The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi Daniel,

 regarding the credentials prompt - removing it would be counterproductive. CAT installers provide more than one profile, in future when people start turning the OpenRoaming support there will be even more. Windows installer asks for credential once and installs them in all these profiles. Without that the user would be asked to enter credentials on the first connection to each of the networks in question. That workflow could also be misleading - if the users thought that this is normal to be asked to enter the credentials than they could be tricked into entering credentials into some spoofed networks, for instance one calling itself "eduraom". After accepting the connection (which they would probably also do) this would lead to credentials leak.

Under normal circumstances CAT will delete the credentials profile. If the installation fails (which happens really rarely), it leaves that profile and an installation script. This second feature should probably be turned off and I plan do do an update like that. But even if the credentials were left in the temporary directory, it would still require breaking into the users's machine to steal them and if you break into the machine you can do a lot of bad things and the tiny probability that someone could find this profile would really be the least of your problems.

Cheers

Tomasz

W dniu 18.10.2022 o 12:45, Daniel Muscat (via cat-users Mailing List) pisze:

Dear Tomasz, 

The installation procedures on our website have been updated. Thanks a lot for the help.

In regards to the credentials issue, I have discussed this with Dave and believe it is best that the step to enter the username and password during installation should be removed.

Regards

Daniel

On Mon, 19 Sept 2022 at 12:45, Daniel Muscat <daniel.muscat AT um.edu.mt> wrote:

Let me discuss with management on the credentials issue and will get back

Regards

Daniel

On Mon, 19 Sept 2022 at 12:38, Tomasz Wolniewicz <twoln AT umk.pl> wrote:

Hi Daniel,

  the problem was caused by an old wireless card on the given machine. The profile "eduroam® via partner" was not being installed and this instead of being ignored was reported as an error. This was one of the fixes I have just pushed.

As to the credentials - yes they are being pushed to a temporary file which is deleted at the installer exit - unless an error appeared. The reason for this is that we need an additional program for pushing the credentials and that needs to be in a form of an XML file.  If the installation fails we generate an installation script which could be run from the command window and for it to proceed we need input data. Since probably nobody ever used this script I could perhaps just throw this functionality away. Also I could be deleting the credentials file during DEBUG runs.

I guess making this change would make things more safe without doing any real harm to anyone.

Cheers

Tomasz

W dniu 19.09.2022 o 12:18, Daniel Muscat pisze:

Here it is...

Could it be some confusion because the registered trademark was included in the latest CAT?

Also, I have noticed that you are saving clear text passwords in user_cred.xml. I am somehow concerned about it and would like to hear your take on it.

Regards

Daniel

On Fri, 16 Sept 2022 at 12:19, Daniel Muscat <daniel.muscat AT um.edu.mt> wrote:

Will do next Monday

On Fri, 16 Sep 2022, 11:41 Tomasz Wolniewicz, <twoln AT umk.pl> wrote:

Hi Daniel,

 I have just downloaded the installer for University of Malta and the installation on Windows 10 run without a problem.

I would like to ask you to to run the installer in the cmd window adding -DEBUG=4

This will generate a CAT.log in for Documents directory. Could you please send me that file (no passwords will be stored there).

Yours

Tomasz

W dniu 15.09.2022 o 10:22, Daniel Muscat (via cat-users Mailing List) pisze:

Hi Stefan, unfortunately, the problem persists. Let us know what analysis we can do from our side to help you out.

Regards

Daniel

On Wed, 14 Sept 2022 at 18:36, Daniel Muscat <daniel.muscat AT um.edu.mt> wrote:

Thanks Stefan. I will be able to test tomorrow morning. Will update you

Regards

Daniel

On 14 Sep 2022, at 15:39, Stefan Winter <stefan.winter AT restena.lu> wrote:

Hello!

We've just implemented a fix which probably solves your problem. Can you download a fresh installer and try again?

Thank you,

Stefan Winter

On 13.09.22 09:51, Daniel Muscat (via cat-users Mailing List) wrote:

Dear Sirs,

Here at the University Of Malta, we are receiving various complaints about the new version of CAT. Various users are installing the application, and at Installation complete, it reports that  "Network Installation had errors". We were able to reproduce such an issue and am attaching a screenshot., Some users also complained that they could not log in to eduroam, after reporting the network error, which we failed to reproduce. 

Let me know what analysis you may need to sort the problem out.

--

Daniel Muscat  |  Senior IT Systems Engineer II B.Eng.(Hons)(Melit.), M.Sc.(Melit.), Ph.D.(Melit.)
IT Services Technical Services 
+356 2340 4125

He/Him

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

-- 
This email may contain information for limited distribution only, please treat accordingly.

Fondation Restena, Stefan WINTER
Chief Technology Officer
2, avenue de l'Université
L-4365 Esch-sur-Alzette

--

Regards

Daniel

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uniwersyteckie Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika         Nicolaus Copernicus University,
pl. Rapackiego 1, Torun                pl. Rapackiego 1, Torun, Poland
            tel: +48-56-611-2750; tel kom.: +48-693-032-576

                  --

Regards

Daniel

-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uniwersyteckie Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika         Nicolaus Copernicus University,
pl. Rapackiego 1, Torun                pl. Rapackiego 1, Torun, Poland
            tel: +48-56-611-2750; tel kom.: +48-693-032-576

          --

Regards

Daniel

      --

Regards

Daniel

      To unsubscribe,
        send this message:
        mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
        Or use the following link:
        https://lists.geant.org/sympa/sigrequest/cat-users
    
-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uniwersyteckie Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika         Nicolaus Copernicus University,
pl. Rapackiego 1, Torun                pl. Rapackiego 1, Torun, Poland
            tel: +48-56-611-2750; tel kom.: +48-693-032-576