The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

the symptoms you describe are with a high probability because your server certificate is not acceptable to Mac OS. It will then fail the proper CA chain validation (which is what we setup with the CAT installers).
When you write "it works if done manually" then this probably means OS X does NOT perform server cert checks and displays the "Do you trust?" dialog (can you confirm that?). This is an insecure mode of deployment.

Can you go to the CAT admin interface and run the "check realm reachability" tests? They will tell you if the server cert matches OS X's expectations.

Greetings,

Stefan Winter

On 13.06.16 15:37, Markus, Joe wrote:

 

We recently setup this service and have been migrating our student base from our internal SSID to Eduroam.

 

However we have experienced the following issues:

 

1)      Macbook Pro V10.7 & upwards are unable to successfully authenticate  when deploying the cat eduroam profile although it installs correctly (with tested credentials):

 

See Attached Screen Captures.

 

 

2)      If we remove the profile and manually setup a macbook pro it works fine. However the original attempts will suspend the user account on our RASDIUS server ISEV1.3 patch 6. We will have to turn off suppression while we are troubleshooting.  

 

 

This issue has halted our roll out during the summer break so please let us know if we are the only ones with these symptoms.

 

Regards

 

 

Joe Markus | WiFi Team Lead | IT | King's College | Strand London WC2R 2LS

Mobile: 07487 601921

 

 

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature