The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

> Also we do not define the authenication server in the manual config but the
> CAT tool requires this before it will build the profile.
> 
> Anyone had these problems before.

That latter one is not a problem, it's a feature: pinning the server
name is a mandatory part of eduroam security, particularly when using a
publicly available commercial root CA.

If you do not ping the authentication server name, your users can be
MITMed. We do not support such a mode of operation on purpose.

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature