UPDATE ......From Tuesday 8 April 2025 we have changed the way that Single Sign-on works on this wiki. Please see here for more information:
Update
...
2) The querying server will then query the label _radsec._tcp.eduroam.aq and check for SRV records. The eduroam.aq zone is managed by your national eduroam admins, and the reply could look like the following:
_radsec._tcp.eduroam.luaq. 43200 IN SRV 10 0 2083 tld2.eduroam.lu.
_radsec._tcp.eduroam.luaq. 43200 IN SRV 0 0 2083 tld1.eduroam.lu.
...