802.1x Wireless Configuration Self Service Plugin Public - Beta

Zach, this looks great. Does this create a profile that shows up in the pref pane? Is there a place in this that allows certs to be trusted? Does this add the user credentials to the keychain. If so how does this play with FV2 not updating that password? Thanks for all of your work on this!!!

This looks awesome, keep us posted! I would love to test it, but I may not have any free time to do so.

@jhbush1973 yes this generates the profile, stores it temporally on disk and then imports it with the profiles command and deletes. In 10.6 and 10.5 manually writes the preference keys ( 10.6 "profiles" code is there but did not work as well so I just manually do it ). In all cases it manually creates the OS specific keychain format. In the case of 10.7 I found that installing a System profile did not cause auto connect to occur even though the credentials were embedded in the profile. User profiles worked but caused a password prompt, so I split the difference and manually create a com.apple.network.eap.user.item.wlan.ssid.newNetwork entry in the keychain.

Per your question on certs, not yet but it will in the Final release, just trying to decide the best way to store them as I may just have it loop through the bundle, but I really wanted to keep all the info in the settings plist, so I may have to make a settings generator that correctly encodes the DER or PEM as a NSData item in the plist.

Re: FV2, I guess the best way to put it , is this is a removal and addition tool, so it clears out old creds before it adds new ones when you have the SSID added in both the add and remove arrays

10.6 Bug Fix Update to Python Script:

https://github.com/acidprime/WirelessConfig/commit/be884c36d03d944f2bd31956bf8b62b31089efeb

Any further comment on how production ready this is given that it seems to be being maintained? Also, sorry to sound like an idiot, but what is the function of the mdmh key and does it need to be customized?

Wow, Just what we needed.. Looks great. We run all mavericks here. Love hacking and will test. Does jamf know about this, time to wake them up.

It's good ... unless you have user authenticated 802.1X like we have. Then it's config profile only for that on Mavericks. Thanks Apple.