The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Thomas Andersen <than AT itu.dk>]

Hi Stefan,

 

I also suspect that it is an OS issue.

However, i was thinking about a possible workaround.

Would it work if EncryptionType is changed to a PSK method and a random generated key?

I’m unable to forsee if that could just give some other unwanted behavior.

 

 

Br,

Thomas

 

From: Stefan Winter <stefan.winter AT restena.lu>
Date: Tuesday 14 June 2016 at 14:20
To: <cat-users AT lists.geant.org>, Thomas Andersen <than AT itu.dk>
Subject: Re: [[cat-users]] Remove/disable SSID on OS X not working

 

Hello,

okay, good to see that iOS actually does what the spec states.

I'm not sure how I can help you here any more; the config file we generate is apparently as good as can be.

The next step would be to verify this in a second setup, and at some point open a bug report with Apple.

I can imagine that for the time being, not including the "disabled" SSID at all is actually better; that way it doesn't get introduced to users who didn't know about it before.

That would mean a code change that removes the functionality on OS X (but not iOS).

That's fairly trivial to do, but not this week, as I'm at a conference. But I would also not want to take such a drastic step until someone else confirms this in a second setup?

Greetings,

Stefan Winter

On 14.06.16 13:26, Thomas Andersen wrote:

Hi Stefan.

 

I have found a OS X 10.10.5 (yosemite). I see the same problem here.

I have also tested with an iPhone. It does not connect to the SSID.

 

This means I have different behavior on OSX and iOS.

 

 

<dict>

                <key>AutoJoin</key>

                <false/>

                <key>EncryptionType</key>

                <string>None</string>

                <key>HIDDEN_NETWORK</key>

                <false/>

                <key>IsHotspot</key>

                <false/>

                <key>PayloadDescription</key>

                <string>This SSID should not be used after bootstrapping eduroam</string>

                <key>PayloadDisplayName</key>

                <string>Disabled WiFi network</string>

                <key>PayloadIdentifier</key>

                <string>org.1x-config.eduroam.dk.it_university_of_copenhagen.all_users.en_GB.wifi.disabled.0</string>

                <key>PayloadType</key>

                <string>com.apple.wifi.managed</string>

                <key>PayloadUUID</key>

                <string>b4dc994b-d171-f687-ac2a-07405d590de6</string>

                <key>PayloadVersion</key>

                <real>1</real><key>ProxyType</key>

                <string>Auto</string><key>SSID_STR</key>

                <string>ITU-guest</string>

</dict>

 

Br,

Thomas

 

From: Stefan Winter <stefan.winter AT restena.lu>
Date: Tuesday 14 June 2016 at 12:14
To: Thomas Andersen <than AT itu.dk>, "'cat-users AT lists.geant.org'" <cat-users AT lists.geant.org>
Subject: Re: [[cat-users]] Remove/disable SSID on OS X not working

 

Hello,

I have done some testing and can now confirm that disable SSID on OS X, is not working as intended.

 

Have anyone else had this problem?

 

 

Test steps taken:

Fresh installed OS X El capitan.

CAT downloaded and installed.

It joins a eduroam instantly.

Confirmed that eduroam and ITU-guest was in the SSID list.

I then left campus and made a SSID called ITU-guest on my phone as a hotspot.

When I turned on the laptop, it joined ITU-guest.

Shut down laptop and returned to campus.

When starting the laptop again, it joins ITU-guest.

Hm, this is indeed not how things are supposed to work. The disabled SSID gets packed in the installer with the "AutoJoin = FALSE" property, meaning no device should connect unless the network is manually clicked upon. If you look at the installer profile, this is the snippet to look for:

        <key>AutoJoin</key>
        <false/>

The catch is: the files for iOS and for OS X are identical. If the disabling of SSIDs works on iOS (does it?) then there is no explanation for a different behaviour on OS X other than a bug in the OS.

Can you verify if the disabling works as intended on iOS?

Is this specific to El Capitan, or did you also test other versions of OS X?

At least Apple's doc is clear that it should work like this across all OS X versions:

"

Optional. Default true. If true, the network is auto-joined. If false, the user has to tap the network name to join it.

Availability: Available in iOS 5.0 and later and in all versions of OS X."

Greetings,

Stefan Winter

 

 

-- 

Med venlig hilsen / With best regards

Thomas Andersen

 

Network Architect

 

IT University of Copenhagen

Rued Langgaards Vej 7

2300 København S

 

Phone: +45 72185249

 

____________________________________________________________________________

 

**NEVER DISCLOSE YOUR PASSWORD OR SHOE SIZE - NOT EVEN TO YOUR DENTIST**

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

 

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users