Audience - eduroam(UK) system administrators and implementors
Although the eduroam(UK) Technical Specification 1.2 has been released for a little while now, with the imminent release of exciting new service features, now might be a good time to review your eduroam service deployment.
Over the past few weeks we've come across a number of situations where users have been sharing, or encouraging the sharing of eduroam credentials between each other. For instance a user might want to provide temporary access for a friend or a visiting lecturer from a non-eduroam organisation might want immediate network access. It should be clear to us as system managers that this is not safe behaviour.
This advisory is relevant to all participants in the UK providing the eduroam federated service historically known as the Janet Roaming Service. Organisations are requested to review their service-related web material.
9/01/2013
More information presented on the Nagios LG service status page
In response to popular demand we've made a change to what eduroam technical administrators see on the Nagios partipants service monitor web page (and to the URL).
Rather than just seeing the service status and service issues for your own site, you can now see the status of all participating organisations' eduroam services. This should help problem investigations.
eduroam participants running Cisco ACS as their organisational RADIUS proxy servers will be pleased to hear news that ACS 5.4 has been released.
The release notes document all the new features and bug fixes; however, of major interest to eduroam administrators is the feature that it can now add Operator-Name to requests bring sent upstream to the NRPS.
Many thanks to Cisco for their cooperation in listening to the needs of the eduroam community and for providing debug/beta copies to the eduroam(UK) support team.
Sorry to report there was an unscheduled national proxy service outage on Friday 26/10/2012 between 1:02 AM until 9:48. All three NRPS were affected. This meant that no inter-organisation or UK-international roaming would have been possible. Intra-organisation eduroam authentication of course was not affected.