Forget a Wifi Network and Ethernet

[cali_coder]

Hello all,

How does one forget a Wifi network? I've noticed Raspbian has a pretty stripped down preferences menu and I can't find a GUI interface to forget a wifi network. Terminal commands that will do this are welcome.

Also if the Raspberry Pi is connected to ethernet but also has Wifi networks available, will it default to the ethernet or the wifi?

Thanks!

[klricks]

Hello all,

How does one forget a Wifi network? I've noticed Raspbian has a pretty stripped down preferences menu and I can't find a GUI interface to forget a wifi network. Terminal commands that will do this are welcome.

Also if the Raspberry Pi is connected to ethernet but also has Wifi networks available, will it default to the ethernet or the wifi?

Thanks!

One way is to click on your SSID and enter a bogus PSK such as: 12345678
Otherwise you will need to edit: /etc/wpa_supplicant/wpa_supplicant.conf

Both Ethernet and WIFI appear to be active at the same time or at least I have opened 2 SSH sessions at the same time.....1 using the WIFI IP and the other using the Ethernet IP.
The Ethernet seems to take priority.

[bensimmo]

Just to add is there actually a way or gui alternative that allows quick forgetting.
I ask as its a security risk as the setting file as above, is not obfuscated/encrypted in some way. So in our school if anyone takes one home or connects to the none open network, then all keys are easily available.

[cali_coder]

Hello all,

How does one forget a Wifi network? I've noticed Raspbian has a pretty stripped down preferences menu and I can't find a GUI interface to forget a wifi network. Terminal commands that will do this are welcome.

Also if the Raspberry Pi is connected to ethernet but also has Wifi networks available, will it default to the ethernet or the wifi?

Thanks!

One way is to click on your SSID and enter a bogus PSK such as: 12345678
Otherwise you will need to edit: /etc/wpa_supplicant/wpa_supplicant.conf

Both Ethernet and WIFI appear to be active at the same time or at least I have opened 2 SSH sessions at the same time.....1 using the WIFI IP and the other using the Ethernet IP.
The Ethernet seems to take priority.

Thanks! I deleted the network out of this file and rebooted and now it's gone.

As a note, I tried to be clever and enter a new password, but it just remembered the old one.

[broe23]

Why would you? Do you mean like one that you previously connected to? There are CLI commands that do what the gui's do in a user friendly manner.

If the network you connect to is not in the saved list, it will just stay there, until you edit it out in the file saved in /etc.

[HawaiianPi]

...I ask as its a security risk as the setting file as above, is not obfuscated/encrypted in some way. So in our school if anyone takes one home or connects to the none open network, then all keys are easily available.

Not necessarily. The /etc/wpa_supplicant/wpa_supplicant.conf file requires admin privileges to open, so even if you connected to an open network, and someone else was snooping, they would need to know the admin login to see the contents of that file.

On the other hand, if the default pi/raspberry is still active...

Fix for that would be to set up a new user (or users) and delete the default pi account (I just set a random password for pi on my system).

Or... just don't connect to open networks...

[bensimmo]

the problem there is many tutorials for children (education) rely on Pi/Raspberry to be there and the sudo command to be open for use.
A simple obfuscated text file would solve that, well until the learn more and can then read it, but at least that's a sort of win for education

[HawaiianPi]

the problem there is many tutorials for children (education) rely on Pi/Raspberry to be there and the sudo command to be open for use.
A simple obfuscated text file would solve that, well until the learn more and can then read it, but at least that's a sort of win for education

Unless the children are specifically being taught about using Linux, there is no need for them to have admin rights.

[bensimmo]

But if the guides on the this website reference sudo, do they not need admin rights.

There is nothing on the site, that I have found, that demonstrates to teachers, techs and club users on how to lock down the Raspian system?
It's NOOBs installed Raspian that is/will be used.
There are no setup configuration in raspi-config that I can see to use?

[HawaiianPi]

If you are setting up computers for students, then you pre-install what they will need and set them up as normal (non-admin) users.There are probably guides for such things on the foundation's web site (http://www.raspberrypi.org), but even if there isn't, it's not rocket science, and I'm sure there are guides for Debian (base OS for Raspbian).

To add a user with their own /home folder: sudo adduser username

[DougieLawson]

the problem there is many tutorials for children (education) rely on Pi/Raspberry to be there and the sudo command to be open for use.
A simple obfuscated text file would solve that, well until the learn more and can then read it, but at least that's a sort of win for education

That's one of the reasons Pinet exists (although it only works with a wired network).

[bensimmo]

I'll have a look at PiNET, these are not for use as desktop computers but for learning about computers. Using the gpio/attachments/running program at start/fiddling with.
They need to update them, need to add python modules or program if they want, they need to be able to follow the foundation published education/learn/make articles.
Teachers, techs are not going to want to do all this for them and then have to go into every pi SD card and remove network details.

Maybe it something the foundation/volunteer Raspian helpers can look at. Improve general school security of a default Raspian with them by default. Maybe an education edition?
But that out of context for the OPs post.

We have and other places have open wifi networks anyone can access so that not a problem but the net nanny restrictions are high.
It's unfortunately needed in the current climate of ransomeware, even the password protected networks are almost as locked down. But with schools going down to ransomeware this is security we have to out up with.
Unfortunately this makes it quite difficult to use the internet


Is there any GUI solution to lock access to that file while also allowing them to add and forget a connection similar to the current connection system (on the taskbar, notification area)
Or a solution to make that file not normally human readable?

Getting all the teachers and techs to learn the ins and outs of Raspian it not something I want to do. It needs to be simplified security by default.
Or is this just something Raspian is not capable of?

Lots of question I know but, I don't know and don't have the time to delve too deep into it other than personal time.

[HawaiianPi]

You could set up an isolated network in the classroom for the Pi computers. I'm not aware of any ransomeware that works on Linux (and certainly not on Raspbian). Lock the network down to the MAC addresses of the Pi computers only, so if the kids try and use any keys they manage to find on the SD card, it won't work for other computers (well, until they figure out MAC address spoofing...).

[bensimmo]

You could set up an isolated network in the classroom for the Pi computers. I'm not aware of any ransomeware that works on Linux (and certainly not on Raspbian). Lock the network down to the MAC addresses of the Pi computers only, so if the kids try and use any keys they manage to find on the SD card, it won't work for other computers (well, until they figure out MAC address spoofing...).

or take the dongle out and use that
I have setup that sort of setup, so they are isolated, but they run through the more determined NetNanny, the move to https website is the biggest paint as it needs to rip them apart and then they all fail the security. Adding site is just a continous pain. The Pi's are small fry in the scheme of an Education system networks, time, money and effort just cannot be put into them. It's down to the interested techs (or teachers if you are lucky) to get things moving.


Is there any other form of WiFi security the Pi can use that does not need preshared keys ?

[broe23]

The Wifi keys come from the Wifi Access Point, not from the device. If the students are going to save their programs on a server and want to install code on the Micro SD cards, you really need to setup a Lab type setup, that only the Server and the workstations with the SD card readers are attached to, or you as the teacher, handle installing any programs to the SD cards.

Keep the Lab Isolated behind its own Router from the main network for the school. The school should not have any open wifi, so that no one but administration and teachers can only get on the school's network.

Learning the basics of Linux are simple. There are plenty of cheat sheets out there for the simple codes. Debian Wiki and Arch Wiki are the best go to resources in finding information on the meat and potatoes of Linux.

Python is easy, which you really need to learn and understand. Or else you are going to be taught by your students how to write code and micro-controllers.

Murphysboro, IL schools have been teaching students technology in the classroom for a while. Your best thing is to get into some Python classes or find a local Unix/Linux group to find those who are able to get you on the right track. There are plenty of us on here that have a varied level of experience dealing with Linux and the various codes.

[bensimmo]

There are no servers involved w.r.t saving data unless you wish to class GIT or OneDrive etc as such, the open Wi-Fi's are all seperated from the internal, even the passworded Wi-Fi are seperated from each other, but all still go through a netnanny(etc.) not controlled directly by us.
Things like this are beyond any 'clubs' capability.

The Pi's are there for the pupils to learn and play with, guided on where to look and then they go off and do, they are free to go ask D&T for help with the physical aspect, ICT for the python programming if they do any.

The AP we currently use is setup like any home router is setup. Standard WPA2-PSK/AES So the key is entered on the device as they would do at home, it doesn't care where it came from, the 'password' is now on the device, open to read by default. Again this is then readable to all, give raspberry devices don't make this difficult to get access to.
To be fari accessing out 'Pi' network is not problm at all, there's not much hey can do with it.

But if the kids take them home, or staff even, and use the GUI to access their home WiFi and do not have the ability to remove with a forget like in Android or similar of which they are used to. Then it's open for anyone with a little knowledge, which I hope they would have, to then use that key.
It's also if any staff do connnect it to the more 'internal' WiFi networks without understanding they may now have given the code to pupils.

You're talking about people who have little interest in learning the OS and are used to devices where security is setup for them by default.
Not bad learning about how to do it, but all are busy doing more important things unless they have a deep interest.
This is the target audience of RaspberryPi originally

I wonder how other schools/clubs in the UK solve these problem (or possibly not even thought of it?)


Anyway, it's gone beyond the simple question of

Is there actually a way or gui alternative that allows quick forgetting.
i.e. Is there a better Netwroking setup for the desktop, similar to windows and android quick user friendly yet functional setups[/i]
If so I can switch this for our standard images.