The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

ad 1) we don't distribute test credentials here. If the installer matching your acquaintance's credential works, the exact same workflow should work when other CAT-generated installers for other institutions are used.

ad 2) You can do that in-advance download, but should update the batch of installers every once in a while, because configuration details DO change over time. Yes, for TLS a client certificate is needed. This is personal to a user, so there is no way to obtain it in advance. You need to go interactive and ask for it.

Greetings,

Stefan Winter

Am 19.08.22 um 22:53 schrieb Ordit Gross (via cat-users Mailing List):

Hey, any chance someone can answer my questions? 

Thanks in advance

On Tue, 19 Jul 2022 at 19:54 Ordit Gross <ordit.gross AT orcam.com> wrote:

hi Stefan,

Thanks for your reply. Yes, you understood exactly what I meant, we will probably allow users with both choices - thanks.

Two more questions I may:

1. I would like to perform some tests to verify that the whole flow works as expected.

For that I assume I need to get some credentials for several institutions - 
I managed to get one from an acquaintance of mine, but is there a better way to go about this? 

2. Regarding the "point in time" configuration, due to space constraints, I rather save generated wpa_supplicant config files in advance and at runtime add the user/password to the configuration.

I believe this should work for PEAP and TTLS. For TLS I should also request the user certificate at runtime, correct?

appreciate your help

Ordit

On Wed, Jul 13, 2022 at 12:18 PM Stefan Winter <stefan.winter AT restena.lu> wrote:

Hello!

I understand that you would be installing using the Linux Python-based installer.

The configuration details that the installers push to the device are different for every institution that participates in eduroam.

So, during installation you will need a kind of discovery service that determines /which/ installer will be used (lists of institutions can be queried via the public API). The installers themselves can then be downloaded on-demand in real-time (again via the API).

If you meant to imply that your devices will have no internet connectivity at all during installation, then this is obviously a hard problem. You could of course try to download a point-in-time list of institutions and all installers, and embed that in the device - but the data will get stale quickly.

Alternatively, you could ask the user during your installation routine to go to the CAT website, download the pertinent installer, and to subsequently upload it to your device. That's a few more manual steps, but guarantees fresh data. This is the approach I'd recommend personally.

Greetings,

Stefan Winter

On 29.06.22 10:27, Ordit Gross (via cat-users Mailing List) wrote:

hi,

my name is Ordit, I'm a developer at Orcam. Our devices can connect to wifi networks and we plan on supporting eduroam wifi.

Our product may reach any educational institution, and we would like to allow the best experience for our customers that need to configure the wifi for the first time.

What is the best way of supporting eduroam configuration given that we don't know in advance which installer will be needed, and sending the python file into our device at runtime will not be possible.

thanks in advance

Ordit

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

-- 
This email may contain information for limited distribution only, please treat accordingly.

Fondation Restena, Stefan WINTER
Chief Technology Officer
2, avenue de l'Université
L-4365 Esch-sur-Alzette

      To unsubscribe,
        send this message:
        mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
        Or use the following link:
        https://lists.geant.org/sympa/sigrequest/cat-users

-- 
This email may contain information for limited distribution only, please treat accordingly.

Fondation Restena, Stefan WINTER
Chief Technology Officer
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Attachment: OpenPGP_signature
Description: OpenPGP digital signature