The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi,
  just a quick reply.
If the config file got written then the Network Manager configuration
must have failed. Inly in this case the config file (a
wpa_supplicant.conf but renamed) is created and only then the user
password gets stored in such a file. Perhaps the message should be
explicit about that or perhaps we should drop the idea of creating this
file altogether. In general passwords need to get stored somehow in they
are always more-or less reversible. In this particular case with MSCAPv2
as the internal method we could store the NT=hash instead of the actual
password which would provide some false sense of security -. really not
sure what is the best approach, so any suggestions form the list are
very welcome.

About this particular case - I will need to run tests on Fedora 23 and
see if I can see a reason for failure.

Tomasz

W dniu 11.03.2016 o 09:50, Per Mejdal Rasmussen pisze:
> On behalf of one of our students 
> (jbrehi15 AT student.aau.dk)
>  I would
> like to forward the email below to the eduroam installer team.
>
> The student was not able to successfully use the eduroam installer on
> hes PC with Fedora 23 installed (but is worked on Fedora 22
> previously). He was able to do a manually install.
>
> I don't think the following is related to this issue, but I would like
> to mention it, to make hes email easier to understand: The WIFI
> network at Aalborg University runs an extra SSID called AAU-1x. It is
> authenticate-wise exactly the same as eduroam. Except it only allows
> local users. The SSID is from before eduroam existed, and connects
> users to a more privileged network. It is our plan to either remove
> this functionality, or use radius to switch which VLAN client connect to.
>
>
> --Start of forwarded email--
> Hi,
>
> I have had trouble configuring the AAU-1x (and eduroam) Wi-Fi networks
> on my PC for a while now and would like to share some feedback with
> you about the autoconfiguration script.
> I am running Fedora 23 and I know it has worked previously both under
> Fedora 22 and 23 on previous installs. I use Gnome Shell 3.18.4 as a
> desktop manager.
>
> I have first tried with the given script at
> https://cat.eduroam.org/user/API.php?action=downloadInstaller&lang=en&id=linux&profile=1969
> (found on
> http://www.en.its.aau.dk/instructions/wifi/aau-1x-and-eduroam/aau-1x-and-eduroam-for-ubuntu/)
> and the one downloaded directly from eduroam site.
>
> I have tried to run it a lot of different times (deleting the
> non-working generated  config files in between attempts or leaving
> them) and none of the attempts worked.
> Each time I try, I receive this message: %% TODO: Insert error message
> here %% La configuration du gestionnaire de réseau a échoué.
> Génération du fichier wpa_supplicant.conf
> Then, it says that the output has been written to a file in:
> ~/.cat_installer/cat_installer.conf.
>
> When I actually go to the directory ~/.cat_installer I see a
> certificate and the above specified file (ca.pem and
> cat_installer.conf, see attachments).
>
> No trace of the file wpa_supplicant.conf file when running `sudo find
> / -name wpa_supplicant.conf`. Or actually, I do have results that
> match this request but none are related to AAU's wifi or eduroam.
>
> As a last point, you can see in the attachment a picture showing that
> both AAU-1X and eduroam aren't configured at all in my network
> settings (AAU-1-DAY has been configure and has the gear icon to modify
> settings, while the two others don't).
>
> Secondly, I tried configuring AAU-1x manually following both the
> previously mentioned page and the it-wiki page (namely
> https://it-wiki.es.aau.dk/wiki/AAU-1x_in_Ubuntu) and it finally worked
> somehow (I had tried that multiple times before with no success).
>
> Since my connection problem is resolved, I don't need a special help
> from you but I just wanted to point out this problem, hoping someone
> will take that into account (see also the post-scriptum).
>
> Best Regards,
>
> Julien BREHIN
> B.Sc. in Electronics and IT
> 6th semester
>
>
> PS: I had to remove my password from cat_installer.conf to send it to
> you... Seriously, having that written in clear text in a file that's..
> wow ! --" Not blaming you necessary, the installer script seems to be
> written by eduroam, but still..
> --End of forwarded email--
>
> Note the 3 attached files.
>
>

-- 
Tomasz Wolniewicz    
          
twoln AT umk.pl
        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne       Information&Communication Technology 
Centre
Uniwersytet Mikolaja Kopernika         Nicolaus Copernicus University,
pl. Rapackiego 1, Torun                pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576