Ok I think about it a lot, and I think my method is not good.

So I need to manage with PacketFence :
-People of the school ;
-Guest ;
-People Outside the school ;

So for every of this person I have 1 authentication module in  
/usr/local/pf/conf/authentication

For person of school and Guest, we have 2 ldap, so 2 file, I know it  
is not the best way, and I see a method in comment in ldap.pm that can  
perform authentication with multiple ldap server.

the third is a little bit more complex (but not so :D)
I need to see on a RADIUS server, but it's not secure, because login  
and Pass is in clear on the networks So I decided to test login/pass  
from this other radius with "radtest" with EAP option.

So now it's a little bit more simple.

I just want to separate this 3 category of person, so I, need to  
collect from authentication choice form, and in vlan/custom.pm to set  
VLAN.

Do you have an idea of what do I need to modify ? or perhaps it exist  
a cutom something everywhere that I can modify, without modify  
register.cgi directly.

Thanks


Olivier Bilodeau <obilod...@inverse.ca> a écrit :

> Hi Rémi!
>
> On 05/31/2012 07:22 AM, remi.desgra...@telecom-bretagne.eu wrote:
>> Hi everyone,
>>
>> I use PacketFence for wired connexion with PortSecurity (Cisco) and
>> for wireless with mac authentication.
>>
>> I authenticate user through a external RADIUS (but I'm using internal
>> freeradius for wireless mac authentication) and this radius' conf is
>> like that :
>>
>>
>> DEFAULT Airespace-Wlan-Id == 10,Realm =~ "mydomain.com|NULL"
>>          Tunnel-Type:1 = VLAN,
>>          Tunnel-Medium-Type:1 = IEEE-802,
>>          Tunnel-Private-Group-ID:1 = "MyProdVlan",
>>          Fall-Through = no
>>
>> So I read pf::vlan::custom doc, and I clear now, but, can I collect
>> realm attributes ?
>
> What do you mean by collect realm attributes? Collect where? For whom?
>
> I don't understand what you are trying to accomplish... Maybe a little
> ascii drawing..
>
> Cheers!
> --
> Olivier Bilodeau
> obilod...@inverse.ca  ::  +1.514.447.4918 *115  ::  www.inverse.ca
> Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence
> (www.packetfence.org)
>
>




------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
PacketFence-devel mailing list
PacketFence-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-devel

Reply via email to