The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

> I have tested again in another environment and still get the same results.
> 
> Is there anyone who can confirm that the deactivate SSID is not working
> because of OS X ignoring the key from the config?
> 
> And does anyone have a clue where the correct place to submit it as a
> bug report to Apple?

The only way I know of is bugreport.apple.com . Some of my own reports
were actually acted upon (which is more than I can say regarding
Android! ;-) ).

FWIW, I can create a modified mobileconfig on our testing platform which
adds the "Disabled" key to the file.

I don't know if this is going to have any effect; just by seeing it
after-the-fact in the current config on the machine does not mean the
same key is also accepted when it comes in from outside. But it is sure
worth a try.

I'll contact you off-list when a test case is ready.

Greetings,

Stefan

> 
>  
> 
> Br,
> 
> Thomas
> 
>  
> 
> *From: *Thomas Andersen 
> <than AT itu.dk>
> *Date: *Monday 20 June 2016 at 10:53
> *To: *Stefan Winter 
> <stefan.winter AT restena.lu>,
> "cat-users AT lists.geant.org"
>  
> <cat-users AT lists.geant.org>
> *Subject: *Re: [[cat-users]] Remove/disable SSID on OS X not working
> 
>  
> 
> I have investigated a bit more on this matter and found something.
> 
>  
> 
> As you can see here, it is set to automatically join the network.
> 
>  
> 
>  
> 
> However, when disabling this and looking at the file
> /Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist
> 
> I found that one key had been changed.
> 
>  
> 
>                                                 <key>Disabled</key>
> 
>                                                 <true/>
> 
>  
> 
> Before it was
> 
>                                                 <key>Disabled</key>
> 
>                                                 <false/>
> 
>  
> 
> Hope this helps.
> 
>  
> 
>  
> 
> Br,
> 
> Thomas
> 
>  
> 
> *From: *Stefan Winter 
> <stefan.winter AT restena.lu>
> *Date: *Tuesday 14 June 2016 at 14:20
> *To: 
> *<cat-users AT lists.geant.org>,
>  Thomas Andersen 
> <than AT itu.dk>
> *Subject: *Re: [[cat-users]] Remove/disable SSID on OS X not working
> 
>  
> 
> Hello,
> 
> okay, good to see that iOS actually does what the spec states.
> 
> I'm not sure how I can help you here any more; the config file we
> generate is apparently as good as can be.
> 
> The next step would be to verify this in a second setup, and at some
> point open a bug report with Apple.
> 
> I can imagine that for the time being, not including the "disabled" SSID
> at all is actually better; that way it doesn't get introduced to users
> who didn't know about it before.
> 
> That would mean a code change that removes the functionality on OS X
> (but not iOS).
> 
> That's fairly trivial to do, but not this week, as I'm at a conference.
> But I would also not want to take such a drastic step until someone else
> confirms this in a second setup?
> 
> Greetings,
> 
> Stefan Winter
> 
> On 14.06.16 13:26, Thomas Andersen wrote:
> 
>     Hi Stefan.
> 
>      
> 
>     I have found a OS X 10.10.5 (yosemite). I see the same problem here.
> 
>     I have also tested with an iPhone. It does not connect to the SSID.
> 
>      
> 
>     This means I have different behavior on OSX and iOS.
> 
>      
> 
>      
> 
>     <dict>
> 
>                     <key>AutoJoin</key>
> 
>                     <false/>
> 
>                     <key>EncryptionType</key>
> 
>                     <string>None</string>
> 
>                     <key>HIDDEN_NETWORK</key>
> 
>                     <false/>
> 
>                     <key>IsHotspot</key>
> 
>                     <false/>
> 
>                     <key>PayloadDescription</key>
> 
>                     <string>This SSID should not be used after
>     bootstrapping eduroam</string>
> 
>                     <key>PayloadDisplayName</key>
> 
>                     <string>Disabled WiFi network</string>
> 
>                     <key>PayloadIdentifier</key>
> 
>                    
>     
> <string>org.1x-config.eduroam.dk.it_university_of_copenhagen.all_users.en_GB.wifi.disabled.0</string>
> 
>                     <key>PayloadType</key>
> 
>                     <string>com.apple.wifi.managed</string>
> 
>                     <key>PayloadUUID</key>
> 
>                     <string>b4dc994b-d171-f687-ac2a-07405d590de6</string>
> 
>                     <key>PayloadVersion</key>
> 
>                     <real>1</real><key>ProxyType</key>
> 
>                     <string>Auto</string><key>SSID_STR</key>
> 
>                     <string>ITU-guest</string>
> 
>     </dict>
> 
>      
> 
>     Br,
> 
>     Thomas
> 
>      
> 
>     *From: *Stefan Winter 
> <stefan.winter AT restena.lu>
>     
> <mailto:stefan.winter AT restena.lu>
>     *Date: *Tuesday 14 June 2016 at 12:14
>     *To: *Thomas Andersen 
> <than AT itu.dk>
>  
> <mailto:than AT itu.dk>,
>     
> "'cat-users AT lists.geant.org'"
>  
> <mailto:'cat-users AT lists.geant.org'>
>     
> <cat-users AT lists.geant.org>
>  
> <mailto:cat-users AT lists.geant.org>
>     *Subject: *Re: [[cat-users]] Remove/disable SSID on OS X not working
> 
>      
> 
>     Hello,
> 
>         I have done some testing and can now confirm that disable SSID
>         on OS X, is not working as intended.
> 
>          
> 
>         Have anyone else had this problem?
> 
>          
> 
>          
> 
>         *Test steps taken:*
> 
>         Fresh installed OS X El capitan.
> 
>         CAT downloaded and installed.
> 
>         It joins a eduroam instantly.
> 
>         Confirmed that eduroam and ITU-guest was in the SSID list.
> 
>         I then left campus and made a SSID called ITU-guest on my phone
>         as a hotspot.
> 
>         When I turned on the laptop, it joined ITU-guest.
> 
>         Shut down laptop and returned to campus.
> 
>         When starting the laptop again, it joins ITU-guest.
> 
> 
>     Hm, this is indeed not how things are supposed to work. The disabled
>     SSID gets packed in the installer with the "AutoJoin = FALSE"
>     property, meaning no device should connect unless the network is
>     manually clicked upon. If you look at the installer profile, this is
>     the snippet to look for:
> 
>             <key>AutoJoin</key>
>             <false/>
> 
>     The catch is: the files for iOS and for OS X are identical. If the
>     disabling of SSIDs works on iOS (does it?) then there is no
>     explanation for a different behaviour on OS X other than a bug in
>     the OS.
> 
>     Can you verify if the disabling works as intended on iOS?
> 
>     Is this specific to El Capitan, or did you also test other versions
>     of OS X?
> 
>     At least Apple's doc is clear that it should work like this across
>     all OS X versions:
> 
>     "
> 
>     Optional. Default |true|. If |true|, the network is auto-joined. If
>     |false|, the user has to tap the network name to join it.
> 
>     *Availability:* Available in iOS 5.0 and later and in all versions
>     of OS X."
> 
> 
>     Greetings,
> 
>     Stefan Winter
> 
> 
> 
> 
>          
> 
>          
> 
>         -- 
> 
>         Med venlig hilsen / With best regards
> 
>         Thomas Andersen
> 
>          
> 
>         Network Architect
> 
>          
> 
>         IT University of Copenhagen
> 
>         Rued Langgaards Vej 7
> 
>         2300 København S
> 
>          
> 
>         Phone: +45 72185249
> 
>          
> 
>         
> ____________________________________________________________________________
> 
>          
> 
>         **NEVER DISCLOSE YOUR PASSWORD OR SHOE SIZE - NOT EVEN TO YOUR
>         DENTIST**
> 
>         To unsubscribe, send this message:
>         
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>         Or use the following link:
>         https://lists.geant.org/sympa/sigrequest/cat-users
> 
>      
> 
>     To unsubscribe, send this message:
>     
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>     Or use the following link:
>     https://lists.geant.org/sympa/sigrequest/cat-users
> 
>  
> 
> To unsubscribe, send this message:
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link:
> https://lists.geant.org/sympa/sigrequest/cat-users


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature