The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

> is it currently possible to view details about some institution in the
> NRO's competence (ie .cz) in eduroam CAT? If this is not available,
> would it be possible to add this kind of admin access? We think it would
> enable the NRO admins to do some further debugging, even if all the
> information is read only.

An NRO admin can always get himself access to any institution within its
NRO. The button is behind "Add/Remove administrators" and is labelled
"Take control of this institution".

Following that action, the NRO admin is also considered IdP admin of the
institution in question and has full read/write access.

From what I hear, this is regularly used to help institutions debug any
problems they may have. You can of course remove yourself from the list
of admins when you are done.

> Would it be also possible to add an API access to this information? We'd
> like to access especially the certificate info to do some verifications
> on the EAP certificates that institutions actually use.

There is a user-API call to list all institutions, all profiles within,
and to download the corresponding installers. There is also a
"installer" which contains a simple ZIP of all relevant settings
including the CA certificates, which is useful for conducting automated
tests.

This should cover the use case you indicated.

This being the user API, it will not give you access to settings which
were not marked as production-ready by the institution. If you want
access to such institutions/profiles, then you need to use "Take
Control" interactively, as described above.

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature