Skip to Content.
Sympa Menu

cat-users - Re: [cat-users] New CAT 1.1 iPhone Issues

cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Re: [cat-users] New CAT 1.1 iPhone Issues


Chronological Thread 
  • From: Stefan Winter <stefan.winter AT restena.lu>
  • To: cat-users AT geant.net
  • Subject: Re: [cat-users] New CAT 1.1 iPhone Issues
  • Date: Thu, 28 May 2015 08:03:59 +0200
  • List-archive: <http://mail.geant.net/pipermail/cat-users/>
  • List-id: "The mailing list for users of the eduroam Configuration Assistant Tool \(CAT\)" <cat-users.geant.net>
  • Openpgp: id=AD3091F3AB24E05F4F722C03C0DE6A358A39DC66; url=http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Hello,

> Thank you very much for the detailed information. We are attempting to
> diagnose why the "Auto" proxy setting is causing problems for our iOS
> devices, we did not setup a proxy server or push out any settings in the
> past in our Cisco wireless network. We will continue to work on the issue.
> If it is possible to have a site level setting to configure the HTTP Proxy
> settings it would be appreciated.
>
> At this point the Hotspot 2.0 option could certainly cause some confusion
> for our users wondering why they are getting prompted for their credentials
> twice during the CAT install.

Being asked twice is expected - with Apple's config file format, there
will always need to be a second prompt (credentials are per-network, and
there is no way to define a "common" credential).

If the fact that they are asked twice is in itself a major problem, we
can only turn off Hotspot 2.0 support by default.

If the problem is because they are asked for this "hexadecimal
gibberish" network instead of seeing the magic words "Hotspot 2.0", then
we can disable HS20 for iOS only (because that UI bug is unique to iOS),
leaving it enabled for MacOS. But then for MacOS, the same "credentials
twice" thing will continue to exist.

When we turn off HS20 by default, an IdP can enable it in the Media Tab.
TBH... if more reports about this feature being confusing come in, I'm
tempted to flip this back to off-by-default. I'm tempted to think that
this will mean we'll have next-to-zero Hotspot 2.0 coverage then, but well.

Stefan

--
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature




Archive powered by MHonArc 2.6.19.

Top of Page