Pre 7.0 I was able to modify /usr/local/pf/lib/pf/firewallsso/Iboss.pm and
remove the "&g=" part from the end of the http request packetfence builds
to notify our iBoss devices of SSO events. This is necessary for us
because we want the iboss to query ldap based on username to determine what
groups a user is a member of instead of relying on the packetfence "role",
which we currently just use to determine which SSID someone has connected
to.
I see that in 7.0+ a lot of the SSO stuff has been converted from perl to
golang, and I'm entirely unfamiliar with it. I made the similar change in
/usr/local/pf/go/firewallsso/iboss.go
func (fw *Iboss) getRequest(ctx context.Context, action string, info
map[string]string) (*http.Request, error) {
req, err := http.NewRequest(
"GET",
fmt.Sprintf(
"http://
%s:%s/nacAgent?action=%s&user=%s&dc=%s&key=%s&ip=%s&cn=%s&g=%s",
fw.PfconfigHashNS,
fw.Port,
action,
info["username"],
fw.NacName,
fw.Password,
info["ip"],
info["username"],
info["role"],
), bytes.NewBufferString("query=libwww-perl&mode=dist"),
removed the &g portions:
func (fw *Iboss) getRequest(ctx context.Context, action string, info
map[string]string) (*http.Request, error) {
req, err := http.NewRequest(
"GET",
fmt.Sprintf(
"http://
%s:%s/nacAgent?action=%s&user=%s&dc=%s&key=%s&ip=%s&cn=%s",
fw.PfconfigHashNS,
fw.Port,
action,
info["username"],
fw.NacName,
fw.Password,
info["ip"],
info["username"],
), bytes.NewBufferString("query=libwww-perl&mode=dist"),
but no amount of configreloading or restarting services seems to make it
want to re-read that updated go file. Is there some compiling I must do to
regenerate this firewallsso package?
Thanks,
--
Gary Stansbury
Network Engineer
Troup County Board of Education, LaGrange, GA
706-594-3928
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
