[OpenWireless Tech] Hello World

Todd Freeman todd at chiwifi.net
Thu Nov 1 12:12:22 PDT 2012


I forgot to mention, radius and openID are separate, but linked, because almost all wifi devices work with wpa2-enterprise, which uses radius to auth and allows you to set things like speed limits. I want to link it to the openid so that you have an open and public auth system that is also secure enough to use for financial transactions. That is also why the CA is important, I envision that eventually when businesses want to do something with the OpenIDs, they will want to do it over SSL, and personally, I trust running my own CA much more then getting certs from verisign if activists are going to use it for things like SSL VPN to their cellphone. Since the back-end is ldap we should be able to arbitrarily add any info field that we want. 

----- Original Message -----

From: "Todd Freeman" <todd at chiwifi.net> 
To: tech at srv1.openwireless.org 
Sent: Thursday, November 1, 2012 1:48:31 PM 
Subject: Re: [OpenWireless Tech] Hello World 

Sorry I may have glossed over my version a bit, This is a basic idea of what I am setting up. It is much more complicated the wireless in the developing world. 

http://chiwifi.net/Diagram1.png 

What that does not show is the ldap and certificate authority that I just added, which would work as the backend for radius. 

So the basic idea is this, To sign up for service all you need to do is be in range of the network (or via the website), login to it as if it were an open network which takes you to a captive portal, the captive portal allows you to sign up for an account on the wifi network, which includes an email account. Thus the sign up process allows users to be completely anonymous while still having a un-spoofable permanent ID on the wifi network, and because that ID is an openID, it can be integrated with 3rd party services easily. So you can tie real good and services locally to this ID, and use it at local businesses for bartering or bitcoin exchange. All while remaining just as anonymous as cash. The possibilities are really endless there. 

So the purpose is not just free wifi, but to integrate wifi into peoples everyday business, this allows it to take hold quickly as well as build communities because people will be using it for other services if they want to. 

Thus far it is setup like the, the Certificate Authority is running on Centos 6, using http://pki.fedoraproject.org 
The ldap server is also centos 6, running http://directory.fedoraproject.org 
The radius server has not been setup yet, the DNS cloud is running powerDNS and I have not been able to get through openWISP enough to get the captive portal running. Unfortunately I am not a programmer. 
I am planning to use http://www.packetizer.com for the openID server. 


There is currently 1 tower up. and the datacenter it is currently at is donating 1gbit of bandwidth. I also have 2 /64's of IPv6 addresses, so the plan is to have the clients be dynamically assigned ipv6 addresses. With optional static IPs for servers. So when I say the issue I have been having is with the auth, I mean the whole system. I am not using something very simple like a shared secret WPA2. Thoughts ? 


----- Original Message -----

From: "Gj" <fibreguy42 at gmail.com> 
To: "Natanael" <natanael.l at gmail.com> 
Cc: "Todd Freeman" <todd at chiwifi.net>, tech at srv1.openwireless.org 
Sent: Thursday, November 1, 2012 1:23:33 PM 
Subject: Re: [OpenWireless Tech] Hello World 

Good to see I'm not alone here either and thanks to SaschaM for the heads up :) 

Openwrt is a good OSS wifi router firmware starting point with wide decice support and one that hasn't gone the closed path of others eg meraki (was MIT roofnet istr before the vc's demanded their pound of flesh) 

I like the android app idea Tom - never having looked at iPhone I wonder what's involved with creating and equivalent iOS app? 

Guy 

Sent from my iPhone 

On 1 Nov 2012, at 13:45, Natanael < natanael.l at gmail.com > wrote: 




It was a bit more active for about a month, a year ago. Let's hope it wakes up again! 

By the way, now that Android has support for automatic WiFi Direct service announcement/detection/connection (based on UPNP and/or Bonjour), we could build something on top of that. AFAIK all it takes is a firmware upgrade for systems with ordinary recent WiFi chips to use it, so I imagine routers should be able to support it as long as the driver makers added support for it. 

IMHO that would be the "least messy" solution. A router could simply announce it's support for the "OpenWireless hotspot protocol" to other WiFi Direct devices. 

On Thu, Nov 1, 2012 at 2:39 PM, Todd Freeman < todd at chiwifi.net > wrote: 

<blockquote>

I am just glad I am not the only person on this list, the site is pretty sparse on community info. 


On 11/01/2012 04:07 AM, Guy Jarvis wrote: 

<blockquote>
testing please ignore 

_______________________________________________
Tech mailing list Tech at srv1.openwireless.org https://srv1.openwireless.org/mailman/listinfo/tech 




_______________________________________________ 
Tech mailing list 
Tech at srv1.openwireless.org 
https://srv1.openwireless.org/mailman/listinfo/tech 


</blockquote>



</blockquote>

<blockquote>

_______________________________________________ 
Tech mailing list 
Tech at srv1.openwireless.org 
https://srv1.openwireless.org/mailman/listinfo/tech 

</blockquote>



_______________________________________________ 
Tech mailing list 
Tech at srv1.openwireless.org 
https://srv1.openwireless.org/mailman/listinfo/tech 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.eff.org/pipermail/tech/attachments/20121101/53a48a53/attachment.html>


More information about the Tech mailing list