Web Auth login gone

[rgolden@email.arizona.edu]

Hello:

First time I set up UAwiFi on my windows XP service pack 2 laptop I had to input my UA email userid and password. Now, there is no login required.

I want to HAVE to login via WebAuth each time I connect to UAwiiFi.

How can I change the settings? I tried every step in the PDF how-to setup guide to no avail.

Thanks, Robert (rgolden@email.arizona.edu)

[dparm]

I'm not sure that is possible. I looked in all the settings for the Wireless Zero Configuration client (the Windows XP wireless wizard) and could not find anything.

I'm thinking that as part of that EAP-MSCHAP-v2, it stores your login credentials permanently.

Technically you are not logging in via WebAuth. WebAuth is the service at webauth.arizona.edu that validates your NetID through a web browser. UAWiFi is logging in using your NetID.

I will continue to investigate this for you; hopefully someone else can chime in with the how-to.

[rgolden@email.arizona.edu]

Dan:

I agree. Perhaps I should change my NetID password.

Do I have to be on-campus to do the password change?

Robert

[dparm]

I do not believe so.

Do you mind if I ask why you do not want the password stored? It's not easy to "crack" this password if someone got a hold of your machine.

Alternatively you could simply connect to UAPublic. This limits what you can do, but basic Internet browsing works just fine.

[rgolden@email.arizona.edu]

Hello:

Just the idea that someone could use my PC to access the UA wiFi network without knowing my password... that is exactly the issue.

Any PC can access any public wiFi site... that is a given. As students, we have a responsibility to protect not only our passwords, but, access to the UA wiFi network... don't you agree?

Thanks, Robert

[jmcgon]

It's nice to see someone practicing some security measures. Hats off to you, Robert.

[dparm]

As long as your Windows login is password-protected, I think you'll be fine. If someone manages to steal your computer and break your password, you'll have bigger things to worry about than the person using UAWiFi.

If we find a way to not store the password, we will certainly post it.

[jbarrett]

Attached is a Windows Scheduled Task job that will clear the EAP credentials from the registry. It will run at system startup and you will be prompted to enter your NetId each time the computer is started and you try to connect to UAWIFI.

To use this file:

1. Save the attachment to the \WINDOWS\TASKS directory
2. Rename the file to Clean EAP Credentials from the Registry.job
3. Run Scheduled Tasks (Start, Programs, Accessories, System Tools, Scheduled Tasks)
4. Right click on the job and select Properties
5. Verify that the correct account is displayed next to "Run as:"
6. Click on the "Set password" button and enter the password for the account listed in "Run as".

The job is scheduled to run at system startup. If you wish to change the run times, click on the schedule tab and modify accordingly.

- Jean

[bgwinkel]

Hey, that would be good to throw on our Underground laptops...I think my credentials are in two of them...