You may want to post this to the FreeRADIUS list serv as well. FR is the
RADIUS that PF uses and the CoA packet (I believe) is generated from the RADIUS
server.
Jake Sallee
Godfather of Bandwidth
System Engineer
University of Mary Hardin-Baylor
900 College St.
Belton TX. 76513
Fone: 254-295-4658
Phax: 254-295-4221
HTTP://WWW.UMHB.EDU
From: Thomas Tsai [mailto:[email protected]]
Sent: Tuesday, March 26, 2013 3:39 PM
To: '[email protected]'
Subject: [PacketFence-users] RFC3576 Radius deauth issue with Cisco Wireless
Lan Controllers
Just an FYI to Team Packetfence:
I'm having an internal review discussion with my Cisco reps and they have
provided me with the following information about the issue I had pointed out
about the CoA not working on Cisco Wireless platforms (see below).
According to cisco development, they detect there are white spaces being
introduced with the radius key. I checked my config and it appears there are
no extra white spaces in my config. So... not sure why this is happening.
CSCua21789<http://cdets.cisco.com/apps/dumpcr?&content=summary&format=html&identifier=CSCua21789>.
Published ES code. Issue was with 3rd party packetfence NAC server
introuducing white spaces on radius key. Corrected that makes CoA deauth work
fine. Customer will work with packet fence on resolving that bug.
Can you guys confirm that there is a whitespace problem? Would likely help
the rest of your customers with Cisco WLC deauthenticate correctly. Cisco
mentioned they are planning on introducing the check into their main stream
code, but do not have an ETA.
**********************************************
Email Disclaimer:
This email, including attachments, may contain
proprietary, confidential or privileged information. If you
are not the intended recipient, please (i) do not use,
disclose, save or retransmit this message or any
attachments, (ii) alert the sender by reply email and (iii)
destroy or delete this message and any attachments.
Delivery of this email to a person other than the intended
recipient(s) shall not constitute a waiver of privilege or
confidentiality.
CP Investments, member FINRA and SIPC, serves as
placement agent for investment products advised by
Canyon Capital Advisors LLC. This email is not intended to
be an offer to sell or a solicitation of an offer to buy any
security in any jurisdiction. We review and retain
electronic communications traveling through our network.
**********************************************
------------------------------------------------------------------------------
Own the Future-Intel® Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
