That's very interesting Olivier, I had no idea MS were doing such a thing. I'm having trouble punching a hole through the captive portal to the area required. I have MSConnectivity=http://www.msftncsi.com/ set in the passthroughs section of pf.conf, and have restarted the packetfence services, but still any request to that site results in the captive portal address being returned.
Cheers, Andi -----Original Message----- From: Olivier Bilodeau [mailto:[email protected]] Sent: 11 April 2012 15:56 To: [email protected] Subject: Re: [Packetfence-users] Extra dot1x balloons I think the extra ballon is when Microsoft's network detection stuff can't reach its 'phone home' address. But i'm not 100% sure. MS Network Connectivity Status Indicator http://technet.microsoft.com/en-us/library/cc766017(v=ws.10).aspx Basically, and this is a guess, it'll try to hit http://www.msftncsi.com/ncsi.txt and if it's not "Microsoft NCSI" but can do the DNS lookup alright it'll report a captive portal and request an opening of the browser. Make sure http://www.msftncsi.com/ncsi.txt is reachable from within your network (or emulate the 'feature' in your proxy). Or you can disable NCSI in the registry. Let us know if it's that, I'm curious. If it's not, we'll have to dig deeper as to where does the "Additional information required" dialog comes from. On 04/11/2012 10:39 AM, Morris, Andi wrote: > Hi all, > > I have PF configured to auto-register users than connect via dot1x, > and this works a treat, however when they get successfully registered > they are prompted with another balloon asking them to click to open a > browser window, which is confusing when this step is being taken care > of by our dot1x configuration tool. Is there any way to supress this extra > balloon? > > > > Cheers, > > Andi > > > > --------------------------------------------------------------- > Andi Morris > Technical Security Analyst > > Systems and Communications Services > Information Services Division > Cardiff Metropolitan University > Cardiff > Wales > CF5 2YB > > > > 02920 205720 > > -------------------------------------------------------------- > > > > ---------------------------------------------------------------------- > -- > >>From 1st November 2011 UWIC changed its title to Cardiff Metropolitan > University. From the 6th December 2011, as part of this change, all > email addresses which included @uwic.ac.uk have changed to > @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan > University will now be sent from the new @cardiffmet.ac.uk address. > *Please could you ensure that all of your contact records and > databases are updated to reflect this change.* Further information can > be found on the website here. > <http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx> > > Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan > Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad > e-bost sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr > holl ebyst a ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu > danfon o‘r cyfeiriad @cardiffmet.ac.uk newydd. *Gwnewch yn siwr eich > bod yn diweddaru eich cofnodion cyswllt a'ch cronfeydd data i > adlewyrchu > hyn.* Gellir cael rhagor o wybodaeth ar y wefan yma. > <http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx> > > > > ---------------------------------------------------------------------- > -------- Better than sec? Nothing is better than sec when it comes to > monitoring Big Data applications. Try Boundary one-second resolution > app monitoring today. Free. > http://p.sf.net/sfu/Boundary-dev2dev > > > > _______________________________________________ > Packetfence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Olivier Bilodeau [email protected] :: +1.514.447.4918 *115 :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) ------------------------------------------------------------------------------ Better than sec? Nothing is better than sec when it comes to monitoring Big Data applications. Try Boundary one-second resolution app monitoring today. Free. http://p.sf.net/sfu/Boundary-dev2dev _______________________________________________ Packetfence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users ________________________________ From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December 2011, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. Please could you ensure that all of your contact records and databases are updated to reflect this change. Further information can be found on the website here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx> Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad e-bost sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr holl ebyst a ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu danfon o‘r cyfeiriad @cardiffmet.ac.uk newydd. Gwnewch yn siwr eich bod yn diweddaru eich cofnodion cyswllt a'ch cronfeydd data i adlewyrchu hyn. Gellir cael rhagor o wybodaeth ar y wefan yma.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx> ------------------------------------------------------------------------------ Better than sec? Nothing is better than sec when it comes to monitoring Big Data applications. Try Boundary one-second resolution app monitoring today. Free. http://p.sf.net/sfu/Boundary-dev2dev _______________________________________________ Packetfence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
