Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
en:eduroam:easyroam [2022/12/07 15:15] Ralf Paffrathen:eduroam:easyroam [2022/12/09 09:25] (current) Ralf Paffrath
Line 7: Line 7:
 ==== General information on easyroam and quick link to the instructions ==== ==== General information on easyroam and quick link to the instructions ====
  
-easyroam is a further development of the eduroam service and is mainly aimed at small institutions in DFN, but can also be used by large institutions in DFN.+easyroam is an extended development of the eduroam service and is mainly aimed at small institutions in DFN, but can also be used by large institutions in DFN.
  
  
Line 25: Line 25:
 For the internationalisation of eduroam/easyroam, it is important to configure a so-called NAPTR (Network Authority PoinTeR) record for its realms. But also for national use it is important to configure a text record in the DNS at least for the realms mentioned below. According to the eduroam policy, the realm must be resolvable in the global DNS.  For the internationalisation of eduroam/easyroam, it is important to configure a so-called NAPTR (Network Authority PoinTeR) record for its realms. But also for national use it is important to configure a text record in the DNS at least for the realms mentioned below. According to the eduroam policy, the realm must be resolvable in the global DNS. 
  
-Für easyroam sind beispielhaft folgende NAPTR's zu konfigurieren:+For easyroam, the following NAPTRs are to be configured as examples:
 <code>easyroam.<organame.org>  43200   IN      NAPTR   100 10 "s" "x-eduroam:radius.tls" "" _radsec._tcp.eduroam.de. <code>easyroam.<organame.org>  43200   IN      NAPTR   100 10 "s" "x-eduroam:radius.tls" "" _radsec._tcp.eduroam.de.
 easyroam-pca.<organame.org>  43200   IN      NAPTR   100 10 "s" "x-eduroam:radius.tls" "" _radsec._tcp.eduroam.de.</code> easyroam-pca.<organame.org>  43200   IN      NAPTR   100 10 "s" "x-eduroam:radius.tls" "" _radsec._tcp.eduroam.de.</code>
Line 31: Line 31:
 Zonen-Name (Label): easyroam.<organame.org>.\\ Zonen-Name (Label): easyroam.<organame.org>.\\
 43200: DNS cache liftime\\ 43200: DNS cache liftime\\
-IN: Für die Nutzung im Internet wie bei jedem anderen DNS-Ressource Eintrag\\+IN: For use on the Internet as with any other DNS resource entry.\\
 NAPTR: **N**etwork **A**uthority **P**oin**T**e**R**\\ NAPTR: **N**etwork **A**uthority **P**oin**T**e**R**\\
-100: Wenn mehrere NAPTR-Einträge für das Etikett definiert sindwird die niedrigere Ordnungsnummer der höheren vorgezogen\\ +100: If several NAPTR entries are defined for the labelthe lower ordinal number is preferred to the higher one\\ 
-10: Wenn mehrere NAPTR-Einträge mit der gleichen Reihenfolge für dieses Label definiert sindwird bei der Namensauflösung zwischen all diesen Einträgen gewechselt\\ +10: If several NAPTR entries with the same order are defined for this labelthe name resolution switches between all these entries\\ 
-"s": Dieser NAPTR-Eintrag sollte in Hostnamen aufgelöst werden, indem eine nachfolgende SRV-Abfrage auf dem Ziel-Label durchgeführt wird\\ +"s": This NAPTR entry should be resolved into hostnames by performing a subsequent SRV query on the target label\\ 
-"x-eduroam:radius.tls": Dienst Name\\ +"x-eduroam:radius.tls": service name\\ 
-"": Regulärer Ausdruckfür eduroam/easyroam nicht erforderlich\\+"": Regular expressionnot required for eduroam/easyroam\\
 _radsec._tcp.eduroam.de.: Label des SRV Records\\ _radsec._tcp.eduroam.de.: Label des SRV Records\\
  
-Die Auflösung des SRV Labels für jeden NAPTR für eduroam/easyroam im DFN lautet:+To resolv the SRV label for each NAPTR for eduroam/easyroam witin DFN type in the following command:
 <code>host -t SRV _radsec._tcp.eduroam.de. <code>host -t SRV _radsec._tcp.eduroam.de.
 _radsec._tcp.eduroam.de has SRV record 0 20 2083 tld3.eduroam.de. _radsec._tcp.eduroam.de has SRV record 0 20 2083 tld3.eduroam.de.
Line 50: Line 50:
  
  
-==== Für Admins: easyroam in der DFN-AAI-Basic im OptIn ====+==== For admins: easyroam OptIn by using the DFN-AAI-Basic ====
  
-Für die Freigabe am DFN-AAI SP https://www.easyroam.de (Entity-ID https://get.eduroam.de/shibboleth) werden folgende Attribute benötigt:+The following attributes are required to allow users to get access to the DFN-AAI SP [[https://www.easyroam.de|https://www.easyroam.de]] (Entity-ID [[https://get.eduroam.de/shibboleth|https://get.eduroam.de/shibboleth]]):
   * [[de:common_attributes#a09|eduPersonScopedAffiliation]]   * [[de:common_attributes#a09|eduPersonScopedAffiliation]]
   * [[de:common_attributes#a17|samlPairwiseID]], siehe [[de:shibidp:config-attributes-aaiplus|Generierung]] und [[de:shibidp:config-storage#umstellung_auf_saml_pairwise-id|Umstellung ]]   * [[de:common_attributes#a17|samlPairwiseID]], siehe [[de:shibidp:config-attributes-aaiplus|Generierung]] und [[de:shibidp:config-storage#umstellung_auf_saml_pairwise-id|Umstellung ]]
  • Last modified: 18 months ago