The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

according to the screenshot you have entered the .eu variant as inner
ID. So we send that one inside the tunnel. I don't think you think there
is anything wrong with that?

Is your issue that you enter the .eu domain also for the *outer* ID, but
that one is not used, with the .cz variant used instead?

Greetings,

Stefan Winter

Am 26.10.18 um 15:27 schrieb Jan Tomasek:
> Hello,
> 
> I wanted to use CAT as entry point for testing our cesnet.eu domain. But
> despite what I write as inner user name, it forces cesnet.eu. Logs on
> our RADIUS server:
> 
> Fri Oct 26 15:11:11 2018: DEBUG: EAP TTLS inner authentication request
> for address@concealed
> Fri Oct 26 15:11:11 2018: DEBUG: TTLS Tunnelled Diameter Packet dump:
> Code:       Access-Request
> Identifier: UNDEF
> Authentic:  <8><207><254>IC|<249><160><10><208><133><205>Vz<209>L
> Attributes:
>         User-Name = "address@concealed"
>         MS-CHAP-Challenge = <162>4X`<194>K:N<9><251>:<197>Qwp<133>
>         MS-CHAP2-Response =
> w<0><15>lcA<191><231>R3x.<172>H<226>#<168>s<0><0><0><0><0><0><0><0><188>E<154><201><19><8><229>:<169><186><178><132><182>AH<213><191>w<218>r<137>)\<186>
> 
> 
> 
> Fri Oct 26 15:11:11 2018: DEBUG: User address@concealedaddress@concealed is
> trying cheat.
> 
> That debug message is thrown by code comparing inner EAP identity
> (first) and external identity (second).
> 
> 
> I'm not sure if this is a bug or intentional feature. I want just to
> inform if it is a bug.
> 
> Best regards


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature