The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello again,

my apologies: you were trying to log into our new and not quite
officially launched service "eduroam Managed IdP". That service is under
our control, and strangely enough this error happened on our side, not
the eduroam authentication proxy.

So I'm looking into this now.

First: which URL did you try to visit? I logged in just now from the
service's front page, and that worked without problems. And all eduGAIN
IdPs go through the same proxy IdP, so the login flow from our service's
side is identical regardless of IdP.

Can you go to the start page on https://hosted.eduroam.org and try to
log in directly from there (i.e. "Manage" -> "Admin Access")? If that
doesn't work, what is your IdP?

Greetings,

Stefan Winter

Am 26.02.19 um 16:53 schrieb Joshua Tetteh Ocansey:
> 
> 
> ---------- Forwarded message ---------
> From: *Joshua Tetteh Ocansey* <joshua.ocansey AT cessda.eu
> <mailto:joshua.ocansey AT cessda.eu>>
> Date: Tue, Feb 26, 2019 at 11:23 AM
> Subject: Re: [uninett.no <http://uninett.no> #176823] Eduroam access for
> CESSDA ERIC
> To: <medlem AT uninett.no <mailto:medlem AT uninett.no>>
> Cc: Carsten Thiel <carsten.thiel AT cessda.eu
> <mailto:carsten.thiel AT cessda.eu>>, <eduroam AT uninett.no
> <mailto:eduroam AT uninett.no>>
> 
> 
> Hei Gabriel and Tom
> 
> Hope this mail meets you in good conditions.
> 
> This is to remind you that we have unable to login into the
> administrative portal.
> We have successful connected and tested with few devices. Now we want to
> roll it out to the rest of the team. 
> 
> We are having issues in login into the portal. Attached is the issue as
> I try to login this morning. 
> Please we need urgent response to this issue. 
> 
> Thank you 
> 
> Best regards 
> 
> Joshua. 
> 
> On Fri, Feb 22, 2019 at 1:51 PM Joshua Tetteh Ocansey
> <joshua.ocansey AT cessda.eu <mailto:joshua.ocansey AT cessda.eu>> wrote:
> 
>     Hello Tom, 
> 
>     I was trying to login into the administrative portal this afternoon
>     but it threw an exception. Screenshot attached. 
>     The error page however asked me to send a report to administrator
>     which I did but am not too sure if I may get a response soon. 
> 
>     What do you think is the problem, Is there anything you can do to
>     help ? 
> 
>     Best regards 
> 
>     Joshua. 
> 
>     On Mon, Feb 11, 2019 at 10:28 AM Carsten Thiel
>     <carsten.thiel AT cessda.eu <mailto:carsten.thiel AT cessda.eu>> wrote:
> 
>         Hi Tom,
> 
>         we have successfully connected a few devices and will be rolling
>         out to the rest of team very soon.
> 
>         I noticed that CESSDA is listed twice in the realmstatus page,
>         once with www.cessda.eu <http://www.cessda.eu>. Should this be
>         removed?
>         However, the CAT-status and IdP availability doesn't look good
>         for the hosted solution either, is there something to be done?
> 
>         Thanks again
>         Carsten
> 
> 
>>         On 6 Feb 2019, at 12:01, Tom Ivar Myren via RT
>>         <eduroam AT uninett.no <mailto:eduroam AT uninett.no>> wrote:
>>
>>         Hi,
>>         You are the first Managed IdP users in Norway - so I expect
>>         this to work the
>>         same way CAT (cat.eduroam.org <http://cat.eduroam.org>) does.
>>         Where does the invitation link take you?
>>         Maybe it is better to fix this if you call me - 926 00 199?
>>
>>         /Tom
>>
>>         On Wed Feb 06 11:56:38 2019, joshua.ocansey AT cessda.eu
>>         <mailto:joshua.ocansey AT cessda.eu> wrote:
>>
>>            Hello Tom,
>>
>>            I may need your assistance in login into the IdP. I can not
>>         find "social
>>            login" to select.
>>
>>            Best regards
>>
>>            Joshua.
>>
>>            On Wed, Feb 6, 2019 at 8:52 AM Tom Ivar Myren via RT
>>         <eduroam AT uninett.no <mailto:eduroam AT uninett.no>>
>>            wrote:
>>
>>                Hi,
>>                I have now sent an invitation to
>>         joshua.ocansey AT cessda.eu <mailto:joshua.ocansey AT cessda.eu> to
>>                administer the
>>                Managed IdP for CESSDA ERIC, the invitation is valid
>>         for 24 hours.
>>                For instructions on how to use the Managed IdP solution
>>         see:
>>                https://wiki.geant.org/display/H2eduroam/
>>                
>> A+guide+to+eduroam+CAT+2.0+and+eduroam+Managed+IdP+for+National+Roaming+Operator+administrators
>>
>>                Carsten - I just saw your answer that you are located
>>         within UiB
>>                eduroam
>>                coverage, meaning it is fine for you to be eduroam IdP
>>         only.
>>
