The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <address@concealed>]

Hi,

  Of course you can have two profiles, but I guess you know that.

  you can set up your server so that it can authenticate a request with outer identity address@concealed and inner identity address@concealed. Then you could set the realm in the profile to ehu.eus and remove the requirement for the user domain. This way users with either ehu.es or ehu.eus will be able to connect. Fortunately you are only using TTLS/PAP as his would not work with PEAP on Windows. This approach would allow you to remain using a single profile. Unfortunately we did not implement the possibility to have the installers test the user identifier for more than one realm suffix.

However, perhaps you can tell all new eduroam users that they must use the ehu.eus and simply change the profile. The users with old installations will still be able to connect with old settings. 

Not sure if this helps.

Yours

Tomasz Wolniewicz

W dniu 1.07.2026 o 10:22, GUILLERMO ALVAREZ VILLANUEVA (via cat-users Mailing List) pisze:

Hello,

We currently own and use two domains in our institution: ehu.es and ehu.eus. We have been using ehu.es in our CAT profile because when we initially joined eduroam, the .eus top-level domain did not yet exist.
We use a single profile with both the "Enforce realm" and "Enforce exact realm" options enabled.

 

Nowadays, we primarily use ehu.eus, so I would like to know whether the tool can handle both domains in some way, or if we must choose only one domain for the profile.

 

Thank you

 

 

PS: Our RADIUS handles both domains without any issues.

 

 

 

Guillermo Alvarez Villanueva

Sistemen Teknikaria

Ténico de Sistemas

address@concealed

IKT Gerenteordetza - Errektoregoa - Bizkaiko Campusa

Vicegerencia TIC - Rectorado - Campus de Bizkaia

Barrio Sarriena S/N, 48940 Leioa

ehu.eus

 

 

 

 

      To
        unsubscribe, send this message:
        mailto:address@concealed?subject=unsubscribe%20cat-users
        Or use the following link:
        https://lists.geant.org/sympa/sigrequest/cat-users
    
-- 
Tomasz Wolniewicz

Attachment: smime.p7s
Description: Kryptograficzna sygnatura S/MIME