The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Zubayr Domun <address@concealed>]

>So, very probably, your server configuration has two distinct EAP settings, and you've changed the certificate in use only for one of them.

Yup that's the issue, we wanted to provision and test another realm to our new radius server (with the new cert) before removing the current production realm.

We'll remove the current realm and test with our new one. Will let you know if all good! 

Thanks for your time and advice!

Kind regards,

Zubayr Domun
Network Analyst | Saint Mary's University
1+ 902 989 0577  | address@concealed

---

From: Stefan Winter <address@concealed>
Sent: Friday, May 8, 2026 10:20 AM
To: Zubayr Domun <address@concealed>; address@concealed <address@concealed>
Cc: Art Kennedy <address@concealed>; Mredul Ghosh <address@concealed>
Subject: Re: [[cat-users]] issue with new realm config

 

Hello,

from historical exchanges with CANARIE personnel, I may be able to reassemble why you have problems.

Your profile configures a specific anonymous outer identity. In Canada, it was/is popular to terminate the EAP conversation with distinct settings depending on whether the user configured the "special" anon ID using proper onboarding tools like CAT vs. just clicked on the SSID to connect.

(In the latter case, the user would get counted towards the bad boys and be sent a warning that ignoring security settings is a terrible idea)

So, very probably, your server configuration has two distinct EAP settings, and you've changed the certificate in use only for one of them.

The solution would then be to change the certificate in all occurances.

Note that this is becoming a conversation beyond eduroam CAT. It's about the local RADIUS server config.

Stefan

On 5/8/26 14:58, Zubayr Domun (via cat-users Mailing List) wrote:

Hey,

We had this configured already and getting an error, which is why we are contacting you. 

We are trying to make a new realm with id.smu.ca(not idp) as shown in the screenshot but the connectivity test on that realm gives us an error for idp.smu.ca even though we specified the server name to be id.smu.ca only.

New realm:

New realm settings:

New realm connectivity test:

It shows it is still pointing to idp.smu.ca(not our new id.smu.ca cert):

Are we missing anything? Thanks! 

Kind regards,

Zubayr Domun
Network Analyst | Saint Mary's University
1+ 902 989 0577  | address@concealed

---

From: Stefan Winter <address@concealed>
Sent: Friday, May 8, 2026 9:42 AM
To: Zubayr Domun <address@concealed>; address@concealed <address@concealed>
Cc: Art Kennedy <address@concealed>; Mredul Ghosh <address@concealed>
Subject: Re: [[cat-users]] issue with new realm config

 

Hello,

you've configured the new name, good.

And all is well regarding your RADIUS uplink, see attached screenshot I just made with the connectivity check module.

Can you confirm that your setup is now good?

Stefan

On 5/8/26 14:37, Zubayr Domun (via cat-users Mailing List) wrote:

Hello,

Here's what we have, please point us to someone who is able to troubleshoot this for us, thanks!

If we could do it today, that would be great! Available till 5pm ADT. 

Kind regards,

Zubayr Domun
Network Analyst | Saint Mary's University
1+ 902 989 0577  | address@concealed

---

From: Stefan Winter <address@concealed>
Sent: Friday, May 8, 2026 5:50 AM
To: Zubayr Domun <address@concealed>; address@concealed <address@concealed>
Cc: Art Kennedy <address@concealed>; Mredul Ghosh <address@concealed>
Subject: Re: [[cat-users]] issue with new realm config

 

Hello,

well, the server name is one of the parameters you supply in the CAT Admin UI. You obviously have access to the UI and changed the certificates. Changing the server name is literally a pixel away from that.

Greetings,

Stefan Winter

On 5/7/26 14:31, Zubayr Domun (via cat-users Mailing List) wrote:

Hello,

This is the error we get:

We are switching our cert to id.smu.ca - we uploaded that to the new realm. 

Kind regards,

Zubayr Domun
Network Analyst | Saint Mary's University
1+ 902 989 0577  | address@concealed

---

From: Stefan Winter <address@concealed>
Sent: Thursday, May 7, 2026 3:34 AM
To: Zubayr Domun <address@concealed>; address@concealed <address@concealed>
Subject: Re: [[cat-users]] issue with new realm config

 

Hello,

the message didn't read specifically targeted for eduroam CAT; and there is no phone support for eduroam CAT, only this mailing list.

Also, you could avoid moderation by subscribing to the mailing list, as noted in the first sentence of the moderation rejection message.

Anyway: is the error you get in the eduroam CAT admin UI? If so, what is the error you are getting?

Greetings,

Stefan Winter

On 5/6/26 15:40, Zubayr Domun (via cat-users Mailing List) wrote:

Hi,

Not sure why we got the rejection reply, this is for Saint Mary's University in Halifax Nova Scotia and we are doing some configuration on the eduroam portal but need some support 

Kind regards,

Zubayr Domun
Network Analyst | Saint Mary's University
1+ 902 989 0577  | address@concealed

---

From: Zubayr Domun
Sent: Wednesday, May 6, 2026 9:33 AM
To: address@concealed <address@concealed>
Subject: issue with new realm config

 

Hello,

We are trying to make a new realm since we changed our auth server ip and cert but we are getting errors while doing it. Would appreciate if a tech could hop on a call with us and help us configure this. Thanks! 

Kind regards,

Zubayr Domun
Network Analyst | Saint Mary's University
1+ 902 989 0577  | address@concealed

To unsubscribe, send this message: mailto:address@concealed?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

To unsubscribe, send this message: mailto:address@concealed?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

To unsubscribe, send this message: mailto:address@concealed?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

To unsubscribe, send this message: mailto:address@concealed?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users