An open discussion list for topics related to the geteduroam service

[Christian Mittring <christian.mittring AT rz.uni-augsburg.de>]

Hello Jørn,

after some addidtional tests I have some more questions and problems we 
found:

I try to open issues one github to the App related problems.

1. Android App in Play Store is very outdated, is there any eta when 
there will be an update?

2. Android is showing Linux config option with chrome on the web 
interface. This is because of user agent is looking like "... (Linux, 
Android ...". I swapped android and linux in branding.conf.php, that worked.

3. Windows Apps are added to Authorised applications. They seem to 
expire after 6 months even if certificate lifetime is much shorter. It 
looks like it is possible to renew certificates with the Windows App 
without authenticating if the app token is not expired. Would be fine to 
have a way to force user reauthentication after certificate lifetime.
(Im am not sure uif this is related to: 
https://github.com/geteduroam/windows-app/issues/80)




PS:
>>  > I asked our Linux developer. He says it's a bug in the NetworkManager
>>  > UI.  The underlying NetworkManager has no problem with an empty
>> identity
>>  > value, only the UI complains about it.  We'll solve it server-side to
>>  > set the OuterIdentity value in the eap-config.
>>
>> I modified letswifi-portal/src/letswifi/credential/
>> certificatecredential.php to return OuterIdentity:
>>
>>          public function getAnonymousIdentity(): ?string
>>          {
>>                  return substr($this->credentialId,3);
>>          }
>>
>> Now Linux is working fine.
>
> Yes, that will work.  Just know it will work fine even without this fix,
> but it looks better in the UI.

I did some additional tests with our Ubuntu installation.
Here it is not working without the fix. If OuterIdentity is not set, 
Ubuntu does not send any packets to the radius.



Thanks

Christian Mittring

Universität Augsburg
Rechenzentrum
86135 Augsburg

Telefon 0821/598-2042
christian.mittring AT rz.uni-augsburg.de
https://www.rz.uni-augsburg.de

Am 04.06.2025 um 21:32 schrieb Jørn Åne de Jong:
> On 03/06/2025 15:21, Christian Mittring wrote:
> > Hello Jørn,
> >
> >
> >  > Oh that's strange.  We just tried and with the up-to-date portal from
> >  > the beta branch and the up-to-date app on Google Play it works.
> >  > I don't have an answer to this, we tested it and it works for us..
> >  >
> >  > Can you try downloading an eap-config from the portal, inspecting 
> > it and
> >  > try loading it in the Android app?
> >
> >
> > I think we found the issue with eap-config.
> >
> > We have mutliple DisplayName and Description Fields in the 
> > providerconfig, but on Android this is no ElementList, see: https:// 
> > github.com/geteduroam/android-app/blob/main/android/app/src/main/java/ 
> > app/eduroam/geteduroam/config/model/ProviderInfo.kt
> >
> > If we change the Webportal config to only one display_name and 
> > description in the realms config, Android is impoting the file.
> >
> > But Networkconnection seems not to work.
>
> Ah thank you! I'll report this to the Android app.
> In your other mail you wrote that you got it to work.
>
> We do have some known issues with Android 10, but we can't do anything 
> about it, as the issue is with Android 10's APIs.. :(
>
>
> >  > I asked our Linux developer. He says it's a bug in the NetworkManager
> >  > UI.  The underlying NetworkManager has no problem with an empty 
> > identity
> >  > value, only the UI complains about it.  We'll solve it server-side to
> >  > set the OuterIdentity value in the eap-config.
> >
> > I modified letswifi-portal/src/letswifi/credential/ 
> > certificatecredential.php to return OuterIdentity:
> >
> >          public function getAnonymousIdentity(): ?string
> >          {
> >                  return substr($this->credentialId,3);
> >          }
> >
> > Now Linux is working fine.
>
> Yes, that will work.  Just know it will work fine even without this fix, 
> but it looks better in the UI.