I will confess to tossing this out to the list without doing my regular level of research since this is officially a vacation week for me. So if anyone wants to judge, it's fully justified in this case. :)
The basic situation is this - as we move up to a full eduroam deployment, we are currently at the stage where our users can visit other eduroam institutions and use their NU credentials to log in. The second and final phase will be to set up the eduroam SSID here on our campus for visitors to use. What we are experiencing with the first phase of testing is that people are reporting to us that eduroam works great at some institutions but not others. Luckily for one of these locations, we were having a CIC wireless and networking meeting at the time, and it turned out that the host institution was not sending the NAS-type RADIUS attribute, and some of the other schools were actually using a check for that attribute on their end to route the authentication requests appropriately. So that got cleared up pretty quickly. But we're still getting a trickling of reports from some of our traveling users who are visiting other places that things worked for them at one university but not another. So we have a couple of questions: 1.) What are the best practices in terms of validating RADIUS connections? 2.) What are the best practices in terms of setting up proxying connections, attributes to send, etc? 3.) How prevalent of a problem is this? It seems to me that all the folks in Europe must have solved this a while ago. Are these just growing pains as eduroam gains traction in the US? Thanks in advance!!! -- Julian Y. Koh Acting Associate Director, Telecommunications and Network Services Northwestern University Information Technology (NUIT) 2001 Sheridan Road #G-166 Evanston, IL 60208 847-467-5780 NUIT Web Site: <http://www.it.northwestern.edu/> PGP Public Key:<http://bt.ittns.northwestern.edu/julian/pgppubkey.html> ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
