The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Zenon Mousmoulas <zmousm AT noc.grnet.gr>]

Hi Tomasz,

brief answers to your questions:

I see your point about inner identity. Making this configurable as an 
on/off option next to anonymity support (general profile properties) 
would be OK. I wouldn't even care if it defaults to enabled, as long as 
the option is there. It would be fine to just suggest (in a label next 
to the actual text input) something like 
username@realm-configured-on-profile. No pre-fill or enforcement, I 
believe we can revisit this later if necessary.
As for realms: On the CAT profile an exact (not a suffix nor a wildcard) 
realm is configured so far, as that is used for reach-ability checks 
(the only visible use AFAIK). If the semantics were to change, I would 
prefer itif CAT would support a list of realms associated with a 
profile, as I think we are trying to do away with suffixes and wildcards 
in general (in an eduroam db context). In such a case the 
label/descriptive text should say something like @<realm> where <realm> 
can be one of: ...

Cheers,
Z.

On 2016-04-05 12:22, Tomasz Wolniewicz wrote:
> Hi,
>    Obviously this has been requested several times, so probably it is
> time that we should do something about it, at least in installers where
> we can control things.
>
> There are two sides to this problem.
> The first is notification on incorrect username input. This one 
> probably
> is not really controversial, but things need to be specified, for one -
> do we have cases where the username *should* be provided without the
> realm (this is just the inner identity, so the realm is not necessarily
> required). Perhaps we should need another option (defaulting to set)
> which would be "require realm for inner identity"?
> How should the notification be done? Should we just react when no realm
> is given or additionally in the case when a realm is set in the CAT
> profile should we also require that the username *ends* with the
> provided realm? I would be against an exact match of the realm as 
> people
> may have subrealms which are perfectly valid.
>
>
> The second side is pre-filling the username field with something.
> I do not expect that people who *do not want* such a feature cared to
> speak up so far, but I can imagine that such people may exist, as I
> would be one of them. In the case of my university people are used to
> providing usernames with realms also in WEB applications, and besides 
> we
> need to support several subrealms so providing a partially filled field
> with a possibly wrong value, would likely cause confusion. Therefore
> such behaviour of the installers would need to be optional (hence yet
> another option to master by the admins).
> Assuming that we go ahead with such an option, I would like to discuss
> how this can be implemented.
> In the case of Windows installer we now have:
> Username: <input field>
>
> How should the <input field> be prefilled? Should it be:
> 1. "@my.realm"
> 2. "user AT my.realm"
> 3. "some_descriptive_text AT my.realm"
>
> Any opinion very welcome.
>
> Tomasz
>
>
>
>
>
> W dniu 2016-04-05 o 08:02, Patrik Holmqvist pisze:
> > That is something we would like as well.
> >
> > Regards Patrik
> >
> > -----Ursprungligt meddelande-----
> > Från: Zenon Mousmoulas 
> > [mailto:zmousm AT noc.grnet.gr]
> > Skickat: den 4 april 2016 21:48
> > Till: 
> > cat-users AT lists.geant.org
> > Ämne: Re: [[cat-users]] Feature request for login name
> >
> > Hi,
> >
> > I have also asked recently whether it would be possible for CAT 
> > installers to auto-fill, suggest or optionally enforce the realm 
> > configured on the profile into the username input, even if only on 
> > some platforms; this is by far the most common end-user issue. Alan 
> > Buxey suggested it has also been requested before that.
> >
> > Cheers,
> > Z.
> >
> > On 2016-04-04 15:43, Thomas Andersen wrote:
> > > Hi,
> > >
> > > Would it be possible to configure the installer in a way that users
> > > are either forced to enter an email address as username or that the
> > > installer simply adds domain to the username itself?
> > >
> > > Br,
> > > Thomas
> > >
> > > To unsubscribe, send this message:
> > > mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> > > Or use the following link:
> > > https://lists.geant.org/sympa/sigrequest/cat-users
> > To unsubscribe, send this message: 
> > mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> > Or use the following link: 
> > https://lists.geant.org/sympa/sigrequest/cat-users
> > To unsubscribe, send this message: 
> > mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> > Or use the following link: 
> > https://lists.geant.org/sympa/sigrequest/cat-users