Sigh!! Really sorry about that , really really was a senior moment. All I can say is that I had other things on my mind as I was sitting in A&E at the time I did a cursory glance at my work email . Guess I put 2 + 2 together and mar 15! Rgds Alex On 8 February 2017 at 12:33, Stefan Paetow <Stefan.Paetow@jisc.ac.uk> wrote:
I have some problems setting up eduroam. I am in charge of CS department inside my university.
Are you in charge of the eduroam servers of your university? It sounds like you aren't?
CS department network and university network are not connected, futhermore they both refer to the national eduroam gateway for authentication (for historical reason, there is no hierarchy).
That sounds like whoever is in charge of your CS network treats any authentications that come in from the national proxy as visitors and hence they are not allowed on to your CS network.
How can I check why I cannot authenticate? It could be 2 reasons: - I do not proxy properly to the national eduroam gateway - my university side of eduroam is not receiving/answering to the authenication requests coming from upper level.
I have no credential outside of my CS department and university that I can use for testing.
Given that both university and CS networks refer to the national proxy, that should be enough. Use eapol_test (read http://deployingradius.com/scripts/eapol_test/) to do a test authentication to your CS-level eduroam server, and see what response you get. If you get an access-accept, it means that authentication *does* succeed at your university-level eduroam server.
I would suggest running your CS-level eduroam server in debug mode for this, so that you can see what happens. If you get an access-reject returned from the proxy (the national level one), then yes, have a word with the person in charge of your university-level eduroam server to check.
Regards
Stefan Paetow Moonshot Industry & Research Liaison Coordinator
t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet
jisc.ac.uk
Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc¹s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html