The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

wonderful. You have just instructed your user to turn off all security
and send his password in cleartext to random servers on the internet.

Luckily, he followed proper instructions earlier and hopefully does not
listen to your MITM invitation by now.

Greetings,

Stefan Winter

Am 10.11.2016 um 11:11 schrieb GESTIÓN WIFI:
> Hello Miguel and Stefan.
> 
> Sorry for the delay in answering, I was out of the office these days.
> 
> Please note that for Android mobile devices, it is not necessary to install 
> certificates for connection to eduroam since Android do not verify such 
> certificates; Just change some parameters in the configuration of your 
> mobile device so you can connect to eduroam for it you have to do the 
> following:
> 
> • Go to the settings of your mobile device and enter your WiFi interface, 
> there you will see all wireless networks that are working.
> • Select the Wi-Fi network "eduroam" and keep it pressed for a few seconds 
> until you get the option "Manage network settings" or search for this 
> parameter inside your device to make manual modifications to this network.
> • Once inside "Manage network settings" you will observe the following 
> parameters which you have to check or modify by selecting them manually:
> • EAP Method: TTLS.
> • Phase 2 Authentication: PAP
> • CA certificate: Not specified (no certificate is required).
> • Identity: You put your SCIC intranet user 
> (dni AT csic.es)
> • Anonymous identity: 
> anonymous AT csic.es
>  (write this)
> • Password: xxxx (Your CSIC intranet access password)
> • You save these changes and then disconnect the Wi-Fi interface and 
> reconnect it and the device should connect to eduroam and be able to 
> navigate.
> 
> I hope this changes help you and you can connect to eduroam from your 
> mobile.
> 
> Regards
> 
> 
> Miguel Navarro Jesús
> Unidad de Comunicaciones y Seguridad, servicio wifi.
> SATEC, S.A. (Sistemas Avanzados de Tecnología S.A)
> wifi AT csic.es
> Telf: 915680238 / Ext: 990238
> 
> 
> 
> -----Mensaje original-----
> De: Miguel Angel Lopez Valverde 
> [mailto:valverde AT iaa.es]
>  
> Enviado el: lunes, 07 de noviembre de 2016 11:30
> Para: 
> cat-users AT lists.geant.org;
>  
> wifi AT csic.es
> Asunto: Error opening file when trying to install profile in Android 6.0
> 
> In the process of installing eduroam for access from my mobile (Samsung 
> Note 4, Android 6.0) I reached the point to download the installer for my 
> institution (CSIC, Spain). I tried the two options, downloading it with 
> Firefox and with the android-cat app (previously installed).
> This first one download it. Then I tried to install it, which took me into 
> a given installation page of the android-cat app. The second one directly 
> did the same. In that page I am invited to enter user id and password, but 
> there are some info and I observe two red crosses or warnings:
>    No CA certificate found
>    Server subject Match missing
> No surprisingly the installation fails.
> Shall I install previously a CA certificate?
> Where and how? Sorry I am not/do not want to be an expert in Android.
> 


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature