The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi Patrik,
  come comments in-line

W dniu 2013-04-29 10:18, Patrik Holmqvist pisze:

Hi!

 

 

I got some questions about the configuration options below:

 

·         Is it possible to control if the “Connect even if the network is not broadcasting its name (SSID)” checkbox is checked? Since we always broadcast the SSID of eduroam there is no need for that setting to be enabled.

You must remember that the settings are not done just to suit your own network, but *every* eduroam network your user might want to use. Therefore we try to be as safe as possible. While, the policy states that eduaom SSID MUST be broadcasted, some equipment (like this form Meru Inc. using the so-called virtual port) does some unusual things and this setting turns out to be useful. Of course people mention that this setting turns on active scanning on the client device and this may be by some seen as a provacy concern,  but this seemed to us a very small price to pay for the fact that the user might get a better experience at some guest networks.

 

·         I also wonder if it’s possible to add a custom text field to the Windows and Mac configurators in the wizard where you can describe how they should type their credentials and where they can get them?

In our case you type “username/ppp AT SU.SE” and that’s not easy to know for the users. See picture “eduroam-win7-1.jpg”

For Windows definitely yes, but for Mac, I think not. However, if you test installed download on cat.eduroam.org, select Nicolaus Copernicus University in Poland and select Staff (temporary) and click any of the download buttons, you will see an extra message displayed before the download. This is how you can pass a message to your users.

You add these messages as either EAP-specific or device-specific (or both) in the "Installed Fine-Tuning and Download".

Therefore I would prefer to leave things as they are now unless there is a strong support that we do do add another configurable string.

 

·         And on the same subject, is it possible to append something after the username if they missed to type it in, in our case append “/ppp AT SU.SE” after the username if the user dose not type it in? That goes for both Mac, Linux and Windows.

On Mac, the username and password are typed into the system supplicant, therefore we have no control over this. On Windows and Linux we could do that, but this would produce a non-uniform user experience therefore I would not want to go for it.

As a side note, you obviously use user-name attributes which are not RFC 2486 compliant. I thought eduroam insisted that they are, but I could not find a reference in the policy, so perhaps this is OK.

Cheers
Tomasz

 

If the above features is not possible at the moment, see them as feature requests that would be much appreciated.

 

Best regards,

Patrik Holmqvist

Stockholm University IT department

 

-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576