>>                Joshua - give me a call if you need assistance logging
>>         into CAT /
>>                Managed IdP.
>>                You will need to choose "Social login" and select your
>>         preferred
>>                provider form
>>                the list, unless you have an eduGAIN account and can
>>         choose from that
>>                list.
>>
>>                Best regards,
>>                Tom Myren
>>
>>                On Tue Feb 05 16:33:14 2019, tomy AT uninett.no
>>         <mailto:tomy AT uninett.no> wrote:
>>
>>                    Hi,
>>                    I can start this prosess by registering your
>>         organisation as an
>>                eduroam
>>                    member (with the contact details we have already
>>         received). This
>>                will then
>>                    generate records in the central European eduroam
>>         database which
>>                will
>>                    enable us to invite you for using the Managed IdP
>>         solution, should
>>                take
>>                    1-2 days.
>>
>>                    Being a eduroam member means you should also
>>         provide eduroam for
>>                your
>>                    visitors (the only exception is if you are located
>>         with an
>>                exsisting
>>                    eduroam provider). As an eduroam provider you will
>>         need a radius
>>                proxy to
>>                    sent requests to our national proxy servers.
>>
>>                    Br,
>>                    Tom Myren
>>                    Tlf: 926 00 199
>>
>>
>>                    On Mon Feb 04 15:51:50 2019,
>>         carsten.thiel AT cessda.eu <mailto:carsten.thiel AT cessda.eu> wrote:
>>
>>                        Dear Lene,
>>
>>                        as I wrote in my original request, we do not
>>         currently have
>>                radius and
>>                        were looking to use GEANT's Managed Eduroam IdP.
>>
>>                        Best
>>                        Carsten
>>
>>
>>
>>
>>                            On 4 Feb 2019, at 15:04, Gabriel Ofori via RT <
>>                medlem AT uninett.no <mailto:medlem AT uninett.no>>
>>                            wrote:
>>
>>                            Hello Dr. Thiel,
>>
>>                            The information we need from you, is listed
>>         on http://
>>                eduroam.no/ <http://eduroam.no/>
>>                            join.
>>                            Here is a short summary:
>>
>>                             • DNS name (and / or IP address) to the
>>         radius server
>>                             • Shared secret (via SMS) - we can also
>>         send it to you
>>                             • At least 1 technical contact, e-mail og
>>         mobile phone
>>                number -
>>                            Joshua?
>>                             • An administrative contact (for billing)
>>                             • Street addresses where Eduroam will be
>>         offered
>>                             • Which domain do you want to use for
>>         eduroam access?
>>
>>
>>                            Info from us:
>>
>>                            During setup eduroam policy is accepted
>>         (see link at http:
>>                //
>>                            eduroam.no <http://eduroam.no> /
>>                            https://eduroam.no/policy/)
>>                            Our National Top Level Radius servers,
>>         these are the
>>                radius you
>>                            proxy requests
>>                            to:
>>                            -ntlr1.eduroam.no <http://ntlr1.eduroam.no>
>>                            -ntlr2.eduroam.no <http://ntlr2.eduroam.no>
>>                            -ntlr3.eduroam.no <http://ntlr3.eduroam.no>
>>
>>                            On  http://eduroam.no/realmstatus the
>>         status for all IdP’s
>>                and
>>                            SP's in Norway
>>                            are available.
>>
>>                            We have a notification list where we give
>>         notice about
>>                planned
>>                            maintenance,
>>                            incidents and other important information
>>         about the
>>                service. Which
>>                            e-mail-address will you prefer to be
>>         registered on this
>>                list?  We
>>                            require at
>>                            least one e-mail-address.
>>
>>
>>
>>
>>                        —
>>                        Dr Carsten Thiel
>>                        Chief Technical Officer
