The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi,

  CAT generates installers the moment the is a request for download. There is a separate installer for every profile in a given institution and every language. Once the installer is generated (and signed) it stays in the cache and all future downloads will use it. The cache is invalidated by any changes made to the profile by the administrator (it can be also cleared by the CAT superadmin).

I was using the English version of the installer for your institution which can be directly downloaded from https://cat.eduroam.org/user/API.php?action="downloadInstaller&lang=en&profile=6809&device=w10&generatedfor=user&openroaming=0

When you check the properties of the downloaded file and digital signatures, you should see that it was signed on 29.09.2022 at 14:28:22 (CEST). This should confirm that you have the same file.

Tomasz

W dniu 24.10.2022 o 10:15, Daniel Muscat pisze:

Tomasz... been thinking a bit.... can you send the sha256sum of the installation file you used to test

On Sat, 22 Oct 2022 at 19:20, Tomasz Wolniewicz <twoln AT umk.pl> wrote:

Hmm,

  the installation process is:

1. Collect all info from the user (including the credentials)

2. install the wifi profile

3. push credentials

The moment that eduroam prfile is installed, Windows should start connecting, perhaps this can be faster that the credentials push - I never saw it myself, though., Perhaps it is worth considering to turn on the connect automatically only after the credentials are installed. This workflow would be easiest to implement in an application like geteduroam which uses API calls rather than things like netsh.

Cheers

Tomasz

W dniu 21.10.2022 o 23:14, Hunter Fuller pisze:

Quite often we see the "Password required for eduroam" prompt during CAT installation on Windows 10, however, the network actually connects without re-entering credentials.

I think this is just some Windows weirdness during profile installation, if the connection process starts very quickly after the profile is installed (maybe while it is in some "half-installed" state).

I think it is safe (if annoying) to ignore this and troubleshoot the other issues (which we do not have here at UAH).

--
Hunter Fuller (they)
Router Jockey
VBH M-1C
+1 256 824 5331

Office of Information Technology
The University of Alabama in Huntsville
Network Engineering

On Fri, Oct 21, 2022 at 4:47 AM Tomasz Wolniewicz <cat-users AT lists.geant.org> wrote:

Hi,

 I have just tested:

W10 Pro 21H2

W11 Pro 21H2

W11 Pro 22H2

Using the CAT installer and the test credentials that you have sent me - all worked without any problems. I was able to connect to our eduroam network just fine.

In none of these cases I have seen behaviour like the screenshots that you have sent.

Therefore this must be something fairly special.

Are all your users using the same realm that the test credentials you have sent me? I am now starting to search for something fairly unusual.

Perhaps someone on this list has experienced something similar?

Cheers

Tomasz

W dniu 21.10.2022 o 09:47, Daniel Muscat (via cat-users Mailing List) pisze:

Tomasz 

Something worth stating is when I tested for the other problems we had before, everything was working fine. It seems though that there was a further update afterwards (possibly after telling you that the issue can be regarded as closed) which seems to have created these problems.

Regarding-  

"I am not sure why the users are getting a prompt for credentials. This never happens in my tests after the CAT installation. This actually is something worth remembering - if the users's pasword is changed on the server side, Windows will not just prompt for a new password, the user needs to reinstall the eduroam profile." 

I will check next Monday on this.

I can confirm that the SSID is eduroam. Also I clarify that once the user inputs the username and password the second time it will connect

For other devices, I need to check on Monday, but I am not aware of our support receiving complaints on other devices

Regards

Daniel

On Fri, 21 Oct 2022 at 09:18, Tomasz Wolniewicz <twoln AT umk.pl> wrote:

Hi,

 I have looked at your configuration and it appears to be broken, at least it will not be possible to use eduroam outside of your institution. You have defined your realm to be "s2.um.edu.mt". There is no DNS entry for this realm, therefore the eduroam roaming infrastructure will not be able to route the authentication packets.

Your outer identity is therefore set to "anonymous AT s2.um.edu.mt". It may be that internally you recognise this domain name and that your server accepts this username, but it is also quite likely that authentications just fail. The screendumps that you have sent come directly from Windows. Most likely Windows is trying to connect (this is why it says "connecting") but fails.

I am not sure why the users are getting a prompt for credentials. This never happens in my tests after the CAT installation. This actually is something worth remembering - if the users's pasword is changed on the server side, Windows will not just prompt for a new password, the user needs to reinstall the eduroam profile.

This is a really far-fetched question, but are you sure that the SSID of your network is "eduroam" and not "eduroam®". The second would explain it all.

How about other devices - Apple, Linux - do they have a problem connecting?

Tomasz

W dniu 20.10.2022 o 20:30, Daniel Muscat (via cat-users Mailing List) pisze:

Dear CAT support,

I have to report three issues with the latest version of Windows 10 CAT for the University of Malta.

• Whilst installing, the below appears. Its a nuisance

• After installation, the eduroam network is presented as "Connecting"

This is confusing our students/staff as it is not true that the device is trying to connect.

• On trying to connect, we are being requested to enter a username and password though they were entered correctly during installation.

 

--

Regards

Daniel

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uniwersyteckie Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika         Nicolaus Copernicus University,
pl. Rapackiego 1, Torun                pl. Rapackiego 1, Torun, Poland
            tel: +48-56-611-2750; tel kom.: +48-693-032-576

                        --

Regards

Daniel

                      To
                        unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
                        Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users
                    
-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uniwersyteckie Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika         Nicolaus Copernicus University,
pl. Rapackiego 1, Torun                pl. Rapackiego 1, Torun, Poland
            tel: +48-56-611-2750; tel kom.: +48-693-032-576
                    To
                      unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
                      Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users
                  
                
              
            
-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uniwersteckie Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika        Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750                  tel kom.: +48-693-032-576

      --

Regards

Daniel

-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uniwersyteckie Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika         Nicolaus Copernicus University,
pl. Rapackiego 1, Torun                pl. Rapackiego 1, Torun, Poland
            tel: +48-56-611-2750; tel kom.: +48-693-032-576