The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello Art,

your question is now really not related to the eduroam CAT tooling any more. Since you still aren't subscribed to the mailing list either, I'm going to reject the list post.

I don't think people on this particular list are the ones to address with your question. Within Canada, you should direct local RADIUS configuration questions towards your National Roaming Operator, CANARIE, for consultancy.

Greetings,

Stefan Winter

On 5/14/26 16:10, Art Kennedy wrote:

        Good Day Stefan,
      
        
      
      
        Saint Mary's University  Eduroam Changes
      
        
      
      
        
      
      
        Wondering if you or another are available to contact me ASAP
        please.
      
        
      
      
        We have made changes locally to our authenication server
        (Clearpass) and local eduroam users are still working But not
        external that require the proxy.  
      
        
      
      
        I need someone to bounce ideas off as we have made several
        changes and I need to better understand the whole path.
      
        
      
      
        My cell 902-266-5206  and or Message in email I can create a
        teams call
      
        
      
      
        
      
      
        Thanks   Art Kennedy

          Art
              Kennedy
        
          Data
            Voice Analyst
        
          Enterprise
            Information Technology (EIT)
        
          ME,ME019
        
          Saint
            Mary’s University
        
          C
            902.266.5206
        
          T 902.420.5545
        
          923
            Robie Street  |  Halifax NS Canada  |  B3H 3C3  | 
          smu.ca

 "

          Have you checked out our
              new Ask the Husky chatbot?
        
          Get answers to common tech questions - fast and friendly!
        
          
        
        
                                      
          "

---

From: Zubayr Domun <address@concealed>
Sent: Thursday, May 14, 2026 11:06 AM
To: Art Kennedy <address@concealed>
Subject: Fw: [[cat-users]] issue with new realm config

 

            Kind regards,
          
            
          
          
            Zubayr Domun
            Network
                Analyst |
              Saint
                Mary's University
              1+ 902
              989 0577 
              | address@concealed

---

From: address@concealed <address@concealed> on behalf of Zubayr Domun <address@concealed>
Sent: Friday, May 8, 2026 11:11 AM
To: Stefan Winter <address@concealed>; address@concealed <address@concealed>
Cc: Art Kennedy <address@concealed>; Mredul Ghosh <address@concealed>
Subject: Re: [[cat-users]] issue with new realm config

 

>So, very probably, your server configuration has two distinct EAP settings, and you've changed the certificate in use only for one of them.

            Yup that's the issue, we wanted to provision and test
            another realm to our new radius server (with the new cert)
            before removing the current production realm.
          
            
          
          
            We'll remove the current realm and test with our new one.
            Will let you know if all good! 
          
            
          
          
            Thanks for your time and advice!

              Kind regards,
            
              
            
            
              Zubayr Domun
              Network
                  Analyst |
                Saint
                  Mary's University
                1+
                902 989 0577 
                | address@concealed

---

From: Stefan Winter <address@concealed>
Sent: Friday, May 8, 2026 10:20 AM
To: Zubayr Domun <address@concealed>; address@concealed <address@concealed>
Cc: Art Kennedy <address@concealed>; Mredul Ghosh <address@concealed>
Subject: Re: [[cat-users]] issue with new realm config

 

Hello,

from historical exchanges with CANARIE personnel, I may be able to reassemble why you have problems.

Your profile configures a specific anonymous outer identity. In Canada, it was/is popular to terminate the EAP conversation with distinct settings depending on whether the user configured the "special" anon ID using proper onboarding tools like CAT vs. just clicked on the SSID to connect.

(In the latter case, the user would get counted towards the bad boys and be sent a warning that ignoring security settings is a terrible idea)

So, very probably, your server configuration has two distinct EAP settings, and you've changed the certificate in use only for one of them.

The solution would then be to change the certificate in all occurances.

Note that this is becoming a conversation beyond eduroam CAT. It's about the local RADIUS server config.

Stefan

On 5/8/26 14:58, Zubayr Domun (via cat-users Mailing List) wrote:

Hey,

                We had this configured already and getting an error,
                which is why we are contacting you. 
              
                
              
              
                We are trying to make a new realm with id.smu.ca(not
                idp) as shown in the screenshot but the connectivity
                test on that realm gives us an error for idp.smu.ca even
                though we specified the server name to be id.smu.ca
                only.
              
                
              
              
                
              
              
                
              
              
                New realm:
              
                
              
                
              
              
                
                
              
                New realm settings:

                  New realm connectivity test:
                
                  
                  
                
                  
                
                  
                
                
                  
                
                
                  It shows it is still pointing to idp.smu.ca(not our
                    new id.smu.ca cert):
                
                  
                  
                
                  
                
                  
                
                
                  
                
                
                  
                
                
                  
                
                
                  Are we missing anything? Thanks! 
                
