The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

from historical exchanges with CANARIE personnel, I may be able to reassemble why you have problems.

Your profile configures a specific anonymous outer identity. In Canada, it was/is popular to terminate the EAP conversation with distinct settings depending on whether the user configured the "special" anon ID using proper onboarding tools like CAT vs. just clicked on the SSID to connect.

(In the latter case, the user would get counted towards the bad boys and be sent a warning that ignoring security settings is a terrible idea)

So, very probably, your server configuration has two distinct EAP settings, and you've changed the certificate in use only for one of them.

The solution would then be to change the certificate in all occurances.

Note that this is becoming a conversation beyond eduroam CAT. It's about the local RADIUS server config.

Stefan

On 5/8/26 14:58, Zubayr Domun (via cat-users Mailing List) wrote:

        Hey,
      
        
      
      
        We had this configured already and getting an error, which is
        why we are contacting you. 
      
        
      
      
        We are trying to make a new realm with id.smu.ca(not idp) as
        shown in the screenshot but the connectivity test on that realm
        gives us an error for idp.smu.ca even though we specified the
        server name to be id.smu.ca only.
      
        
      
      
        
      
      
        
      
      
        New realm:
      
        
      
        
      
      
        
        
      
        New realm settings:

          New realm connectivity test:
        
          
          
        
          
        
          
        
        
          
        
        
          It shows it is still pointing to idp.smu.ca(not our new
            id.smu.ca cert):
        
          
          
        
          
        
          
        
        
          
        
        
          
        
        
          
        
        
          Are we missing anything? Thanks! 
        
          
        
        
          
        
        
          
        
        
          
        
        
          
        
        
          Kind regards,
        
          
        
        
          Zubayr Domun
          Network
              Analyst |
            Saint
              Mary's University
            1+
            902 989 0577 
            | address@concealed

---

From: Stefan Winter <address@concealed>
Sent: Friday, May 8, 2026 9:42 AM
To: Zubayr Domun <address@concealed>; address@concealed <address@concealed>
Cc: Art Kennedy <address@concealed>; Mredul Ghosh <address@concealed>
Subject: Re: [[cat-users]] issue with new realm config

 

Hello,

you've configured the new name, good.

And all is well regarding your RADIUS uplink, see attached screenshot I just made with the connectivity check module.

Can you confirm that your setup is now good?

Stefan

On 5/8/26 14:37, Zubayr Domun (via cat-users Mailing List) wrote:

Hello,

            Here's what we have, please point us to someone who is able
            to troubleshoot this for us, thanks!
          
            
          
          
            If we could do it today, that would be great! Available till
            5pm ADT.

              Kind regards,
            
              
            
            
              Zubayr Domun
              Network
                  Analyst |
                Saint
                  Mary's University
                1+
                902 989 0577 
                | address@concealed

---

From: Stefan Winter <address@concealed>
Sent: Friday, May 8, 2026 5:50 AM
To: Zubayr Domun <address@concealed>; address@concealed <address@concealed>
Cc: Art Kennedy <address@concealed>; Mredul Ghosh <address@concealed>
Subject: Re: [[cat-users]] issue with new realm config

 

Hello,

well, the server name is one of the parameters you supply in the CAT Admin UI. You obviously have access to the UI and changed the certificates. Changing the server name is literally a pixel away from that.

Greetings,

Stefan Winter

On 5/7/26 14:31, Zubayr Domun (via cat-users Mailing List) wrote:

Hello,

                This is the error we get:
              
                
              
              
                
              
                
              
              
                We are switching our cert to id.smu.ca - we uploaded
                that to the new realm.

                  Kind regards,
                
                  
                
                
                  Zubayr Domun
                  Network
                      Analyst |
                    Saint
                      Mary's University
                    1+
                    902 989 0577 
                    | address@concealed

---

From: Stefan Winter <address@concealed>
Sent: Thursday, May 7, 2026 3:34 AM
To: Zubayr Domun <address@concealed>; address@concealed <address@concealed>
Subject: Re: [[cat-users]] issue with new realm config

 

Hello,

the message didn't read specifically targeted for eduroam CAT; and there is no phone support for eduroam CAT, only this mailing list.

Also, you could avoid moderation by subscribing to the mailing list, as noted in the first sentence of the moderation rejection message.

Anyway: is the error you get in the eduroam CAT admin UI? If so, what is the error you are getting?

Greetings,

Stefan Winter

On 5/6/26 15:40, Zubayr Domun (via cat-users Mailing List) wrote:

Hi,

                    Not sure why we got the rejection reply, this is for
                    Saint Mary's University in Halifax Nova Scotia and
                    we are doing some configuration on the eduroam
                    portal but need some support

                      Kind regards,
                    
                      
                    
                    
                      Zubayr
                          Domun
                      Network Analyst |
                        Saint
                          Mary's University
                        1+ 902 989 0577 
                        | address@concealed

From: Zubayr Domun
Sent: Wednesday, May 6, 2026 9:33 AM
To: address@concealed <address@concealed>
Subject: issue with new realm config

 

Hello,

                      We are trying to make a new realm since we changed
                      our auth server ip and cert but we are getting
                      errors while doing it. Would appreciate if a tech
                      could hop on a call with us and help us configure
                      this. Thanks! 
                    
                      
                    
                    
                      
                        Kind regards,
                      
                        
                      
                      
                        Zubayr
                            Domun
                        Network Analyst |
                          Saint Mary's
                            University
                          1+ 902 989 0577 
                          | address@concealed
                      
                        
                        
                      
                        
                      
                      
                        
                      
                    
                  
                  
                    To unsubscribe, send this message: 
mailto:address@concealed?subject=unsubscribe%20cat-users
                    Or use the following link: 
                      https://lists.geant.org/sympa/sigrequest/cat-users
                
              
              
                To unsubscribe, send this message: 
mailto:address@concealed?subject=unsubscribe%20cat-users
                Or use the following link: 
                  https://lists.geant.org/sympa/sigrequest/cat-users
            
          
          
            To unsubscribe, send this message: 
mailto:address@concealed?subject=unsubscribe%20cat-users
            Or use the following link: 
              https://lists.geant.org/sympa/sigrequest/cat-users
        
      
      To
        unsubscribe, send this message:
        mailto:address@concealed?subject=unsubscribe%20cat-users
        Or use the following link:
        https://lists.geant.org/sympa/sigrequest/cat-users