The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hi,

> I understand the sentiment :-) I figured out that you a beta instance
> exists on https://cat-test.eduroam.org/beta/admin/API.php alas, it's
> disabled:
> { "result": "ERROR", "details": { "errorcode": 1, "description": "API is
> disabled in this instance of CAT" } }
> 
> Can you enable it so we can test our rewrite? Or is there any other
> publicly available 2.0 instance to test against?

We can always enable the API on that instance, sure.

I have enabled a (testing) API key for SI on that instance and will send
you that API key off-list.

Greetings,

Stefan

> 
> Regards,
> Martin
> 
>>
>>>
>>> Regards,
>>> Martin
>>>
>>>>
>>>> Greetings,
>>>>
>>>> Stefan Winter
>>>>
>>>>>
>>>>> Martin
>>>>>
>>>>> On Thu, Oct 04, 2018 at 08:46:48PM +0200, Tomasz Wolniewicz wrote:
>>>>>> Hi,
>>>>>>
>>>>>>   due to problems like yours I have applied some hot-fixes to the
>>>>>> API to
>>>>>> make it accept the previous syntax. Can you confirm that your
>>>>>> problems
>>>>>> still exist?
>>>>>>
>>>>>> Tomasz
>>>>>>
>>>>>>
>>>>>> W dniu 04.10.2018 o 19:48, Martin Božič pisze:
>>>>>>> Hello!
>>>>>>>
>>>>>>> At Arnes we are having an urgent issue. We're in the middle of a
>>>>>>> massive
>>>>>>> Eduroam deployment in elementary and high schools and we're using
>>>>>>> cat.eduroam.org API in our home grown self-service provisoning
>>>>>>> portal
>>>>>>> which
>>>>>>> orchestrates the FreeRADIUS, LDAP and DHCP and CAT portal and
>>>>>>> profiles
>>>>>>> provisoning.
>>>>>>>
>>>>>>> It seems that that todays update of cat.eduroam.org API broke out
>>>>>>> provisioning system. This is what we've found out so far:
>>>>>>>
>>>>>>> - [just for context] on 3.10.2018 we've resolved an internal issue
>>>>>>> with   on provisioning system with a simple workaround, and deployed
>>>>>>> on production
>>>>>>>   in the late afternoon.
>>>>>>> - the last succesful provisoning by our system was completed
>>>>>>> yesterday
>>>>>>>   morning (3.10.2018)
>>>>>>> - the error that we've got from debugging the self-service
>>>>>>> provisioning
>>>>>>>   portal is the following:
>>>>>>>
>>>>>>>    - API endpoint our portal is calling:
>>>>>>> https://cat.eduroam.org/admin/API.php
>>>>>>>    - debug from example payload (note that this is Python output
>>>>>>> which
>>>>>>> is not
>>>>>>>      in valid JSON format):
>>>>>>>
>>>>>>>      {
>>>>>>>     'option[S90]': 'profile-api:eaptype',
>>>>>>>     'option[S3]': 'eap:ca_url',
>>>>>>>     'option[S1]': 'general:instname',
>>>>>>>     'value[S1-0]': u'OSNOVNA \u0160OLA MUTA',
>>>>>>>     'option[S5]': 'eap:server_name',
>>>>>>>     'value[S69-3]': 'on',
>>>>>>>     'option[S66]': 'profile:name',
>>>>>>>     'value[S4-0]': '',
>>>>>>>     'APIKEY': 'a******************f',
>>>>>>>     'NEWINST_PRIMARYADMIN': '',
>>>>>>>     'value[S4-lang]': 'C',
>>>>>>>     'ACTION': 'NEWINST',
>>>>>>>     'value[S90-0]': 1,
>>>>>>>     'option[S70]': 'profile-api:realm',
>>>>>>>     'option[S69]': 'profile:production',
>>>>>>>     'value[S66-0]': u'OSNOVNA \u0160OLA MUTA',
>>>>>>>     'option[S4]': 'support:email',
>>>>>>>     'value[S3-0]':
>>>>>>> 'ftp://ftp.arnes.si/software/eduroam/arnes_eduroam_ca_2012.pem',
>>>>>>>     'option[S72]': 'profile-api:anon',
>>>>>>>     'value[S67-1]': u'Profil za uporabnike organizacije: OSNOVNA
>>>>>>> \u0160OLA MUTA',
>>>>>>>     'option[S91]': 'profile-api:eaptype',
>>>>>>>     'option[S67]': 'profile:description',
>>>>>>>     'value[S70-0]': u'osmuta.si',
>>>>>>>     'value[S5-0]': 'orle.arnes.si',
>>>>>>>     'value[S71-3]': 'on',
>>>>>>>     'value[S91-0]': 2,
>>>>>>>     'value[S72-0]': u' AT osmuta.si',
