The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi,

  CAT tests have been designed to catch problems like UDP fragmentation, therefore CAT is sending artificially enlarged RADIUS packets. It could be that a firewall in front of your national RADIUS servers is rejecting UDP fragments, thus causing the communication to fail. Large packets typically appear with EAP-TLS packets containing large user certificates, but for users authenticating with PEAP or TTLS typically this does not happen.

If it is indeed true that packets are dropped on the firewall then your RADIUS might not record anything.

Yours

Tomasz Wolniewicz

W dniu 7.07.2025 o 21:31, Andre Luis Forigato (via cat-users Mailing List) pisze:

        Dear all,
      
        We are experiencing difficulties when performing authentication
        tests through 
          cat.eduroam.org.
      
        Brazilian institutions have conducted tests with their
        respective users using the CAT, but the authentications were not
        successfully completed. Upon analyzing the logs from the
        national federation in Brazil, we observed that no
        authentication requests originating from the CAT are reaching
        us.
      
        It is important to note that this issue occurs exclusively with
        tests performed via the CAT. Brazilian users authenticating from
        other countries are still able to successfully access their home
        institutions in Brazil.
      
        We kindly request that this issue be investigated.
      
        We look forward to your response.
      
        Best regards,

André Luis Forigato | Analista de TI
Gerência de Tecnologia da Informação (GTI) Diretoria Adj. de Tecnologia da Informação (DATI) Tel.: +55 19 3787-3300 | Teams: andre.forigato AT rnp.br
www.rnp.br

      To
        unsubscribe, send this message:
        mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
        Or use the following link:
        https://lists.geant.org/sympa/sigrequest/cat-users
    
-- 
Tomasz Wolniewicz

Attachment: smime.p7s
Description: Kryptograficzna sygnatura S/MIME