Problem setting eduroam
Alex Sharaz
alex.sharaz at york.ac.uk
Wed Feb 8 16:03:04 CET 2017
Sigh!!
Really sorry about that , really really was a senior moment. All I can say
is that I had other things on my mind as I was sitting in A&E at the time I
did a cursory glance at my work email . Guess I put 2 + 2 together and mar
15!
Rgds
Alex
On 8 February 2017 at 12:33, Stefan Paetow <Stefan.Paetow at jisc.ac.uk> wrote:
> >I have some problems setting up eduroam. I am in charge of CS department
> >inside my university.
>
> Are you in charge of the eduroam servers of your university? It sounds
> like you aren't?
>
> >CS department network and university network are not connected,
> >futhermore they both refer to the national eduroam gateway for
> >authentication (for historical reason, there is no hierarchy).
>
> That sounds like whoever is in charge of your CS network treats any
> authentications that come in from the national proxy as visitors and hence
> they are not allowed on to your CS network.
>
> >How can I check why I cannot authenticate? It could be 2 reasons:
> >- I do not proxy properly to the national eduroam gateway
> >- my university side of eduroam is not receiving/answering to the
> >authenication requests coming from upper level.
>
>
>
> >I have no credential outside of my CS department and university that I
> >can use for testing.
>
> Given that both university and CS networks refer to the national proxy,
> that should be enough. Use eapol_test (read
> http://deployingradius.com/scripts/eapol_test/) to do a test
> authentication to your CS-level eduroam server, and see what response you
> get. If you get an access-accept, it means that authentication *does*
> succeed at your university-level eduroam server.
>
> I would suggest running your CS-level eduroam server in debug mode for
> this, so that you can see what happens. If you get an access-reject
> returned from the proxy (the national level one), then yes, have a word
> with the person in charge of your university-level eduroam server to check.
>
> Regards
>
> Stefan Paetow
> Moonshot Industry & Research Liaison Coordinator
>
> t: +44 (0)1235 822 125
> gpg: 0x3FCE5142
> xmpp: stefanp at jabber.dev.ja.net
> skype: stefan.paetow.janet
>
> jisc.ac.uk
>
> Jisc is a registered charity (number 1149740) and a company limited by
> guarantee which is registered in England under Company No. 5747339, VAT
> No. GB 197 0632 86. JiscĀ¹s registered office is: One Castlepark, Tower
> Hill, Bristol, BS2 0JA. T 0203 697 5800.
>
>
>
>
>
> >
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/
> list/users.html
>
More information about the Freeradius-Users
mailing list