The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Thomas Andersen <than AT itu.dk>]

Hi Martin,

Personally, I’m a Linux kinda guy. I just find the options on windows client 
and tell the GPO guy what I want. Then they fix it :)

One obstacle we have met, is that we started using the windows credentials 
for for eduroam authentication. It works fine here on our radius servers but 
as soon as people visit other eduroam locations, they are unable to login 
because ITU\than (me) is not valid.

Because of this, we have changed the GPO so that we do not use windows 
credentials but tell people to use their email address as login. With the 
issue you are referring to, the above should fix it as they would be asked 
for the correct password if the login fails.

I’ll talk to the GPO guy and see if he can export what we do.

Br,
Thomas




On 31/05/16 09:22, "Martin Kjeldgaard Nikolajsen" 
<martinn AT samf-it.ku.dk>
 wrote:

>Hi
>Thanks for the response!
>
>The problem we are facing with deploying a regular GPO is, that the users 
>can't change the password (or remove it for that sake) or change the 
>settings whether or not Eduroam automatically connects or not - But 
>obviously there are multiply ways to set it up, so I’m just looking for a 
>way that is more preference based (and of course also slightly less secure).
>
>@Thomas, it would be amazing if I could get a copy of your Eduroam GPO, you 
>might have some settings that I haven’t tried / looked at.
>
>
>
>Best regards
>Martin
> 
>Martin Kjeldgaard Nikolajsen
>it-medarbejder
> 
>SAMF-IT
>Københavns Universitet
>Øster Farimagsgade 5, Bygning 16
>1014 København K 
> 
>DIR 35323282
>MOB 28753282
>martinn AT samf-it.ku.dk
> 
> 
>
>-----Original Message-----
>From: Stefan Winter 
>[mailto:stefan.winter AT restena.lu]
> 
>Sent: 31. maj 2016 08:23
>To: Thomas Andersen; Martin Kjeldgaard Nikolajsen
>Cc: 
>cat-users AT lists.geant.org
>Subject: Re: [[cat-users]] Is it possible to get the content of the Windows 
>CAT installer
>
>Hi,
>
>> ITU++) . In my view, CAT is "just" a bundle of predefined settings 
>> ITU++which
>> makes it easy for the end user.
>
>Well, yes, that's exactly it :-)
>
>> But to set the same settings as sysadm in a GPO shouldn't take many 
>> minutes.
>
>The utility of CAT installers is much higher in settings where devices are 
>not part of an AD Domain and group policies are not available.
>Totally agreed: if you can push settings via GPOs to a controlled user base, 
>just do that.
>
>Greetings,
>
>Stefan
>
>> Let me know if you need some help with this. We are almost neighbors 
>> :) (I am from IT University in Copenhagen)
>> 
>> Br,
>> Thomas
>> 
>> Den 31. maj 2016 07.37 skrev Martin Kjeldgaard Nikolajsen
>> <martinn AT samf-it.ku.dk>:
>> 
>>     Hi CAT developers
>> 
>>     Is it possible to get the content of the packages (I’m mostly
>>     interested in the bat files)
>> 
>>      
>> 
>>     Eduroam-W7-XX.exe
>> 
>>     Eduroam-W10-XX.exe
>> 
>>      
>> 
>>     To see if I can make a GPO that mimics the way that CAT works.
>> 
>>      
>> 
>>     Best regards
>> 
>>     Martin
>> 
>>      
>> 
>>     *Martin Kjeldgaard Nikolajsen*
>> 
>>     it-medarbejder
>> 
>>      
>> 
>>     *SAMF-IT*
>> 
>>     Københavns Universitet
>> 
>>     Øster Farimagsgade 5, Bygning 16
>> 
>>     1014 København K
>> 
>>      
>> 
>>     DIR 35323282
>> 
>>     MOB 28753282
>> 
>>     
>> martinn AT samf-it.ku.dk
>>  
>> <mailto:martinn AT samf-it.ku.dk>
>> 
>>      
>> 
>>      
>> 
>>      
>> 
>>     To unsubscribe, send this message:
>>     
>> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>>     Or use the following link:
>>     https://lists.geant.org/sympa/sigrequest/cat-users
>> 
>> To unsubscribe, send this message:
>> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>> Or use the following link:
>> https://lists.geant.org/sympa/sigrequest/cat-users
>
>
>--
>Stefan WINTER
>Ingenieur de Recherche
>Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de 
>la Recherche 2, avenue de l'Université
>L-4365 Esch-sur-Alzette
>
>Tel: +352 424409 1
>Fax: +352 422473
>
>PGP key updated to 4096 Bit RSA - I will encrypt all mails if the 
>recipient's key is known to me
>
>http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66