cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Re: [cat-users] eduroam CAT: you have been invited to manage an IdP

From: Tomasz Wolniewicz <twoln AT umk.pl>
To: cat-users AT geant.net
Subject: Re: [cat-users] eduroam CAT: you have been invited to manage an IdP
Date: Mon, 21 Oct 2013 16:35:22 +0200
List-archive: <https://mail.geant.net/mailman/private/cat-users/>
List-id: "The mailing list for users of the eduroam Configuration Assistant Tool \(CAT\)" <cat-users.geant.net>

Hi,
The argument to keep the TKIP profile, was never to support those few legacy clients you might have on your network. Indeed if you simply turn TKIP off in your network then this problem is gone. We kept TKIP support to provide some service for eduroam users who might still find a TKIP only eduroam network. It is true that such a network would be violating eduroam policy, but we thought that providing some service to our users would be more important.

Writhing this made me realise that if our users are *NOT* configured for TKIP then they will complain and this might be a way to actually find those legacy network and try to do something about it. So no support could actually do us all some good. Of course this will only work with Windows. Other operating systems will just connect to whatever they find. On Linux we could make the configuration to be WPA2/AES only, but that currently not supported by CAT, therefore Linux will also always connect to a TKIP network.

Tomasz

W dniu 2013-10-21 16:14, Robert Mertling-Blake pisze:

On 21 October 2013 15:08, Alex Sharaz <alex.sharaz AT york.ac.uk> wrote:

Just got the figures from looking at our Aruba Airwave application server, but yes the plan is to disable WPA/Enterprise real soon now

If it helps, we've been in a similar boat (15 TKIP users out of 4000ish), turned WPA/TKIP off a fortnight ago, and heard just the singular scream on our helpdesk call logger (my guess is that we were picking up stray roamers from a historically TKIP-only institution across the road whose library faces ours).

On the other hand, the other 3985 users seem to be much happier being able to use the 802.11n speeds now...

Rob

-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576

Re: [cat-users] eduroam CAT: you have been invited to manage an IdP, Alex Sharaz, 10/21/2013
- Re: [cat-users] eduroam CAT: you have been invited to manage an IdP, Stefan Winter, 10/21/2013
  - Re: [cat-users] eduroam CAT: you have been invited to manage an IdP, A . L . M . Buxey, 10/21/2013
    - Re: [cat-users] eduroam CAT: you have been invited to manage an IdP, Stefan Winter, 10/21/2013
    - Re: [cat-users] eduroam CAT: you have been invited to manage an IdP, Alex Sharaz, 10/21/2013
      - Re: [cat-users] eduroam CAT: you have been invited to manage an IdP, A . L . M . Buxey, 10/21/2013
        
        Re: [cat-users] eduroam CAT: you have been invited to manage an IdP, Alex Sharaz, 10/21/2013
        
        Re: [cat-users] eduroam CAT: you have been invited to manage an IdP, Robert Mertling-Blake, 10/21/2013
        
        Re: [cat-users] eduroam CAT: you have been invited to manage an IdP, A . L . M . Buxey, 10/21/2013
        
        Re: [cat-users] eduroam CAT: you have been invited to manage an IdP, Tomasz Wolniewicz, 10/21/2013