An open discussion list for topics related to the geteduroam service

[Paul Dekkers <paul.dekkers AT surf.nl>]

Hi,

 

One reason could be the server certificate you’re using. I tried to verify, but for some reason your realm was unreachable for me.

 

There is some documentation on certificate issues, at

 

https://wiki.geant.org/display/H2eduroam/EAP+Server+Certificate+considerations

 

https://wiki.geant.org/display/H2eduroam/EAP+Server+Certificate+Considerations%2C+2021+edition

 

And some more information from the Jisc colleagues at:

 

https://community.jisc.ac.uk/library/network-and-technology-service-docs/2021-04-advisory-android-11-configuration-issues

 

The old eduroam CAT App was a little less sensitive to older standard certificates (like lack of subject Alt Name); so without additional information I would try to find the cause there.

 

Regards,

Paul

 

 

From: geteduroam-request AT lists.geant.org <geteduroam-request AT lists.geant.org> on behalf of Stefano Terci Gasperazzo <geteduroam AT lists.geant.org>
Date: Tuesday, 10 May 2022 at 13:48
To: geteduroam AT lists.geant.org <geteduroam AT lists.geant.org>
Subject: Login incorrect using geteduroam app

Good morning from Brazil, how are you?

 

The EduroamCAT app is working fine for our Institute but I'm trying to configure the new app getEduroam to our users. When using this app, our logs from freeradius is displaying a Login Incorrect error but everything is fine using EduroamCAT.

 

Someone have observed this issue? Theres a file or log that I can submite for erro analisys purpose? Thanks in advance!!!!

 

 

Log using geteduroam:

Auth: (2547892) Login incorrect (eap_peap: (TLS) Alert read:fatal:internal error): [16zzzzzz AT ifes.edu.br] (from client reitoria_13 port 0 cli 4E-B1-zz-zz-zz-zz)

 

 

Log using eduroamcat:

Auth: (2567920)   Login OK: [16zzzzzz AT ifes.edu.br] (from client reitoria_7 port 0 cli 4E-B1-zz-zz-zz-zz via TLS tunnel)

 

Supported EAP types configure in our CAT profile:

Supported EAP types for this profile:

    PEAP-MSCHAPv2
    TTLS-MSCHAPv2
    TTLS-PAP

 

Unsupported EAP types:

    FAST-GTC
    EAP-pwd
    TLS
    TTLS-GTC
    Managed IdP

 

Best regards,

Stéfano Terci Gasperazzo
Analista de Tecnologia da Informação
Coordenadoria Geral de Infraestrutura e Telecomunicações
Instituto Federal do Espírito Santo - Reitoria
27 3357 7500 (R: 5014) | 27 3357 7549

 

---

Esta mensagem (incluindo anexos) contém informação confidencial destinada a um usuário específico e seu conteúdo é protegido por lei. Se você não é o destinatário correto deve apagar esta mensagem.

O emitente desta mensagem é responsável por seu conteúdo e endereçamento.
Cabe ao destinatário cuidar quanto ao tratamento adequado. A divulgação, reprodução e/ou distribuição sem a devida autorização ou qualquer outra ação sem conformidade com as normas internas do Ifes são proibidas e passíveis de sanção disciplinar, cível e criminal.