The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hi,

> visited sites that use a proxy may use several methods to get clients
> to use that proxy - WPAD process (done either by DHCP options, DNS or
> both),

That is, they will try to. If we don't set the Apple profiles to honour
this, then auto-config will fail; and that's our current approach. That
is the main issue.

> WCCP method (eg IOS routers), traffic dedirection in general
> or bump in the wire.

Sure - at some point, if visited sites use an obscure provisioning
method, we can't help them (and, frankly, maybe also don't *want* to
help them). WPAD is really widely deployed and somewhat understood though.

>  Visited sites would not be providing the eduroam
> profile for visitors - that is the home sites duty - only the home
> site knows the correct methods and has the RADIUS server details etc

The visited sites are the ones who would need to communicate their proxy
config needs though. The home site can't possibly know about these.
That's where things can be automated with WPAD if we allow it to happen.

Greetings,

Stefan


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature