Many thanks for 6.0.1
but i had a problem when patching the 6.0 system(used in inline mode ). i
stopped the packetfence services then applied the pf-maint.pl script, it
started to patch files .then gave me error "can't find file to patch at
input line 357
Perhaps you used the wrong -p or --strip option?"
i ignored it , then i manually started the services and every thing went
fine . but when doing a reboot for my server ,the admin portal never start
again !!!!
i tried to start it manually but with no luck (error shown in cyan color)
full details is hereunder:
-------------------------------------
[root@pfence addons]# service packetfence-config stop
Shutting down pfconfig: [ OK ]
[root@pfence addons]# service packetfence stop
Starting pfconfig:
------------------
Preloading FilterEngine::DNS_Scopes
Preloading FilterEngine::DhcpScopes
Preloading FilterEngine::Profile
Preloading FilterEngine::RadiusScopes
Preloading FilterEngine::Violation
Preloading FilterEngine::VlanScopes
Preloading config::AdminRoles
Preloading config::ApacheFilters
Preloading config::Authentication
Preloading config::BillingTiers
Preloading config::Cluster
Preloading config::DNS_Filters
Preloading config::DhcpFilters
Preloading config::Documentation
Preloading config::Domain
Preloading config::Firewall_SSO
Preloading config::FloatingDevices
Preloading config::Network
Preloading config::PKI_Provider
Preloading config::Pf
Preloading config::PfDefault
Preloading config::Pfdetect
Preloading config::Pfqueue
Preloading config::PortalModules
Preloading config::Profiles
Preloading config::Provisioning
Preloading config::RadiusFilters
Preloading config::Realm
Preloading config::Scan
Preloading config::Switch
Preloading config::Violations
Preloading config::VlanFilters
Preloading config::Wmi
Preloading interfaces
Preloading interfaces::dhcplistener_ints
Preloading interfaces::ha_ints
Preloading interfaces::inline_enforcement_nets
Preloading interfaces::inline_nets
Preloading interfaces::internal_nets
Preloading interfaces::listen_ints
Preloading interfaces::management_network
Preloading interfaces::monitor_int
Preloading interfaces::portal_ints
Preloading interfaces::routed_isolation_nets
Preloading interfaces::routed_registration_nets
Preloading interfaces::vlan_enforcement_nets
Preloading resource::CaptivePortal
Preloading resource::Database
Preloading resource::SwitchTypesConfigured
Preloading resource::URI_Filters
Preloading resource::accounting_triggers
Preloading resource::array_test
Preloading resource::authentication_config_hash
Preloading resource::authentication_lookup
Preloading resource::authentication_sources
Preloading resource::bandwidth_expired_violations
Preloading resource::cluster_hosts
Preloading resource::cluster_servers
Preloading resource::default_switch
Preloading resource::domain_dns_servers
Preloading resource::fqdn
Preloading resource::guest_self_registration
Preloading resource::reverse_fqdn
Preloading resource::stats_levels
Preloading resource::switches_ranges
Preloading resource::trapping_range
------------------
[ OK ]
Shutting down PacketFence...service|command
keepalived|already stopped
httpd.graphite|stop
radsniff|stop
statsd|stop
collectd|stop
carbon-relay|stop
carbon-cache|stop
pfbandwidthd|already stopped
pfdetect|already stopped
p0f|stop
suricata|already stopped
snort|already stopped
pfmon|stop
httpd.webservices|stop
dhcpd|stop
httpd.portal|stop
httpd.parking|already stopped
httpd.proxy|already stopped
pfdhcplistener_eth2|stop
pfdhcplistener_eth1|stop
pfdns|stop
pfqueue|stop
snmptrapd|already stopped
pfsetvlan|already stopped
radiusd|stop
radiusd-acct|stop
httpd.aaa|stop
redis_queue|stop
iptables|stop
haproxy|already stopped
httpd.admin|stop
[root@pfence addons]# ./pf-maint.pl
Currently at 44843a2ebfee8d3a97908d7a262ae222f52a1ded
** GET
https://api.github.com/repos/inverse-inc/packetfence/branches/maintenance/6.0
==> 200 OK (6s)
Latest maintenance version is 569bff3d1f44e60fc6cbbb4b26deb9e7d1e9f919
** GET
https://api.github.com/repos/inverse-inc/packetfence/compare/44843a2ebfee8d3a97908d7a262ae222f52a1ded...569bff3d1f44e60fc6cbbb4b26deb9e7d1e9f919
==>200 OK (1s)
The following are going to be patched
ChangeLog
NEWS.asciidoc
addons/packages/packetfence.spec
conf/pf-release
conf/pf.conf.defaults
conf/profiles.conf.example
debian/changelog
debian/packetfence.cron.d
docs/docinfo.xml
docs/includes/global-attributes.asciidoc
html/captive-portal/lib/captiveportal/PacketFence/Controller/Violation.pm
html/captive-portal/lib/captiveportal/PacketFence/DynamicRouting/Application.pm
html/captive-portal/lib/captiveportal/PacketFence/DynamicRouting/Module/Root.pm
html/captive-portal/templates/layout.html
html/common/img/sprite.svg
html/common/packetfence-white.png
html/common/scss/_objects.box.scss
html/common/scss/_objects.buttons.scss
html/common/scss/styles.scss
html/common/styles.css
html/pfappserver/lib/pfappserver/Base/Controller/Crud.pm
html/pfappserver/lib/pfappserver/Base/Form.pm
html/pfappserver/lib/pfappserver/Form/Config/BillingTiers.pm
html/pfappserver/lib/pfappserver/Form/Config/Domain.pm
html/pfappserver/lib/pfappserver/Form/Config/PKI_Provider/
packetfence_local.pm
html/pfappserver/lib/pfappserver/Form/Config/PKI_Provider/
packetfence_pki.pm
html/pfappserver/lib/pfappserver/Form/Config/PKI_Provider/scep.pm
html/pfappserver/lib/pfappserver/Form/Config/Pfdetect.pm
html/pfappserver/lib/pfappserver/Form/Config/PortalModule.pm
html/pfappserver/lib/pfappserver/Form/Config/PortalModule/Authentication.pm
html/pfappserver/lib/pfappserver/Form/Config/PortalModule/Authentication/Blackhole.pm
html/pfappserver/lib/pfappserver/Form/Config/PortalModule/Authentication/Null.pm
html/pfappserver/lib/pfappserver/Form/Config/ProfileCommon.pm
html/pfappserver/lib/pfappserver/Form/Config/Provisioning.pm
html/pfappserver/lib/pfappserver/Form/Config/Realm.pm
html/pfappserver/lib/pfappserver/Form/Config/Scan.pm
html/pfappserver/lib/pfappserver/Form/Config/SwitchGroup.pm
html/pfappserver/lib/pfappserver/Form/Config/WMI.pm
html/pfappserver/lib/pfappserver/Form/Role.pm
html/pfappserver/lib/pfappserver/PacketFence/Controller/Config/Domain.pm
lib/pf/Portal/Profile.pm
lib/pf/Redis.pm
lib/pf/Switch/Cisco/Catalyst_2960.pm
lib/pf/Switch/Cisco/WLC.pm
lib/pf/dhcp/processor.pm
lib/pf/role.pm
lib/pfconfig/namespaces/config/Domain.pm
sbin/pfdns
sbin/pfsetvlan
Continue y/n [y]: y
Downloading the patch........
** GET
https://github.com/inverse-inc/packetfence/compare/44843a2ebfee8d3a97908d7a262ae222f52a1ded...569bff3d1f44e60fc6cbbb4b26deb9e7d1e9f919.diff
==> 200 OK (1s)
Applying the patch........
patching file ChangeLog
patching file NEWS.asciidoc
patching file addons/packages/packetfence.spec
patching file conf/pf-release
patching file conf/pf.conf.defaults
patching file conf/profiles.conf.example
can't find file to patch at input line 357
Perhaps you used the wrong -p or --strip option?
The text leading up to this was:
--------------------------
|diff --git a/debian/changelog b/debian/changelog
|index e73f821..5dd973e 100644
|--- a/debian/changelog
|+++ b/debian/changelog
--------------------------
File to patch: ^C[root@pfence addons]#
[root@pfence addons]#
[root@pfence addons]# ./pf-maint.pl
Currently at 569bff3d1f44e60fc6cbbb4b26deb9e7d1e9f919
** GET
https://api.github.com/repos/inverse-inc/packetfence/branches/maintenance/6.0
==> 200 OK (1s)
Already up to date
[root@pfence addons]# service packetfence-config restart
Shutting down pfconfig: [ OK ]
Starting pfconfig:
------------------
Preloading FilterEngine::DNS_Scopes
Preloading FilterEngine::DhcpScopes
Preloading FilterEngine::Profile
Preloading FilterEngine::RadiusScopes
Preloading FilterEngine::Violation
Preloading FilterEngine::VlanScopes
Preloading config::AdminRoles
Preloading config::ApacheFilters
Preloading config::Authentication
Preloading config::BillingTiers
Preloading config::Cluster
Preloading config::DNS_Filters
Preloading config::DhcpFilters
Preloading config::Documentation
Preloading config::Domain
Preloading config::Firewall_SSO
Preloading config::FloatingDevices
Preloading config::Network
Preloading config::PKI_Provider
Preloading config::Pf
Preloading config::PfDefault
Preloading config::Pfdetect
Preloading config::Pfqueue
Preloading config::PortalModules
Preloading config::Profiles
Preloading config::Provisioning
Preloading config::RadiusFilters
Preloading config::Realm
Preloading config::Scan
Preloading config::Switch
Preloading config::Violations
Preloading config::VlanFilters
Preloading config::Wmi
Preloading interfaces
Preloading interfaces::dhcplistener_ints
Preloading interfaces::ha_ints
Preloading interfaces::inline_enforcement_nets
Preloading interfaces::inline_nets
Preloading interfaces::internal_nets
Preloading interfaces::listen_ints
Preloading interfaces::management_network
Preloading interfaces::monitor_int
Preloading interfaces::portal_ints
Preloading interfaces::routed_isolation_nets
Preloading interfaces::routed_registration_nets
Preloading interfaces::vlan_enforcement_nets
Preloading resource::CaptivePortal
Preloading resource::Database
Preloading resource::SwitchTypesConfigured
Preloading resource::URI_Filters
Preloading resource::accounting_triggers
Preloading resource::array_test
Preloading resource::authentication_config_hash
Preloading resource::authentication_lookup
Preloading resource::authentication_sources
Preloading resource::bandwidth_expired_violations
Preloading resource::cluster_hosts
Preloading resource::cluster_servers
Preloading resource::default_switch
Preloading resource::domain_dns_servers
Preloading resource::fqdn
Preloading resource::guest_self_registration
Preloading resource::reverse_fqdn
Preloading resource::stats_levels
Preloading resource::switches_ranges
Preloading resource::trapping_range
------------------
[ OK ]
[root@pfence addons]# service packetfence start
Starting PacketFence...Set name-type for VLAN subsystem. Should be visible
in /proc/net/vlan/config
service|command
httpd: Could not reliably determine the server's fully qualified domain
name, using 10.10.0.1 for ServerName
httpd.admin|start
Checking configuration sanity...
iptables|start
redis_queue|start
httpd: Could not reliably determine the server's fully qualified domain
name, using 10.10.0.1 for ServerName
httpd.aaa|start
radiusd-acct|start
radiusd|start
pfqueue|start
pfdns|start
pfdhcplistener_eth1|start
pfdhcplistener_eth2|start
httpd: Could not reliably determine the server's fully qualified domain
name, using 10.10.0.1 for ServerName
httpd.portal|start
dhcpd|start
httpd: Could not reliably determine the server's fully qualified domain
name, using 10.10.0.1 for ServerName
httpd.webservices|start
pfmon|start
p0f|start
Starting carbon-cache (instance a)
carbon-cache|start
Starting carbon-relay (instance a)
carbon-relay|start
collectd|start
statsd|start
radsniff|start
httpd: Could not reliably determine the server's fully qualified domain
name, using 10.10.0.1 for ServerName
httpd.graphite|start
[root@pfence addons]# init 6
[root@pfence addons]# Connection to 213.6.150.170 closed by remote host.
