implemented.

Files to be changed
I have attached the two modified files:
1) tiwlan.ini (remove .txt) needs to update the one in /system/etc/wifi/
2) wpa_supplicant.conf (remove .txt) needs to update the one in /data/misc/wifi/
This will require you to create an open (no encryption) Wifi network called "androidwifishare" (case sensitive, without the quotes) and share your LAN connection.
Note that overwriting wpa_supplicant.conf will make your phone forget all stored Wifi networks and their keys

slash12345 said:
Making these changes with the Magic touchscreen keyboard is quite tedious.
Click to expand...
Click to collapse
Why don't you just "adb pull", edit on the computer, and then "adb push" the modified files back into the cell phone ? You should be able to do this into any rom, with no need to package this into an "update.zip"
I don't understand anyway why should you create an ad-hoc network .. wireless access points are very cheap, like starting from 30$, why one would use his PC and a dedicated wifi card to create an ad-hoc network nowadays ?

ziokendo said:
Why don't you just "adb pull", edit on the computer, and then "adb push" the modified files back into the cell phone ? You should be able to do this into any rom, with no need to package this into an "update.zip"
Click to expand...
Click to collapse
Because, it's easier to have a wifiupdate.zip that can be stored in the SDCard and can be applied at any time after changing a ROM (without the need for looking around in a PC) using Amon_RA's recovery
ziokendo said:
I don't understand anyway why should you create an ad-hoc network .. wireless access points are very cheap, like starting from 30$, why one would use his PC and a dedicated wifi card to create an ad-hoc network nowadays ?
Click to expand...
Click to collapse
a) Not everyone has a WiFi network _in office_ (please refer to my original post)
b) Its a good way to avoid network data costs (which are high)
c) You get good transfer rates, much better than the mobile network (no 3G here)
As simple as that

i know this thread is kinda old and "dead" but i tried this with my girlfriends magic
works but as soon as the magic connects to the wifi of my G1 it reboots
strange thing
i noticed that this also happens with the free Wifi spot from Mcdonalds at our city
what could that be and why won't it happen when the magic connects to my access point??
thx for help in advance
by
KK
EDIT:
Magic ROM: Cursorsense 1.2.6.1
Device: HTC Magic PVT 32A

WLAN MAC Spoofing

I am running CM9 on a Samsung t679 and was attempting to make changes to the actual WLAN MACID via Terminal & Busybox. I have searched the forums for commands to make the changes however all I have tried have failed to make changes.
Does anyone know how to change/spoof the actual WLAN MACID to whatever I want? I have tried ifconfig and though it seems to execute the command without error in terminal/busybox when I check to see if the change has been made it only shows the actual MACID.
A permanent solution would be preferred however, a temp solution if ok to.

Are you sure you are running as root on the command line? Do 'id'.
Also, be sure to check what your wireless access point says what your MAC is. Do not trust the local device. It may say you are using one MAC, but actually still be using your hardware MAC address.

Ok. I was relying on the device to tell if the MACID was changed, I will check test again. Seems kinda dumb that if I was successful on changing the MACID that the device would show the original vs. current MACID.

Reverse WiFi Tether Script

Hello Hackers!
I know enough about shell scripts and networking that I was able to create a script that connects to a WiFi network from your remembered networks and enables NAT from hosts on the WiFi network to the 4G LTE data connection.
All you have to do after it's ready is either change the gateway on any PC on the network to the IP address of your phone or add a static route for a specific destination to route to your phone's IP address.
This script requires root access and a way to run shell scripts. I use the SManager app to run it, you just have to make sure it's set to run as root.
If you have a data connection other than 4G LTE then I expect it will most likely have a different interface, you will have to use OS Monitor to see which interface it uses then modify this script to use that interface.
There are a couple issues that I have with it. One is sometimes I have to run it a couple times before DHCP will work and the other issue is the WiFi seems to lag badly causing the internet to perform much slower than it should. Can someone have a look please?
If you make changes to the script then make sure you convert it to UNIX format or SH won't read it correctly. If you have Linux on your PC you can use the command "fromdos" to convert it.
I have attached a zip file with both the on and off scripts below. If anyone has more experience than I and would like to improve it then please let me know and I will include the improvements. :highfive:
Thank you!

AT&T V20 Enable Hotspot for Unlimited Data Users

If you're like me, and have been trying different methods around - you have probably been unsuccessful with getting past the Authorization screen to get your Hotspot working - if you have their unlimited data plan which does not allow for tethering.
Well now that we have root on our phones, we can finally get it working! So originally you would be able to change the value "tether_entitlement_check_state" in your com.android.settings.system just by issuing an adb command. The original value is '5', and this causes the EntitlementcheckService to go through and verify with AT&T's server if you're entitled to use tethering. Any changes through adb never stuck and no SQL Editor gave the option to allow changing the value either. (If you can find a way besides manually editing - for the AT&T variant - feel free to post it here!)
*If you have the H910 AT&T ROM then just skip down to Step 5 and go from there.
1. First we will change a global setting to allow Hotspot without the 'dun' inside of our APN.
Either through adb or Terminal Emulator on your phone use this command:
Code:
For Terminal Emulator:
su
settings put global tether_dun_required 0
For ADB:
adb shell
su
settings put global tether_dun_required 0
2. We now will need to navigate and change the value from an XML file. You can use whatever you want to edit your files, I always have used the app 'ES File Explorer'.
3. Navigate to /data/system/users/0/settings_system.xml. We will edit this file.
4. Go down to near the very bottom of the file and find:
Code:
<setting id="1763" name="tether_entitlement_check_state" value="5"
package="com.lge.entitlementcheckservice" />
*NOTE: The ID number may be different from 1763.
5. Change the number "5" inside of the quotes to "0".
6. Save the changes and then reboot.
7. You should be able to enable tethering just fine from within your phone now!
Make sure you keep the permissions the same for that system_settings.xml file. If you use the ES File Explorer app, editing it will not change the permissions - so you shouldn't have to worry about anything!
Hopefully this will help out some of you guys. Let me know if you encounter any issues.
EDIT: Some people are unable to get tethering to work using this method still. @galacticboy2009 posted another guide in Page 4 which those others have confirmed it worked for them.
Hopefully one of these two methods will get you back to becoming your own mobile hotspot where all can see your awesome hotspot name like "It Hurts When IP".
Twisted

Thanks for this! Finally a way around the hotspot restriction. I will try this out later

Edited this post for a newer method to allow you to use tethering without having to change your provider from ATT to OPEN.
Twisted

Thanks for this, I used steps 5-7 on the AT&T Rom and it's working fine.

Who-Lep said:
Thanks for this, I used steps 5-7 on the AT&T Rom and it's working fine.
Click to expand...
Click to collapse
Awesome, glad to hear it worked. Thanks for letting me know!

Works !!!!!! You are the MAN!!!

I'm on the ATT Rom, rooted, etc. (H910 Phone)
Is there any reason why my settings_system.xml file would not have the 1763 line in it?
I even copied the file to note pad and did a search just in case I'm going blind. LOL It's not there.
I guess I could add the whole line in manually but I'm not sure that would achieve anything.

It may not be 1763, just search for the actual name "tether_entitlement_check_state". If it still isn't there. Just try to activate hotspot once, let it fail and then check your file.

Thanks. It ended up being 549 closer to the top. I should have tried searching the name instead of the number. Works like a charm now!

Thanks a ton! I'm not even an Unlimited customer (I wish), and I could still use the hotspot without this trick, but I hated the obnoxious "Authenticating..." popup. It was slow, I typically need my hotspot on ASAP when I enable it, and sometimes it would fail. Super annoying.
So thanks for the quality of life trick!

ubergeek77 said:
Thanks a ton! I'm not even an Unlimited customer (I wish), and I could still use the hotspot without this trick, but I hated the obnoxious "Authenticating..." popup. It was slow, I typically need my hotspot on ASAP when I enable it, and sometimes it would fail. Super annoying.
So thanks for the quality of life trick!
Click to expand...
Click to collapse
Glad to help! Yeah, that authentication is very annoying.

Hello! So, after G5, now I got V20 and want to share findings on this subject:
https://forum.xda-developers.com/att-lg-g5/help/hotspot-networks-t3563030

VZ version for this workaround??
Hoping to get this working is there a version of this for VZ v20?

HTCZ715E said:
Hello! So, after G5, now I got V20 and want to share findings on this subject:
https://forum.xda-developers.com/att-lg-g5/help/hotspot-networks-t3563030
Click to expand...
Click to collapse
Thank you. It helped getting the hotspot to work when using a non AT&T sim. Apparently it would try to get authorization from AT&T for the hotspot before that even though it was a different carrier that was being used.

Lg v20: Root
twistedvip said:
If you're like me, and have been trying different methods around - you have probably been unsuccessful with getting past the Authorization screen to get your Hotspot working - if you have their unlimited data plan which does not allow for tethering.
Well now that we have root on our phones, we can finally get it working! So originally you would be able to change the value "tether_entitlement_check_state" in your com.android.settings.system just by issuing an adb command. The original value is '5', and this causes the EntitlementcheckService to go through and verify with AT&T's server if you're entitled to use tethering. Any changes through adb never stuck and no SQL Editor gave the option to allow changing the value either. (If you can find a way besides manually editing - for the AT&T variant - feel free to post it here!)
*If you have the H910 AT&T ROM then just skip down to Step 5 and go from there.
1. First we will change a global setting to allow Hotspot without the 'dun' inside of our APN.
Either through adb or Terminal Emulator on your phone use this command:
Code:
For Terminal Emulator:
su
settings put global tether_dun_required 0
For ADB:
adb shell
su
settings put global tether_dun_required 0
2. We now will need to navigate and change the value from an XML file. You can use whatever you want to edit your files, I always have used the app 'ES File Explorer'.
3. Navigate to /data/system/users/0/settings_system.xml. We will edit this file.
4. Go down to near the very bottom of the file and find:
Code:
<setting id="1763" name="tether_entitlement_check_state" value="5"
package="com.lge.entitlementcheckservice" />
*NOTE: The ID number may be different from 1763.
5. Change the number "5" inside of the quotes to "0".
6. Save the changes and then reboot.
7. You should be able to enable tethering just fine from within your phone now!
Make sure you keep the permissions the same for that system_settings.xml file. If you use the ES File Explorer app, editing it will not change the permissions - so you shouldn't have to worry about anything!
Hopefully this will help out some of you guys. Let me know if you encounter any issues.
Twisted
Click to expand...
Click to collapse
This is prob gonna gonna be a dumb question but can you PLEASE help me with HOW to root my LG V20, AT&T so I can make these changes because I'm assuming this is my ONLY option to tether and use my hotspot, I have tried EVERYTHING... Thank You!!

Donnie S said:
If you're like me, and have been trying different methods around - you have probably been unsuccessful with getting past the Authorization screen to get your Hotspot working - if you have their unlimited data plan which does not allow for tethering.
Well now that we have root on our phones, we can finally get it working! So originally you would be able to change the value "tether to root my LG V20, AT&T so I can make these changes because I'm assuming this is my ONLY option to tether and use my hotspot, I have tried EVERYTHING... Thank You!!
Click to expand...
Click to collapse
Preach. I need to get my nethunter build back, the kernel was perfectly formed for the v20. Was going to freaking release my own repo, but my Ascurion replacement was, of course, updated to the point of locked bootloader.
Now, I am going to talk to a lawyer about this; the phone updated it's rom and they basically locked the bootloader without permission, which would be fine, but I saw no terms or conditions letting me know it was going to become useless; surely, there isn't like implied consent involved

Hi, I have the same issue as the others.when i restart the phone, Hotspot works but no Internet.

I am on Cricket. When I put my SIM in it created a new APN. I went back to the old APN and my tethering started working. It was not working when on the "Aiowireless" APN that Cricket provided me via MMS when I put my SIM card in.

mego1373 said:
Hi, I have the same issue as the others.when i restart the phone, Hotspot works but no Internet.
Click to expand...
Click to collapse
I have the same issue. AT&T 910 unlocked rooted (systemless) with Rogers as my provider APN type includes default,mms,dun,supl
I got past the authentication error and can setup my hotspot. I see the phones connected but they have no internet access.
Am i missing something?

Unfortunately I am not really sure on why the internet is not working. This is still working for me, however I am on AT&T.
When you say the internet is not working - is it working still on your phone and just not any devices connected to your hotspot? Or your phone's data stopped working as well?