>>>>>>>     'value[S66-lang]': 'C',
>>>>>>>     'option[S71]': 'profile-api:useanon',
>>>>>>>     'value[S1-lang]': 'C'
>>>>>>>      }
>>>>>>>
>>>>>>>    - response from cat.eduroam.org API:
>>>>>>>
>>>>>>>      {
>>>>>>>     "result": "ERROR",
>>>>>>>     "details": {
>>>>>>>         "errorcode": 8,
>>>>>>>         "description": "Unable to decode JSON POST data."
>>>>>>>        }
>>>>>>>      }
>>>>>>>
>>>>>>> - our testing environment where we use API from
>>>>>>>   https://cat-test.eduroam.org/branch/admin/API.php is doing fine.
>>>>>>>
>>>>>>>
>>>>>>> Unfortunately, since the hand-off from the original AAI/developer
>>>>>>> team
>>>>>>> that
>>>>>>> developed our portal somehow missed this detail on so strictly
>>>>>>> relying
>>>>>>> on cat.eduroam.org API, we weren't aware and ready of the coming CAT
>>>>>>> upgrade.
>>>>>>> That's why we're now in a showstopper situation and unable to
>>>>>>> meet our
>>>>>>> deployment deadline, thus jeopardizing the project. We can't
>>>>>>> afford to
>>>>>>> workaround with excluding the CAT from our provisioning system
>>>>>>> because
>>>>>>> it's actually a cornerstone of the rollout.
>>>>>>>
>>>>>>> We're asking for help or any information about API changes that
>>>>>>> could
>>>>>>> help us restore the service as soon as possible.
>>>>>>>
>>>>>>> Regards,
>>>>>>> Martin Božič
>>>>>>> To unsubscribe, send this message:
>>>>>>> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>>>>>>> Or use the following link:
>>>>>>> https://lists.geant.org/sympa/sigrequest/cat-users
>>>>>>
>>>>>> -- 
>>>>>> Tomasz Wolniewicz
>>>>>>          
>>>>>> twoln AT umk.pl
>>>>>>         http://www.home.umk.pl/~twoln
>>>>>>
>>>>>> Uczelniane Centrum Informatyczne   Information&Communication
>>>>>> Technology Centre
>>>>>> Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
>>>>>> pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
>>>>>> tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.:
>>>>>> +48-693-032-576
>>>>>>
>>>>> To unsubscribe, send this message:
>>>>> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>>>>> Or use the following link:
>>>>> https://lists.geant.org/sympa/sigrequest/cat-users
>>>>
>>>>
>>>> -- 
>>>> Stefan WINTER
>>>> Ingenieur de Recherche
>>>> Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
>>>> de la Recherche
>>>> 2, avenue de l'Université
>>>> L-4365 Esch-sur-Alzette
>>>>
>>>> Tel: +352 424409 1
>>>> Fax: +352 422473
>>>>
>>>> PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
>>>> recipient's key is known to me
>>>>
>>>> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
>>>
>>>> pub  4096R/8A39DC66 2013-09-06 Stefan Winter (RESTENA key 2013+)
>>>> <stefan.winter AT restena.lu>
>>>> sub  4096R/4EFEA2BE 2013-09-06
>>>
>>>
>>>
>>>
>>> To unsubscribe, send this message:
>>> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
>>> Or use the following link:
>>> https://lists.geant.org/sympa/sigrequest/cat-users
>>
>>
>> -- 
>> Stefan WINTER
>> Ingenieur de Recherche
>> Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
>> de la Recherche
>> 2, avenue de l'Université
>> L-4365 Esch-sur-Alzette
>>
>> Tel: +352 424409 1
>> Fax: +352 422473
>>
>> PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
>> recipient's key is known to me
>>
>> http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
> 
>> pub  4096R/8A39DC66 2013-09-06 Stefan Winter (RESTENA key 2013+)
>> <stefan.winter AT restena.lu>
>> sub  4096R/4EFEA2BE 2013-09-06
> 
> 
> 
> 
> To unsubscribe, send this message:
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link:
> https://lists.geant.org/sympa/sigrequest/cat-users


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature