Hi Tim,
Try creating a role that gets assigned VLAN id -1 (minus one).
Then create a catchall rule that assigns the role.

I haven't tried it yet but it should work.
Otherwise you could return vlan -1 directly in clan/custom.pm if the role is 
not assigned.

Something like this should do it ( in getNormalVlan) :

return -1 if not $role;

Regards,
--
Louis Munro
[email protected]  ::  www.inverse.ca 
+1.514.447.4918 *125  :: +1 (866) 353-6153 
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

On 2013-08-09, at 11:07 , "Palmer, Tim" <[email protected]> wrote:

> Good morning all,
> 
> I'm trying to come up with way to set a default deny at the end of my 
> source/rule chain. I was hoping that assigning a role that allows 0 nodes 
> would kick the user off when registering/logging in, but that doesn't seem to 
> be the case.
> 
> When is the role based number of nodes enforced?
> 
> Any one else found a way to kick off the poor sucker who has valid 
> credentials, but doesn't match a any source rules? Our use case is that we're 
> (at this point), not allowing BYOD for our faculty/staff. 
> 
> Thank you for your time,
> 
> Tim Palmer
> ------------------------------------------------------------------------------
> Get 100% visibility into Java/.NET code with AppDynamics Lite!
> It's a free troubleshooting tool designed for production.
> Get down to code-level detail for bottlenecks, with <2% overhead. 
> Download for free and get started troubleshooting in minutes. 
> http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk_______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead. 
Download for free and get started troubleshooting in minutes. 
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to