The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi,
I assume that you use TTLS/PAP. Windows 8 has internal support for this.
Earlier Windows versions do not have TTLS and we add it by installing
SecureW2 (GPL version).

If you used PEAP then we would be able to install user credentials
during the installation process, with Windows 8 and TTLS we have not yet
managed to future this out. Reboot is not necessary. You should just
choose connect to eduroam or just wait for the system to try by itself.
The system should pop up the credentials prompt and one attempt should
be enough, unless there is a network problem which breaks the login process.

Tomasz



W dniu 24.06.2013 16:29, Angel, Judy pisze:
> After the windows7 install you are prompted to reboot the laptop. That is 
> not the case for windows . I am not a windows 8 user, and have only tested 
> with two W8 devices but I rebooted and had to make a few login attempt 
> before it worked. The username pops up very quickly without connecting the 
> radius server at all, and then suddenly all starts working.  Have you had a 
> similar experience?
> Thanks
> Judy
>
> -----Original Message-----
> From: Stefan Winter 
> [mailto:stefan.winter AT restena.lu]
>  
> Sent: 19 June 2013 09:07
> To: Mailcon2
> Cc: Tomasz Wolniewicz; Mailcon2; 
> cat-users AT geant.net
> Subject: Re: [cat-users] iphone problem
>
> Hi,
>
>> Problem resolved once the radius server certificate was the Terena 
>> certificate, matching  the one uploaded to cat,  which was generated on a 
>> solaris box by default now SHA-1.
>> Thank you very much for all your assistance. The tool is going to make 
>> eduroam world a better place and will enable rollout to the whole campus.  
>> Much appreciated.
> Further to this, I have worked on eduroam CAT's "trunk" code which will 
> eventually become 1.1. During the reachability checks, it can now inspect 
> the server cert much more thoroughly. The list of error conditions now 
> reported about are:
>
>                 CERTPROB_ROOT_INCLUDED
>                 CERTPROB_TOO_MANY_SERVER_CERTS
>                 CERTPROB_NO_SERVER_CERT
>                 CERTPROB_MD5_SIGNATURE_SERVER
>                 CERTPROB_MD5_SIGNATURE_INTERMEDIATE
>                 CERTPROB_NO_TLS_WEBSERVER_OID
>                 CERTPROB_NO_CDP_URL
>                 CERTPROB_NO_CRL_AT_CDP_URL
>
> and will be complemented later by the check whether the server cert 
> actually matches the root cert that was uploaded to CAT.
>
> Greetings,
>
> Stefan Winter
>

-- 
Tomasz Wolniewicz    
  
twoln AT umk.pl
     http://www.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication
                                      Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750  fax: +48-56-622-1850 tel kom.: +48-693-032-576