cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Re: [[cat-users]] Cat Tool now not authenticating users

From: A.L.M.Buxey AT lboro.ac.uk
To: Chris Nelson <cnelson AT ceg-uk.com>
Cc: "cat-users AT lists.geant.org" <cat-users AT lists.geant.org>
Subject: Re: [[cat-users]] Cat Tool now not authenticating users
Date: Mon, 4 Apr 2016 19:30:58 +0000

Hi,

> Hopefully you can help with this.
> We did have eduroam working with android and ios devices but now it seems
> that when requests are coming through, something has changed and the
> requests are failing.
> Looking at our set up we have the cn of the authentication server set as
> CBBH-DC-02.ceg.local
> The current car cert file is still current but authentication requests
> are
> failing.

check what your eduroamCAT profile looks like - the CA, the CN etc
(ceg.catscollege.com CA
with your .local RADIUS server cert) versus what your RADIUS server is
actually handing
out when you authenticate against it - your production box has got a GoDaddy
Root CA, intermediate
and a wildcard RADIUS server cert (the first two appear to have the BEGIN
CERTICATE on same line as
/OU+CN stuff which is a bit messy.

as Stefan said, someones made a change without adjusting the other thing -
your current RADIUS server
is only SHA1 and expires on Jul 25 07:41:16 2016 so something to be getting
ready for anyway.

alan

[[cat-users]] Cat Tool now not authenticating users, Chris Nelson, 04/04/2016
- Re: [[cat-users]] Cat Tool now not authenticating users, Stefan Winter, 04/04/2016
- Re: [[cat-users]] Cat Tool now not authenticating users, A . L . M . Buxey, 04/04/2016
  - RE: [[cat-users]] Cat Tool now not authenticating users, Chris Nelson, 04/05/2016