The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

> i have been directed here by ja.net
> on Friday we logged into the administrator side to check our current eduroam
> cat settings.
> whilst on there i noticed we only had one administrator on there so i
> proceeded (logged in as the main administrator) to create 4 new invitations
> (to myself and 3 other infrastructure staff)
> this worked fine, and i had my invite,
> i logged out of the eduroam cat admin tool as the current admin and clicked 
> on
> the link to create my own account.
> this then used the current admins session and put my invitation code onto 
> his.
> He has lost the ability to create admin accounts now

Thanks for this detailed description. Indeed, you have effectively
demoted yourself.

Your were a primary admin (appointed by NRO), invited yourself again
(invited by you as primary admin instead -> lower level), and therewith
made yourself a secondary admin, losing primaryship.

I wonder why you did that - do you have two distinct digital identities,
and wanted to switch between the two? It's a more common thing to
happen. You should log off your old identity and consume the new
invitation token with your other identity then.

This would make you lose the ability to appoint further admins, but it
should still allow you to manage the institution itself.

> and i cant manage the
> college, as it says my code has already been used.

Which is why this part of your message confuses me a bit. Maybe you are
still logged in with the "other" identity? If you did try to effectuate
a switch from one ID to another, please try the respective other to log
into CAT and see if you can manage the institution from that one.

In any case, to regain primaryship for an institution, you will need to
ask your eduroam NRO (JISC/Janet) to send you an invitation from their
level again, and use that invitation token (with your desired new
identity, of course).

> the existing admin account is under:
> address@concealed
> 
> and my account is address@concealed

These identifiers are not particularly meaningful to us (except that
this confirms that these are meant to be two different identities
indeed). We identify you with a privacy-preserving opaque identifier
from the SAML protocol (NameID/eduPersonTargetedId). We are not able to
make deterministic changes to any ownership questions based on an email ID.

Therefore, contacting JISC to get an invitation to regain primary
adminship is the only workflow.

Greetings,

Stefan Winter

> my invitation code was sent to me friday 14/09/2018 14:53 and i must have
> clicked it about 5 minutes later.
> thanks for your help.
> Darren Williams (Infrastructure Team - Gower College Swansea)
> To unsubscribe, send this message: 
> mailto:address@concealed?subject=unsubscribe%20cat-users
> Or use the following link: 
> https://lists.geant.org/sympa/sigrequest/cat-users
> 


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature