The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Jens Schleede <jens.schleede AT uni-greifswald.de>]

Hi Tomasz,

I can confirm that the Phase2Authentication section in our xml is empty. We 
use EAP-TTLS with PAP. We have configured PAP as the only EAP method. See 
attached wlan_prof-1.xml & wlan_prof-2.xml. For your reference we have 
generated a new profile for Windows11, see Win11generated-eduroam.xml.

Can you fix this, please? Should I open a GitHub issue or something?

Best regards
Jens

> On 31. Aug 2022, at 21:10, Tomasz Wolniewicz (via cat-users Mailing List) 
> <cat-users AT lists.geant.org> wrote:
> 
> Hi,
> 
>   the way I see it you have TTLS/MACHAPv2 set as the EAP priority, and this 
> is what the attached profile sets. However as you point out the problem may 
> be the empty Phase2Authentication section.
> 
> With Windows TTLS we were not able to find a way to install user 
> credentials therefore we just made this part unset leaving it to Windows to 
> ask for credentials at the first login. Now it looks as if Windows11 makes 
> a peoblem out of that.
> 
> If you change the priority of EAP methods in CAT and make PEAP first then 
> you will get the PEAP profile and everything should work well (I hope).
> 
> Tomasz
> 
> 
> 
> W dniu 31.08.2022 o 16:48, Martin Bickel (via cat-users Mailing List) pisze:
>> Hi Tomasz,
>> 
>> today I have a test machine and can make tests myself.
>> 
>> You find attached our profiles after a installation on Win11 and Win10. 
>> There are no differences in both files.
>> 
>> I think I found the problem by checking the xml file. The section 
>> <Phase2Authentication/> is not filled with our parameters. When I manually 
>> set up eduroam and make then an export this section is filled with this 
>> parameters on Win11:
>>   <Phase2Authentication>
>>     <MSCHAPv2Authentication>
>> <UseWinlogonCredentials>false</UseWinlogonCredentials>
>>     </MSCHAPv2Authentication>
>>   </Phase2Authentication>
>> 
>> So in our setting we use PEAP with MSCHAPv2 for the normal profiles, but 
>> this parameter is missing in the xml file.
>> 
>> I think Win11 here makes a check and gives an error and Win10 does not 
>> make a check.
>> 
>> Kind regards
>> Martin
>> 
>> Am 30.08.2022 um 22:28 schrieb Tomasz Wolniewicz:
>>> Hi,
>>> 
>>>    I am on vacation with no possibility to actually retry the problem 
>>> myself.
>>> 
>>> For the second profile "eduroam® via partner" it is quite OK to give this 
>>> error message. This is a Hotspot 2.0 profile installed "juts in case" 
>>> someone found a network with an SSID different from eduroam but still 
>>> claiming to be eduroam with a Hostspot 2.0 RCOI. Not all network cards 
>>> support HS 2.0 and for such cases the installation is supposed to fail 
>>> silently.
>>> 
>>> However it should not happen that the proper eduroam profile. Could you 
>>> send ne such a profile, I would that a look what the problem could be and 
>>> perhaps find the reason.
>>> 
>>> The other issue - the "not updated" message should not appear any more 
>>> with the newly downloaded installers.
>>> 
>>> Tomasz
>>> 
>>> 
>>> W dniu 30.08.2022 o 14:55, Martin Bickel (via cat-users Mailing List) 
>>> pisze:
>>>> Hello everybody,
>>>> 
>>>> I can confirm a problem for our university with Windows 11 too. Since 
>>>> friday I have 4 people with such a problem in out ticket system.
>>>> 
>>>> In the normal debug log from one user I found:
>>>> Execute: C:\Windows\sysnative\netsh wlan add profile 
>>>> C:\Users\charl\AppData\Local\Temp\wlan_prof-0.xml
>>>> netsh returned 1
>>>> Profile installation error for "eduroam®"
>>>> Execute: C:\Windows\sysnative\netsh wlan add profile 
>>>> C:\Users\charl\AppData\Local\Temp\wlan_prof-1.xml
>>>> netsh returned 1
>>>> Profile installation error for "eduroam® via partner"
>>>> 
>>>> For more details I have to ask the user for a meeting.
>>>> 
>>>> The problem with the message "Windows 10 is not up to date" at the 
>>>> Windows 11 machine is gone away. I think the update from friday has 
>>>> fixed it.
>>>> @Jens Schleede: have you tried to download a new installer since friday? 
>>>> There was a thread called "Windows11 Problems​" on this list for this 
>>>> message.
>>>> 
>>>> Kind regards
>>>> 
>>>> Martin
>>>> 
>>>> Am 30.08.22 um 11:13 schrieb Jens Schleede (via cat-users Mailing List):
>>>>> Hello list,
>>>>> 
>>>>> Our CAT eduroam installer does not work on Windows 11.
>>>>> 
>>>>> I have debugged the problem a bit and found the following error when 
>>>>> the wlan profile is installed:
>>>>> 
>>>>>   PS C:\Users\User\Downloads\eduroam> netsh wlan add profile 
>>>>> .\wlan_prof-0.xml
>>>>>   Profile format error 0xE225:
>>>>>   The network connection profile is corrupted.
>>>>> 
>>>>> 
>>>>> 
>>>>> Also the installer tells the users that their Windows is not up to date 
>>>>> and they should upgrade their Windows10.
>>>>> 
>>>>> 
>>>>> Best regards
>>>>> Jens Schleede
>>>>> 
>>>>> -- 
>>>>> 
>>>>> Jens Schleede
>>>>> Universitätsrechenzentrum (URZ)
>>>>> Universität Greifswald
>>>>> Felix-Hausdorff-Str. 18
>>>>> 17489 Greifswald
>>>>> Germany
>>>>> 
>>>>> Tel. +49 3834 420 1423
>>>>> Fax. +49 3834 420 1401
>>>>> 
>> 
> -- 
> Tomasz Wolniewicz
>          twoln AT umk.pl        http://www.home.umk.pl/~twoln
> 
> Uniwersyteckie Centrum Informatyczne   Information&Communication Technology 
> Centre
> Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
> pl. Rapackiego 1, Torun            pl. Rapackiego 1, Torun, Poland
> tel: +48-56-611-2750               tel kom.: +48-693-032-576
> 
> To unsubscribe, send this message: 
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link: 
> https://lists.geant.org/sympa/sigrequest/cat-users

Attachment: Win11generated-eduroam.xml
Description: XML document

Attachment: wlan_prof-1.xml
Description: XML document

Attachment: wlan_prof-0.xml
Description: XML document

Attachment: smime.p7s
Description: S/MIME cryptographic signature