The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

["Winders, Timothy A" <twinders AT southplainscollege.edu>]

XML file as just downloaded from CAT attached.

Thanks!

-- 

Tim Winders

Associate Dean of Information Technology

South Plains College

(806) 716-2369

From: "Ayres G.J." <g.j.ayres AT swansea.ac.uk>
Date: Monday, June 1, 2015 at 10:39 AM
To: Timothy Winders <twinders AT southplainscollege.edu>, 'Vicente Frutos' <vfrutos AT soporte.cti.csic.es>, "'cat-users AT geant.net'" <cat-users AT geant.net>
Cc: "'wifi AT csic.es'" <wifi AT csic.es>
Subject: RE: [cat-users] Android issues

Hi,

 

Can you send me the eap-config file you are using?

 

I will test it out then on some of my android devices, to see if I can replicate the problem.

 

Screen lock with a pin/pattern is an important requirement for the app to work, but it should prompt the user if there is none set.

 

Thanks,

Gareth.

 

From: Winders, Timothy A [mailto:twinders AT southplainscollege.edu]
Sent: 01 June 2015 14:14
To: Ayres G.J.; 'Vicente Frutos'; 'cat-users AT geant.net'
Cc: 'wifi AT csic.es'
Subject: Re: [cat-users] Android issues

 

We have seen similar issues with some Android phones here as well, with the CAT 1.1 tool.  This doesn’t happen with all the Android phones.  I have not been able to pinpoint a commonality.  I have not tried to uncheck the validate CA cert to see if it works.

 

free radius reports this error in the log:

 

Fri May 29 08:44:35 2015 : Auth: (827270) Login incorrect (eap_peap: TLS Alert read:fatal:unknown CA): [XXXXX] (from client lev-wireless1 port 13 cli c0-bd-d1-7e-39-a9)

 

I sanitized the username in the above log entry.  The correct, valid, username is displayed in the log file.

 

The user does have the CAT configuration tool from the Google Play store installed and does have the XML configuration downloaded and installed from the CAT site.  This particular user is on 5.0 lolipop, but I do have another user on 4.4 kitkat.  Old devices are not having a problem and I don’t believe all 4.x+ devices are having problems.

 

-- 

Tim Winders

Associate Dean of Information Technology

South Plains College

(806) 716-2369

 

From: "Ayres G.J." <g.j.ayres AT swansea.ac.uk>
Date: Monday, June 1, 2015 at 5:56 AM
To: 'Vicente Frutos' <vfrutos AT soporte.cti.csic.es>, "'cat-users AT geant.net'" <cat-users AT geant.net>
Cc: "'wifi AT csic.es'" <wifi AT csic.es>
Subject: Re: [cat-users] Android issues

 

Hi,

 

Ive not had any issues reported yet, so its great to get feedback.

 

Which device type and android version are you having trouble with?

 

So the app parses the eap-config file and installs a profile correctly, but then fails to connect?

 

When you view the profile in androids wifi settings app, what does it have set for the CA cert?

 

Does it work with a CA cert if you install the cert manually?

 

Do you have the server subject name set for CA Cert? If so, what does the eduroamCAT app say it has set it to?

And what is it set to in the cert?

 

Thanks,

Gareth Ayres.

 

 

From: Vicente Frutos [mailto:vfrutos AT soporte.cti.csic.es]
Sent: 01 June 2015 11:43
To: cat-users AT geant.net
Cc: wifi AT csic.es
Subject: [cat-users] Android issues

 

Hello,

My name is Tito and I am the wireless network administrator for CSIC in Spain.
I am new in this mail list and I must catch up with the emails received.
In our case, we are having some problems with android devices. Basically, the installer does not work correctly and I have to uncheck the CA verification to work.
Obviously, this is not an option.
I am not sure if there is any reported issue related to this.
I have tested other installers like W8, iPhone or Mac OS Yosemite and they work correctly.
Any ideas?

Thanks in advance,
Tito




 

Attachment: eduroam-android_lollipop-SPC.eap-config
Description: Binary data

Attachment: smime.p7s
Description: S/MIME cryptographic signature