The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

> We are in the testing phase of implementing eduroam. I have setup eduroam 
> CAT
> with our settings and so far the CAT tool appears to work fine with Windows,
> OSX, and Apple mobile devices. When I test on Android 6 and 7 I'm having an
> issue. Android 6 shows "Authentication issue" but when you change CA
> certificate to unspecified it connects. Android 7 shows "incorrect password"
> but when you change CA certificate to "Use System Certificates" and set 
> domain
> to the school domain it connects. Am I missing something I need to add in 
> the
> CAT Profile? Thanks.

Android has an ample selection of shortcomings to choose from :-)

Do you by any chance have a setup with an intermediate CA in addition to
the root CA?

And you have uploaded that intermediate CA into the CAT profile?

That's great and makes all the operating systems you listed above work.

Except for Android: it is not possible to install the intermediate CA
together with the root there.

For Android, you have to make sure that your RADIUS server sends the
intermediate CA together with the server cert during the EAP
conversation; otherwise Android cannot create the chain up to the root CA.

There should be a warning in the realm check feature about intermediate
CAs only being in configuration, but not in the EAP conversation if that
is the cause of the problem. Do you see that warning?

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature