The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[<philipp.tobler AT id.unibe.ch>]

Hi Stefan,

also from our side a big THANKS for CAT - it saves us hours if not days in user support. I’ll do some further testing on the SSID deactivation to fully understand it and to be able to improve our user guides.

Merry Christmas

Philipp

Am 18.12.2015 um 11:05 schrieb Stefan Winter <stefan.winter AT restena.lu>:

Hi,

I would also like to add appreciation for CAT. If the testing continues positively it's likely to save us thousands.

Thanks all for the info regarding the lowering of SSID priority with OSX. Is that also the case for iOS as this uses profiles too?

Thanks for the compliments. :-)

Yes, the same is true for iOS.

Greetings,

Stefan Winter

Cheers,
Andi

-----Original Message-----
From: Thomas Andersen [mailto:than AT itu.dk] 
Sent: 18 December 2015 08:49
To: Stefan Winter <stefan.winter AT restena.lu>; cat-users AT lists.geant.org
Subject: Re: [[cat-users]] Remove/Disable SSID

Hi Stefan,

If my mail came off as if I’m unhappy with CAT, I have not made myself clear :) We appreciate how CAT works and it have saved our organisation for hundreds and hundreds of support hours.

My objective with the email was just to clarify for others that they should not expect CAT to delete SSID’s from OS X, since that is impossible - but it will deactivate instead.

However, we would appreciate the same feature for linux if possible. On android I dont have the same need as 95% of our users already have 3G/LTE which they use to download CAT. So no need to delete SSID here.


Br,
Thomas



On 18/12/15 08:24, "Stefan Winter" <stefan.winter AT restena.lu> wrote:

Hi,

To elaborate a bit, afaik on OS X the CAT uses profiles, where we use 
an actual program on windows.
This means that on OS X you cannot delete the SSID, but what it will 
do, is reconfigure it so it will get to the bottom of the list and 
for what i can see in the profile, it says auto join to false as 
shown below with our guest SSID.

Yes. This is the best Apple lets you do, and the code was written to 
take the device config that far.

It is also the reason why the admin UI calls the feature
Remove/**DISABLE** SSID :-)

It seems to become more and more difficult to manage "alien" networks.

For example, on Android M, an app can only remove an SSID if it was 
also the one who created it (how the system keeps track of who did 
what, I don't know).

There are good intentions behind this very probably. It is supposed to 
prevent "network wars" where different WISPs would generously delete 
the competitor's network while installing their own.

It does make the life of people with an onboarding SSID more difficult 
though.

Please don't blame the CAT - unless you find that we are doing less 
than we could. In that case, I'm happy to implement the 
whatever-the-better-way-is.

Greetings,

Stefan Winter

This also means that a computer that has never been on the wifi you 
want to remove, will actually have it configured after using CAT – 
though unable to connect to it.

I will try on older OS X also to see it we also have problems on those.

<key>AutoJoin</key>
<false/>
<key>EncryptionType</key>
<string>None</string>
<key>HIDDEN_NETWORK</key>
<false/>
<key>IsHotspot</key>
<false/>
<key>PayloadDescription</key>
<string>This SSID should not be used after bootstrapping 
eduroam</string> <key>PayloadDisplayName</key> <string>Disabled WiFi 
network</string> <key>PayloadIdentifier</key> 
<string>org.1x-config.eduroam.dk.it_university_of_copenhagen.all_user
s.en_GB.wifi.disabled.0</string>
<key>PayloadType</key>
<string>com.apple.wifi.managed</string>
<key>PayloadUUID</key>
<string>b7f77ada-28af-64a7-82bd-37951c448fec</string>
<key>PayloadVersion</key>
<real>1</real><key>ProxyType</key>
<string>Auto</string><key>SSID_STR</key>
<string>ITU-guest</string>

Br,
Thomas

From: Thomas Andersen <than AT itu.dk <mailto:than AT itu.dk>>
Reply-To: Thomas Andersen <than AT itu.dk <mailto:than AT itu.dk>>
Date: Thursday 17 December 2015 at 16:47
To: "cat-users AT lists.geant.org <mailto:cat-users AT lists.geant.org>"
<cat-users AT lists.geant.org <mailto:cat-users AT lists.geant.org>>
Subject: Re: [[cat-users]] Remove/Disable SSID

On El capitan, it reconfigure the SSID I want to remove, and make it 
go to the bottom of the priority.

BR,
Thomas

Sent from my Cyanogen phone

Den 17/12/2015 16.44 skrev philipp.tobler AT id.unibe.ch
<mailto:philipp.tobler AT id.unibe.ch>:

   I just tested it on OSX Yosemite (10.10.5). Doesn’t work either -
   the profile says «Deaktiviertes WLAN Netzwerk», but our public
   network stays in the list of preferred wireless networks and after
   switching off and on the Wifi card, the computer even reconnected to
   it instead of eduroam. 

   Cheers
   Philipp

   Am 17.12.2015 um 15:49 schrieb Morris, Andi
   <amorris AT cardiffmet.ac.uk <mailto:amorris AT cardiffmet.ac.uk>>:

   In my (admittedly limited) testing, I couldn’t get it to forget
   the network on Android, Linux or Windows. I haven’t tried a MacOS
   or iOS device yet.

   We’re having a bad time with devices remembering our setup
   network, and if I knew this did work reliably across all the main
   OSes I’d jump for joy.

   Cheers,
   Andi

   *From:* Thomas Andersen [mailto:than AT itu.dk] 
   *Sent:* 17 December 2015 14:35
   *To:* cat-users AT lists.geant.org <mailto:cat-users AT lists.geant.org>
   *Subject:* [[cat-users]] Remove/Disable SSID

   Hi,

   I’ve just recently seen this new option, which we love and will
   make deployment of eduroam a lot easier here.
   However, after testing, we found that it works as intended on
   Windows and Mac but not on linux (Ubuntu)

   In fact, the SSID we are trying to delete is not anywhere to find
   in the .sh file.


   --
   Med venlig hilsen / With best regards
   Thomas Andersen

   Systems and Network Administrator

   IT University of Copenhagen
   Rued Langgaards Vej 7
   2300 København S


____________________________________________________________________
________

   **NEVER DISCLOSE YOUR PASSWORD OR SHOE SIZE - NOT EVEN TO YOUR
   DENTIST**
   To unsubscribe, send this
   message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
   Or use the following
   link: https://lists.geant.org/sympa/sigrequest/cat-users

--------------------------------------------------------------------
----

   Cardiff Metropolitan University - 150 years of nurturing talent
   <http://www.cardiffmet.ac.uk/cardiffmet150>
   To unsubscribe, send this
   message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
   Or use the following
   link: https://lists.geant.org/sympa/sigrequest/cat-users

   To unsubscribe, send this message:
   mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
   Or use the following link:
   https://lists.geant.org/sympa/sigrequest/cat-users

To unsubscribe, send this message:
mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link:
https://lists.geant.org/sympa/sigrequest/cat-users
To unsubscribe, send this message:
mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link:
https://lists.geant.org/sympa/sigrequest/cat-users

--
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et 
de la Recherche 2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the 
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users
To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
<0x8A39DC66.asc>

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail