I've had a chance to test the new changes on Windows 10.
One issue I noticed is that when using EAP-TTLS:
If "Use builtin TTLS supplicant for Windows 10" is enabled, the "User credentials" entry dialog doesn't display during the install.
If "Use builtin TTLS supplicant for Windows 10" is not enabled, The "User credentials" entry dialog IS displayed.
When using EAP-PEAP, the "User credentials" entry dialog always is displayed.
This is the dialog box I am referring to:
On 11/26/18 4:09 PM, Tomasz Wolniewicz wrote:
The change WITHOUT the 1803 testing will be available this week, together with some more updates to the system.
We will announce when this gets done.
Tomasz
W dniu 26.11.2018 o 16:38, Workman, John Robert pisze:
I think this would be a really good option. It would be nice if the installer checked that the Windows 10 version is 1803 or newer and warned the user that an upgrade is necessary when they launch the CAT tool.
Any guess to when this change would be available? I'd be happy to help with testing.
On 11/21/18 3:56 AM, Tomasz Wolniewicz wrote:
It would be quite easy to program the Prefer Built-In Supplicant so that all Windows10 installers get the built-in supplicants and I am ready to provide that on the condition that
the IdP admin who sets this option is aware that it means that some unpatched W10 systems may have a problem.
Tomasz
W dniu 20.11.2018 o 20:34, Workman, John Robert pisze:
Greetings,
Is there a way to disable bundling the GEANTLink supplicant in the CAT installer when using EAP-TTLS? I don't see any device-specific or eap-type specific options in the Idp admin pages.
I know there are issues with the Microsoft EapTtls supplicant in Windows 10 prior to 1803. We are not concerned with non-updated Windows 10 machines. We'd prefer the user not have to use admin privileges to connect to eduroam.
I remember sometime in October there was discussion on this list about adding a "Prefer Built-In Supplicant" EAP-Type specific option so that the GEANTLink supplicant wouldn't get installed. Is that still on the roadmap to implement? Ideally there would
be an option to never bundle GEANTLink, and then display an error message on install if they aren't running 1803 or newer.
--
John Workman (john.workman AT mnsu.edu)
Networking Engineer
Information and Technology Services
Minnesota State University, Mankato
3010 Memorial Library
Mankato, MN 56001
Office: 507-389-1337
Mobile: 507-514-0604
Fax: 507-389-6115
Or use the following link:
https://lists.geant.org/sympa/sigrequest/cat-users
--
Tomasz Wolniewicz
twoln AT umk.pl http://www.home.umk.pl/~twoln
Uczelniane Centrum Informatyczne Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika Nicolaus Copernicus University,
pl. Rapackiego 1, Torun pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750 fax: +48-56-622-1850 tel kom.: +48-693-032-576
--
John Workman (john.workman AT mnsu.edu)
Networking Engineer
Information and Technology Services
Minnesota State University, Mankato
3010 Memorial Library
Mankato, MN 56001
Office: 507-389-1337
Mobile: 507-514-0604
Fax: 507-389-6115
Or use the following link:
https://lists.geant.org/sympa/sigrequest/cat-users
--
Tomasz Wolniewicz
twoln AT umk.pl http://www.home.umk.pl/~twoln
Uczelniane Centrum Informatyczne Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika Nicolaus Copernicus University,
pl. Rapackiego 1, Torun pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750 fax: +48-56-622-1850 tel kom.: +48-693-032-576
--
John Workman (john.workman AT mnsu.edu)
Networking Engineer
Information and Technology Services
Minnesota State University, Mankato
3010 Memorial Library
Mankato, MN 56001
Office: 507-389-1337
Mobile: 507-514-0604
Fax: 507-389-6115