Connection to 213.6.150.170 closed.
darwish@darwish-HP-Split-13-x2-PC:~$ ./1.sh
[email protected]'s password:
Last login: Fri Apr 29 14:57:40 2016 from 37.8.88.31
[root@pfence ~]# service packetfence-config restart
Shutting down pfconfig: [ OK ]
Starting pfconfig:
------------------
Preloading FilterEngine::DNS_Scopes
Preloading FilterEngine::DhcpScopes
Preloading FilterEngine::Profile
Preloading FilterEngine::RadiusScopes
Preloading FilterEngine::Violation
Preloading FilterEngine::VlanScopes
Preloading config::AdminRoles
Preloading config::ApacheFilters
Preloading config::Authentication
Preloading config::BillingTiers
Preloading config::Cluster
Preloading config::DNS_Filters
Preloading config::DhcpFilters
Preloading config::Documentation
Preloading config::Domain
Preloading config::Firewall_SSO
Preloading config::FloatingDevices
Preloading config::Network
Preloading config::PKI_Provider
Preloading config::Pf
Preloading config::PfDefault
Preloading config::Pfdetect
Preloading config::Pfqueue
Preloading config::PortalModules
Preloading config::Profiles
Preloading config::Provisioning
Preloading config::RadiusFilters
Preloading config::Realm
Preloading config::Scan
Preloading config::Switch
Preloading config::Violations
Preloading config::VlanFilters
Preloading config::Wmi
Preloading interfaces
Preloading interfaces::dhcplistener_ints
Preloading interfaces::ha_ints
Preloading interfaces::inline_enforcement_nets
Preloading interfaces::inline_nets
Preloading interfaces::internal_nets
Preloading interfaces::listen_ints
Preloading interfaces::management_network
Preloading interfaces::monitor_int
Preloading interfaces::portal_ints
Preloading interfaces::routed_isolation_nets
Preloading interfaces::routed_registration_nets
Preloading interfaces::vlan_enforcement_nets
Preloading resource::CaptivePortal
Preloading resource::Database
Preloading resource::SwitchTypesConfigured
Preloading resource::URI_Filters
Preloading resource::accounting_triggers
Preloading resource::array_test
Preloading resource::authentication_config_hash
Preloading resource::authentication_lookup
Preloading resource::authentication_sources
Preloading resource::bandwidth_expired_violations
Preloading resource::cluster_hosts
Preloading resource::cluster_servers
Preloading resource::default_switch
Preloading resource::domain_dns_servers
Preloading resource::fqdn
Preloading resource::guest_self_registration
Preloading resource::reverse_fqdn
Preloading resource::stats_levels
Preloading resource::switches_ranges
Preloading resource::trapping_range
------------------
[ OK ]
[root@pfence ~]# service packetfence start
Starting packetfence-redis-cache: [ OK ]
Starting PacketFence...Set name-type for VLAN subsystem. Should be visible
in /proc/net/vlan/config
service|command
[scan] LOADING Redis is loading the dataset in memory, at
/usr/lib64/perl5/vendor_perl/Redis/Fast.pm line 213
Redis::Fast::__ANON__('Redis::Fast=SCALAR(0x928aff8)', 0, 'match',
'pfconfigfiles||*') called at /usr/local/pf/lib/CHI/Driver/Redis.pm line 115
CHI::Driver::Redis::_get_keys('CHI::Driver::Redis__WITH__CHI::Driver::Role::Universal__AND__...')
called at /usr/local/pf/lib/CHI/Driver/Redis.pm line 160
CHI::Driver::Redis::clear('CHI::Driver::Redis__WITH__CHI::Driver::Role::Universal__AND__...')
called at (eval 2817) line 5
Role::Tiny::_COMPOSABLE::CHI::Driver::Role::HasSubcaches::_BASE::clear('CHI::Driver::Redis__WITH__CHI::Driver::Role::Universal__AND__...')
called at (eval 2818) line 11
Role::Tiny::_COMPOSABLE::CHI::Driver::Role::HasSubcaches::clear('CHI::Driver::Redis__WITH__CHI::Driver::Role::Universal__AND__...')
called at /usr/local/pf/lib/pf/config.pm line 929
pf::config::configreload(1) called at /usr/local/pf/lib/pf/cmd/pf/
service.pm line 139
pf::cmd::pf::service::postPfStartService('ARRAY(0x900c420)') called at
/usr/local/pf/lib/pf/cmd/pf/service.pm line 149
pf::cmd::pf::service::startService('pf', 'carbon-cache',
'carbon-relay', 'collectd', 'dhcpd', 'haproxy', 'httpd.aaa', 'httpd.admin',
'httpd.graphite', ...) called at /usr/local/pf/lib/pf/cmd/pf/service.pm
line 133
pf::cmd::pf::service::_run('pf::cmd::pf::service=HASH(0x243c4b0)')
called at /usr/local/pf/lib/pf/cmd.pm line 27
pf::cmd::run('pf::cmd::pf::service=HASH(0x243c4b0)') called at
/usr/local/pf/lib/pf/cmd/subcmd.pm line 30
pf::cmd::subcmd::_run('pf::cmd::pf=HASH(0x1f68f28)') called at
/usr/local/pf/lib/pf/cmd.pm line 27
pf::cmd::run('pf::cmd::pf=HASH(0x1f68f28)') called at /usr/local/pf/bin/
pfcmd.pl line 24
On Fri, Apr 29, 2016 at 11:16 AM, <
[email protected]> wrote:
> Send PacketFence-users mailing list submissions to
> [email protected]
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
> or, via email, send a message with subject or body 'help' to
> [email protected]
>
> You can reach the person managing the list at
> [email protected]
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of PacketFence-users digest..."
>
>
> Today's Topics:
>
> 1. ANN: PacketFence 6.0.1 (Louis Munro)
> 2. Re: autoreg with vlan filter not working (Morris, Andi)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Thu, 28 Apr 2016 17:12:36 -0400
> From: Louis Munro <[email protected]>
> Subject: [PacketFence-users] ANN: PacketFence 6.0.1
> To: [email protected],
> [email protected],
> [email protected]
> Message-ID: <[email protected]>
> Content-Type: text/plain; charset="utf-8"
>
> ANN: PacketFence 6.0.1
>
> The Inverse team is pleased to announce the immediate availability of
> PacketFence 6.0.1.
> This is a minor release containing important bug fixes.
> This release is considered ready for production use and upgrading from
> previous versions is strongly advised.
>
> This is strictly a bug fix release.
> It corrects the following issues.
>
> Bug Fixes
>
> Added back the option to set the logo in a portal profile
> Fixed Blackhole and Null authentication portal modules
> Added missing username field in Debian maintenance crontab
> Fixed web authentication web form release in captive portal
> Validate configuration identifiers so they don?t contain invalid characters
> Fixed incorrect samba handling of "%h" in server name
> Fixed registration ACL computing for Cisco WLC and 2960 in web
> authentication
> Adjust pfdetect startup order to allow Snort / Suricata to start
> Fixed pfsetvlan compilation error
> Fixed violations internationalization
> Fix incorrect rogue dhcp detection
>
>
> If you are running 6.0.0 you can get that same bug fix by running the
> pf-maint.pl script without upgrading.
>
> Best regards from Inverse,
> --
> Louis Munro
> [email protected] :: www.inverse.ca
> +1.514.447.4918 x125 :: +1 (866) 353-6153 x125
> Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (
> www.packetfence.org)
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
>
> ------------------------------
>
> Message: 2
> Date: Fri, 29 Apr 2016 08:16:11 +0000
> From: "Morris, Andi" <[email protected]>
> Subject: Re: [PacketFence-users] autoreg with vlan filter not working
> To: "[email protected]"
> <[email protected]>
> Message-ID:
> <
> 47fac5a830933045a14a6ef10f2c796e020cc36...@e2k10db1.internal.uwic.ac.uk>
>
> Content-Type: text/plain; charset="iso-8859-1"
>
> That's excellent! Thanks very much James.
>
> Cheers,
> Andi
>
> From: James Rouzier [mailto:[email protected]]
> Sent: 28 April 2016 18:58
> To: [email protected]
> Subject: Re: [PacketFence-users] autoreg with vlan filter not working
>
>
> Hey Andi,
>
> In PF 5.5.0 match and match_not was changed from a regex to a just a match
> or not a match.
>
> There is a new operator regex but regex_not operator slipped through the
> cracks until now!
>
> You can apply the following patch to add support for the regex_not
> operator.
>
> cd /usr/local/pf
>
> curl
> https://github.com/inverse-inc/packetfence/commit/0dd1dd63e7fe3493e50bf94d557161df577704a9.diff
> | patch -p1
>
> However if you do not want to patch your install you can do the following.
> [visiting_user_not]
> filter = username
> operator = regex
> value =
> ^(.+@[Cc][Aa][Rr][Dd][Ii][Ff][Ff][Mm][Ee][Tt]\.[Aa][Cc]\.[Uu][Kk]$|.+@[Uu][Ww][Ii][Cc]\.[Aa][Cc]\.[Uu][Kk]$<mailto:
> .+@[Cc][Aa][Rr][Dd][Ii][Ff][Ff][Mm][Ee][Tt]%5C.%5bAa%5d%5bCc%5d%5C.%5bUu%5d%5bKk%5d$%7C.+@
> %5bUu%5d%5bWw%5d%5bIi%5d%5bCc%5d%5C.%5bAa%5d%5bCc%5d%5C.%5bUu%5d%5bKk%5d$>)
>
>
> [autoreg:!visiting_user_not]
> scope = AutoRegister
> role = visitor_welcome
>
>
>
>
>
> James Rouzier
>
> [email protected]<mailto:[email protected]> :: +1.514.447.4918
> (x115) :: http://www.inverse.ca
>
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (
> http://www.packetfence.org)
> On 2016-04-28 12:44 PM, Morris, Andi wrote:
> Hey all,
> A bump of an old topic, but it still seems to be the case. Somewhere since
> version 5.0.1 the vlan_filters has changed as it works as below in that
> version, but I couldn't get it to work with version 5.7.0 or now with 6.0.
>
> I can get a positive match using 'user_name' and 'regex' as you can see
> from the previous emails, however I used to use a 'match_not' with
> 'username' and this is no longer recognised. Is there a similar syntax
> change that I can do make this rule work?
>
> [visiting_user]
> filter = username
> operator = match_not
> value =
> ^(.+@[Cc][Aa][Rr][Dd][Ii][Ff][Ff][Mm][Ee][Tt]\.[Aa][Cc]\.[Uu][Kk]$|.+@[Uu][Ww][Ii][Cc]\.[Aa][Cc]\.[Uu][Kk]$<mailto:
> .+@[Cc][Aa][Rr][Dd][Ii][Ff][Ff][Mm][Ee][Tt]%5C.%5bAa%5d%5bCc%5d%5C.%5bUu%5d%5bKk%5d$%7C.+@
> %5bUu%5d%5bWw%5d%5bIi%5d%5bCc%5d%5C.%5bAa%5d%5bCc%5d%5C.%5bUu%5d%5bKk%5d$>)
>
> Cheers,
> Andi
>
> From: Morris, Andi [mailto:[email protected]]
> Sent: 03 March 2016 13:54
> To: [email protected]<mailto:
> [email protected]>
> Subject: Re: [PacketFence-users] autoreg with vlan filter not working
>
> Bingo! Thanks Fabrice.
>
> From: Fabrice DURAND [mailto:[email protected]]
> Sent: 03 March 2016 13:34
> To: [email protected]<mailto:
> [email protected]>
> Subject: Re: [PacketFence-users] autoreg with vlan filter not working
>
> let's try with regex but user_name instead of username.
>
> Fabrice
>
> Le 2016-03-03 08:19, Morris, Andi a ?crit :
> Hi Fabrice,
> No luck there sorry. I changed that, restarted packetfence,
> packetfence-config and also performed a configreload hard but I still see
> the following in the packetfence.log:
>
> Mar 03 13:17:18 httpd.aaa(8299) INFO: [mac:30:10:b3:13:be:37] handling
> radius autz request: from switch_ip => (192.168.142.13), connection_type =>
> Wireless-802.11-EAP,switch_mac => (00:3a:98:d0:1e:c0), mac =>
> [30:10:b3:13:be:37], port => 13, username => "[email protected]
> "<mailto:[email protected]>, ssid => eduroam_dev
> (pf::radius::authorize)
> Mar 03 13:17:18 httpd.aaa(8299) INFO: [mac:30:10:b3:13:be:37] is of status
> unreg; belongs into registration VLAN (pf::role::getRegistrationRole)
> Mar 03 13:17:18 httpd.aaa(8299) INFO: [mac:30:10:b3:13:be:37]
> (192.168.142.13) Added VLAN 60 to the returned RADIUS reply
> (pf::Switch::returnRadiusAccessAccept)
> Mar 03 13:17:18 httpd.aaa(8299) INFO: [mac:30:10:b3:13:be:37]
> (192.168.142.13) Returning ACCEPT with VLAN 60
> (pf::Switch::returnRadiusAccessAccept)
>
> Cheers,
> Andi
>
> From: Durand fabrice [mailto:[email protected]]
> Sent: 03 March 2016 12:29
> To: [email protected]<mailto:
> [email protected]>
> Subject: Re: [PacketFence-users] autoreg with vlan filter not working
>
> Hi Andi,
>
> replace match by regex.
>
> Regards
> Fabrice
>
>
> Le 2016-03-03 06:43, Morris, Andi a ?crit :
> Hi,
> Running version 5.7.0 on CentOS.
>
> I'm trying to get autoreg working through vlan_filters like I have on my
> 5.0.1 production install but it doesn't seem to be taking effect and new
> devices are being sent into the registration network after a radius
> access-accept message.
>
> My vlan filter is as below, which is directly lifted from my 5.0.1 config.
> Has anything changed with vlan filters? I've tried switching 'match' for
> 'regex' as I've seen that mentioned in the documentation and on this list.
> The only major different in my config on the newer version is that I'm
> using the built-in domain/realm config in the GUI, which I didn't do on my
> 5.0.1 install. I'm not sure if that has a bearing as I'm trying to filter
> on the realm name.
>
> [home_user]
> filter = username
> operator = match
> value =
> ^(.+@[Cc][Aa][Rr][Dd][Ii][Ff][Ff][Mm][Ee][Tt]\.[Aa][Cc]\.[Uu][Kk]$|.+@[Uu][Ww][Ii][Cc]\.[Aa][Cc]\.[Uu][Kk]$<mailto:
> .+@[Cc][Aa][Rr][Dd][Ii][Ff][Ff][Mm][Ee][Tt]%5C.%5bAa%5d%5bCc%5d%5C.%5bUu%5d%5bKk%5d$%7C.+@
> %5bUu%5d%5bWw%5d%5bIi%5d%5bCc%5d%5C.%5bAa%5d%5bCc%5d%5C.%5bUu%5d%5bKk%5d$>)
>
> [autoreg:home_user]
> scope = AutoRegister
> role = eduroam_home
>
> realm.conf is:
> [cardiffmet.ac.uk]
> domain=myDomainlabel
> options=strip
>
> [uwic.ac.uk]
> domain= myDomainlabel
> options=strip
>
> Cheers,
> Andi
>
> -------------------------------------
> Andi Morris
> IT Security Officer
> Cardiff Metropolitan University
> T: 02920 205720
> E: [email protected]<mailto:[email protected]>
> --------------------------------------
>
> ________________________________
>
> [Image removed by sender. Cardiff Metropolitan
> University - 150 years of nurturing talent]<
> http://www.cardiffmet.ac.uk/cardiffmet150>
>
>
>
>
>
> ------------------------------------------------------------------------------
>
> Site24x7 APM Insight: Get Deep Visibility into Application Performance
>
> APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
>
> Monitor end-to-end web transactions and take corrective actions now
>
> Troubleshoot faster and improve end-user experience. Signup Now!
>
> http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
>
>
>
>
>
> _______________________________________________
>
> PacketFence-users mailing list
>
> [email protected]<mailto:
> [email protected]>
>
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
>
>
>
>
> ------------------------------------------------------------------------------
>
> Site24x7 APM Insight: Get Deep Visibility into Application Performance
>
> APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
>
> Monitor end-to-end web transactions and take corrective actions now
>
> Troubleshoot faster and improve end-user experience. Signup Now!
>
> http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
>
>
>
>
> _______________________________________________
>
> PacketFence-users mailing list
>
> [email protected]<mailto:
> [email protected]>
>
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
>
>
> --
>
> Fabrice Durand
>
> [email protected]<mailto:[email protected]> :: +1.514.447.4918 (x135)
> :: www.inverse.ca<http://www.inverse.ca>
>
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (
> http://packetfence.org)
>
>
>
>
>
> ------------------------------------------------------------------------------
>
> Find and fix application performance issues faster with Applications
> Manager
>
> Applications Manager provides deep performance insights into multiple
> tiers of
>
> your business applications. It resolves application problems quickly and
>
> reduces your MTTR. Get your free trial!
>
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
>
>
>
>
> _______________________________________________
>
> PacketFence-users mailing list
>
> [email protected]<mailto:
> [email protected]>
>
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: image001.jpg
> Type: image/jpeg
> Size: 857 bytes
> Desc: image001.jpg
>
> ------------------------------
>
>
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications
> Manager
> Applications Manager provides deep performance insights into multiple
> tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
>
> ------------------------------
>
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
> End of PacketFence-users Digest, Vol 96, Issue 74
> *************************************************
>
--
Best Regards
Darwish
------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
