Jason,

Where did you find the autoregister code?  Would you mind sharing with me?  I 
would be curious to see how you set this up.  Sounds like I'll need the same 
sort of logic to login, otherwise users wont be able to login.

-----Original Message-----
From: Jason Frisvold [mailto:xenoph...@godshell.com] 
Sent: Wednesday, November 06, 2013 2:00 PM
To: packetfence-users@lists.sourceforge.net
Subject: Re: [PacketFence-users] Possible Bug - 802.1x with machine auth

Thomas Tsai wrote:
> So... once the 802.1x creds are associated the first time, does this actually 
> register the computer once, and any further attempts is allowed?  My device 
> pops up under nodes, but the actual status remains unregistered...

I did a quick test today, just to verify what happens.  I unregistered the node 
and removed the role first.

When I plugged in the system and booted up, the host auth portion kicked in.  
This caused the node to go into a registered state, but left the role blank.  
The switch port was put into the host auth network as expected.  When I logged 
in with a valid 802.1x user, the switch port was placed into the proper user 
network.  The role in packetfence remained empty.

So, it looks like 802.1x itself can register the node, but doesn't alter the 
role at all.

I do have the autoregister code in /usr/local/pf/lib/pf/vlan/custom.pm
enabled, though.

--
---------------------------
Jason 'XenoPhage' Frisvold
xenoph...@godshell.com
---------------------------

"Any sufficiently advanced magic is indistinguishable from technology.\"
- Niven's Inverse of Clarke's Third Law

------------------------------------------------------------------------------
November Webinars for C, C++, Fortran Developers Accelerate application 
performance with scalable programming models. Explore techniques for threading, 
error checking, porting, and tuning. Get the most from the latest Intel 
processors and coprocessors. See abstracts and register 
http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

**********************************************
Email Disclaimer:

This email, including attachments, may contain 
proprietary, confidential or privileged information. If you 
are not the intended recipient, please (i) do not use, 
disclose, save or retransmit this message or any 
attachments, (ii) alert the sender by reply email and (iii) 
destroy or delete this message and any attachments. 
Delivery of this email to a person other than the intended 
recipient(s) shall not constitute a waiver of privilege or 
confidentiality.

CP Investments, member FINRA and SIPC, serves as 
placement agent for investment products advised by 
Canyon Capital Advisors LLC. This email is not intended to 
be an offer to sell or a solicitation of an offer to buy any 
security in any jurisdiction. We review and retain 
electronic communications traveling through our network.

**********************************************

------------------------------------------------------------------------------
November Webinars for C, C++, Fortran Developers
Accelerate application performance with scalable programming models. Explore
techniques for threading, error checking, porting, and tuning. Get the most 
from the latest Intel processors and coprocessors. See abstracts and register
http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to