The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Alan Buxey <alan.buxey AT gmail.com>]

hi,

the problem is there is no dot and thus the request cannot be proxies
back to the right home organisation.

perhaps this worked at the home organisation because of a
misconfiguration that takes realms other than they expect
and deals with them locally - in this way the home user gets
connectivity but fails totally when going to another site
(the same is true if eg no realm logins are allowed too).

alan

On Wed, 2 Oct 2019 at 14:16, Talgat <talgat AT kazrena.kz> wrote:
>
> Dear Community,
>
> I have a couple of questions concerning interaction between federation
> level radsecproxy server and university MS Windows Radius server - NPS.
>
> One of our Kazakhstan universities is using Microsoft NPS server and has
> realm "satbayev.university"  .university is TLD. Attempts to connect to
> WiFi via another university Freeradius server were unsuccessful and I
> saw in radsecproxy.log the user login in the following form:
>    user@satbayevuniversity
> There was not dot between satbayev and university.
>
> Could you, please, explain me what's the problem?
>
> Another problem with NPS is that it works and authenticate local and
> users from another realms, but I'm constantly seeing the error message
> in radsecproxy.log:
> Oct  2 18:49:55 2019: clientwr: no status server response,
> KAZNITU_IdP_SP dead?
>
> KAZNITU_IdP_SP  is the name of satbayev.university realm.
>
> Kind regards, Talgat Nurlybayev, KazRENA
> To unsubscribe, send this message: 
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link: 
> https://lists.geant.org/sympa/sigrequest/cat-users