Cherry-picking Pearls in San Francisco

Saturday is Squash day

I don't like very much when I *don't* play squash on saturday morning...

This morning, there were two guys on the next playground who obviously were morons : They didn't know about the 'let' rule obviously. (When your opponent is on the way : you *don't* play the ball, since it's potentially very dangerous).

One guy took the ball in the face... I was not a big deal for this time, but then he looked very afraid. Squash is very enjoyable when you play the rules, but it's very dangerous and frightening when you don't...

Giant Elephant and the little giant woman in Nantes

Nantes was celebrating Jules Vernes last week-end They stopped the tramway, and downtown was very crowdy I took some pictures with my nokia 6630 :

Hot

sun is shining in Paris (34°C) Some pictures taken yesterday on my way home.

Maemo.org for the new nokia 770

Nokia has just released a new Linux based Internet Tablet product category :

The Nokia 770 Internet Tablet enables easy broadband access to the Internet over Wi-Fi

There's a site about the developement plateform called maemo. It sounds exciting ;)

Openwrt and WRTG4GS

OpenWrt looks really nice too (currently, I'm using dd-wrt ...)

but it seems my revision of the WRT54GS isn't fully supported yet. What is very cool is the package system tool (ipkg) that you get. For the same price you also get a package tracker system

A few hardware modification on the WRT54G

This small linksys router (linux embedded) is really cool. At it is well spread there are some really geek hardware hacks around!

Add  a smartcard reader :  http://kiel.kool.dk:27/

Or add a serial console (lot of potential uses) ! http://jdc.parodius.com/wrt54g/serial.html http://www.rwhitby.net/wrt54gs/serial.html

gmane blogs

It seems rather cold news now...But I didn't notice by then.

Gmane was used to give you a newsgroup interface to your mailing lists. (with nice web archives). But now, it gives you a blog interface to your mailing lists (with comments (aka mail replies), rss).

neat.

Six Apart Espresso Machine Tour '05

Someone should do a trip in San-Francisco, Tokyo and Paris and tell which coffee machine is  the better (I'm a volonteer)

How to get freeradius, WRT54G and a OS X client working with WPA Enterprise

This work with Panther at least, and is based on Freeradius 1.0.2  Once you get Freeradius installed (for instance using ubuntu on AMD64 - link ). I advise you to follow the section 3.2 of this how-to. Thus you get working clients.conf, radiusdb.conf, users and eap.conf.  To generate certs you can use the interactive CA.all script which comes with freeradius (under scripts). I've chosen to user the certs.sh script after making some customization in CA.certs.  The WRT54G (here it's a screenshot of DD-WRT (talismen)) is straightforward : In "Wireless" > "Wireless security". Enter "WPA Radius", leave TKIP selected, enter the IP address of your radius server and the secret key declared in the clients.conf:

  For OS-X, just select the SSID of the WRT54G in the list. It ask you for a login and password. Enter those in the users file of freeradius...

 

For the first time he should ask you to add certs in OS X. Once accepted, you should be online. Hurra!  You can save the connexion settings (and get more settings) using the OS X "Internet Connexion" utility :

If you don't want to setup a radius sever on your own you can get dedicated firmware for the WRT54G with TinyPEAP inside, which seems cool (not tested). Especially for user management.  Other cool links :

1. http://oriol.joor.net/blog/?itemid=1631
2. http://www.alphacore.net/spipen/article.php3?id_article=1
3. http://www.alphacore.net/spipen/article.php3?id_article=4
4. http://homepage.mac.com/andreaswolf/public/wpaeap.html

The mailing list archive is usefull too.  By the way, I'm really impressed by the FreeRadius implementation... I'm considering buying the book.

How to compile Freeradius 1.0.2 on Ubuntu x86_64 (Hoary)

Freeradius hasn't been ported to hoary yet (in the 64 bits version)

I hope freeradius package is an exception ! Nonetheless, it's possible to install it cleanly on Hoary

1. Get the tarball at http://freeradius.org. Luckily enough you have a ./debian directory so you can craft your own .deb with dpkg-buildpackage
2. Once you have installed the dependencies... The build process will fail (If it has been that easy, I imagine you would have a pre-cooked .deb in the distribution...)
3. The first problem is the libtool dependencie (<1.5) Don't try to build a libtool1.4 .deb it's seem really hard Instead edit ./debian/rules and remove --with-system-libtool
4. Unfortunately... this is not enough. Indeed, the build will succeed, but you'll end with a linking issue on rlm_eap.  (This is precisely the module I wanted to use). The solution of copying missing .so or .la from source tree to /usr/lib/freeradius won't fit because, the freeradius server will complain about a undefined symbol: eaptls_process
5. Everything is working fine if you add

--disable-shared --without-rlm_smb --without-rlm_perl --without-rlm_krb5 --without-rlm_python

--with-experimental-modules (I've added this one, althought it's not  related to the fix)

update: There is a patch (see FreeRadius bug #75) which should help but it doesn't work for me...