The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Linchuan Yang <linchuan.yang AT concordia.ca>]

Dear Chris and All

 

After we removed the server certificate (wireless.concordia.ca) from our profile as you suggested in the previous e-mail. The Android client can download and install the profile with the app “geteduroam”. However, when they tried to login both “eduroam” and “ConcordiaUniversity” SSID, they got an error message that the password is wrong. In fact, they input the correct password.

 

Meanwhile, we also tested the app “eduroam CAT” on the Android devices, it can download and install the profile. And the clients can login “eduroam” SSID right away after the installation. However, as I mentioned in the previous e-mail, the app “eduroam CAT” for Android devices can only push the configuration of one SSID “eduroam” to the device, and could not push the configuration of “ConcordiaUnviersity” to the device, and we have to manually configure “ConcordiaUniversity” SSID.

 

Could you please help us to solve this problem as well?

 

Thank you, and have a nice day.

 

Yours,

Linchuan Yang (Antony)
CCIE# 61220

Cisco Certified Specialist # CSCO13331076
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

 

 

 

From: Linchuan Yang
Sent: Wednesday, July 28, 2021 9:47 AM
To: CANARIE Tickets System <tickets AT canarie.ca>
Cc: cat-users AT lists.geant.org
Subject: RE: [CANARIE-20210723101] Please help with the error of Android devices by using geteduroam app

 

Good morning, Chris and all

 

Do you have time to help us to check the problem of “missing realm”?

 

Thank you, and have a nice day.

 

Yours,

Linchuan Yang (Antony)
CCIE# 61220

Cisco Certified Specialist # CSCO13331076
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

 

 

 

From: Linchuan Yang
Sent: Tuesday, July 27, 2021 10:06 AM
To: CANARIE Tickets System <tickets AT canarie.ca>
Cc: cat-users AT lists.geant.org
Subject: RE: [CANARIE-20210723101] Please help with the error of Android devices by using geteduroam app

 

Good morning, Chris

 

Could you please help us to solve the problem of missing realm?

 

Thank you, and have a nice day.

 

Yours,

Linchuan Yang (Antony)
CCIE# 61220

Cisco Certified Specialist # CSCO13331076
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

 

 

 

From: Linchuan Yang
Sent: Monday, July 26, 2021 11:47 AM
To: CANARIE Tickets System <tickets AT canarie.ca>
Subject: RE: [CANARIE-20210723101] Please help with the error of Android devices by using geteduroam app

 

Thank you so much for your help, Chris

 

I removed the server certificate in our profile. However, for the Outer ID Handling, I input the info as the following:

 

 

 

and the system gave an error:

 

 

 

Could you please show me how to configure the realm in our profile? What Realm name should we use?

 

Thank you, and have a nice day.

 

Yours,

Linchuan Yang (Antony)
CCIE# 61220

Cisco Certified Specialist # CSCO13331076
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

 

 

 

From: CANARIE Tickets System <tickets AT canarie.ca>
Sent: Monday, July 26, 2021 10:45 AM
To: Linchuan Yang <linchuan.yang AT concordia.ca>
Subject: Re: [CANARIE-20210723101] Please help with the error of Android devices by using geteduroam app

 

Attention This email originates from outside the concordia.ca domain. // Ce courriel provient de l'exterieur du domaine de concordia.ca

 

 

Linchuan Yang,

Thanks for your request. I called and left you a voicemail this morning. Here's the follow up on it!

We've consulted with geteduroam.app's team and reviewed your current profile.
Based on that we have these recommendations for the profile and then regression test things to ensure they are being provisioned as expected:

1.     checkbox the anonymous profile and use 'anonymous384135 AT concordia.ca' as the anonymous outer id that appropriately fingerprints the traffic. The '384135 portion is unique 

2.     remove the server cert as shown in red it is likely causing the problem and the server name is appropriately handled with the cn=wireless.concordia.ca

3.     One 1 and 2 are taken care of, please retest and include the additional SSID processing. Note that it too will need to handle the anonymous384135 AT concordia.ca outer id settings too.

Let us know if you have questions. The adjustments to the realm and cert are only a few clicks to adjust. 



 

Chris Phillips

CANARIE | Canadian Access Federation support
https://www.canarie.ca/identity/

07/23/2021 10:20 - Linchuan Yang wrote:

Dear Sir/Madam
 
We found that after switching the app from “eduroam CAT” to “geteduroam” for the Android devices, the end users get the error message (please find the screenshot in the attached file) after they selecting “Concordia University” and inputting the username and password. We tried with “eduroam CAT” app with the same steps, and everything is good for all of the Android clients. Furthermore, we tested the “geteduroam” app for iPhone, and the user can install the profile without any problem. Could you please help to solve this problem for the Android clients?
 
We also have another question: we setup two SSID (eduroam and ConcordiaUniversity) in the profile. For other systems (e.g. Win10, Macbook, iPhone, etc.), the profile push both eduroam and ConcordiaUnviersity configuration to the devices of end users. However, for Android devices (we tested with the app “eduroam CAT” because “geteduroam” does not work), the profile only push the configuration of eduroam to the Android devices, and we have to manually configure ConcordiaUniversity SSID on the Android devices. Is it possible to modify the profile for Android devices to push both SSID to the devices of end users?
 
Thank you, and have a nice day.
 
Yours,
Linchuan Yang (Antony)
CCIE# 61220
Cisco Certified Specialist # CSCO13331076
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664