Nicolas, thanks! AC is Access controller. I understand it now, the AC should use mac auth, when the user connect again, AC will authenticate with PF radius server.
On Wed, Sep 18, 2019 at 9:17 PM Nicolas Quiniou-Briand via PacketFence-users <[email protected]> wrote: > Hello, > > On 06/09/2019 13:01, Zhang Jun via PacketFence-users wrote: > > in my test environment, I use PF + AC + AP + ActiveDirecroty, > > > > I know: > > 1. DC redirect http request to portal, > > 2. User input username and pass, > > 3. captive-portal authenticate with AD, > > 4. then send COA/DM to AC. > > > > but which step make AC to allow client connect to internet ? > > By AC, you mean Access Controller ? > The response is : it depends of the vendor. > > PacketFence need to send a reply to the controller or access point to > allow user to connect. It could be by: > - an API call > - a RADIUS reply (CoA or Disconnect message) > -- > Nicolas Quiniou-Briand > [email protected] :: +1.514.447.4918 *140 :: https://inverse.ca > Inverse inc. :: Leaders behind SOGo (https://sogo.nu), PacketFence > (https://packetfence.org) and Fingerbank (http://fingerbank.org) > > > _______________________________________________ > PacketFence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users >
_______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
