Skip to Content.
Sympa Menu

cat-users - Re: [[cat-users]] EAP-TTLS and Windows 10

cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Re: [[cat-users]] EAP-TTLS and Windows 10


Chronological Thread 
    < Chronological >      < Thread >
  • From: "Workman, John Robert" <john.workman AT mnsu.edu>
  • To: Tomasz Wolniewicz <twoln AT umk.pl>, "cat-users AT lists.geant.org" <cat-users AT lists.geant.org>
  • Subject: Re: [[cat-users]] EAP-TTLS and Windows 10
  • Date: Mon, 26 Nov 2018 15:38:51 +0000
  • Accept-language: en-US
  • Authentication-results: prod-mail.geant.net (amavisd-new); dkim=pass (1024-bit key) header.d=mnsu.edu
  • Authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.workman AT mnsu.edu;
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99

I think this would be a really good option. It would be nice if the installer checked that the Windows 10 version is 1803 or newer and warned the user that an upgrade is necessary when they launch the CAT tool.

Any guess to when this change would be available? I'd be happy to help with testing.



On 11/21/18 3:56 AM, Tomasz Wolniewicz wrote:
02e0a788-3028-7362-eee4-b738e96c46be AT umk.pl">It would be quite easy to program the Prefer Built-In Supplicant so that all Windows10 installers get the built-in supplicants and I am ready to provide that on the condition that the IdP admin who sets this option is aware that it means that some unpatched W10 systems may have a problem.

Tomasz


W dniu 20.11.2018 o 20:34, Workman, John Robert pisze:
1240d324-e26b-0fde-88f7-740d456c7023 AT mnsu.edu">

Greetings,

Is there a way to disable bundling the GEANTLink supplicant in the CAT installer when using EAP-TTLS? I don't see any device-specific or eap-type specific options in the Idp admin pages.

I know there are issues with the Microsoft EapTtls supplicant in Windows 10 prior to 1803. We are not concerned with non-updated Windows 10 machines. We'd prefer the user not have to use admin privileges to connect to eduroam.

I remember sometime in October there was discussion on this list about adding a "Prefer Built-In Supplicant" EAP-Type specific option so that the GEANTLink supplicant wouldn't get installed. Is that still on the roadmap to implement? Ideally there would be an option to never bundle GEANTLink, and then display an error message on install if they aren't running 1803 or newer.



-- 
John Workman (john.workman AT mnsu.edu) 
Networking Engineer 
Information and Technology Services 
Minnesota State University, Mankato 
3010 Memorial Library 
Mankato, MN  56001 
Office: 507-389-1337 
Mobile: 507-514-0604 
Fax: 507-389-6115
To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users 

-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576
-- 
John Workman (john.workman AT mnsu.edu) 
Networking Engineer 
Information and Technology Services 
Minnesota State University, Mankato 
3010 Memorial Library 
Mankato, MN  56001 
Office: 507-389-1337 
Mobile: 507-514-0604 
Fax: 507-389-6115

Archive powered by MHonArc 2.6.19.

Top of Page