An open discussion list for topics related to the geteduroam service

[Philippe Taurines <Philippe.Taurines AT crous-toulouse.fr>]

Hello,

 

We are experiencing an authentication issue with Windows 11 clients when the user's password contains the character "€".

 

We have observed the following behavior with a FreeRADIUS server and MSCHAPv2 authentication:

 

1. Windows 11 client: Connection fails if the password contains a "€".

2. Android client: Connection works, even if the password contains a "€".

3. Windows 11 client (without a "€"): Connection works.

4. Android client (without a "€"): Connection works.

 

What seems even more surprising to me is when configuring the Windows supplicant with cat-eduroam, analyzing the connection logs on the radius servers:

 

1. With an invalid password and without the "€" symbol, the client's connection attempt is clearly visible in the radius server logs.

2. With an invalid password and the "€" symbol, the client's connection attempt is not visible in the radius server logs.

3. With a valid password and the "€" symbol, the client's connection attempt is not visible in the radius server logs.

4. With a valid password and without the "€" symbol, the client's connection attempt is visible in the radius server logs.

 

This behavior suggests that the problem lies with the Windows supplicant.

 

Have you ever encountered a similar problem or do you have any feedback to share on this issue?

 

Are there any other characters you know of that might not be well supported?

 

Sincerely,

Attachment: smime.p7s
Description: S/MIME cryptographic signature