The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

> my user received and then lost permission to send invitations to the 
> institutions to access the CAT Eduroam platfor
> 
> It's interesting because I did not change the information in the realm.xml 
> file
>  (http://www.eduroam.br/general/realm.xml).
> 
> Can you help me ?

Permissions are handled by the eduroam SP Proxy, which is independent
from CAT. So my insight into why you lost NRO permissions there is limited.

My guess though is that you maybe changed something in your IdP
configuration or software version. This sometimes leads to change in
calculation of the opaque user identifier (persistent NameID, or
eduPersonTargetedId). I've seen this happen often when people upgrade
from Shibboleth 2.x to 3.x.

Did you or the IdP administrator work in this area recently?

If not, please contact eduroam OT directly so they can investigate the
issue on the eduroam SP proxy side.

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature