I am having trouble getting PF to accept my RADIUS authenticated users, the 
user is able to authenticate fine, but PF is not returning a VLan attribute 
because it thinks the switch is not in production, BUT the switches.conf file 
AND the admin GUI both say the switch IS in production ... so what is telling 
PF otherwise?

Here is the clip from my switches.conf...

[10.11.60.2]
type=Xirrus
mode=production
vlans=111,112,113,116,117
normalVlan=111
registrationVlan=113
isolationVlan=117
customVlan1=111
customVlan2=112

and here is what the packetfence.log is saying...

May 13 10:17:08 pf::WebAPI(27432) WARN: Should perform access control on switch 
10.11.60.2 for mac 00:26:5e:31:18:7c but the switch is not in production -> 
Returning ACCEPT (pf::radius::authorize)
May 13 10:17:12 pf::WebAPI(27433) INFO: handling radius autz request: from 
switch_ip => 10.11.60.2, connection_type => Wireless-802.11-EAP mac => 
00:26:5e:31:18:7c, port => 0, username => [email protected] 
(pf::radius::authorize)


And I have restarted PF and even rebooted the box ... so strange...any help is 
appreciated!


Jake Sallee
Godfather of Bandwidth
Network Engineer
University of Mary Hardin-Baylor
900 College St.
Belton, Texas
76513
Fone: 254-295-4658
Phax: 254-295-4221

------------------------------------------------------------------------------
Achieve unprecedented app performance and reliability
What every C/C++ and Fortran developer should know.
Learn how Intel has extended the reach of its next-generation tools
to help boost performance applications - inlcuding clusters.
http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________
Packetfence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to