The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

> A number of Android users have reported being unable to connect to
> Eduroam having downloaded and installed the Eduroam CAT.  It appears
> that when you enter your username and password that part of the app
> doesn’t work as expected.  If you ignore it and at the end of the
> routine ‘forget’ the network, then join Eduroam in the usual way through
> the Android device wireless settings, then connection is successful.
> 
> I guess I’m just asking you if you would have a look at the CAT to
> ensure the authentication part is running correctly.

The eduroam CAT app does not do any authentication itself. It merely
pushes configuration items into the "normal" Wi-Fi settings.

If you forget the config and connect "just like that" then you do not
enforce any security settings. It may very well mean that it will more
easily work on the genuine eduroam network, but it also means that you
will send your username and password to a rogue attacker network.

So, please do NOT do that.

If the connection is not established after pushing the settings via the
eduroam CAT app, then with some likelihood the configuration details we
have on file in CAT - as submitted by your institution - do not match
reality, and the authentication is aborted because the device considers
the server it connects to as a rogue attacker.

Without further knowledge about the reality of your institution's
deployment, I cannot give further advice. You should get in touch with
your institution's IT department to have all configuration details
double-checked. Your IT department is very welcome to get in touch with
this mailing list if they want some deeper analysis to be performed.

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature