cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Re: [[cat-users]] Fallo al conectarse a Eduroam- Universidad Politécnica de Madrid

From: Alberto Martínez <alberto_martinez AT deusto.es>
To: Tomasz Wolniewicz <twoln AT umk.pl>
Cc: "cat-users AT lists.geant.org" <cat-users AT lists.geant.org>
Subject: Re: [[cat-users]] Fallo al conectarse a Eduroam- Universidad Politécnica de Madrid
Date: Mon, 4 Feb 2019 14:15:15 +0100
Authentication-results: prod-mail.geant.net (amavisd-new); dkim=pass (2048-bit key) header.d=deusto.es

Hi,

Our CAT Mojave profile seems to have changed, and now it works as expected.

What did you change?

Regards,

Alberto

El mar., 29 ene. 2019 a las 18:14, Alberto Martínez (<alberto_martinez AT deusto.es>) escribió:

Hi Tomasz,

First time the tests returned correct results. The second I got errors - expired certificate, now tests are getting rejected every time.

This second result could suggest that there may be two RADIUS servers in deusto.es one of which has en expired cert.

The fact that I am not able to repeat the tests now could indicate some some reject policy turned on by too many rejected requests (which in itself could be dangerous).

T would begin by checking the server certificates.

Sorry, you seem to have hit the "let's check if client cares about the server cert" mechanism. And failed. And were banned.
I forgot to leave out the test user.

You see, (manually configured) Apple products like to see the good cert at first, so I changed the check so the trash cert comes out the second time.

Alberto Martínez Setién
Middleware
Comunicación y Sistemas
Servicio Informático
Universidad de Deusto
Avda. de las Universidades, 24
48007 - Bilbao (SPAIN)
Phone: +34 94 413 90 00 Ext. 2684
Fax: +34 94 413 91 01

Re: [[cat-users]] Fallo al conectarse a Eduroam- Universidad Politécnica de Madrid, Alberto Martínez, 02/04/2019