Ok, I am a bit "rusted" about FR stuff, but it looks like the packetfence-tunnel virtual server is never executed. What is happening is that the outer-tunnel (packetfence vserver), tries to handle the post-auth, and obviously, since there is a EAP-Type set, it won't execute (this is to allow anonymous outer identity). The reason is that your FR servers proxy the entire session instead of only the inner tunnel.
This might help you: http://sourceforge.net/mailarchive/message.php?msg_id=28547313 Francois On 2013-06-26 5:53 PM, Palmer, Tim wrote: > Well, actually, here you go. This paste includes FR startup and a > successful connection. > > http://pastebin.com/mk2UBR4P > > > On 6/26/13 4:59 PM, "Francois Gaudreault" <[email protected]> wrote: > >> Can you paste a RADIUS debug trace on pastebin? >> >> I have an idea why it might not be working, but I need to confirm :) >> >> Francois >> >> On 2013-06-26 11:58 AM, Palmer, Tim wrote: >>> Good morning all, >>> >>> I have a 4.0.2 installation somewhat working. Vlan enforcement mode, >>> several VLANS in production, Aruba 3200 based wireless system. >>> >>> Depending on how I configure the clients, I either get perfectly >>> working (registration works, vlan changes work, unregistering works), >>> or authentication only user is properly authenticated against our >>> external radius system through the PF Freeradius, but no vlan >>> intervention node screen is updated, but no location information >>> apparently gets into the database. >>> >>> I am proxying EAP-PEAP to our Windows domain NPS (radius/policy) system. >>> >>> I understand fully troubleshooting this is beyond what a volunteer >>> list can provide, but I'm hoping for a hint where I might start looking. >>> >>> Thank you for your time, >>> >>> Tim >>> >>> >>> >>> ------------------------------------------------------------------------- >>> ----- >>> This SF.net email is sponsored by Windows: >>> >>> Build for Windows Store. >>> >>> http://p.sf.net/sfu/windows-dev2dev >>> >>> >>> _______________________________________________ >>> PacketFence-users mailing list >>> [email protected] >>> https://lists.sourceforge.net/lists/listinfo/packetfence-users >> >> -- >> Francois Gaudreault >> Architecte de Solution Cloud | Cloud Solutions Architect >> [email protected] >> 514-629-6775 >> - - - >> CloudOps >> 420 rue Guy >> Montréal QC H3J 1S6 >> www.cloudops.com >> @CloudOps_ >> >> >> -------------------------------------------------------------------------- >> ---- >> This SF.net email is sponsored by Windows: >> >> Build for Windows Store. >> >> http://p.sf.net/sfu/windows-dev2dev >> _______________________________________________ >> PacketFence-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/packetfence-users > > ------------------------------------------------------------------------------ > This SF.net email is sponsored by Windows: > > Build for Windows Store. > > http://p.sf.net/sfu/windows-dev2dev > _______________________________________________ > PacketFence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users > -- Francois Gaudreault Architecte de Solution Cloud | Cloud Solutions Architect [email protected] 514-629-6775 - - - CloudOps 420 rue Guy Montréal QC H3J 1S6 www.cloudops.com @CloudOps_ ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
