cat-users AT lists.geant.org
Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)
List archive
[[cat-users]] [cat] [android] why does the "realm" field gets the "Name (CN) of Authentication Server"?
Chronological Thread
- From: Giuseppe Mainardi <giuseppe.mainardi AT unifg.it>
- To: cat-users AT lists.geant.org
- Subject: [[cat-users]] [cat] [android] why does the "realm" field gets the "Name (CN) of Authentication Server"?
- Date: Tue, 24 Oct 2023 10:18:14 +0200
- Organization: Università di Foggia
Positive.
- I set up Name (CN) of Authentication Server = freeradius.unifg.it
- I checked the field realm on the client (android 13). It contained freeradius.unifg.it
- but using the APP the configuration worked as well (android 5 and android 13).
Giuseppe
Greetings to all,
I'm trying CAT for the first times and I see an unexpected
behaviour.
When I build CAT I set Name (CN) of
Authentication Server = CN=freeradius,DC=unifg,DC=it
because that is the radius server to use for that profile
(Eduroam-AD). We have two profiles, but only this one is
production-published.
When I load the eap-config file into getEduroam, the field
"realm" gets the value "CN=freeradius,DC=unifg,DC=it"
and the authentication doesn't work.
If I change the value, typing "unifg.it", as it is supposed to
be, the authentication works.
Looking into the config file, the only place where that value
is mentioned is: <ServerID>CN=freeradius,DC=unifg,DC=it</ServerID>
Where is the realm mentioned in the config file? Nowhere,
unless... <InnerIdentitySuffix>unifg.it</InnerIdentitySuffix>
but that setting is related to "Enforce realm suffix in username".
Is it my fault that I didn't understand what is "Name (CN) of Authentication Server" purpose?
Is there a more detailed documentation in order to better understand what values to set up for a fully functioning CAT config?
Trials made on Android 13 last update.
Second request:
is eduroamCAT fully compatible with Android 5.0.1? The first tests with that O.S. are negative. It is impossible to choose the SSID to connect with, the only SSID given by eduroamCAT is "eduroam" which is not the one we have to use in this test phase.
Thanks in advance.
-- Giuseppe Mainardi Università di Foggia Area Sistemi Informativi Servizio Amministrazione di sistemi informativi, accounting e single-sign-on (Resp.) Via Gramsci, 89/91 - 71122 Foggia Tel.: 0881/338440
-- Giuseppe Mainardi Università di Foggia Area Sistemi Informativi Servizio Amministrazione di sistemi informativi, accounting e single-sign-on (Resp.) Via Gramsci, 89/91 - 71122 Foggia Tel.: 0881/338440
- [[cat-users]] [cat] [android] why does the "realm" field gets the "Name (CN) of Authentication Server"?, Giuseppe Mainardi, 10/20/2023
- Re: [[cat-users]] [cat] [android] why does the "realm" field gets the "Name (CN) of Authentication Server"?, Martin Stanislav, 10/22/2023
- Re: [[cat-users]] [cat] [android] why does the "realm" field gets the "Name (CN) of Authentication Server"?, Vlad Mencl, 10/23/2023
- [[cat-users]] [cat] [android] why does the "realm" field gets the "Name (CN) of Authentication Server"?, Giuseppe Mainardi, 10/24/2023
Archive powered by MHonArc 2.6.24.