The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <address@concealed>]

Hi,

  the wpa_supplicant config is not supposed to be saved unless there is a problem with the NetworkManager configuration. Then the script is supposed to ask you the following:

NetworkManager configuration failed.
                   Ensure you have the dbus-python package for your distro installed on your system. 
                   We may generate a wpa_supplicant configuration file 
                   if you wish. Be warned that your connection password will be saved
                   in this file as clear text

If this question was not asked and the file was saved anyway then indeed this is not intended.

I will test and confirm, of course.

Yours

Tomasz Wolniewicz

W dniu 11.11.2025 o 12:40, Andrea Esposito (via cat-users Mailing List) pisze:

      Greetings,
      
      
      I've
        used the CAT configurator to setup an eduroam connection on my
        Arch Linux machine. It worked, correctly configuring the
        connection in NetworkManager (v. 1.54.1-1); the password was not
        saved but I could save it later by modifying the connection
        using NetworkManager itself. Crucially, I noticed the
        configurator leaves behind a cat_installer.conf file (formatted
        as a wpa_supplicant config file) in the $HOME/.config folder,
        open for any user to read, with the cleartext password
        associated with the eduroam identity in it. I don't know whether
        this is intended behavior but I assume it's not, especially
        considering that such file is not needed for connecting to the
        network, at least when using NM.
      
      
      Hope
        this report helps and thank you for your time investigating
        this.
      
      
      Best,
      
      
      Andrea
        Esposito
      To
        unsubscribe, send this message:
        mailto:address@concealed?subject=unsubscribe%20cat-users
        Or use the following link:
        https://lists.geant.org/sympa/sigrequest/cat-users
    
-- 
Tomasz Wolniewicz

Attachment: smime.p7s
Description: Kryptograficzna sygnatura S/MIME