Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I work for a school and we are setting up some ubuntu laptops for student use. The wireless password needs to be secure so students can't connect their personal devices onto the network. The problem we are facing right now is that the network manager lets you view the saved wireless passwords in plain text. I changed the permissions of the network config editor so students can connect to any other networks or even pull up the editor to view the password. So that fixed the problem.. So I thought.. I just realized that if the laptop can not connect to the network then it pops up an authentication needed error box and with the show password check box available again.. So students can figure out the wireless password. Does anyone know where I can turn off that checkbox option? Would it be under gconf-editor to a specific file?

Right now I have no work around so the laptops are sitting in my office and won't be able to be used until I have a solution.

Current config - ubuntu 10.04 currently have /home/username/.gconf/apps/nm-applet set to chmod 000 along with /usr/bin/nm-connection-editor set to 000 also. This is how I blocked access the password but when that box auto pops up because it can't connect and gives them the password on a silver platter its kind of hard to allow the students to use them.. BTW I am not the network admin so I can't just change that it only accepts wireless by mac address.. we have over 5000 machines on the network and roughly half have wireless so they aren't going to switch over any time soon.

share|improve this question

2 Answers 2

Setup the wireless network as an admin, and check the box to make the connection "Available to all users" at the bottom of the dialog when you edit the wireless network.

Ok, so let me be more verbose and explicit:

  1. Log in as an administrator. This account is not accessible by students.
  2. Click the network icon and select "Edit connections".
  3. In the Wireless tab, select your network and click edit.
  4. In the bottom of that window, click "Available to all users".

Now, the connection will be configured automatically at boot, other users are able to use the network, but if they try to edit that network, they'll be asked to input your password. Failing to do that, means not being able to edit that connection, hence not being able to see the password.

If indeed, like you say, students can see the password when the connection fails, then that is a bug to be fixed, and not worked around. It's quite obvious that users should not be able to read other peoples personal information.

share|improve this answer
    
That doesn't lock down the password so the user can't view it.. I need it locked down from these lil buggers on my network trying to cause havok –  Matt Z Oct 19 '11 at 15:12
    
If that's the case, then it's a serious bug that should be reported. I think you must've misunderstood something. Other users are not capable of reading your personal files. The password for the wireless network belongs only to the user who sets it up. You'll need to identify as that user in order to edit the connection at all. –  Jo-Erlend Schinstad Oct 19 '11 at 15:39
    
I will test this again but that was the reason I changed the permissions and made it so the editor wouldn't open.. the student generic login could still view it. I will test and be back in a second. –  Matt Z Oct 19 '11 at 15:55
    
Please do. If you're able to reproduce that, it's a bug that should be reported and fixed ASAP. –  Jo-Erlend Schinstad Oct 20 '11 at 0:47

The only thing that I can think of off the top of my head is to not use network manager, but setup the connection manually.

Setup a shell script that sets up wireless network using iwconfig - have it setup with global execute permission but rw only to root.

I would also consider adding this as a feature request to the Gnome folks.

share|improve this answer
    
Completely unnecessary. Network Manager will not allow other users to see the password. –  Jo-Erlend Schinstad Oct 19 '11 at 15:39

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.