That does make sense I guess. I think I'm going to have to disable our SoH rules for the time being then, which is unfortunate.
Cheers, Andi -----Original Message----- From: Francois Gaudreault [mailto:fgaudrea...@inverse.ca] Sent: 04 April 2012 13:36 To: packetfence-users@lists.sourceforge.net Subject: Re: [Packetfence-users] SoH for Linux & Mac OS Hi Andi, Correct, if you enable SoH, Mac or Linux will be denied access, which to me, makes sense since we cannot validate the posture of the PC. I know there is probably a way to make some exceptions in the packetfence-soh virtual server using unlang. Thanks. On 12-04-04 4:53 AM, Morris, Andi wrote: > If SoH is enabled is this supposed to still allow connections from Mac OS? > My Mac is currently failing to authenticate and when I check the radius logs > I can see that it is failing the SoH. Removing SoH from the eap.conf allows > the Mac to connect. > > Cheers, > Andi > > -----Original Message----- > From: Francois Gaudreault [mailto:fgaudrea...@inverse.ca] > Sent: 03 April 2012 17:13 > To: packetfence-users@lists.sourceforge.net > Subject: Re: [Packetfence-users] SoH for Linux& Mac OS > > Hi, > > On 12-04-02 9:55 PM, Jinxin100 wrote: >> soh is ms function，supported from xp sp2 in client and requires nap >> server in 2008 > This is not true. SoH works from XP SP3, and you don't need a NAP > server at all. SoH can be handle in FreeRADIUS > > Now to answer the question, Linux nor Mac support SoH in their supplicant > yet. We contacted the wpa_supplicant maintainers recently to do a kind of > feature request. > > Thanks! > > -- > Francois Gaudreault, ing. jr > fgaudrea...@inverse.ca :: +1.514.447.4918 (x130) :: www.inverse.ca > Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence > (www.packetfence.org) > > ---------------------------------------------------------------------- > -------- Better than sec? Nothing is better than sec when it comes to > monitoring Big Data applications. Try Boundary one-second resolution app > monitoring today. Free. > http://p.sf.net/sfu/Boundary-dev2dev > _______________________________________________ > Packetfence-users mailing list > Packetfence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users > ________________________________ > >> From 1st November 2011 UWIC changed its title to Cardiff Metropolitan >> University. From the 6th December 2011, as part of this change, all >> email addresses which included @uwic.ac.uk have changed to >> @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan >> University will now be sent from the new @cardiffmet.ac.uk address. >> Please could you ensure that all of your contact records and >> databases are updated to reflect this change. Further information can >> be found on the website >> here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx >> > > > Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan > Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad > e-bost sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr > holl ebyst a ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu > danfon o‘r cyfeiriad @cardiffmet.ac.uk newydd. Gwnewch yn siwr eich > bod yn diweddaru eich cofnodion cyswllt a'ch cronfeydd data i > adlewyrchu hyn. Gellir cael rhagor o wybodaeth ar y wefan > yma.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx> > > > ---------------------------------------------------------------------- > -------- Better than sec? Nothing is better than sec when it comes to > monitoring Big Data applications. Try Boundary one-second resolution > app monitoring today. Free. > http://p.sf.net/sfu/Boundary-dev2dev > _______________________________________________ > Packetfence-users mailing list > Packetfence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users > -- Francois Gaudreault, ing. jr fgaudrea...@inverse.ca :: +1.514.447.4918 (x130) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) ------------------------------------------------------------------------------ Better than sec? Nothing is better than sec when it comes to monitoring Big Data applications. Try Boundary one-second resolution app monitoring today. Free. http://p.sf.net/sfu/Boundary-dev2dev _______________________________________________ Packetfence-users mailing list Packetfence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users ________________________________ >From 1st November 2011 UWIC changed its title to Cardiff Metropolitan >University. From the 6th December 2011, as part of this change, all email >addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All >emails sent from Cardiff Metropolitan University will now be sent from the new >@cardiffmet.ac.uk address. Please could you ensure that all of your contact >records and databases are updated to reflect this change. Further information >can be found on the website >here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx> Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad e-bost sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr holl ebyst a ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu danfon o‘r cyfeiriad @cardiffmet.ac.uk newydd. Gwnewch yn siwr eich bod yn diweddaru eich cofnodion cyswllt a'ch cronfeydd data i adlewyrchu hyn. Gellir cael rhagor o wybodaeth ar y wefan yma.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx> ------------------------------------------------------------------------------ Better than sec? Nothing is better than sec when it comes to monitoring Big Data applications. Try Boundary one-second resolution app monitoring today. Free. http://p.sf.net/sfu/Boundary-dev2dev _______________________________________________ Packetfence-users mailing list Packetfence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
