The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

> I do not get error message. just do not have permission to send invitations 
> anymore.

on exactly that page, there is the link "Unique Identifier - Click to
diplay". Can you do that and send the value you get in the pop-up to
eduroam OT directly?

Thank you,

Stefan Winter

> 
> See the attachment.
> 
> Thank you.
> 
> 
> 
> Anderson P. Almeida 
> Serviços e P&D - PoP-AL 
> RNP – Rede Nacional de Ensino e Pesquisa 
> http://pop-al.rnp.br 
> http://www.rnp.br 
> Fone:(82)3315-4999/Ramal:8201 
> 
> 
> 
> ----- Mensagem original -----
> De: "Miroslav Milinovic" <address@concealed>
> Para: "Anderson P. Almeida" <address@concealed>, "Stefan Winter" 
> <address@concealed>, address@concealed
> Cc: "cat-users" <address@concealed>, "Luciano Fernandes da Rocha" 
> <address@concealed>
> Enviadas: Terça-feira, 11 de Setembro de 2018 13:32:58
> Assunto: Re: [eduroam-ot] [[cat-users]] CAT - eduroam administrator
> 
> Anderson,
> 
> we see no problems on our side. Your e-id issued by idp.rnp.br is
> properly registered.
> 
> Which error message you're getting?
> 
> Regards
> 
> Miro
> 
> On 11-Sep-18 18:19, Anderson P. Almeida wrote:
>>
>> Hello,
>>
>>> My guess though is that you maybe changed something in your IdP
>>> configuration or software version. This sometimes leads to change in
>>> calculation of the opaque user identifier (persistent NameID, or
>>> eduPersonTargetedId). I've seen this happen often when people upgrade
>> >from Shibboleth 2.x to 3.x.    
>>> Did you or the IdP administrator work in this area recently?
>>
>> No, there was no recent change.
>> Another administrator also allowed in the same period. on CAT eduroam - 
>> "Luciano Fernandes da Rocha" <address@concealed>.
>>  
>>> If not, please contact eduroam OT directly so they can investigate the
>>> issue on the eduroam SP proxy side. 
>>
>> eduroam OT, can you help us solve this problem?
>> The realm.xml file: http://www.eduroam.br/general/realm.xml
>>
>>
>> Thank you all,
>>
>>
>> Anderson P. Almeida 
>> Serviços e P&D - PoP-AL 
>> RNP – Rede Nacional de Ensino e Pesquisa 
>> http://pop-al.rnp.br 
>> http://www.rnp.br 
>> Fone:(82)3315-4999/Ramal:8201 
>>
>>
>>
>> ----- Mensagem original -----
>> De: "Stefan Winter" <address@concealed>
>> Para: "Anderson P. Almeida" <address@concealed>, "cat-users" 
>> <address@concealed>
>> Enviadas: Quarta-feira, 5 de Setembro de 2018 3:02:34
>> Assunto: Re: [[cat-users]] CAT - eduroam administrator
>>
>> Hello,
>>
>>> my user received and then lost permission to send invitations to the 
>>> institutions to access the CAT Eduroam platfor
>>>
>>> It's interesting because I did not change the information in the 
>>> realm.xml file
>>>  (http://www.eduroam.br/general/realm.xml).
>>>
>>> Can you help me ?
>>
>> Permissions are handled by the eduroam SP Proxy, which is independent
>> from CAT. So my insight into why you lost NRO permissions there is limited.
>>
>> My guess though is that you maybe changed something in your IdP
>> configuration or software version. This sometimes leads to change in
>> calculation of the opaque user identifier (persistent NameID, or
>> eduPersonTargetedId). I've seen this happen often when people upgrade
>> from Shibboleth 2.x to 3.x.
>>
>> Did you or the IdP administrator work in this area recently?
>>
>> If not, please contact eduroam OT directly so they can investigate the
>> issue on the eduroam SP proxy side.
>>
>> Greetings,
>>
>> Stefan Winter
>>


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature