Actually I found a way to show AUP to users by PF captive portal first and then require 802.1x authentication to enable user access to the Internet. It was possible using HP Procurve 2620 switch Open Vlan feature (I don't know if other vendor switches have the similar feature though). Open Vlan allows user access to captive portal without authentication and I defined switch Open Vlan as PF registration VLAN. This obviously doesn't need autoregistration because user registers thru portal as usual. PF isolation VLAN works as usual in this case too - user has after all authenticated before.
Unfortunately in this scenario user has to authenticate once more (802.1x between switch and PC supplicant) but then PC caches authentication parameters and all subsequent logins are transparent to the user). I suppose it's not possible to avoid this second authentication, right? MU Francois Gaudreault: > Even in future release, 802.1X with autoreg completely bypass the > portal. Unless you have a way to inject something into the 802.1X > session to trigger a message or webpage. > > You need to find another way to make the AUP shown to the users, > either use a proxy and force another login (with the AUP on the page), > or present the AUP at the machine boot. > > Francois > > On 2012-12-13 8:27 AM, Durand Fabrice wrote: >> Hello Maciej >> Sorry but no way. >> Maybe in future release. >> >> Regards >> >> Le 2012-12-12 17:12, Maciej Uhlig a écrit : >>> How is user supposed to accept AUP while using 802.1X and >>> autoregistration feature? >>> >>> MU >>> >>> >>> >>> ------------------------------------------------------------------------------ >>> LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial >>> Remotely access PCs and mobile devices and provide instant support >>> Improve your efficiency, and focus on delivering more value-add services >>> Discover what IT Professionals Know. Rescue delivers >>> http://p.sf.net/sfu/logmein_12329d2d >>> >>> >>> _______________________________________________ >>> PacketFence-users mailing list >>> [email protected] >>> https://lists.sourceforge.net/lists/listinfo/packetfence-users >> >> >> -- >> Fabrice Durand >> [email protected] :: +1.514.447.4918 (x135) :: www.inverse.ca >> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence >> (http://packetfence.org) >> >> >> ------------------------------------------------------------------------------ >> LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial >> Remotely access PCs and mobile devices and provide instant support >> Improve your efficiency, and focus on delivering more value-add services >> Discover what IT Professionals Know. Rescue delivers >> http://p.sf.net/sfu/logmein_12329d2d >> >> >> _______________________________________________ >> PacketFence-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/packetfence-users > > > > ------------------------------------------------------------------------------ > LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial > Remotely access PCs and mobile devices and provide instant support > Improve your efficiency, and focus on delivering more value-add services > Discover what IT Professionals Know. Rescue delivers > http://p.sf.net/sfu/logmein_12329d2d > > > _______________________________________________ > PacketFence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Maciej Uhlig kierownik Działu Administracji Sieci i Usług Sieciowych główny specjalista Uniwersytet Śląski ul. Uniwersytecka 4, 40-007 Katowice, tel. 32 359 1768
smime.p7s
Description: Kryptograficzna sygnatura S/MIME
------------------------------------------------------------------------------ Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS, MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft MVPs and experts. ON SALE this month only -- learn more at: http://p.sf.net/sfu/learnnow-d2d
_______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
