The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Thanks, I will get this fixed.

Tomasz

W dniu 01.04.2019 o 23:10, Workman, John R pisze:

Greetings,

The following changes needed to be made to our institution's Linux CAT installer.

Can we get these fixes made upstream?

Thanks!

--- eduroam-linux-MSUM-eduroam.py.orig    2019-04-01 15:36:35.000000000 -0500
+++ eduroam-linux-MSUM-eduroam.py    2019-04-01 15:42:17.000000000 -0500
@@ -702,16 +702,15 @@
     Prepare and save wpa_supplicant config file
     """
     def __prepare_network_block(self, ssid, user_data):
-        altsubj_match = "altsubject_match=\"%s\"" % ";".join(Config.servers)
         out = """network={
-        ssid=""" + ssid + """
+        ssid=\"""" + ssid + """\"
         key_mgmt=WPA-EAP
         pairwise=CCMP
         group=CCMP TKIP
         eap=""" + Config.eap_outer + """
         ca_cert=\"""" + os.environ.get('HOME') + """/.cat_installer/ca.pem\"
         identity=\"""" + user_data.username + """\"
-        altsubject_match=\"""" + altsubj_match + """\"
+        altsubject_match=\"""" + ";".join(Config.servers) + """\"
         phase2=\"auth=""" + Config.eap_inner + """\"
         password=\"""" + user_data.password + """\"
         anonymous_identity=\"""" + Config.anonymous_identity + """\"

Otherwise, the configuration isn't quite right:

network={
        ssid=eduroam
        key_mgmt=WPA-EAP
        pairwise=CCMP
        group=CCMP TKIP
        eap=TTLS
        ca_cert="/home/john/.cat_installer/ca.pem"
        identity="redacted"
        altsubject_match="altsubject_match="DNS:radius.mnsu.edu""
        phase2="auth=MSCHAPV2"

[snipped]

Should actually be:

network={
        ssid="eduroam"
        key_mgmt=WPA-EAP
        pairwise=CCMP
        group=CCMP TKIP
        eap=TTLS
        ca_cert="/home/john/.cat_installer/ca.pem"
        identity="redacted"
        altsubject_match="DNS:radius.mnsu.edu"
        phase2="auth=MSCHAPV2"

[snipped]

--

John Workman (john.workman AT mnsu.edu) 
Networking Engineer 
Information and Technology Services 
Minnesota State University, Mankato 
3010 Memorial Library 
Mankato, MN  56001 
Office: 507-389-1337 
Mobile: 507-514-0604 
Fax: 507-389-6115

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750                            tel kom.: +48-693-032-576

Attachment: smime.p7s
Description: Kryptograficzna sygnatura S/MIME