The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Lukas Wringer <Lukas.Wringer AT rz.uni-augsburg.de>]

Hi,

it seems the profile also deploys Settings for eduroam via ethernet/LAN 
(eduroam® Konfiguration für Kabelnetzwerke)?

Are thos macBooks newer models with only Thunderbolt and no ethernet by 
any chance?

Greetings, Lukas

Am 24.11.21 um 14:15 schrieb Martin Pauly:
> Hi,
>
> we have some 10+ MacBooks that won't install our .mobileconfig as 
> delivered by cat.eduroam.org
> (the others do import it, including my own test devices).
> The error message is (translated from German):
> Profile installation failed: The Wifi Payload could not be installed. 
> Network interface not found.
>
> One affected user managed to grab a Log snippet that might give a hint
> where things go wrong:
>
> Tue Nov 23 11:28:01.765 <kernel> AWDL Sync Enabled 0, data path state[1]
> Tue Nov 23 11:28:16.733 <airport[162]> systemWokenByWiFi: System Wake 
> Reason not found
> Tue Nov 23 11:28:36.878 <airport[162]> systemWokenByWiFi: System Wake 
> Reason not found
> Tue Nov 23 11:28:44.254 <airport[162]> Could not set property 
> APPLE80211_REGKEY_AWDL_MAC_ADDRESS_IN_USE to 1
> Tue Nov 23 11:28:47.068 <airport[162]> systemWokenByWiFi: System Wake 
> Reason not found
> Tue Nov 23 11:28:47.082 <airport[162]> Could not set property 
> APPLE80211_REGKEY_AWDL_MAC_ADDRESS_IN_USE to 0
> Tue Nov 23 11:28:47.802 <airport[162]> airportdProcessDLILEvent: <en0> 
> event=1, flags=0xFFFF8863, lastPowerPref=on
> Tue Nov 23 11:28:47.802 <airport[162]> airportdProcessDLILEvent: en0 
> marked UP, applying user power preferences (ON).
> Tue Nov 23 11:28:47.802 <airport[162]> airportdProcessDLILEvent: <en0> 
> Setting power ON
> <airport[162]> airportdProcessDLILEvent: <en0> event=1, 
> flags=0xFFFF8863, lastPowerPref=on
> Tue Nov 23 11:28:47.808 <airport[162]> airportdProcessDLILEvent: en0 
> marked UP, applying user power preferences (ON).
> Tue Nov 23 11:28:47.808 <airport[162]> airportdProcessDLILEvent: <en0> 
> Setting power ON
> Tue Nov 23 11:28:47.841 <kernel> parseRSNIE: groupCipherType = 5 
> pairwiseCipherType = 5 authSel = 1
> Tue Nov 23 11:28:47.841 <kernel> initWithInterfaceAndIE: _myMacAddress 
> xx:xx:xx:xx:xx:xx
> Tue Nov 23 11:28:48.089 <kernel> Failed test for valid 
> apple80211_postMessage_tlv_types in data, 65535
> Tue Nov 23 11:28:48.089 <kernel> Unexpected payload found for message 
> 74, dataLen 104
> Tue Nov 23 11:28:48.089 <kernel> payload Data ff ff 00 00 00 00 00 00 dc 
> f7 19 3e fc 6b     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
> Tue Nov 23 11:28:48.089 <kernel> Error storing postMessage 74
> Tue Nov 23 11:28:48.097 <kernel> postMessage::1412 
> APPLE80211_M_BSSID_CHANGED received
> Tue Nov 23 11:28:48.097  <kernel> No InterfaceAverageCCA
> Tue Nov 23 11:28:48.097 <kernel> Adding setInterfaceAverageCCA with cca 0
> Tue Nov 23 11:28:48.097 <kernel> Added known cca 0 for channel 100 into 
> setInterfaceAverageCCA
> Tue Nov 23 11:28:48.100 <kernel> en0: Received EAPOL packet (length = 67)
> Tue Nov 23 11:28:48.100 <kernel> inputEAPOLFrame: Received non-key EAPOL 
> frame (53)
> Tue Nov 23 11:28:48.105 <kernel> en0: Received EAPOL packet (length = 60)
> Tue Nov 23 11:28:48.105 <kernel> inputEAPOLFrame: Received non-key EAPOL 
> frame (46)
> Tue Nov 23 11:28:48.110 <kernel> en0: Received EAPOL packet (length = 60)
> Tue Nov 23 11:28:48.110 <kernel> inputEAPOLFrame: Received non-key EAPOL 
> frame (46)
> Tue Nov 23 11:28:48.121 <kernel> en0: Received EAPOL packet (length = 1022)
> Tue Nov 23 11:28:48.121 <kernel> inputEAPOLFrame: Dropping EAPOL frame, 
> not key frame
> Tue Nov 23 11:28:48.127 <kernel> en0: Received EAPOL packet (length = 1018)
> Tue Nov 23 11:28:48.127 <kernel> inputEAPOLFrame: Dropping EAPOL frame, 
> not key frame
> Tue Nov 23 11:28:48.128 <airport[162]> ERROR: sharingd (428) is not 
> entitled for com.apple.wifi.join_history, will not allow request
> Tue Nov 23 11:28:48.129 <airport[162]> ERROR: rapportd (410) is not 
> entitled for com.apple.wifi.join_history, will not allow request
> Tue Nov 23 11:28:48.132 <kernel> en0: Received EAPOL packet (length = 1018)
> Tue Nov 23 11:28:48.132 <kernel> inputEAPOLFrame: Dropping EAPOL frame, 
> not key frame
> Tue Nov 23 11:28:48.139 <kernel> en0: Received EAPOL packet (length = 1018)
> Tue Nov 23 11:28:48.139 <kernel> inputEAPOLFrame: Dropping EAPOL frame, 
> not key frame
> Tue Nov 23 11:28:48.144 <airport[162]> ERROR: sharingd (428) is not 
> entitled for com.apple.wifi.join_history, will not allow request
> Tue Nov 23 11:28:48.145 <kernel> en0: Received EAPOL packet (length = 1018)
>
> The "Unexpected payload" is highly suspicious, of course.
> I could not find anything like
> dc f7 19 3e fc 6b
> in a hexdump of the .mobileconfig, cf. attachment.
> So I assume that somehow the wrong data is passed to the kernel function 
> which is supposed to read the profile.
> I also played around a bit and removed the "Configure wired Interfaces" 
> Option from one of our profiles,
> to no avail. One Student succeeded with a change to EAP-TTLS/PAP which 
> we provide as "Samsung Workaround".
> We do set an anonymous Outer ID in the profile.
>
> My first guess was that the problem is related to leftovers of old 
> configs being present
> in the keychain. But with Keychain Access, we found nothing. It also 
> turned out that at least
> macOS versions 10.14 to current are affected, even devices that have 
> never seen an eduroam
> config before. Any ideas are welcome.
>
> TIA, Martin

--
Lukas Wringer

Universität Augsburg
Rechenzentrum
Service & Support
86135 Augsburg

Attachment: OpenPGP_signature
Description: OpenPGP digital signature