[isf-wifidog] Multiple SSIDs - WPA support for Wifidog on the WRT54g

[Max Horváth]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sure, you're right ... but I don't see that feature in the short  
term, as OpenWrt's Kamikaze milestone will need still quite a long  
time to reach at least RC status with a working multiple SSID  
feature ...

Cheers, Max!

Am 18.03.2006 um 19:52 schrieb François Proulx:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> There is most certainly a need to provide such a service, since  
> it's not every ISPs that provide POP / IMAP over SSL. And most  
> people don't know about security stuff, it's our job to *at least*  
> protect them over the air since anybody can eavesdrop ... We're  
> geeks, we all use TLS/SSL, SSH etc... but the average people has no  
> idea what that means.
>
>
> On 18-Mar-2006, at 7:55 , Max Horváth wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Multiple SSIDs won't be included in OpenWrt WhiteRussian - this  
>> feature has been added to Kamikaze, but is broken at the moment.  
>> And it is a low priority for the OpenWrt developers ...
>>
>> But I don't see much need for this feature ... any private data  
>> should be running on an encrypted protocol ...
>>
>> Cheers, Max!
>>
>> Am 18.03.2006 um 09:05 schrieb Francois Proulx:
>>
>>> Hi everybody,
>>>
>>> I've started investigating on WPA (Radius) in TKIP/AES mode  
>>> lately. I got
>>> my WRT54g to authenticate users through a 802.1X / WPA scheme  
>>> against my
>>> OpenLDAP (OS X 10.4 Server users database). I works really nicely  
>>> and
>>> provides per-user / per-connection encryption.
>>>
>>> What's even more interesting is that I read that the Broadcom  
>>> chip inside
>>> the WRT54g can do multiple SSIDs (although all on the same  
>>> channel, but
>>> it's not that bad in our case). DD-WRT will implement the feature  
>>> in its
>>> next build. The feature has been requested on OpenWRT's Trac so it's
>>> coming in the next few months.
>>>
>>> What this all means is that we could provide in-the-air  
>>> encryption for
>>> user connected to our hotspots. One SSID would be in the clear  
>>> (no WEP or
>>> WPA) letting new users create a free account. The second SSID would
>>> provide a 802.1X scheme authenticating against a central RADIUS  
>>> server.
>>> Wifidog would have to be modified to greet users already  
>>> authenticated and
>>> redirecting them straight to the portal page.
>>>
>>> I know it's a low priority feature, but it's something that we've  
>>> been
>>> talking about for a long time without any real solution since we  
>>> thought
>>> we could not do multiple SSIDs.
>>>
>>> See ya
>>>
>>> _______________________________________________
>>> WiFiDog mailing list
>>> WiFiDog at listes.ilesansfil.org
>>> http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog
>>>
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.4.1 (Darwin)
>>
>> iD8DBQFEHAM6+BKgC+eQ3ooRAtPDAJ0b2OangYkUouuaZBuEGpSL4sE9rQCeN79h
>> zUcIKoRKFucJ/cLN+nQWzGA=
>> =2xqB
>> -----END PGP SIGNATURE-----
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.1 (Darwin)
>
> iD8DBQFEHFbrZVsK6AijBKARAshuAJ9bxu2EmJgXMYaTplqUFPaFCK2lxQCfcA9Z
> +zuiYB8L/K9Md43sD798OfE=
> =JFOa
> -----END PGP SIGNATURE-----
> _______________________________________________
> WiFiDog mailing list
> WiFiDog at listes.ilesansfil.org
> http://listes.ilesansfil.org/cgi-bin/mailman/listinfo/wifidog
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFEHFfr+BKgC+eQ3ooRAmi0AJ9kQuMQKu2dxjyhziZY8rmFAkGDWACghc3D
Jr9jVHQBQ+JwQfckxgQGR0g=
=+6sq
-----END PGP SIGNATURE-----