                  
                
                
                  
                
                
                  
                
                
                  
                
                
                  
                
                
                  Kind regards,
                
                  
                
                
                  Zubayr Domun
                  Network
                      Analyst |
                    Saint
                      Mary's University
                    1+
                    902 989 0577 
                    | address@concealed

---

From: Stefan Winter <address@concealed>
Sent: Friday, May 8, 2026 9:42 AM
To: Zubayr Domun <address@concealed>; address@concealed <address@concealed>
Cc: Art Kennedy <address@concealed>; Mredul Ghosh <address@concealed>
Subject: Re: [[cat-users]] issue with new realm config

 

Hello,

you've configured the new name, good.

And all is well regarding your RADIUS uplink, see attached screenshot I just made with the connectivity check module.

Can you confirm that your setup is now good?

Stefan

On 5/8/26 14:37, Zubayr Domun (via cat-users Mailing List) wrote:

Hello,

                    Here's what we have, please point us to someone who
                    is able to troubleshoot this for us, thanks!
                  
                    
                  
                  
                    If we could do it today, that would be great!
                    Available till 5pm ADT. 
                  
                    
                  
                  
                    
                  
                  
                    
                  
                  
                    
                  
                    
                      
                    
                    
                      Kind regards,
                    
                      
                    
                    
                      Zubayr
                          Domun
                      Network Analyst |
                        Saint
                          Mary's University
                        1+ 902 989 0577 
                        | address@concealed

From: Stefan Winter <address@concealed>
Sent: Friday, May 8, 2026 5:50 AM
To: Zubayr Domun <address@concealed>; address@concealed <address@concealed>
Cc: Art Kennedy <address@concealed>; Mredul Ghosh <address@concealed>
Subject: Re: [[cat-users]] issue with new realm config

 

Hello,

well, the server name is one of the parameters you supply in the CAT Admin UI. You obviously have access to the UI and changed the certificates. Changing the server name is literally a pixel away from that.

Greetings,

Stefan Winter

On 5/7/26 14:31, Zubayr Domun (via cat-users Mailing List) wrote:

Hello,

                        This is the error we get:
                      
                        
                      
                      
                        
                      
                        
                      
                      
                        We are switching our cert to id.smu.ca - we
                        uploaded that to the new realm. 
                      
                        
                          
                        
                        
                          Kind regards,
                        
                          
                        
                        
                          Zubayr
                              Domun
                          Network Analyst |
                            Saint
                              Mary's University
                            1+ 902 989 0577 
                            | address@concealed

From: Stefan Winter <address@concealed>
Sent: Thursday, May 7, 2026 3:34 AM
To: Zubayr Domun <address@concealed>; address@concealed <address@concealed>
Subject: Re: [[cat-users]] issue with new realm config

 

Hello,

the message didn't read specifically targeted for eduroam CAT; and there is no phone support for eduroam CAT, only this mailing list.

Also, you could avoid moderation by subscribing to the mailing list, as noted in the first sentence of the moderation rejection message.

Anyway: is the error you get in the eduroam CAT admin UI? If so, what is the error you are getting?

Greetings,

Stefan Winter

On 5/6/26 15:40, Zubayr Domun (via cat-users Mailing List) wrote:

Hi,

                            Not sure why we got the rejection reply,
                            this is for Saint Mary's University in
                            Halifax Nova Scotia and we are doing some
                            configuration on the eduroam portal but need
                            some support 
                          
                            
                              
                            
                            
                              Kind regards,
                            
                              
                            
                            
                              Zubayr
                                  Domun
                              Network Analyst |
                                Saint
                                  Mary's University
                                1+ 902 989 0577 
                                | address@concealed

From: Zubayr Domun
Sent: Wednesday, May 6, 2026 9:33 AM
To: address@concealed <address@concealed>
Subject: issue with new realm config

 

Hello,

                              We are trying to make a new realm since we
                              changed our auth server ip and cert but we
                              are getting errors while doing it. Would
                              appreciate if a tech could hop on a call
                              with us and help us configure this.
                              Thanks! 
                            
                              
                            
                            
                              
                                Kind regards,
                              
                                
                              
                              
                                Zubayr
                                    Domun
                                Network Analyst |
                                  Saint
                                    Mary's University
                                  1+ 902 989 0577 
                                  | address@concealed
                              
                                
                                
                              
                                
                              
                              
                                
                              
                            
                          
                          
                            To unsubscribe, send this message: 
mailto:address@concealed?subject=unsubscribe%20cat-users
                            Or use the following link: 
https://lists.geant.org/sympa/sigrequest/cat-users
                        
                      
                      
                        To unsubscribe, send this message: 
mailto:address@concealed?subject=unsubscribe%20cat-users
                        Or use the following link: 
https://lists.geant.org/sympa/sigrequest/cat-users
                    
                  
                  
                    To unsubscribe, send this message: 
mailto:address@concealed?subject=unsubscribe%20cat-users
                    Or use the following link: 
                      https://lists.geant.org/sympa/sigrequest/cat-users
                
              
              
                To unsubscribe, send this message: 
mailto:address@concealed?subject=unsubscribe%20cat-users
                Or use the following link: 
                  https://lists.geant.org/sympa/sigrequest/cat-users
            
          
          
            To unsubscribe, send this message:
            mailto:address@concealed?subject=unsubscribe%20cat-users
            Or use the following link:
            https://lists.geant.org/sympa/sigrequest/cat-users