Skip to Content.

cat-users - [[cat-users]] [cat] [android] why does the "realm" field gets the "Name (CN) of Authentication Server"?

cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive


[[cat-users]] [cat] [android] why does the "realm" field gets the "Name (CN) of Authentication Server"?


Chronological Thread 
  • From: Giuseppe Mainardi <giuseppe.mainardi AT unifg.it>
  • To: cat-users AT lists.geant.org
  • Subject: [[cat-users]] [cat] [android] why does the "realm" field gets the "Name (CN) of Authentication Server"?
  • Date: Tue, 24 Oct 2023 10:18:14 +0200
  • Organization: Università di Foggia

Positive.

  1. I set up     Name (CN) of Authentication Server  = freeradius.unifg.it
  2. I checked the field realm on the client (android 13). It contained      freeradius.unifg.it
  3. but using the APP the configuration worked as well (android 5 and android 13).
Thanks for the help.

Giuseppe


Il 20/10/2023 13:17, Giuseppe Mainardi ha scritto:

Greetings to all,
I'm trying CAT for the first times and I see an unexpected behaviour.
When I build CAT I set     Name (CN) of Authentication Server  = CN=freeradius,DC=unifg,DC=it
because that is the radius server to use for that profile (Eduroam-AD). We have two profiles, but only this one is production-published.

When I load the eap-config file into getEduroam, the field "realm" gets the value "CN=freeradius,DC=unifg,DC=it" and the authentication doesn't work.
If I change the value, typing "unifg.it", as it is supposed to be, the authentication works.

Looking into the config file, the only place where that value is mentioned is: <ServerID>CN=freeradius,DC=unifg,DC=it</ServerID>

Where is the realm mentioned in the config file? Nowhere, unless... <InnerIdentitySuffix>unifg.it</InnerIdentitySuffix> but that setting is related to "Enforce realm suffix in username".

Is it my fault that I didn't understand what is "Name (CN) of Authentication Server" purpose?

Is there a more detailed documentation in order to better understand what values to set up for a fully functioning CAT config?

Trials made on Android 13 last update.


Second request:

is eduroamCAT fully compatible with Android 5.0.1? The first tests with that O.S. are negative. It is impossible to choose the SSID to connect with, the only SSID given by eduroamCAT is "eduroam" which is not the one we have to use in this test phase.


Thanks in advance.

-- 
Giuseppe Mainardi
Università di Foggia
Area Sistemi Informativi
Servizio Amministrazione di sistemi informativi, accounting e single-sign-on (Resp.)
Via Gramsci, 89/91 - 71122 Foggia
Tel.: 0881/338440
-- 
Giuseppe Mainardi
Università di Foggia
Area Sistemi Informativi
Servizio Amministrazione di sistemi informativi, accounting e single-sign-on (Resp.)
Via Gramsci, 89/91 - 71122 Foggia
Tel.: 0881/338440





Archive powered by MHonArc 2.6.24.

Top of Page