Skip to Content.
Sympa Menu

cat-users - RE: [[cat-users]] Windows Authentication Issue (MSCHAPv2 / €) - Request for Feedback

cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Chronological Thread  
  • From: Philippe Taurines <address@concealed>
  • To: Tomasz Wolniewicz <address@concealed>, "address@concealed" <address@concealed>, "address@concealed" <address@concealed>
  • Subject: RE: [[cat-users]] Windows Authentication Issue (MSCHAPv2 / €) - Request for Feedback
  • Date: Wed, 17 Sep 2025 11:06:35 +0000

Hello Tomasz,

 

Thanks for this suggestion. I just checked it after forgetting the eduroam Wi-Fi network and eduroam®.

 

And here is the result of the configuration using only the Windows login without cat-eduroam:

 

  • If the password contains the "€" character, the eduroam login does not work.

 

  • If the password does not contain the "€" character, the eduroam login works.

 

And I found this thread that seems to address this issue: https://community.arubanetworks.com/discussion/special-characters-in-passwords-peap

 

It seems a real shame that no one has been able to resolve this issue for years. It's likely that many users are turning away from using eduroam because they don't understand why the login isn't working on their computers.

 

If anyone is able to submit a report to Microsoft, that might be another avenue to fix this bug.

 

If any of you have any ideas for fixing this or a list of problematic characters, that would be a good start.

 

Sincerely,

 

De : Tomasz Wolniewicz <address@concealed>
Envoyé : mercredi 17 septembre 2025 11:26
À : Philippe Taurines <address@concealed>; address@concealed; address@concealed
Objet : Re: [[cat-users]] Windows Authentication Issue (MSCHAPv2 / €) - Request for Feedback

 

Hi,

  Did you try delete all eduroam profiles and just connect to eduroam without prior CAT installation. Windows should pop up some confirmations but it should connect. This test would tell us if it is the actual Windows supplicant fault or perhaps a CAT error in handling the password with this character.

I will do my own tests as well, of course.

Yours

Tomasz Wolniewicz

W dniu 17.09.2025 o 11:08, Philippe Taurines (via cat-users Mailing List) pisze:

Hello,

 

We are experiencing an authentication issue with Windows 11 clients when the user's password contains the character "€".

 

We have observed the following behavior with a FreeRADIUS server and MSCHAPv2 authentication:

 

1. Windows 11 client: Connection fails if the password contains a "€".

2. Android client: Connection works, even if the password contains a "€".

3. Windows 11 client (without a "€"): Connection works.

4. Android client (without a "€"): Connection works.

 

What seems even more surprising to me is when configuring the Windows supplicant with cat-eduroam, analyzing the connection logs on the radius servers:

 

1. With an invalid password and without the "€" symbol, the client's connection attempt is clearly visible in the radius server logs.

2. With an invalid password and the "€" symbol, the client's connection attempt is not visible in the radius server logs.

3. With a valid password and the "€" symbol, the client's connection attempt is not visible in the radius server logs.

4. With a valid password and without the "€" symbol, the client's connection attempt is visible in the radius server logs.

 

This behavior suggests that the problem lies with the Windows supplicant.

 

Have you ever encountered a similar problem or do you have any feedback to share on this issue?

 

Are there any other characters you know of that might not be well supported?

 

Sincerely,

-- 
Tomasz Wolniewicz

Attachment: smime.p7s
Description: S/MIME cryptographic signature




Archive powered by MHonArc 2.6.24.

Top of Page