The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hi,

> On 10/07/2013 02:22 PM, Brian Epstein wrote:
> > X509v3 Basic Constraints: CA:FALSE
>
> I re-read the section and saw that I missed the critical flag.  I set
> that for CA:FALSE, replaced the certs and restarted radiusd.  Same
> issues occur, though.

Hm. That's very strange. I am wondering if this has something to do with
CAT or if it's somewhere outside our control - the iOS is usually picky
if it gets something malformed and refuses to install a profile outright
if something's wrong.

Since the CAT profile gets installed without any error whatsoever, I'm
tempted to think the problem is "elsewhere".

I can suggest two paths forward:

1) try if generating a profile with the same settings by the original
"iPhone Configuration Utility" or the "Apple Configurator" app will
yield a profile which works in practice. If so, looking at the diff
between what works and what we produce will show where a possible bug is.

2) When logging in with the not-working profile, put your RADIUS server
in debug mode and see what error messages you get during the login (if
any). Finding out *why* the connection fails would yield information
what's missing or wrong.

2 is particularly easy if you are using FreeRADIUS, not sure about other
server products.

Greetings,

Stefan Winter

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature