The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Jethro R Binks <jethro.binks AT strath.ac.uk>]

(Slight hijack of thread, and apologies if it is considered outwith the 
remit of this list but I welcome the views of this community on these 
issues that I think many of us face).

It has been an interesting time.  Just a few weeks into the academic year, 
not only have we had reported problems with iOS 11 (but maybe things got 
better by the time of 11.0.3?), we've also had issues reported with 
clients with Windows 10 Creators Update too.

There were some earlier reports that mainly EAP-TTLS (or was it EAP-TLS?) 
was affected, but I saw this from the Cloudpath people earlier on another 
list which suggests there may be PEAP bugs too (I don't know what these 
"workarounds" are):

""
From: Richard Nedwich 
<Rich.Nedwich AT BROCADE.COM>
To: 
WIRELESS-LAN AT LISTSERV.EDUCAUSE.EDU

...

I just wanted to convey some information from our engineering team.

Thanks,
Rich

Windows 10 PEAP/TTLS Issues:  In Windows 10 Creators Update, Microsoft
introduced new bugs for PEAP and TTLS.  While it took a while to find
work-arounds for these issues, we were able to publish work-arounds.
Microsoft has chosen to not fix these issues in the Fall Update and we’ll
publish a new wizard to provide the same work-around to the Fall Update
before it is publicly released.  Based on this experience, it appears that
Microsoft is reducing/removing its testing support for password-based 
Wi-Fi.
""

Anyone know more?

I thought we'd got to a point where "modern" clients behaved pretty well 
and 802.1X support was close to pretty routine and comoditised, but it 
seems client issues still plague us and we haven't reached that panacea 
yet.  Is 802.1X still a niche technology in most of the world?  Is it used 
much in corporate networks, or are they still stuck with PSKs and portals?  
Is 802.1X support just not exercised enough in clients so it gets poorer 
testing and attention?

I suppose we'll just have to continue to tell our helpdesk functions that 
there are still problems that we can't do very much about for these 
platforms if a further update/patch check doesn't fix ... but of course 
that looks bad on us.  As far as the end user is concerned "our rubbish 
eduroam" doesn't work but their home wifi is just fine, so it can't be 
their device.

I have mixed views about the observation: "it appears that Microsoft is 
reducing/removing its testing support for password-based Wi-Fi."  While 
I've never been entirely comfortable with password-based wifi, 
particularly where it is not a wireless-specific password/token, neither 
do I presently have resource to go about creating what's needed for 
alternatives, like a wifi-specific service password or an infrastructure 
to issue TLS certs for clients.  Are there any hints of an industry 
(MS/Apple/Andoid) push to deprecate using passwords and use certs instead?

Jethro.


.  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .
Jethro R Binks, Network Manager,
Information Services Directorate, University Of Strathclyde, Glasgow, UK

The University of Strathclyde is a charitable body, registered in
Scotland, number SC015263.


On Thu, 12 Oct 2017, Stefan Winter wrote:

> Hello,
> 
> this seems to be a more general problem than just with CAT. I see a
> number of references to this on the net, all sharing the advice: you
> need to remove the network and any configuration profiles relating to
> it, and start the profile import from scratch.
> 
> First-page hits about "iOS 11 eduroam":
> 
> https://discussions.apple.com/thread/8073649?start=0&tstart=0
> 
> http://help.unc.edu/help/urgent-information-regarding-eduroam-onboarding-with-ios-11/
> 
> https://bulletins.it.ubc.ca/archives/30945
> 
> Two of these links are sourced from info of two different commercial
> competitors to CAT. It's reassuring that we're doing things as good as
> anyone else; nothing particular about CAT here.
> 
> I realise that the paragraph above doesn't help take the helpdesk load
> off of you. Sorry about that - I'm afraid you'll have to throw your
> blame in the general direction of Cupertino... :-(
> 
> Greetings,
> 
> Stefan Winter
> 
> Am 12.10.2017 um 15:58 schrieb Sylvie Petitgand:
> > We have the same problem. for the moment without solution.
> > 
> > *www.chimie-paristech.fr <http://www.chimie-paristech.fr>*
> > *Hotline : http://sos.chimie-paristech.fr<http://sos.chimie-paristech.fr>*
> > *Wiki DSI : https://wiki.chimie-paristech.fr*
> > 
> > ------------------------------------------------------------------------
> > *De: *"Angel, Judy" 
> > <admyet4 AT herts.ac.uk>
> > *À: 
> > *cat-users AT lists.geant.org
> > *Envoyé: *Jeudi 12 Octobre 2017 15:54:27
> > *Objet: *RE: [[cat-users]] Eduroam iOS 11
> > 
> > We still see a significant no of iOS 11 devices that either have issues
> > connecting to eduroam or connect but  frequently drop the connection.
> > 
> > Do other sites experience the same issue? Are they any suggested fixes?
> > 
> > Thanks
> > Judy Angel
> > University of Hertfordshire  
> > 
> > -----Original Message-----
> > From: Pol Sanz 
> > [mailto:polsanz93 AT gmail.com]
> > Sent: 20 September 2017 11:35
> > To: 
> > cat-users AT lists.geant.org
> > Subject: [[cat-users]] Eduroam iOS 11
> > 
> > Dear Mr./Mrs.
> > I have recently update my iPad to iOS 11 and since then I can no longer
> > connect to the network “eduroam” as I usually did. I supose it is a
> > software problem. I would be grateful to recieve any kind of information
> > to solve this problem.
> > 
> > Thank you in advance.
> > 
> > Pol Sanz
> > 
> > 
> > To unsubscribe, send this message:
> > mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> > Or use the following link:
> > https://lists.geant.org/sympa/sigrequest/cat-users
> > To unsubscribe, send this message:
> > mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> > Or use the following link:
> > https://lists.geant.org/sympa/sigrequest/cat-users
> > To unsubscribe, send this message:
> > mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> > Or use the following link:
> > https://lists.geant.org/sympa/sigrequest/cat-users
> 
> 
> -- 
> Stefan WINTER
> Ingenieur de Recherche
> Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
> de la Recherche
> 2, avenue de l'Université
> L-4365 Esch-sur-Alzette
> 
> Tel: +352 424409 1
> Fax: +352 422473
> 
> PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
> recipient's key is known to me
> 
> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
>