Hi Andi, Correct, if you enable SoH, Mac or Linux will be denied access, which to me, makes sense since we cannot validate the posture of the PC.
I know there is probably a way to make some exceptions in the packetfence-soh virtual server using unlang. Thanks. On 12-04-04 4:53 AM, Morris, Andi wrote: > If SoH is enabled is this supposed to still allow connections from Mac OS? > My Mac is currently failing to authenticate and when I check the radius logs > I can see that it is failing the SoH. Removing SoH from the eap.conf allows > the Mac to connect. > > Cheers, > Andi > > -----Original Message----- > From: Francois Gaudreault [mailto:fgaudrea...@inverse.ca] > Sent: 03 April 2012 17:13 > To: packetfence-users@lists.sourceforge.net > Subject: Re: [Packetfence-users] SoH for Linux& Mac OS > > Hi, > > On 12-04-02 9:55 PM, Jinxin100 wrote: >> soh is ms function，supported from xp sp2 in client and requires nap >> server in 2008 > This is not true. SoH works from XP SP3, and you don't need a NAP server at > all. SoH can be handle in FreeRADIUS > > Now to answer the question, Linux nor Mac support SoH in their supplicant > yet. We contacted the wpa_supplicant maintainers recently to do a kind of > feature request. > > Thanks! > > -- > Francois Gaudreault, ing. jr > fgaudrea...@inverse.ca :: +1.514.447.4918 (x130) :: www.inverse.ca Inverse > inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence > (www.packetfence.org) > > ------------------------------------------------------------------------------ > Better than sec? Nothing is better than sec when it comes to monitoring Big > Data applications. Try Boundary one-second resolution app monitoring today. > Free. > http://p.sf.net/sfu/Boundary-dev2dev > _______________________________________________ > Packetfence-users mailing list > Packetfence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users > ________________________________ > >> From 1st November 2011 UWIC changed its title to Cardiff Metropolitan >> University. From the 6th December 2011, as part of this change, all email >> addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All >> emails sent from Cardiff Metropolitan University will now be sent from the >> new @cardiffmet.ac.uk address. Please could you ensure that all of your >> contact records and databases are updated to reflect this change. Further >> information can be found on the website >> here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx> > > Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan > Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad e-bost > sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr holl ebyst a > ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu danfon o‘r cyfeiriad > @cardiffmet.ac.uk newydd. Gwnewch yn siwr eich bod yn diweddaru eich > cofnodion cyswllt a'ch cronfeydd data i adlewyrchu hyn. Gellir cael rhagor o > wybodaeth ar y wefan > yma.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx> > > > ------------------------------------------------------------------------------ > Better than sec? Nothing is better than sec when it comes to > monitoring Big Data applications. Try Boundary one-second > resolution app monitoring today. Free. > http://p.sf.net/sfu/Boundary-dev2dev > _______________________________________________ > Packetfence-users mailing list > Packetfence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users > -- Francois Gaudreault, ing. jr fgaudrea...@inverse.ca :: +1.514.447.4918 (x130) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) ------------------------------------------------------------------------------ Better than sec? Nothing is better than sec when it comes to monitoring Big Data applications. Try Boundary one-second resolution app monitoring today. Free. http://p.sf.net/sfu/Boundary-dev2dev _______________________________________________ Packetfence-users mailing list Packetfence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
