The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi Zenon,

W dniu 2016-04-05 o 11:59, Zenon Mousmoulas pisze:
> Hi Tomasz,
>
> brief answers to your questions:
>
> I see your point about inner identity. Making this configurable as an
> on/off option next to anonymity support (general profile properties)
> would be OK. I wouldn't even care if it defaults to enabled, as long
> as the option is there. It would be fine to just suggest (in a label
> next to the actual text input) something like
> username@realm-configured-on-profile. No pre-fill or enforcement, I
> believe we can revisit this later if necessary.
I wonder if people are aware that in CAT itself you can set additional
hints which are displayed in the GUI  before the download is started.
For NCU this hint says "For eduroam use the same username and password
as for USOS"  (USOS is our study support system).
Perhaps, if people used this more then the problem would go away?

> As for realms: On the CAT profile an exact (not a suffix nor a
> wildcard) realm is configured so far, as that is used for
> reach-ability checks (the only visible use AFAIK). If the semantics
> were to change, I would prefer itif CAT would support a list of realms
> associated with a profile, as I think we are trying to do away with
> suffixes and wildcards in general (in an eduroam db context). In such
> a case the label/descriptive text should say something like @<realm>
> where <realm> can be one of: ...
The realm is used to set the outer identity for methods that use one.
If you do not set the realm then the anonymous identity option is not
available. Thus is the *main* use of the realm, reachability tests are
just an ad-on utility.  This is why we cannot have a list of realms or
wildcards there. If I correctly understand your need for lists or
wildcards this would be for sanity testing of user input, I would
consider this to be an overkill. For sanity testing I would for suffix
testing only based on the current realm setting, with an option to turn
this all altogether.

Tomasz

>
> Cheers,
> Z.
>
> On 2016-04-05 12:22, Tomasz Wolniewicz wrote:
>> Hi,
>>    Obviously this has been requested several times, so probably it is
>> time that we should do something about it, at least in installers where
>> we can control things.
>>
>> There are two sides to this problem.
>> The first is notification on incorrect username input. This one probably
>> is not really controversial, but things need to be specified, for one -
>> do we have cases where the username *should* be provided without the
>> realm (this is just the inner identity, so the realm is not necessarily
>> required). Perhaps we should need another option (defaulting to set)
>> which would be "require realm for inner identity"?
>> How should the notification be done? Should we just react when no realm
>> is given or additionally in the case when a realm is set in the CAT
>> profile should we also require that the username *ends* with the
>> provided realm? I would be against an exact match of the realm as people
>> may have subrealms which are perfectly valid.
>>
>>
>> The second side is pre-filling the username field with something.
>> I do not expect that people who *do not want* such a feature cared to
>> speak up so far, but I can imagine that such people may exist, as I
>> would be one of them. In the case of my university people are used to
>> providing usernames with realms also in WEB applications, and besides we
>> need to support several subrealms so providing a partially filled field
>> with a possibly wrong value, would likely cause confusion. Therefore
>> such behaviour of the installers would need to be optional (hence yet
>> another option to master by the admins).
>> Assuming that we go ahead with such an option, I would like to discuss
>> how this can be implemented.
>> In the case of Windows installer we now have:
>> Username: <input field>
>>
>> How should the <input field> be prefilled? Should it be:
>> 1. "@my.realm"
>> 2. "user AT my.realm"
>> 3. "some_descriptive_text AT my.realm"
>>
>> Any opinion very welcome.
>>
>> Tomasz
>>
>>
>>
>>
>>
>> W dniu 2016-04-05 o 08:02, Patrik Holmqvist pisze:
>>> That is something we would like as well.
>>>
>>> Regards Patrik
>>>
>>> -----Ursprungligt meddelande-----
>>> Från: Zenon Mousmoulas 
>>> [mailto:zmousm AT noc.grnet.gr]
>>> Skickat: den 4 april 2016 21:48
>>> Till: 
>>> cat-users AT lists.geant.org
>>> Ämne: Re: [[cat-users]] Feature request for login name
>>>
>>> Hi,
>>>
>>> I have also asked recently whether it would be possible for CAT
>>> installers to auto-fill, suggest or optionally enforce the realm
>>> configured on the profile into the username input, even if only on
>>> some platforms; this is by far the most common end-user issue. Alan
>>> Buxey suggested it has also been requested before that.
>>>
>>> Cheers,
>>> Z.
>>>
>>> On 2016-04-04 15:43, Thomas Andersen wrote:
>>>> Hi,
>>>>
>>>> Would it be possible to configure the installer in a way that users
>>>> are either forced to enter an email address as username or that the
>>>> installer simply adds domain to the username itself?
>>>>
>>>> Br,
>>>> Thomas
>>>>
>>>> To unsubscribe, send this message:
>>>> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>>>> Or use the following link:
>>>> https://lists.geant.org/sympa/sigrequest/cat-users
>>> To unsubscribe, send this message:
>>> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>>> Or use the following link:
>>> https://lists.geant.org/sympa/sigrequest/cat-users
>>> To unsubscribe, send this message:
>>> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>>> Or use the following link:
>>> https://lists.geant.org/sympa/sigrequest/cat-users
> To unsubscribe, send this message:
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link:
> https://lists.geant.org/sympa/sigrequest/cat-users

-- 
Tomasz Wolniewicz    
          
twoln AT umk.pl
        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576