<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Good point Chris. <div>On the portal we could put a notice, but for WPA it is a real issue of education. Well, I will be prepared to do it, and we can decide when time allows.<div><br></div><div>Rob</div><div><br></div><div><br><div><div>On Jul 8, 2010, at 11:55 AM, Chris Elliott wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div bgcolor="#FFFFFF"><div>It is more work for the users if we don't have the EDUroam SSID, and we'll have to educate them that their EDUroam credentials will work on our SSID's, then un-educate them for Beijing.</div><div><br></div><div>chelliot aka Chris.<br></div><div><div><br></div></div><div>On Jul 8, 2010, at 11:48 AM, Rob Nagy <<a href="mailto:rob@deepdivenetworking.com">rob@deepdivenetworking.com</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div><div>If they just want it for this meeting I would vote that we proxy and skip the additional SSID. Less headache in my opinion. </div><div><br></div><div>Alice aka Rob<br><br>Sent from my iPhone</div><div><br>On Jul 8, 2010, at 11:44 AM, Chris Elliott <<a href="mailto:chelliot@pobox.com"></a><a href="mailto:chelliot@pobox.com">chelliot@pobox.com</a>> wrote:<br><br></div><div></div><blockquote type="cite"><div>If we use another SSID then we won't need to proxy the requests. Not that I'm a fan of additional ssid's either.<br><br><div class="gmail_quote">On Thu, Jul 8, 2010 at 11:38 AM, Rob Nagy <span dir="ltr"><<a href="mailto:rob@deepdivenetworking.com"></a><a href="mailto:rob@deepdivenetworking.com"></a><a href="mailto:rob@deepdivenetworking.com">rob@deepdivenetworking.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">I agree as a nice to do. We should be able to radius proxy by realm for people who want to use eduroam credentials. The issue we couldn't probably port to Beijing is that I don't believe we could limit devices per user with a radius proxy realm(have to double check). But for this meeting it should be a fairly easy endeavor, time allowing.<br>
<br>
I will do additional research in how we could do it with freeradius.<br>
<br>
Rob<br>
<br>
Sent from my iPhone<br>
<div><div></div><div class="h5"><br>
On Jul 8, 2010, at 11:19 AM, joel jaeggli <<a href="mailto:joelja@bogus.com"></a><a href="mailto:joelja@bogus.com"></a><a href="mailto:joelja@bogus.com">joelja@bogus.com</a>> wrote:<br>
<br>
> This sort of dovetails with my observation about using open-id auth as<br>
> an option for the portal...<br>
><br>
> personally I'm adverse to simply creating more ssids, but not adverse to<br>
> the idea of enabling authentication against additional systems.<br>
><br>
> On 2010-07-08 08:06, Jim Martin wrote:<br>
>><br>
>> On Jul 8, 2010, at 10:59 AM, Geert Jan de Groot wrote:<br>
>><br>
>>> It's not my call to make, I'm not sure if the 1252's<br>
>>> can handle the additional config (but should, yes?),<br>
>>> and I promised I'd forward the request to the list to see what you think?<br>
>><br>
>><br>
>> I'd like to put this on the "Nice to do" list....<br>
>><br>
>> That is, if we have cycles and find that we can do it (logistically and technically), then it's a good thing to do.<br>
>><br>
>> However, if we're slammed or it hits any snags, it will be delayed or dropped.<br>
>><br>
>> Paul, are you ok with that?<br>
>><br>
>> On the technical side, would we have a separate (offsite) radius server configured for that one SSID, or would we relay the request (based upon realm or something) from our radius server to theirs?<br>
>><br>
>> - Jim<br>
>><br>
>><br>
>><br>
>><br>
>> _______________________________________________<br>
>> ietf78-tech mailing list<br>
>> <a href="mailto:ietf78-tech@daedelus.com"></a><a href="mailto:ietf78-tech@daedelus.com"></a><a href="mailto:ietf78-tech@daedelus.com">ietf78-tech@daedelus.com</a><br>
>> <a href="http://www.daedelus.com/mailman/listinfo/ietf78-tech" target="_blank"></a><a href="http://www.daedelus.com/mailman/listinfo/ietf78-tech"></a><a href="http://www.daedelus.com/mailman/listinfo/ietf78-tech">http://www.daedelus.com/mailman/listinfo/ietf78-tech</a><br>
><br>
> _______________________________________________<br>
> ietf78-tech mailing list<br>
> <a href="mailto:ietf78-tech@daedelus.com"></a><a href="mailto:ietf78-tech@daedelus.com"></a><a href="mailto:ietf78-tech@daedelus.com">ietf78-tech@daedelus.com</a><br>
> <a href="http://www.daedelus.com/mailman/listinfo/ietf78-tech" target="_blank"></a><a href="http://www.daedelus.com/mailman/listinfo/ietf78-tech"></a><a href="http://www.daedelus.com/mailman/listinfo/ietf78-tech">http://www.daedelus.com/mailman/listinfo/ietf78-tech</a><br>
_______________________________________________<br>
ietf78-tech mailing list<br>
<a href="mailto:ietf78-tech@daedelus.com"></a><a href="mailto:ietf78-tech@daedelus.com"></a><a href="mailto:ietf78-tech@daedelus.com">ietf78-tech@daedelus.com</a><br>
<a href="http://www.daedelus.com/mailman/listinfo/ietf78-tech" target="_blank"></a><a href="http://www.daedelus.com/mailman/listinfo/ietf78-tech"></a><a href="http://www.daedelus.com/mailman/listinfo/ietf78-tech">http://www.daedelus.com/mailman/listinfo/ietf78-tech</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Chris Elliott<br><a href="mailto:chelliot@pobox.com"></a><a href="mailto:chelliot@pobox.com"></a><a href="mailto:chelliot@pobox.com">chelliot@pobox.com</a><br><br>
</div></blockquote></div></blockquote></div></blockquote></div><br><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div><div>Robert Nagy</div><div>- - - - - - - - - -</div><div>Senior Dive Master | Deep Dive Networking Inc</div><div>p: 408.480.5133 | aim/icq: 95091173 | e:rob@deepdivenetworking.com</div><div><a href="http://www.deepdivenetworking.com">www.deepdivenetworking.com</a></div></div></span>
</div>
<br></div></div></body></html>