>>
>>                        CESSDA ERIC
>>                        Parkveien 20
>>                        5007 Bergen, Norway
>>                        (+47) 401 00 964
>>                        carsten.thiel AT cessda.eu
>>         <mailto:carsten.thiel AT cessda.eu>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
> 
>         —
>         Dr Carsten Thiel
>         Chief Technical Officer
> 
>         CESSDA ERIC
>         Parkveien 20
>         5007 Bergen, Norway
>         (+47) 401 00 964
>         carsten.thiel AT cessda.eu <mailto:carsten.thiel AT cessda.eu>
> 
> 
> 
> 
> 
> 
> 
>     -- 
>     *Joshua Tetteh Ocansey* 
>     Technical Officer (DevOps Engineer) 
> 
> 
> 
> -- 
> *Joshua Tetteh Ocansey* 
> Technical Officer (DevOps Engineer) 
> 
> On Fri, Feb 22, 2019 at 1:51 PM Joshua Tetteh Ocansey
> <joshua.ocansey AT cessda.eu <mailto:joshua.ocansey AT cessda.eu>> wrote:
> 
>     Hello Tom, 
> 
>     I was trying to login into the administrative portal this afternoon
>     but it threw an exception. Screenshot attached. 
>     The error page however asked me to send a report to administrator
>     which I did but am not too sure if I may get a response soon. 
> 
>     What do you think is the problem, Is there anything you can do to
>     help ? 
> 
>     Best regards 
> 
>     Joshua. 
> 
>     On Mon, Feb 11, 2019 at 10:28 AM Carsten Thiel
>     <carsten.thiel AT cessda.eu <mailto:carsten.thiel AT cessda.eu>> wrote:
> 
>         Hi Tom,
> 
>         we have successfully connected a few devices and will be rolling
>         out to the rest of team very soon.
> 
>         I noticed that CESSDA is listed twice in the realmstatus page,
>         once with www.cessda.eu <http://www.cessda.eu>. Should this be
>         removed?
>         However, the CAT-status and IdP availability doesn't look good
>         for the hosted solution either, is there something to be done?
> 
>         Thanks again
>         Carsten
> 
> 
>>         On 6 Feb 2019, at 12:01, Tom Ivar Myren via RT
>>         <eduroam AT uninett.no <mailto:eduroam AT uninett.no>> wrote:
>>
>>         Hi,
>>         You are the first Managed IdP users in Norway - so I expect
>>         this to work the
>>         same way CAT (cat.eduroam.org <http://cat.eduroam.org>) does.
>>         Where does the invitation link take you?
>>         Maybe it is better to fix this if you call me - 926 00 199?
>>
>>         /Tom
>>
>>         On Wed Feb 06 11:56:38 2019, joshua.ocansey AT cessda.eu
>>         <mailto:joshua.ocansey AT cessda.eu> wrote:
>>
>>            Hello Tom,
>>
>>            I may need your assistance in login into the IdP. I can not
>>         find "social
>>            login" to select.
>>
>>            Best regards
>>
>>            Joshua.
>>
>>            On Wed, Feb 6, 2019 at 8:52 AM Tom Ivar Myren via RT
>>         <eduroam AT uninett.no <mailto:eduroam AT uninett.no>>
>>            wrote:
>>
>>                Hi,
>>                I have now sent an invitation to
>>         joshua.ocansey AT cessda.eu <mailto:joshua.ocansey AT cessda.eu> to
>>                administer the
>>                Managed IdP for CESSDA ERIC, the invitation is valid
>>         for 24 hours.
>>                For instructions on how to use the Managed IdP solution
>>         see:
>>                https://wiki.geant.org/display/H2eduroam/
>>                
>> A+guide+to+eduroam+CAT+2.0+and+eduroam+Managed+IdP+for+National+Roaming+Operator+administrators
>>
>>                Carsten - I just saw your answer that you are located
>>         within UiB
>>                eduroam
>>                coverage, meaning it is fine for you to be eduroam IdP
>>         only.
>>
>>                Joshua - give me a call if you need assistance logging
>>         into CAT /
>>                Managed IdP.
>>                You will need to choose "Social login" and select your
>>         preferred
>>                provider form
>>                the list, unless you have an eduGAIN account and can
>>         choose from that
>>                list.
>>
>>                Best regards,
>>                Tom Myren
>>
>>                On Tue Feb 05 16:33:14 2019, tomy AT uninett.no
>>         <mailto:tomy AT uninett.no> wrote:
>>
>>                    Hi,
>>                    I can start this prosess by registering your
>>         organisation as an
>>                eduroam
>>                    member (with the contact details we have already
>>         received). This
>>                will then
>>                    generate records in the central European eduroam
>>         database which
>>                will
>>                    enable us to invite you for using the Managed IdP
>>         solution, should
>>                take
