The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

TL;DR:

after a while of debugging, we found the root cause of the issue and
have fixed it. Search results should now be deterministic and complete
again. It was an SQL problem.

Long version:

The root cause was not in the Android app. Instead, the API call which
generated the result list was at one point using an SQL language
construct with an upper limit of the returned data size (GROUP_CONCAT).

As CAT grew with more IdPs and profiles, at some point we hit the
ceiling and there was a premature end of the data in the returned data
set that is sent to the app, with some subsequent collateral parsing
problems in the app.

Since SQL result ordering is not guaranteed to be deterministic, some
search results occasionally made the cut but occasionally not.

The fix is not to use GROUP_CONCAT any more, and use other SQL language
constructs without such upper limits. This is now live on
cat.eduroam.org as a hotfix. A later update to the eduroam CAT Android
app will also harden the app on the receiving side against this error.

We apologize for the inconvenience caused!

Greetings,

Stefan Winter

Am 01.02.2017 um 09:34 schrieb Georgios Ioannou:
> Hello,
> 
>  
> 
> My name is George and I am the eduroam CAT admin for my institution
> (International Hellenic University, Greece)
> 
>  
> 
> I have spotted an issue with the eduroam CAT Android app.
> 
> The issue’s appearance is somewhat stochastic but I can say that 9/10
> times that it happens, it would be on a Samsung mobile device (either
> mobile or tablet).
> 
>  
> 
> I install the app and try to configure the connection settings.
> 
> When I go to the 2^nd tab of the App (/Profiles/)//my institution does
> not appear neither at the /Nearby configs /nor through /Manual search/.
> 
> Screenshots attached.
> 
>  
> 
> I have given a temporary (unwanted) workaround to users, to configure
> the connection manually using the Android snap-in, although this is not
> good enough in terms of security. That leaves me with two questions.
> 
>  
> 
>  1. Is there a workaround with the Android app? Is it a known issue?
>  2. Assuming that the issue with the Android app persists, can I
>     instruct the users to download the certificate & settings through
>     the website and import the settings manually?
> 
>  
> 
> Thanks in advance,
> 
>  
> 
> cid:image001.jpg AT 01D00E47.71533610 <http://www.ihu.edu.gr/>
> 
>       
> 
> *Georgios Ioannou*
> 
> Dept. of Information & Telecommunication Systems & Services,**
> 
> International Hellenic University
> 
> T +30-2310-807512
> 
> g.ioannou AT ihu.edu.gr
>  
> <mailto:g.ioannou AT ihu.edu.gr>
> 
>  
> 
>  
> 
>  
> 


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature