Thanks Derek -
I believe we found the issue. The device was in the Nodes table twice.
Once with colons in the MAC address -- once with hypens in the MAC
address. We removed the MAC with hyphens and things seemed to have
straightened out.
Max
--
Max McGrath
Network Administrator
Carthage College
262-552-5512
[email protected]
On Mon, Mar 23, 2015 at 8:10 AM, Derek Wuelfrath <[email protected]>
wrote:
> Hello Max,
>
> Can you double check the expiration date in the authentication source /
> configuration for the “carthageGame” role ?
>
> Cheers!
> dw.
>
> --
> Derek Wuelfrath
> [email protected] :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110)
> Inverse inc. (www.inverse.ca) :: Leaders behind SOGo (www.sogo.nu) and
> PacketFence (www.packetfence.org)
>
> On March 19, 2015 at 17:26:07, Max McGrath ([email protected]) wrote:
>
> Hi all -
>
> Weird issue where we register a device (it happens to be an Xbox One) and
> it immediately unregisters itself.
>
> Here is where it gets registered:
>
> Mar 19 15:35:43 httpd.webservices(14806) INFO: [50:1a:c5:52:c4:de]
> Connection type is WIRELESS_MAC_AUTH. Getting role from node_info
> (pf::vlan::getNormalVlan)
> Mar 19 15:35:43 httpd.webservices(14806) INFO: [50:1a:c5:52:c4:de]
> Username was defined "50-1A-C5-52-C4-DE" - returning user based role
> 'carthageGame' (pf::vlan::getNormalVlan)
> Mar 19 15:35:43 httpd.webservices(14806) INFO: [50:1a:c5:52:c4:de] PID:
> "zfeldker", Status: reg. Returned VLAN: 140 (pf::vlan::fetchVlanForNode)
> *Mar 19 15:35:43 httpd.webservices(14806) INFO: [50:1a:c5:52:c4:de]
> (10.5.1.32) Returning ACCEPT with VLAN 140 and role
> (pf::Switch::returnRadiusAccessAccept)*
> Mar 19 15:36:02 httpd.webservices(14806) INFO: [50:1a:c5:52:c4:de]
> handling radius autz request: from switch_ip => (10.5.1.32),
> connection_type => Wireless-802.11-NoEAP,switch_mac => (fc:0a:81:a2:d8:60),
> mac => [50:1a:c5:52:c4:de], port => 2, username => "50-1A-C5-52-C4-DE"
> (pf::radius::authorize)
>
>
> And instantly it unregisters itself:
>
> *Mar 19 15:36:02 httpd.webservices(14806) INFO: [50:1a:c5:52:c4:de] is
> of status unreg; belongs into registration VLAN
> (pf::vlan::getRegistrationVlan)*
> Mar 19 15:36:02 httpd.webservices(14806) INFO: [50:1a:c5:52:c4:de]
> (10.5.1.32) Returning ACCEPT with VLAN 500 and role
> (pf::Switch::returnRadiusAccessAccept)
> Mar 19 15:36:03 httpd.webservices(14806) INFO: [50:1a:c5:52:c4:de]
> DesAssociating mac on switch (10.5.1.32) (pf::api::desAssociate)
> Mar 19 15:36:03 httpd.webservices(14806) INFO: deauthenticating
> 50:1a:c5:52:c4:de (pf::Switch::radiusDisconnect)
> Mar 19 15:36:05 httpd.webservices(14806) INFO: [50:1a:c5:52:c4:de]
> handling radius autz request: from switch_ip => (10.5.1.32),
> connection_type => Wireless-802.11-NoEAP,switch_mac => (fc:0a:81:a2:d8:60),
> mac => [50:1a:c5:52:c4:de], port => 2, username => "50-1A-C5-52-C4-DE"
> (pf::radius::authorize)
> Mar 19 15:36:05 httpd.webservices(14806) INFO: [50:1a:c5:52:c4:de] is of
> status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
> Mar 19 15:36:05 httpd.webservices(14806) INFO: [50:1a:c5:52:c4:de]
> (10.5.1.32) Returning ACCEPT with VLAN 500 and role
> (pf::Switch::returnRadiusAccessAccept)
>
> Weirdness....
>
> Any ideas?
> --
> Max McGrath
> Network Administrator
> Carthage College
> 262-552-5512
> [email protected]
>
> ------------------------------------------------------------------------------
>
> Dive into the World of Parallel Programming The Go Parallel Website,
> sponsored
> by Intel and developed in partnership with Slashdot Media, is your hub for
> all
> things parallel software development, from weekly thought leadership blogs
> to
> news, videos, case studies, tutorials and more. Take a look and join the
> conversation now.
> http://goparallel.sourceforge.net/_______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the
conversation now. http://goparallel.sourceforge.net/
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
