Yes , it look like you are not doing wpa2 enterprise but a sort of mac tls.
Le 2014-03-19 12:46, Nicola Canepa a écrit :
> Now vlan/custom.pm contains:
>> sub shouldAutoRegister {
>> my ($this, $mac, $switch_in_autoreg_mode, $violation_autoreg, $isPhone,
>> $conn_type, $user_name, $ssid, $eap_type) = @_;
>> my $logger = Log::Log4perl->get_logger();
>>
>> $logger->trace("asked if should auto-register device");
>> # Since they already have validated credentials through EAP to do 802.1X
>> if (defined($conn_type) && (($conn_type & $EAP) == $EAP)) {
>> $logger->trace("returned yes because it's a 802.1X client that
>> successfully authenticated already");
>> return 1;
>> }
>>
>> # otherwise don't autoreg
>> return 0;
>> }
> And, if I understand correctly, conf/switches.conf contains:
>> inlineTrigger=ssid::GUESTSSD
>
> Also, I have
>> inlineVlan=119
> in switches.conf, under the
>> [AP_IP]
> section
>
> Am I missing something?
>
> I keep getting lines like this in radius.log:
>> Wed Mar 19 17:41:41 2014 : Auth: Login incorrect: [XXX] (from client a.b.c.d
>> port 958 cli MAC_ADDRESS via TLS tunnel)
>> Wed Mar 19 17:41:41 2014 : Auth: Login incorrect: [XXX] (from client a.b.c.d
>> port 958 cli MAC_ADDRESS)
>
> Nicola
>
> Il giorno 19/mar/2014, alle ore 17:30, Fabrice DURAND ha scritto:
>
>> Hello Nicola,
>>
>> yes it´s possible, you have to define the inline vlan id in the role the
>> user will match and enable autoregistration in
>> /usr/local/pf/lib/pf/vlan/custom.pm.
>>
>>
>> regards
>> Fabrice
>>
>> Le 2014-03-19 03:24, Nicola Canepa a écrit :
>>> Hello.
>>> Is it possible to have a setup with inline enforcement, but without the
>>> need to login to captive portal, but using credentials to login to the WPA2
>>> SSID?
>>> Since I want:
>>> - to avoid possible mac-spoofing
>>> - not ask the user to insert twice the same credentials
>>> I configured my access point to autenticate through PacketFence's Radius,
>>> but I keep getting an authentication failure.
>>>
>>> What's wrong?
>>>
>>> Is this possible in VLAN enforcement mode or do I have to first access the
>>> "public" SSID in any case?
>>>
>>> Thank you for your help.
>>>
>>> Nicola Canepa
>>> Tel: +39-0522-399-3474
>>> [email protected]
>>>
>>> -
>>> ASCII stupid question, get a stupid ANSI!
>>>
>>> Il contenuto della presente comunicazione è riservato e destinato
>>> esclusivamente ai destinatari indicati. Nel caso in cui sia ricevuto da
>>> persona diversa dal destinatario sono proibite la diffusione, la
>>> distribuzione e la copia. Nel caso riceveste la presente per errore, Vi
>>> preghiamo di informarci e di distruggerlo e/o cancellarlo dal Vostro
>>> computer, senza utilizzare i dati contenuti. La presente comunicazione
>>> (comprensiva dei documenti allegati) non avrà valore di proposta
>>> contrattuale e/o accettazione di proposte provenienti dal destinatario, nè
>>> rinuncia o riconoscimento di diritti, debiti e/o crediti, nè sarà
>>> impegnativa, qualora non sia sottoscritto successivo accordo da chi può
>>> validamente obbligarci. Non deriverà alcuna responsabilità precontrattuale
>>> a ns. carico, se la presente non sia seguita da contratto sottoscritto
>>> dalle parti.
>>>
>>> The content of the above communication is strictly confidential and
>>> reserved solely for the referred addressees. In the event of receipt by
>>> persons different from the addressee, copying, alteration and distribution
>>> are forbidden. If received by mistake we ask you to inform us and to
>>> destroy and/or delete from your computer without using the data herein
>>> contained. The present message (eventual annexes inclusive) shall not be
>>> considered a contractual proposal and/or acceptance of offer from the
>>> addressee, nor waiver recognizance of rights, debts and/or credits, nor
>>> shall it be binding when not executed as a subsequent agreement by persons
>>> who could lawfully represent us. No pre-contractual liability shall apply
>>> to us when the present communication is not followed by any binding
>>> agreement between the parties.
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Learn Graph Databases - Download FREE O'Reilly Book
>>> "Graph Databases" is the definitive new guide to graph databases and their
>>> applications. Written by three acclaimed leaders in the field,
>>> this first edition is now available. Download your free book today!
>>> http://p.sf.net/sfu/13534_NeoTech
>>> _______________________________________________
>>> PacketFence-users mailing list
>>> [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>> --
>> Fabrice Durand
>> [email protected] :: +1.514.447.4918 (x135) :: www.inverse.ca
>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
>> (http://packetfence.org)
>>
>>
>> ------------------------------------------------------------------------------
>> Learn Graph Databases - Download FREE O'Reilly Book
>> "Graph Databases" is the definitive new guide to graph databases and their
>> applications. Written by three acclaimed leaders in the field,
>> this first edition is now available. Download your free book today!
>> http://p.sf.net/sfu/13534_NeoTech
>> _______________________________________________
>> PacketFence-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
> Nicola Canepa
> Tel: +39-0522-399-3474
> [email protected]
>
> -
> ASCII stupid question, get a stupid ANSI!
>
> Il contenuto della presente comunicazione è riservato e destinato
> esclusivamente ai destinatari indicati. Nel caso in cui sia ricevuto da
> persona diversa dal destinatario sono proibite la diffusione, la
> distribuzione e la copia. Nel caso riceveste la presente per errore, Vi
> preghiamo di informarci e di distruggerlo e/o cancellarlo dal Vostro
> computer, senza utilizzare i dati contenuti. La presente comunicazione
> (comprensiva dei documenti allegati) non avrà valore di proposta contrattuale
> e/o accettazione di proposte provenienti dal destinatario, nè rinuncia o
> riconoscimento di diritti, debiti e/o crediti, nè sarà impegnativa, qualora
> non sia sottoscritto successivo accordo da chi può validamente obbligarci.
> Non deriverà alcuna responsabilità precontrattuale a ns. carico, se la
> presente non sia seguita da contratto sottoscritto dalle parti.
>
> The content of the above communication is strictly confidential and reserved
> solely for the referred addressees. In the event of receipt by persons
> different from the addressee, copying, alteration and distribution are
> forbidden. If received by mistake we ask you to inform us and to destroy
> and/or delete from your computer without using the data herein contained. The
> present message (eventual annexes inclusive) shall not be considered a
> contractual proposal and/or acceptance of offer from the addressee, nor
> waiver recognizance of rights, debts and/or credits, nor shall it be binding
> when not executed as a subsequent agreement by persons who could lawfully
> represent us. No pre-contractual liability shall apply to us when the present
> communication is not followed by any binding agreement between the parties.
>
>
>
>
>
>
>
> ------------------------------------------------------------------------------
> Learn Graph Databases - Download FREE O'Reilly Book
> "Graph Databases" is the definitive new guide to graph databases and their
> applications. Written by three acclaimed leaders in the field,
> this first edition is now available. Download your free book today!
> http://p.sf.net/sfu/13534_NeoTech
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Fabrice Durand
[email protected] :: +1.514.447.4918 (x135) :: www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://packetfence.org)
------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
