Skip to Content.

cat-users - RE: [[cat-users]] [CANARIE-20210723101] Please help with the error of Android devices by using geteduroam app

cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive


RE: [[cat-users]] [CANARIE-20210723101] Please help with the error of Android devices by using geteduroam app


Chronological Thread 
  • From: Linchuan Yang <linchuan.yang AT concordia.ca>
  • To: CANARIE Tickets System <tickets AT canarie.ca>
  • Cc: "cat-users AT lists.geant.org" <cat-users AT lists.geant.org>
  • Subject: RE: [[cat-users]] [CANARIE-20210723101] Please help with the error of Android devices by using geteduroam app
  • Date: Tue, 27 Jul 2021 14:06:22 +0000
  • Accept-language: en-CA, en-US
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=concordia.ca; dmarc=pass action=none header.from=concordia.ca; dkim=pass header.d=concordia.ca; arc=none
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CObf2/XiRxwLWwV/QW0C1m6fbXHJRdBjqZvkDpWH/wc=; b=aqppigY9XGKf5ia72NiZ5hzdPSuQXjPl6FYkbm9PvPCPE1YdizKNmVEUDqVX2stGG6DCXZP9mmuBqWi28pDydTP5WB4pchBIt1t/10qMH+c3IXy9dmlmb6HB87fgdYuEP5uyrthQPX1a9jFpi1zRdWkoT1o0kbryOUTJnq96SQPywmD1nNt9Un5q5BkFAW5kZj9JWpNVyCf4FRa0T1NYY/38LA/9gOz6QeoIS/dLqH1c6Urg6HLgjeiIddWvs1NIQ0w0NxmYuqoqozByRIKrBN+YFBknCRBs1P/uelDqHdlFHytwieaJI17ad+zOis6bNMrctETwu7a/A/03wo04YQ==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=RNLtXTuW8msOKDbX3uuRZDNq/Z1mjsHRBoAtOtn3hBFZKPaj+GGqRCNc84yZATwF/aHs3LKru1VzB3g1spQcicvnB6ThbrHy5/j73ybeyYmngibRZSoFfSrElpUD+oKdY1xtGpV8/Xz7b0zdxzzxjC6ELKrbdDbwV3V+M57WpfMLDa4rYQslH52/wDBPZNEYXqyX1/7FSv4BJGKOKItNSgnskEzwKfwo3CDdR7txBJwLBaFFZcuDFtgbJyVO2i+p0c1oBRUpuTgVkMu1K+PjN/g12S8521tcN5liN4e5aXT657a35pJVYnc9bf4SHGqUzRcmU6Ld+hoU+8RtioaP9A==
  • Authentication-results: canarie.ca; dkim=none (message not signed) header.d=none;canarie.ca; dmarc=none action=none header.from=concordia.ca;

Good morning, Chris

 

Could you please help us to solve the problem of missing realm?

 

Thank you, and have a nice day.

 

Yours,

Linchuan Yang (Antony)
CCIE# 61220

Cisco Certified Specialist # CSCO13331076
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

 

 

 

From: Linchuan Yang
Sent: Monday, July 26, 2021 11:47 AM
To: CANARIE Tickets System <tickets AT canarie.ca>
Subject: RE: [CANARIE-20210723101] Please help with the error of Android devices by using geteduroam app

 

Thank you so much for your help, Chris

 

I removed the server certificate in our profile. However, for the Outer ID Handling, I input the info as the following:

 

 

 

and the system gave an error:

 

 

 

Could you please show me how to configure the realm in our profile? What Realm name should we use?

 

Thank you, and have a nice day.

 

Yours,

Linchuan Yang (Antony)
CCIE# 61220

Cisco Certified Specialist # CSCO13331076
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

 

 

 

From: CANARIE Tickets System <tickets AT canarie.ca>
Sent: Monday, July 26, 2021 10:45 AM
To: Linchuan Yang <linchuan.yang AT concordia.ca>
Subject: Re: [CANARIE-20210723101] Please help with the error of Android devices by using geteduroam app

 

Attention This email originates from outside the concordia.ca domain. // Ce courriel provient de l'exterieur du domaine de concordia.ca

 

 

Linchuan Yang,

Thanks for your request. I called and left you a voicemail this morning. Here's the follow up on it!

We've consulted with geteduroam.app's team and reviewed your current profile.
Based on that we have these recommendations for the profile and then regression test things to ensure they are being provisioned as expected:

1.     checkbox the anonymous profile and use 'anonymous384135 AT concordia.ca' as the anonymous outer id that appropriately fingerprints the traffic. The '384135 portion is unique 

2.     remove the server cert as shown in red it is likely causing the problem and the server name is appropriately handled with the cn=wireless.concordia.ca

3.     One 1 and 2 are taken care of, please retest and include the additional SSID processing. Note that it too will need to handle the anonymous384135 AT concordia.ca outer id settings too.


Let us know if you have questions. The adjustments to the realm and cert are only a few clicks to adjust. 



 

Chris Phillips

CANARIE | Canadian Access Federation support
https://www.canarie.ca/identity/



07/23/2021 10:20 - Linchuan Yang wrote:

Dear Sir/Madam
 
We found that after switching the app from “eduroam CAT” to “geteduroam” for the Android devices, the end users get the error message (please find the screenshot in the attached file) after they selecting “Concordia University” and inputting the username and password. We tried with “eduroam CAT” app with the same steps, and everything is good for all of the Android clients. Furthermore, we tested the “geteduroam” app for iPhone, and the user can install the profile without any problem. Could you please help to solve this problem for the Android clients?
 
We also have another question: we setup two SSID (eduroam and ConcordiaUniversity) in the profile. For other systems (e.g. Win10, Macbook, iPhone, etc.), the profile push both eduroam and ConcordiaUnviersity configuration to the devices of end users. However, for Android devices (we tested with the app “eduroam CAT” because “geteduroam” does not work), the profile only push the configuration of eduroam to the Android devices, and we have to manually configure ConcordiaUniversity SSID on the Android devices. Is it possible to modify the profile for Android devices to push both SSID to the devices of end users?
 
Thank you, and have a nice day.
 
Yours,
Linchuan Yang (Antony)
CCIE# 61220
Cisco Certified Specialist # CSCO13331076
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

 




Archive powered by MHonArc 2.6.19.

Top of Page