OK. I figured it out.
If you have dot1x recompute role from portal checked then authoreg is
explicitly set to no in role.pm.
Previously,
[reg:WirelessEAP]
scope = AutoRegister
role = node_info.category
Would work to auto-reg a device coming from EAP. It got a little error
about node_info.category not existing, but it did end up resolving the
proper role so I didn't care.
In 6.3, that error is fatal and the device would get no role.
So Auto-reg on the portal profile works as long as recompute role from
portal is unchecked.
On Tue, Oct 25, 2016 at 7:59 AM, Tim DeNike <[email protected]> wrote:
> Sorry about the delay.
>
> Wether I set a node to be auto-registered in the portal profile or in the
> vlan_filter.conf.. Auto-registration DOES work, but node.autoreg never gets
> set in the database. Thats the problem. It never matches the rule in
> vlan_filters.conf.default because node.autoreg is always "no".
>
>
> Ideas?
>
> On Mon, Oct 24, 2016 at 9:42 AM, Tim DeNike <[email protected]> wrote:
>
>> Will in a few mins. But what about nodeinfo autoreg not being set in
>> do? Wouldn't that be the problem?
>>
>> Sent from my iPhone
>>
>> On Oct 24, 2016, at 9:39 AM, Durand fabrice <[email protected]> wrote:
>>
>> Can you paste me the vlan filter ?
>>
>> Regards
>>
>> Fabrice
>>
>>
>>
>> Le 2016-10-24 à 09:36, Tim DeNike a écrit :
>>
>> I used to used vlan filters to achieve that. Thats how I did auto-reg
>> before.
>>
>> In an attempt to try to fix it, i changed auto-reg to the portal profile,
>> but devices still don't get flagged as autoreg in pf.node
>>
>> On Mon, Oct 24, 2016 at 9:13 AM, Durand fabrice <[email protected]>
>> wrote:
>>
>>> Hello Tim,
>>>
>>> did you achieve that with Vlan filters ?
>>>
>>> Btw we added default vlan filters (vlan_filters.conf.defaults) to unreg
>>> device coming from a secure ssid but i don't think that it's the issue.
>>>
>>> Regards
>>>
>>> Fabrice
>>>
>>>
>>>
>>> Le 2016-10-24 à 09:06, Tim DeNike a écrit :
>>>
>>> When a user connects to a 802.1x SSID, autoreg isn't being set on the
>>> user.
>>>
>>> Subsequently, when they try to connect to a MAC-auth SSID, they aren't
>>> being rejected and are retaining their same role.
>>>
>>> Is there a change in how this functions between 5.7 and 6.3?
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
>>>
>>> _______________________________________________
>>> PacketFence-users mailing
>>> [email protected]https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>>
>>> ------------------------------------------------------------------------------
>>> Check out the vibrant tech community on one of the world's most engaging
>>> tech sites, SlashDot.org! http://sdm.link/slashdot
>>> _______________________________________________ PacketFence-users
>>> mailing list [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>> ------------------------------------------------------------------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
>>
>> _______________________________________________
>> PacketFence-users mailing
>> [email protected]https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>> ------------------------------------------------------------
>> ------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
>>
>> _______________________________________________
>> PacketFence-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>>
>
------------------------------------------------------------------------------
The Command Line: Reinvented for Modern Developers
Did the resurgence of CLI tooling catch you by surprise?
Reconnect with the command line and become more productive.
Learn the new .NET and ASP.NET CLI. Get your free copy!
http://sdm.link/telerik
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
