The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

> Understood. Is there any possibility to apply compatibility hotfixes for
> admin API too while we prepare the rewrite on our end?

I'm sorry, that is not possible. The UserAPI had only mild changes,
mostly to remove a rather simple polymorphism in the parameters; a few
lines of code added compatiblity to the v1 API.

OTOH, the AdminAPI of version 1 was a terrible ad-hoc hack with really
ugly code. I was singing and dancing while I deleted that large chunk of
ugly code ;-) for a complete rewrite. There is no simple going back.

Greetings,

Stefan

> 
> Regards,
> Martin
> 
>>
>> Greetings,
>>
>> Stefan Winter
>>
>>>
>>> Martin
>>>
>>> On Thu, Oct 04, 2018 at 08:46:48PM +0200, Tomasz Wolniewicz wrote:
>>>> Hi,
>>>>
>>>>   due to problems like yours I have applied some hot-fixes to the
>>>> API to
>>>> make it accept the previous syntax. Can you confirm that your problems
>>>> still exist?
>>>>
>>>> Tomasz
>>>>
>>>>
>>>> W dniu 04.10.2018 o 19:48, Martin Božič pisze:
>>>>> Hello!
>>>>>
>>>>> At Arnes we are having an urgent issue. We're in the middle of a
>>>>> massive
>>>>> Eduroam deployment in elementary and high schools and we're using
>>>>> cat.eduroam.org API in our home grown self-service provisoning portal
>>>>> which
>>>>> orchestrates the FreeRADIUS, LDAP and DHCP and CAT portal and profiles
>>>>> provisoning.
>>>>>
>>>>> It seems that that todays update of cat.eduroam.org API broke out
>>>>> provisioning system. This is what we've found out so far:
>>>>>
>>>>> - [just for context] on 3.10.2018 we've resolved an internal issue
>>>>> with   on provisioning system with a simple workaround, and deployed
>>>>> on production
>>>>>   in the late afternoon.
>>>>> - the last succesful provisoning by our system was completed yesterday
>>>>>   morning (3.10.2018)
>>>>> - the error that we've got from debugging the self-service
>>>>> provisioning
>>>>>   portal is the following:
>>>>>
>>>>>    - API endpoint our portal is calling:
>>>>> https://cat.eduroam.org/admin/API.php
>>>>>    - debug from example payload (note that this is Python output which
>>>>> is not
>>>>>      in valid JSON format):
>>>>>
>>>>>      {
>>>>>     'option[S90]': 'profile-api:eaptype',
>>>>>     'option[S3]': 'eap:ca_url',
>>>>>     'option[S1]': 'general:instname',
>>>>>     'value[S1-0]': u'OSNOVNA \u0160OLA MUTA',
>>>>>     'option[S5]': 'eap:server_name',
>>>>>     'value[S69-3]': 'on',
>>>>>     'option[S66]': 'profile:name',
>>>>>     'value[S4-0]': '',
>>>>>     'APIKEY': 'a******************f',
>>>>>     'NEWINST_PRIMARYADMIN': '',
>>>>>     'value[S4-lang]': 'C',
>>>>>     'ACTION': 'NEWINST',
>>>>>     'value[S90-0]': 1,
>>>>>     'option[S70]': 'profile-api:realm',
>>>>>     'option[S69]': 'profile:production',
>>>>>     'value[S66-0]': u'OSNOVNA \u0160OLA MUTA',
>>>>>     'option[S4]': 'support:email',
>>>>>     'value[S3-0]':
>>>>> 'ftp://ftp.arnes.si/software/eduroam/arnes_eduroam_ca_2012.pem',
>>>>>     'option[S72]': 'profile-api:anon',
>>>>>     'value[S67-1]': u'Profil za uporabnike organizacije: OSNOVNA
>>>>> \u0160OLA MUTA',
>>>>>     'option[S91]': 'profile-api:eaptype',
>>>>>     'option[S67]': 'profile:description',
>>>>>     'value[S70-0]': u'osmuta.si',
>>>>>     'value[S5-0]': 'orle.arnes.si',
>>>>>     'value[S71-3]': 'on',
>>>>>     'value[S91-0]': 2,
>>>>>     'value[S72-0]': address@concealed',
>>>>>     'value[S66-lang]': 'C',
>>>>>     'option[S71]': 'profile-api:useanon',
>>>>>     'value[S1-lang]': 'C'
>>>>>      }
>>>>>
>>>>>    - response from cat.eduroam.org API:
>>>>>
>>>>>      {
>>>>>     "result": "ERROR",
>>>>>     "details": {
>>>>>         "errorcode": 8,
>>>>>         "description": "Unable to decode JSON POST data."
>>>>>        }
>>>>>      }
>>>>>
>>>>> - our testing environment where we use API from
>>>>>   https://cat-test.eduroam.org/branch/admin/API.php is doing fine.
>>>>>
>>>>>
>>>>> Unfortunately, since the hand-off from the original AAI/developer team
>>>>> that
>>>>> developed our portal somehow missed this detail on so strictly relying
>>>>> on cat.eduroam.org API, we weren't aware and ready of the coming CAT
>>>>> upgrade.
>>>>> That's why we're now in a showstopper situation and unable to meet our
>>>>> deployment deadline, thus jeopardizing the project. We can't afford to
>>>>> workaround with excluding the CAT from our provisioning system because
>>>>> it's actually a cornerstone of the rollout.
>>>>>
>>>>> We're asking for help or any information about API changes that could
>>>>> help us restore the service as soon as possible.
>>>>>
>>>>> Regards,
>>>>> Martin Božič
>>>>> To unsubscribe, send this message:
>>>>> mailto:address@concealed?subject=unsubscribe%20cat-users
>>>>> Or use the following link:
>>>>> https://lists.geant.org/sympa/sigrequest/cat-users
>>>>
>>>> -- 
>>>> Tomasz Wolniewicz
>>>>          address@concealed        http://www.home.umk.pl/~twoln
>>>>
>>>> Uczelniane Centrum Informatyczne   Information&Communication
>>>> Technology Centre
>>>> Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
>>>> pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
>>>> tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.:
>>>> +48-693-032-576
>>>>
>>> To unsubscribe, send this message:
>>> mailto:address@concealed?subject=unsubscribe%20cat-users
>>> Or use the following link:
>>> https://lists.geant.org/sympa/sigrequest/cat-users
>>
>>
>> -- 
>> Stefan WINTER
>> Ingenieur de Recherche
>> Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
>> de la Recherche
>> 2, avenue de l'Université
>> L-4365 Esch-sur-Alzette
>>
>> Tel: +352 424409 1
>> Fax: +352 422473
>>
>> PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
>> recipient's key is known to me
>>
>> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
> 
>> pub  4096R/8A39DC66 2013-09-06 Stefan Winter (RESTENA key 2013+)
>> <address@concealed>
>> sub  4096R/4EFEA2BE 2013-09-06
> 
> 
> 
> 
> To unsubscribe, send this message:
> mailto:address@concealed?subject=unsubscribe%20cat-users
> Or use the following link:
> https://lists.geant.org/sympa/sigrequest/cat-users


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature