I downloaded the patch and applied the EX4200 module to the switch after
restarting the services. After logging into the captive portal it is still
failing to disconnect. Here's the output from radsniff


2016-05-12 11:25:19.932865 (5) Disconnect-Request Id 149 eth0:
172.30.40.10:60670 -> 172.22.0.201:3799 +823.260
        Authenticator-Field = 0xbe8ecea40c13feee52394a61c0df5236
2016-05-12 11:25:19.934181 (6) Disconnect-NAK Id 149 eth0:172.30.40.10:60670
<- 172.22.0.201:3799 +823.262 +0.001
        Error-Cause = Missing-Attribute
        Authenticator-Field = 0x18a30256c1e27ec723d00645bb00a98a
2016-05-12 11:25:25.134181 (5) Cleaning up request packet ID 149


Successful request: - manually sent through radclient

2016-05-12 10:41:08.831102 (3) Disconnect-Request Id 67 eth0:
172.30.40.10:41123                                     -> 172.22.0.201:3799
+153.383
        Acct-Session-Id = "8O2.1x819e0127000343a2"
        Authenticator-Field = 0x13d5b6cd6b7bd756bab4e476327b0ebf
2016-05-12 10:41:08.848685 (4) Disconnect-ACK Id 67 eth0:172.30.40.10:41123
<- 1                                    72.22.0.201:3799 +153.401 +0.017
        Authenticator-Field = 0x630aa3c2cd8f60842772b630a8bd3a5a
2016-05-12 10:41:14.486850 (3) Cleaning up request packet ID 67


On Thu, May 12, 2016 at 11:00 AM, Louis Munro <[email protected]> wrote:

>
>
> Dustin Berube wrote:
>
>
> Sending just the acctsessionid worked.
>
> Please try the following patch then.
>
>
> https://patch-diff.githubusercontent.com/raw/inverse-inc/packetfence/pull/1469.diff
>
> Download it using wget (or whatever you prefer), and apply it like this:
>
> # cd /usr/local/pf;  patch -p1 < $PATH_TO_PATCHFILE
>
> It will create a new EX4200 module under lib/pf/Switch/Juniper/.
>
> You will have to restart httpd.aaa and httpd.admin and then reconfigure
> the switch to use that type.
>
> It may not be perfect.
> I am not at the office and don't have access to my test system at the
> moment.
>
> Regards,
>
> --
> Louis Munro
> [email protected]  ::  www.inverse.ca
> +1.514.447.4918 x125  :: +1 (866) 353-6153 x125
> Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (
> www.packetfence.org)
>
>
>
> ------------------------------------------------------------------------------
> Mobile security can be enabling, not merely restricting. Employees who
> bring their own devices (BYOD) to work are irked by the imposition of MDM
> restrictions. Mobile Device Manager Plus allows you to control only the
> apps on BYO-devices by containerizing them, leaving personal data
> untouched!
> https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
------------------------------------------------------------------------------
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to