The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[GUILLERMO ALVAREZ VILLANUEVA <address@concealed>]

Hi Tomas, 

Thank you for the clarification and for suggesting this workaround.

Since the installer cannot validate the realm suffix against a regular _expression_, we will update our profile and move new users to ehu.eus.

 

Best regards,
Guillermo

De: Tomasz Wolniewicz <address@concealed>
Enviado el: miércoles, 1 de julio de 2026 15:40
Para: GUILLERMO ALVAREZ VILLANUEVA <address@concealed>; address@concealed
Asunto: Re: [[cat-users]] eduroam CAT Profile: Use of Multiple Institution Domains

 

Hi,

  Of course you can have two profiles, but I guess you know that.

  you can set up your server so that it can authenticate a request with outer identity address@concealed and inner identity address@concealed. Then you could set the realm in the profile to ehu.eus and remove the requirement for the user domain. This way users with either ehu.es or ehu.eus will be able to connect. Fortunately you are only using TTLS/PAP as his would not work with PEAP on Windows. This approach would allow you to remain using a single profile. Unfortunately we did not implement the possibility to have the installers test the user identifier for more than one realm suffix.

However, perhaps you can tell all new eduroam users that they must use the ehu.eus and simply change the profile. The users with old installations will still be able to connect with old settings. 

Not sure if this helps.

Yours

Tomasz Wolniewicz

 

 

W dniu 1.07.2026 o 10:22, GUILLERMO ALVAREZ VILLANUEVA (via cat-users Mailing List) pisze:

Hello,

We currently own and use two domains in our institution: ehu.es and ehu.eus. We have been using ehu.es in our CAT profile because when we initially joined eduroam, the .eus top-level domain did not yet exist.
We use a single profile with both the "Enforce realm" and "Enforce exact realm" options enabled.

 

Nowadays, we primarily use ehu.eus, so I would like to know whether the tool can handle both domains in some way, or if we must choose only one domain for the profile.

 

Thank you

 

 

PS: Our RADIUS handles both domains without any issues.

 

 

	Guillermo Alvarez Villanueva Sistemen Teknikaria Ténico de Sistemas address@concealed IKT Gerenteordetza - Errektoregoa - Bizkaiko Campusa Vicegerencia TIC - Rectorado - Campus de Bizkaia Barrio Sarriena S/N, 48940 Leioa ehu.eus

 

 

 

 

To unsubscribe, send this message: mailto:address@concealed?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

-- 

Tomasz Wolniewicz