>>                    1-2 days.
>>
>>                    Being a eduroam member means you should also
>>         provide eduroam for
>>                your
>>                    visitors (the only exception is if you are located
>>         with an
>>                exsisting
>>                    eduroam provider). As an eduroam provider you will
>>         need a radius
>>                proxy to
>>                    sent requests to our national proxy servers.
>>
>>                    Br,
>>                    Tom Myren
>>                    Tlf: 926 00 199
>>
>>
>>                    On Mon Feb 04 15:51:50 2019,
>>         carsten.thiel AT cessda.eu <mailto:carsten.thiel AT cessda.eu> wrote:
>>
>>                        Dear Lene,
>>
>>                        as I wrote in my original request, we do not
>>         currently have
>>                radius and
>>                        were looking to use GEANT's Managed Eduroam IdP.
>>
>>                        Best
>>                        Carsten
>>
>>
>>
>>
>>                            On 4 Feb 2019, at 15:04, Gabriel Ofori via RT <
>>                medlem AT uninett.no <mailto:medlem AT uninett.no>>
>>                            wrote:
>>
>>                            Hello Dr. Thiel,
>>
>>                            The information we need from you, is listed
>>         on http://
>>                eduroam.no/ <http://eduroam.no/>
>>                            join.
>>                            Here is a short summary:
>>
>>                             • DNS name (and / or IP address) to the
>>         radius server
>>                             • Shared secret (via SMS) - we can also
>>         send it to you
>>                             • At least 1 technical contact, e-mail og
>>         mobile phone
>>                number -
>>                            Joshua?
>>                             • An administrative contact (for billing)
>>                             • Street addresses where Eduroam will be
>>         offered
>>                             • Which domain do you want to use for
>>         eduroam access?
>>
>>
>>                            Info from us:
>>
>>                            During setup eduroam policy is accepted
>>         (see link at http:
>>                //
>>                            eduroam.no <http://eduroam.no> /
>>                            https://eduroam.no/policy/)
>>                            Our National Top Level Radius servers,
>>         these are the
>>                radius you
>>                            proxy requests
>>                            to:
>>                            -ntlr1.eduroam.no <http://ntlr1.eduroam.no>
>>                            -ntlr2.eduroam.no <http://ntlr2.eduroam.no>
>>                            -ntlr3.eduroam.no <http://ntlr3.eduroam.no>
>>
>>                            On  http://eduroam.no/realmstatus the
>>         status for all IdP’s
>>                and
>>                            SP's in Norway
>>                            are available.
>>
>>                            We have a notification list where we give
>>         notice about
>>                planned
>>                            maintenance,
>>                            incidents and other important information
>>         about the
>>                service. Which
>>                            e-mail-address will you prefer to be
>>         registered on this
>>                list?  We
>>                            require at
>>                            least one e-mail-address.
>>
>>
>>
>>
>>                        —
>>                        Dr Carsten Thiel
>>                        Chief Technical Officer
>>
>>                        CESSDA ERIC
>>                        Parkveien 20
>>                        5007 Bergen, Norway
>>                        (+47) 401 00 964
>>                        carsten.thiel AT cessda.eu
>>         <mailto:carsten.thiel AT cessda.eu>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
> 
>         —
>         Dr Carsten Thiel
>         Chief Technical Officer
> 
>         CESSDA ERIC
>         Parkveien 20
>         5007 Bergen, Norway
>         (+47) 401 00 964
>         carsten.thiel AT cessda.eu <mailto:carsten.thiel AT cessda.eu>
> 
> 
> 
> 
> 
> 
> 
>     -- 
>     *Joshua Tetteh Ocansey* 
>     Technical Officer (DevOps Engineer) 
> 
> 
> 
> -- 
> *Joshua Tetteh Ocansey* 
> Technical Officer (DevOps Engineer) 
> 
> 
> -- 
> *Joshua Tetteh Ocansey* 
> Technical Officer (DevOps Engineer) 
> To unsubscribe, send this message:
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link:
> https://lists.geant.org/sympa/sigrequest/cat-users


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature