Hi again Olivier,

Thanks again.

Point-by-point :

> Just to be 100% clear here. You use RADIUS authentication on the
> captive portal's login/password fields (as opposed to ldap or local
> auth)? What do you have as auth=... under [registration]?

Yes ; we use RADIUS at the moment and registration.auth=radius is set
in conf/pf.conf . We may go to LDAP later, but for the moment RADIUS
authentication is (er, was) working fine.

> How did you upgrade? Did you overwrote all the files?

I simply created a new /usr/local/pf dir and did a fresh PF
installation. The previous one was preserved. Then I did diffs against
all the files I had changed in the previous version and entered the
modifications. I have PF's config under git control and could have
done a 'merge' operation, but decided to be hyper-cautious and do the
upgrade manually. Please let me know if I can send you more specific
info.

> On debian you need to look at: /etc/default/dhcpd

I'm familiar with that, but as I'm not using Debian's config system at
all but am allowing PF to control dhcpd and all the necessary daemons
(as in bind9 and apache2 and, ultimately, snort). As PF creates the
config file then fires off the daemon I somehow need to let PF itself
know what the relevant interfaces are - no ? I've been trying to find
where (and how) PF itself looks for the interfaces spec.

The Debian config setup for the daemons sits there unused (to keep
aptitude happy) for reasons of easy updates (the occasional
bugfix, etc.)  but PF configures and brings up and takes down the
daemon(s).

If you are suggesting that I use the Debian setup for dhcpd (including
/etc/default/isc-dhcpd) then I'll need to modify /etc/init.d/isc-dhcpd
to use PF's config for it and make sure that all future admins make
the necessary mods to new versions (admittedly not that often) and
modify PF anyhow to launch dhcpd via /etc/init.d/isc-dhcpd instead of
where it usually finds its services ... Seems to me that it makes more
sense to do the interface spec directly from PF. Please advise if I'm
missing something obvious ...

Thanks again for the attention and insight Olivier.

An excellent day ...

Chris

------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Packetfence-users mailing list
Packetfence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to