The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

["Morris, Andi" <amorris AT cardiffmet.ac.uk>]

I would also like to add appreciation for CAT. If the testing continues 
positively it's likely to save us thousands.

Thanks all for the info regarding the lowering of SSID priority with OSX. Is 
that also the case for iOS as this uses profiles too?

Cheers,
Andi

-----Original Message-----
From: Thomas Andersen 
[mailto:than AT itu.dk]
 
Sent: 18 December 2015 08:49
To: Stefan Winter 
<stefan.winter AT restena.lu>;
 
cat-users AT lists.geant.org
Subject: Re: [[cat-users]] Remove/Disable SSID

Hi Stefan,

If my mail came off as if I’m unhappy with CAT, I have not made myself clear 
:) We appreciate how CAT works and it have saved our organisation for 
hundreds and hundreds of support hours.

My objective with the email was just to clarify for others that they should 
not expect CAT to delete SSID’s from OS X, since that is impossible - but it 
will deactivate instead.

However, we would appreciate the same feature for linux if possible. On 
android I dont have the same need as 95% of our users already have 3G/LTE 
which they use to download CAT. So no need to delete SSID here.


Br,
Thomas



On 18/12/15 08:24, "Stefan Winter" 
<stefan.winter AT restena.lu>
 wrote:

>Hi,
>
>> To elaborate a bit, afaik on OS X the CAT uses profiles, where we use 
>> an actual program on windows.
>> This means that on OS X you cannot delete the SSID, but what it will 
>> do, is reconfigure it so it will get to the bottom of the list and 
>> for what i can see in the profile, it says auto join to false as 
>> shown below with our guest SSID.
>
>Yes. This is the best Apple lets you do, and the code was written to 
>take the device config that far.
>
>It is also the reason why the admin UI calls the feature
>Remove/**DISABLE** SSID :-)
>
>It seems to become more and more difficult to manage "alien" networks.
>
>For example, on Android M, an app can only remove an SSID if it was 
>also the one who created it (how the system keeps track of who did 
>what, I don't know).
>
>There are good intentions behind this very probably. It is supposed to 
>prevent "network wars" where different WISPs would generously delete 
>the competitor's network while installing their own.
>
>It does make the life of people with an onboarding SSID more difficult 
>though.
>
>Please don't blame the CAT - unless you find that we are doing less 
>than we could. In that case, I'm happy to implement the 
>whatever-the-better-way-is.
>
>Greetings,
>
>Stefan Winter
>
>> This also means that a computer that has never been on the wifi you 
>> want to remove, will actually have it configured after using CAT – 
>> though unable to connect to it.
>> 
>> I will try on older OS X also to see it we also have problems on those.
>> 
>> <key>AutoJoin</key>
>> <false/>
>> <key>EncryptionType</key>
>> <string>None</string>
>> <key>HIDDEN_NETWORK</key>
>> <false/>
>> <key>IsHotspot</key>
>> <false/>
>> <key>PayloadDescription</key>
>> <string>This SSID should not be used after bootstrapping 
>> eduroam</string> <key>PayloadDisplayName</key> <string>Disabled WiFi 
>> network</string> <key>PayloadIdentifier</key> 
>> <string>org.1x-config.eduroam.dk.it_university_of_copenhagen.all_user
>> s.en_GB.wifi.disabled.0</string>
>> <key>PayloadType</key>
>> <string>com.apple.wifi.managed</string>
>> <key>PayloadUUID</key>
>> <string>b7f77ada-28af-64a7-82bd-37951c448fec</string>
>> <key>PayloadVersion</key>
>> <real>1</real><key>ProxyType</key>
>> <string>Auto</string><key>SSID_STR</key>
>> <string>ITU-guest</string>
>> 
>> Br,
>> Thomas
>> 
>> From: Thomas Andersen 
>> <than AT itu.dk
>>  
>> <mailto:than AT itu.dk>>
>> Reply-To: Thomas Andersen 
>> <than AT itu.dk
>>  
>> <mailto:than AT itu.dk>>
>> Date: Thursday 17 December 2015 at 16:47
>> To: 
>> "cat-users AT lists.geant.org
>>  
>> <mailto:cat-users AT lists.geant.org>"
>> <cat-users AT lists.geant.org
>>  
>> <mailto:cat-users AT lists.geant.org>>
>> Subject: Re: [[cat-users]] Remove/Disable SSID
>> 
>> On El capitan, it reconfigure the SSID I want to remove, and make it 
>> go to the bottom of the priority.
>> 
>> BR,
>> Thomas
>> 
>> Sent from my Cyanogen phone
>> 
>> Den 17/12/2015 16.44 skrev 
>> philipp.tobler AT id.unibe.ch
>> <mailto:philipp.tobler AT id.unibe.ch>:
>> 
>>     I just tested it on OSX Yosemite (10.10.5). Doesn’t work either -
>>     the profile says «Deaktiviertes WLAN Netzwerk», but our public
>>     network stays in the list of preferred wireless networks and after
>>     switching off and on the Wifi card, the computer even reconnected to
>>     it instead of eduroam. 
>> 
>>     Cheers
>>     Philipp
>> 
>>>     Am 17.12.2015 um 15:49 schrieb Morris, Andi
>>>     
>>> <amorris AT cardiffmet.ac.uk
>>>  
>>> <mailto:amorris AT cardiffmet.ac.uk>>:
>>>
>>>     In my (admittedly limited) testing, I couldn’t get it to forget
>>>     the network on Android, Linux or Windows. I haven’t tried a MacOS
>>>     or iOS device yet.
>>>      
>>>     We’re having a bad time with devices remembering our setup
>>>     network, and if I knew this did work reliably across all the main
>>>     OSes I’d jump for joy.
>>>      
>>>     Cheers,
>>>     Andi
>>>      
>>>     *From:* Thomas Andersen 
>>> [mailto:than AT itu.dk]
>>>  
>>>     *Sent:* 17 December 2015 14:35
>>>     *To:* 
>>> cat-users AT lists.geant.org
>>>  
>>> <mailto:cat-users AT lists.geant.org>
>>>     *Subject:* [[cat-users]] Remove/Disable SSID
>>>      
>>>     Hi,
>>>      
>>>     I’ve just recently seen this new option, which we love and will
>>>     make deployment of eduroam a lot easier here.
>>>     However, after testing, we found that it works as intended on
>>>     Windows and Mac but not on linux (Ubuntu)
>>>      
>>>     In fact, the SSID we are trying to delete is not anywhere to find
>>>     in the .sh file.
>>>      
>>>      
>>>     --
>>>     Med venlig hilsen / With best regards
>>>     Thomas Andersen
>>>      
>>>     Systems and Network Administrator
>>>      
>>>     IT University of Copenhagen
>>>     Rued Langgaards Vej 7
>>>     2300 København S
>>>      
>>>     
>>> ____________________________________________________________________
>>> ________
>>>      
>>>     **NEVER DISCLOSE YOUR PASSWORD OR SHOE SIZE - NOT EVEN TO YOUR
>>>     DENTIST**
>>>     To unsubscribe, send this
>>>     message: 
>>> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>>>     Or use the following
>>>     link: https://lists.geant.org/sympa/sigrequest/cat-users
>>>     
>>> --------------------------------------------------------------------
>>> ----
>>>
>>>     Cardiff Metropolitan University - 150 years of nurturing talent
>>>     <http://www.cardiffmet.ac.uk/cardiffmet150>
>>>     To unsubscribe, send this
>>>     message: 
>>> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>>>     Or use the following
>>>     link: https://lists.geant.org/sympa/sigrequest/cat-users
>> 
>>     To unsubscribe, send this message:
>>     
>> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>>     Or use the following link:
>>     https://lists.geant.org/sympa/sigrequest/cat-users
>> 
>> To unsubscribe, send this message:
>> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>> Or use the following link:
>> https://lists.geant.org/sympa/sigrequest/cat-users
>> To unsubscribe, send this message:
>> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>> Or use the following link:
>> https://lists.geant.org/sympa/sigrequest/cat-users
>
>
>--
>Stefan WINTER
>Ingenieur de Recherche
>Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et 
>de la Recherche 2, avenue de l'Université
>L-4365 Esch-sur-Alzette
>
>Tel: +352 424409 1
>Fax: +352 422473
>
>PGP key updated to 4096 Bit RSA - I will encrypt all mails if the 
>recipient's key is known to me
>
>http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
To unsubscribe, send this message: 
mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users