The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tom Ivar Myren <address@concealed>]

Hi Philippe / Tomasz

I am way behind reading this e-mail but found this interesting.

 

We have seen the same behavior with the Norwegian characters [æ ø å Æ Ø Å]

In our case we use eduroam with TTLS/PAP.

The above characters work fine in passwords, but not for Windows 10/11 and eduroam.

With Android, Mac, iPhone no problems.

With Windows and for example Entra ID, no problem.

/Tom 

 

 

Fra: address@concealed <address@concealed> på vegne av Philippe Taurines <address@concealed>
Dato: onsdag, 17. september 2025 kl. 13:06
Til: Tomasz Wolniewicz <address@concealed>, address@concealed <address@concealed>, address@concealed <address@concealed>
Emne: RE: [[cat-users]] Windows Authentication Issue (MSCHAPv2 / €) - Request for Feedback

Hello Tomasz,

 

Thanks for this suggestion. I just checked it after forgetting the eduroam Wi-Fi network and eduroam®.

 

And here is the result of the configuration using only the Windows login without cat-eduroam:

 

1.      If the password contains the "€" character, the eduroam login does not work.

 

2.      If the password does not contain the "€" character, the eduroam login works.

 

And I found this thread that seems to address this issue: https://community.arubanetworks.com/discussion/special-characters-in-passwords-peap

 

It seems a real shame that no one has been able to resolve this issue for years. It's likely that many users are turning away from using eduroam because they don't understand why the login isn't working on their computers.

 

If anyone is able to submit a report to Microsoft, that might be another avenue to fix this bug.

 

If any of you have any ideas for fixing this or a list of problematic characters, that would be a good start.

 

Sincerely,

 

De : Tomasz Wolniewicz <address@concealed>
Envoyé : mercredi 17 septembre 2025 11:26
À : Philippe Taurines <address@concealed>; address@concealed; address@concealed
Objet : Re: [[cat-users]] Windows Authentication Issue (MSCHAPv2 / €) - Request for Feedback

 

Hi,

  Did you try delete all eduroam profiles and just connect to eduroam without prior CAT installation. Windows should pop up some confirmations but it should connect. This test would tell us if it is the actual Windows supplicant fault or perhaps a CAT error in handling the password with this character.

I will do my own tests as well, of course.

Yours

Tomasz Wolniewicz

W dniu 17.09.2025 o 11:08, Philippe Taurines (via cat-users Mailing List) pisze:

Hello,

 

We are experiencing an authentication issue with Windows 11 clients when the user's password contains the character "€".

 

We have observed the following behavior with a FreeRADIUS server and MSCHAPv2 authentication:

 

1. Windows 11 client: Connection fails if the password contains a "€".

2. Android client: Connection works, even if the password contains a "€".

3. Windows 11 client (without a "€"): Connection works.

4. Android client (without a "€"): Connection works.

 

What seems even more surprising to me is when configuring the Windows supplicant with cat-eduroam, analyzing the connection logs on the radius servers:

 

1. With an invalid password and without the "€" symbol, the client's connection attempt is clearly visible in the radius server logs.

2. With an invalid password and the "€" symbol, the client's connection attempt is not visible in the radius server logs.

3. With a valid password and the "€" symbol, the client's connection attempt is not visible in the radius server logs.

4. With a valid password and without the "€" symbol, the client's connection attempt is visible in the radius server logs.

 

This behavior suggests that the problem lies with the Windows supplicant.

 

Have you ever encountered a similar problem or do you have any feedback to share on this issue?

 

Are there any other characters you know of that might not be well supported?

 

Sincerely,

-- 

Tomasz Wolniewicz