The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Martin Božič <martin.bozic AT arnes.si>]

Hi,

On Fri, Oct 05, 2018 at 09:52:51AM +0200, Stefan Winter wrote:
> Hello,
>
> > Understood. Is there any possibility to apply compatibility hotfixes for
> > admin API too while we prepare the rewrite on our end?
>
> I'm sorry, that is not possible. The UserAPI had only mild changes,
> mostly to remove a rather simple polymorphism in the parameters; a few
> lines of code added compatiblity to the v1 API.
>
> OTOH, the AdminAPI of version 1 was a terrible ad-hoc hack with really
> ugly code. I was singing and dancing while I deleted that large chunk of
> ugly code ;-) for a complete rewrite. There is no simple going back.
>
> Greetings,
>
> Stefan

I understand the sentiment :-) I figured out that you a beta instance
exists on https://cat-test.eduroam.org/beta/admin/API.php alas, it's
disabled: 

{ "result": "ERROR", "details": { "errorcode": 1, "description": "API is disabled 
in this instance of CAT" } }

Can you enable it so we can test our rewrite? Or is there any other
publicly available 2.0 instance to test against?

Regards,
Martin

> > Regards,
> > Martin
> >
> > > Greetings,
> > >
> > > Stefan Winter
> > >
> > > > Martin
> > > >
> > > > On Thu, Oct 04, 2018 at 08:46:48PM +0200, Tomasz Wolniewicz wrote:
> > > > > Hi,
> > > > >
> > > > >   due to problems like yours I have applied some hot-fixes to the
> > > > > API to
> > > > > make it accept the previous syntax. Can you confirm that your problems
> > > > > still exist?
> > > > >
> > > > > Tomasz
> > > > >
> > > > >
> > > > > W dniu 04.10.2018 o 19:48, Martin Božič pisze:
> > > > > > Hello!
> > > > > >
> > > > > > At Arnes we are having an urgent issue. We're in the middle of a
> > > > > > massive
> > > > > > Eduroam deployment in elementary and high schools and we're using
> > > > > > cat.eduroam.org API in our home grown self-service provisoning portal
> > > > > > which
> > > > > > orchestrates the FreeRADIUS, LDAP and DHCP and CAT portal and profiles
> > > > > > provisoning.
> > > > > >
> > > > > > It seems that that todays update of cat.eduroam.org API broke out
> > > > > > provisioning system. This is what we've found out so far:
> > > > > >
> > > > > > - [just for context] on 3.10.2018 we've resolved an internal issue
> > > > > > with   on provisioning system with a simple workaround, and deployed
> > > > > > on production
> > > > > >   in the late afternoon.
> > > > > > - the last succesful provisoning by our system was completed yesterday
> > > > > >   morning (3.10.2018)
> > > > > > - the error that we've got from debugging the self-service
> > > > > > provisioning
> > > > > >   portal is the following:
> > > > > >
> > > > > >    - API endpoint our portal is calling:
> > > > > > https://cat.eduroam.org/admin/API.php
> > > > > >    - debug from example payload (note that this is Python output which
> > > > > > is not
> > > > > >      in valid JSON format):
> > > > > >
> > > > > >      {
> > > > > >     'option[S90]': 'profile-api:eaptype',
> > > > > >     'option[S3]': 'eap:ca_url',
> > > > > >     'option[S1]': 'general:instname',
> > > > > >     'value[S1-0]': u'OSNOVNA \u0160OLA MUTA',
> > > > > >     'option[S5]': 'eap:server_name',
> > > > > >     'value[S69-3]': 'on',
> > > > > >     'option[S66]': 'profile:name',
> > > > > >     'value[S4-0]': '',
> > > > > >     'APIKEY': 'a******************f',
> > > > > >     'NEWINST_PRIMARYADMIN': '',
> > > > > >     'value[S4-lang]': 'C',
> > > > > >     'ACTION': 'NEWINST',
> > > > > >     'value[S90-0]': 1,
> > > > > >     'option[S70]': 'profile-api:realm',
> > > > > >     'option[S69]': 'profile:production',
> > > > > >     'value[S66-0]': u'OSNOVNA \u0160OLA MUTA',
> > > > > >     'option[S4]': 'support:email',
> > > > > >     'value[S3-0]':
> > > > > > 'ftp://ftp.arnes.si/software/eduroam/arnes_eduroam_ca_2012.pem',
> > > > > >     'option[S72]': 'profile-api:anon',
> > > > > >     'value[S67-1]': u'Profil za uporabnike organizacije: OSNOVNA
> > > > > > \u0160OLA MUTA',
> > > > > >     'option[S91]': 'profile-api:eaptype',
> > > > > >     'option[S67]': 'profile:description',
> > > > > >     'value[S70-0]': u'osmuta.si',
> > > > > >     'value[S5-0]': 'orle.arnes.si',
> > > > > >     'value[S71-3]': 'on',
> > > > > >     'value[S91-0]': 2,
> > > > > >     'value[S72-0]': u' AT osmuta.si',
> > > > > >     'value[S66-lang]': 'C',
> > > > > >     'option[S71]': 'profile-api:useanon',
> > > > > >     'value[S1-lang]': 'C'
> > > > > >      }
> > > > > >
> > > > > >    - response from cat.eduroam.org API:
> > > > > >
> > > > > >      {
> > > > > >     "result": "ERROR",
> > > > > >     "details": {
> > > > > >         "errorcode": 8,
> > > > > >         "description": "Unable to decode JSON POST data."
> > > > > >        }
> > > > > >      }
> > > > > >
> > > > > > - our testing environment where we use API from
> > > > > >   https://cat-test.eduroam.org/branch/admin/API.php is doing fine.
> > > > > >
> > > > > >
> > > > > > Unfortunately, since the hand-off from the original AAI/developer team
> > > > > > that
> > > > > > developed our portal somehow missed this detail on so strictly relying
> > > > > > on cat.eduroam.org API, we weren't aware and ready of the coming CAT
> > > > > > upgrade.
> > > > > > That's why we're now in a showstopper situation and unable to meet our
> > > > > > deployment deadline, thus jeopardizing the project. We can't afford to
> > > > > > workaround with excluding the CAT from our provisioning system because
> > > > > > it's actually a cornerstone of the rollout.
> > > > > >
> > > > > > We're asking for help or any information about API changes that could
> > > > > > help us restore the service as soon as possible.
> > > > > >
> > > > > > Regards,
> > > > > > Martin Božič
> > > > > > To unsubscribe, send this message:
> > > > > > mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> > > > > > Or use the following link:
> > > > > > https://lists.geant.org/sympa/sigrequest/cat-users
> > > > >
> > > > > -- 
> > > > > Tomasz Wolniewicz
> > > > >          
> > > > > twoln AT umk.pl
> > > > >         http://www.home.umk.pl/~twoln
> > > > >
> > > > > Uczelniane Centrum Informatyczne   Information&Communication
> > > > > Technology Centre
> > > > > Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
> > > > > pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
> > > > > tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.:
> > > > > +48-693-032-576
> > > > To unsubscribe, send this message:
> > > > mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> > > > Or use the following link:
> > > > https://lists.geant.org/sympa/sigrequest/cat-users
> > >
> > >
> > > -- 
> > > Stefan WINTER
> > > Ingenieur de Recherche
> > > Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
> > > de la Recherche
> > > 2, avenue de l'Université
> > > L-4365 Esch-sur-Alzette
> > >
> > > Tel: +352 424409 1
> > > Fax: +352 422473
> > >
> > > PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
> > > recipient's key is known to me
> > >
> > > http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
> >
> > > pub  4096R/8A39DC66 2013-09-06 Stefan Winter (RESTENA key 2013+)
> > > <stefan.winter AT restena.lu>
> > > sub  4096R/4EFEA2BE 2013-09-06
> >
> >
> >
> >
> > To unsubscribe, send this message:
> > mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> > Or use the following link:
> > https://lists.geant.org/sympa/sigrequest/cat-users
>
>
> --
> Stefan WINTER
> Ingenieur de Recherche
> Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
> de la Recherche
> 2, avenue de l'Université
> L-4365 Esch-sur-Alzette
>
> Tel: +352 424409 1
> Fax: +352 422473
>
> PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
> recipient's key is known to me
>
> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

> pub  4096R/8A39DC66 2013-09-06 Stefan Winter (RESTENA key 2013+) 
> <stefan.winter AT restena.lu>
> sub  4096R/4EFEA2BE 2013-09-06