The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Michele de Varda <michele.devarda AT unimi.it>]

Hi Tomasz,

thank you for your answer.

Yesterday the issue was different: from University of Milan captive 
portal (IP 159.149.107.59) we couldn't reach "cat.eduroam.org".
The connection was blocked only from this IP,   behind the  captive 
portal NAT there were thousand Unimi users that yesterday tried to 
download CAT configurator and probably we caused a kind of DoS attack to 
cat site.
We checked our firewall and ACL but the IP was not blocked inside Unimi 
network and all other clients in Unimi could ping "cat.eduroam.org".
Yesterday after 4:00 PM all became normal and we could ping 
cat.eduroam.org from the captive portal.

Thank you again,

Michele


Il 18/03/2015 16:06, Tomasz Wolniewicz ha scritto:
> Hi Michele,
>     How do you collect the installer? Is it possible that you use direct
> link to the file location in CAT?
> If this is so, then after you have made changes to the profile the
> location would have changed, the same would be true if the Operations
> Team have cleared installer cache for some reason.
>
> In CAT 1.0 you can use a direct link in an undocumented way, like:
> https://cat.eduroam.org/download.php?profile=1&idp=1&lang=pl&device=w8&generatedfor=user
>
> (generatedfor should be user if this is a direct user download or admin,
> if you just pull it regularly and redistribute from your page, this is
> used for statistics only)
>
> Of course you need to know the numbers for your idp and your profile,
> these you can get if you take a look at the institution admin page in
> CAT and the links under the QR codes.
>
> finally you need to know the device codes which for now are:
> w8, w7, vista, xp, apple_yos, apple_mav, apple_m_lion, apple_lion,
> mobileconfig, linux
>
> actually all apple stuff is identical, so you can use mobileconfig for
> all, and vista=w7
>
> In CAT 1.1 we will have a complete user API, the approach described
> above will be left for backward compatibility, but the "official" way
> will be a bit different.
>
> Cheers
> Tomasz
>
>
> W dniu 2015-03-18 o 11:08, Michele de Varda pisze:
> > Dear CAT support,
> > yesterday we upgraded our Eduroam config: we changed the  CN and the
> > certificate chain.
> > We have a support portal for eduroam users with IP 159.149.107.59,
> > this IP from this morning seems unable to reach the site cat.eduroam.org.
> > Is it possible that this IP is blocked by an ACL?
> >
> > [root@castore ~]# ping cat.eduroam.org
> > PING cat.eduroam.org (161.53.2.204) 56(84) bytes of data.
> >
> > --- cat.eduroam.org ping statistics ---
> > 17 packets transmitted, 0 received, 100% packet loss, time 16003ms
> >
> >
> >
> > Thank you for your support,
> >
> > Michele de Varda
> >
> > Div. Telecomunicazioni
> > Univ. degli Studi di Milano