Hello Jose, PF will only reject a device if that device has the reject role.
Thanks, Ludovic Zammit Product Support Engineer Principal Lead Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: <https://community.akamai.com/> <http://blogs.akamai.com/> <https://twitter.com/akamai> <http://www.facebook.com/AkamaiTechnologies> <http://www.linkedin.com/company/akamai-technologies> <http://www.youtube.com/user/akamaitechnologies?feature=results_main> > On Jun 23, 2023, at 9:05 AM, Jose Rivero via PacketFence-users > <packetfence-users@lists.sourceforge.net> wrote: > > Hello Mehmet > > > Thanks for your support. The problem that I mentioned is with version 12. > Look at the radtest. > > root@vm-lab:~# radtest admin admin localhost 12 testing123 > Sent Access-Request Id 169 from 0.0.0.0:33708 to 127.0.0.1:1812 length 75 > User-Name = "admin" > User-Password = "admin" > NAS-IP-Address = 127.0.1.1 > NAS-Port = 12 > Message-Authenticator = 0x00 > Cleartext-Password = "admin" > Received Access-Accept Id 169 from 127.0.0.1:1812 to 127.0.0.1:33708 length 20 > > > I decided to install version 11 and checked that if it rejects my connection > attempts. But no Active Directory user recognizes me. > > root@vm-lab:~# radtest Operador Aruba_Test 192.168.220.25:1812 12 Omega.,21 > Sent Access-Request Id 152 from 0.0.0.0:49055 to 192.168.220.25:1812 length 78 > User-Name = "Operador" > User-Password = "Aruba_Test" > NAS-IP-Address = 127.0.1.1 > NAS-Port = 12 > Message-Authenticator = 0x00 > Cleartext-Password = "Aruba_Test" > Received Access-Reject Id 152 from 192.168.220.25:1812 to > 192.168.220.22:49055 length 20 > > > Log displayed on the platform > > RADIUS Request > User-Name = "Operador" > User-Password = "******" > NAS-IP-Address = 127.0.1.1 > NAS-Port = 12 > Event-Timestamp = "Jun 23 2023 00:38:25 UTC" > Message-Authenticator = 0x371e8c6e6bedfbe578d214cf0a821625 > Stripped-User-Name = "Operador" > Realm = "null" > FreeRADIUS-Client-IP-Address = 192.168.220.22 > PacketFence-KeyBalanced = "68bacf36bd3f3ec1dcb876b6dd9a8a39" > PacketFence-Radius-Ip = "192.168.220.25" > Module-Failure-Message = "rest: Server returned:" > Module-Failure-Message = "rest: > {\"control:PacketFence-Authorization-Status\":\"allow\"}" > SQL-User-Name = "Operador" > > RADIUS Reply > REST-HTTP-Status-Code = 401 > > > Grateful for your support. > > > De: Mehmet Ucpinar <mehmet3pi...@gmail.com <mailto:mehmet3pi...@gmail.com>> > Enviado: jueves, 22 de junio de 2023 16:57 > Para: packetfence-users@lists.sourceforge.net > <mailto:packetfence-users@lists.sourceforge.net> > <packetfence-users@lists.sourceforge.net > <mailto:packetfence-users@lists.sourceforge.net>> > Cc: Jose Rivero <jose.riv...@net-trust.cl <mailto:jose.riv...@net-trust.cl>> > Asunto: Re: [PacketFence-users] Radius - AD > > Hello Jose, > > We need to more details but I believe you issue is because of registration > config. > Set (-1) from switch registration or disable auto registration from profile > (except dot1x profile) > > Kindly, > > >> On 22 Jun 2023, at 20:51, Jose Rivero via PacketFence-users >> <packetfence-users@lists.sourceforge.net >> <mailto:packetfence-users@lists.sourceforge.net>> wrote: >> >> >> Hello friends, it is my first time to set up this system. Follow the >> documentation to link to my domain controller. But I don't understand why >> the Radius server accepts any user pass when it performs a verification >> test. Have you ever had this problem? >> >> >> Grateful for your support. >> >> Jose Rivero >> _______________________________________________ >> PacketFence-users mailing list >> PacketFence-users@lists.sourceforge.net >> <mailto:PacketFence-users@lists.sourceforge.net> >> https://lists.sourceforge.net/lists/listinfo/packetfence-users > _______________________________________________ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > <mailto:PacketFence-users@lists.sourceforge.net> > https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!Rc1iTupQaiBBXDf_vzbg3hl4LaMfWzo0d8QbJvZDqhQQ4zYa62n6KN5gPgI2rD97Y_S76vSVcLhKHzTrP3MDHa8PImuh5Rbs0P7gIw$ >
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
