The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

> Have to agree, the chrome book ONC file install procedure is terrible , 
> something u might do as a 1st stab at getting things working , certainly 
> not a production grade utility 

I totally agree with you.

FWIW, Google wants you to do something else instead, which is probably
the reason why this way of configuring is left in its current sorry
state: Chromebooks can be put under MDM management in the Google Admin
Console.

Chromebooks which are managed that way get their network config from MDM
in an automated way.

I think I actually saw a reply to a bug report once which told the
requester to use MDM instead as that is the intended way of configuring
a Chromebook.

Still, I find it entirely unacceptable that a device is "forced" into a
much more wide-ranging MDM environment that way.

Unfortunately, Google doesn't care about my sentiments :-/

Stefan

> 
> Sent from my iPhone
> 
>> On 27 Aug 2019, at 09:05, Martin Pauly <address@concealed> wrote:
>>
>> Hi,
>>
>>> Am 26.08.19 um 23:05 schrieb Hunter Fuller:
>>> Unfortunately Google's interface for importing the file is just
>>> terrible. But it does work.
>> unfortunately, not with all devices that call themselves Chromebook.
>> I've had three of the kind here in the last year, and the ONC import
>> worked on one of them. On the second device, we configured WiFi eduroam
>> manually, but I remember a buggy dialogue, there was no consistent
>> information about the root cert to compare a server cert to.
>>
>> The third device was harder as it needed wired eduroam.
>> (LAN adapter fully functional behind a commodity DSL router).
>> It neither worked with the ONC file nor with the dialog.
>> Despite the presence of all settings, the device never
>> emitted any 802.1X packet. The user being pretty experienced
>> in that case, she put the device into developer mode.
>> As root, we created a config file and fired up
>> wpa_supplicant manually. The user successfully worked with this
>> setting for some months.
>>
>> Conclusion: There's not only a terrible config import interface
>> in ChromeOS, but lots of buggy code when it comes to the network
>> configuration dialogs. It's all open source though, but I have
>> no idea whether Google would really bother to integrate any
>> patches into their upstream code. We sent a detailed complaint through
>> the ChromOS feedback form, but neither the user nor me received andy reply.
>>
>> Martin
>>
>> -- 
>>  Dr. Martin Pauly     Phone:  +49-6421-28-23527
>>  HRZ Univ. Marburg    Fax:    +49-6421-28-26994
>>  Hans-Meerwein-Str.   E-Mail: address@concealed
>>  D-35032 Marburg
>>
> To unsubscribe, send this message: 
> mailto:address@concealed?subject=unsubscribe%20cat-users
> Or use the following link: 
> https://lists.geant.org/sympa/sigrequest/cat-users
> 


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature