The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Robert Grätz <graetzrx AT cms.hu-berlin.de>]

Hello,

I couldn't comprehend why you need root rights to run the script. I 
tested it with very much linux distros and no root permissions were 
necessary.

How did you call the script?

Best regards
Robert


Am 03.03.20 um 09:38 schrieb Dennis Tants:
> Hello,
>
> we had the same problem on different linux systems.
> For us the problem was, that the CAT Tool can't write the file to
> "/etc/NetworkManager/system-connections" without root permissions. So we
> had to use sudo to be able to atleast write the file. Afterwards we
> would just edit the corresponding permission line, to match the system
> user. Reboot the system (just to be sure) and eduroam could be used.
>
> Yours sincerely,
> Dennis Tants
>
> On 03/03/2020 09:16, Robert Grätz wrote:
> > Hello,
> >
> > the scripts works. But you shouldn't run the script with sudo permission!
> >
> > The script write the current user to the permission attribute
> > (permission=user:$USER). So if he run the script with sudo, the current
> > user is root and the script save permission=user:root.
> >
> > Best regards
> > Robert
> >
> >
> > Am 02.03.20 um 19:08 schrieb Bernd Hanitzsch:
> > > Hello
> > >
> > > I did help someone to get the eduroam running under Linux (current
> > > ubuntu 18.04.). He did download the CAT for Uni Heidelberg and did the
> > > documented install:
> > >
> > > 1. $ sudo ./eduroam-linux-Universitat_Heidelberg-Standard_ab_2019.py
> > >
> > > -> entered all needed details correctly
> > >
> > > 2. Then he tried to connect to eduroam. When selecting it in
> > > Networkmanager, he was asked again for credentials and answered them
> > > correctly. Networkmanager tried to connect and repeated question for
> > > password a few times but was not able to connect...
> > >
> > > 3. Repeated the install and tried a few other things, nothing lead to a
> > > solution!!!
> > >
> > > 4. Deep investigation did show up following:
> > >
> > > root@lx:/etc/NetworkManager/system-connections# ls -al
> > > insgesamt 32
> > > drwxr-xr-x 2 root root 4096 Mär  1 13:25  ./
> > > drwxr-xr-x 7 root root 4096 Dez 27 20:04  ../
> > > -rw------- 1 root root  563 Mär  1 13:10  eduroam
> > > -rw------- 1 root root  408 Mär  1 13:25 'eduroam 1'
> > > -rw------- 1 root root  417 Jan 23 20:01  xyz
> > > -rw------- 1 root root  316 Jan  5 14:47 abc
> > >
> > > -> Above we are in the place where all the system connections from
> > > NetworkManager are stored. Interestingly we see a second eduroam config
> > > ("eduroam 1"). This is the one which was created from NetworkManager in
> > > step 2 as described above and this is the problem! It should have used
> > > the one created by CAT (just "eduroam"). But id did not. As to see
> > > below, there is a permission line ("permissions=user:root:;") in it,
> > > which is just wrong in this case!!! Either it shall be the proper user
> > > instead root, or just be left empty after the equal sign!!!
> > >
> > >   root@lx:/etc/NetworkManager/system-connections# diff eduroam eduroam\ 1
> > > 2,3c2,3
> > > < id=eduroam
> > > < uuid=66ccefa4-4211-4bb1-9e18-1b428a219214
> > > ---
> > > > id=eduroam 1
> > > > uuid=5d62fafa-a648-452b-a96e-0feab7c1a727
> > > 5c5
> > > < permissions=user:root:;
> > > ---
> > > > permissions=
> > > 7a8
> > > > mac-address=aa:bb:cc:...
> > > 8a10
> > > > mode=infrastructure
> > > 12d13
> > > < group=ccmp;tkip;
> > > 14,15d14
> > > < pairwise=ccmp;
> > > < proto=rsn;
> > > 18,20d16
> > >   ...
> > >
> > > To clean it up and get it working:
> > > 1. $ sudo rm "/etc/NetworkManager/system-connections/eduroam 1"
> > > 2. $ sudo vi "/etc/NetworkManager/system-connections/eduroam"
> > > -> and modify the "permissions=user:root:;" to "permissions="
> > > 3. $ sudo systemctl restart NetworkManager
> > >
> > > And now it shall be working just with any additional steps needed! I
> > > would strongly suggest, that someone shall correct the CAT
> > > (eduroam-linux-Universitat_Heidelberg-Standard_ab_2019.py). If you need
> > > help, just contact me.
> > >
> > > Kind regards
> > >
> > > Bernd Hanitzsch
> > > Oerties GmbH
> > > To unsubscribe, send this message:
> > > mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> > > Or use the following link:
> > > https://lists.geant.org/sympa/sigrequest/cat-users
> To unsubscribe, send this message: 
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users