# Copyright (C) Inverse inc.
[Node Manager]
actions=NODES_READ,NODES_CREATE,NODES_UPDATE,NODES_DELETE,SECURITY_EVENTS_READ,SWITCHES_READ,DHCP_OPTION_82_READ,USERS_READ
description=Nodes management

[User Manager]
actions=USERS_CREATE,USERS_DELETE,USERS_READ,USERS_UPDATE,USERS_SET_ROLE,USERS_SET_ACCESS_DURATION,USERS_SET_UNREG_DATE,USERS_SET_TIME_BALANCE,USERS_SET_BANDWIDTH_BALANCE,USERS_SET_ACCESS_LEVEL,USERS_MARK_AS_SPONSOR,USERS_CREATE_MULTIPLE,DHCP_OPTION_82_READ,SECURITY_EVENTS_READ,SWITCHES_READ,SYSTEM_READ,USERS_SOURCES_READ,CONFIGURATION_MAIN_READ
description=Users management

[Security Event Manager]
description=Security Events managements
actions=SECURITY_EVENTS_READ,SECURITY_EVENTS_CREATE,SECURITY_EVENTS_UPDATE,SECURITY_EVENTS_DELETE,USERS_READ,NODES_READ


On Thu, Nov 5, 2020 at 9:12 AM Ludovic Zammit <[email protected]> wrote:

> Hello Christian,
>
> Could you send me your conf/adminroles.conf please?
>
> Thanks,
>
>
> Ludovic [email protected] ::  +1.514.447.4918 (x145) ::  www.inverse.ca
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
> (http://packetfence.org)
>
>
>
>
>
> On Nov 2, 2020, at 4:53 PM, Christian McDonald <[email protected]> wrote:
>
> This is indeed the built-in admin account. (See the issue I opened up here
> https://github.com/inverse-inc/packetfence/issues/5919).
>
> This is really a pretty basic cluster setup atm, only doing radius
> enforcement. Nothing else.
>
> Under the admin user, actions = ALL
>
> On Thu, Oct 22, 2020 at 11:30 AM Ludovic Zammit via PacketFence-users <
> [email protected]> wrote:
>
>> Hello,
>>
>> What is the account that you have issue with ? Is that admin ? If it’s
>> local account, send a screen capture of the rights under Action.
>>
>> Send the output of your conf/authentication.conf hide personal infos.
>>
>> Thanks,
>>
>>
>> Ludovic [email protected] ::  +1.514.447.4918 (x145) ::  
>> www.inverse.ca
>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
>> (http://packetfence.org)
>>
>>
>>
>>
>>
>> On Oct 21, 2020, at 11:40 PM, Christian McDonald <[email protected]>
>> wrote:
>>
>> Any other things to try? I’m following the upgrade procedure exactly.
>> Thanks.
>>
>> On Tue, Oct 20, 2020 at 8:40 AM Ludovic Zammit via PacketFence-users <
>> [email protected]> wrote:
>>
>>> Hello,
>>>
>>> Have you tried that:
>>>
>>>
>>> https://github.com/inverse-inc/packetfence/blob/devel/UPGRADE.asciidoc#rename-pfmon-actions-to-pfcron
>>>
>>> Thanks,
>>>
>>>
>>> Ludovic [email protected] ::  +1.514.447.4918 (x145) ::  
>>> www.inverse.ca
>>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
>>> (http://packetfence.org)
>>>
>>>
>>>
>>>
>>>
>>> On Oct 16, 2020, at 4:57 PM, Christian McDonald via PacketFence-users <
>>> [email protected]> wrote:
>>>
>>> Starting with a healthy 3 node 10.1 cluster, patched using ./pf-maint.pl
>>> and freshly rebooted. Galera health, etc.
>>>
>>> A few observations:
>>>
>>>
>>>    1. I get a PFCRON_READ Administrative Role error when browsing
>>>    Configuration > Maintenance as the built-in admin user. I understand 
>>> there
>>>    were significant changes to the PFMON/PFCRON component in 10.2. Not sure
>>>    how to proceed. I also tried patching node C prior to starting it the
>>>    standalone state with ./pf-maint.pl and then running the to-10.2.xxx
>>>    scripts. I observe the same behavior as above.
>>>    2. I'm having a hard time getting Node C's database synced over to
>>>    Node A and Node B. Even after stopping mariadb, clearing /var/lib/mysql/*
>>>    and starting mariadb again, node A and node B still seem to be hanging 
>>> onto
>>>    the 10.1.0 database as per 'SELECT * FROM pf_version;' Though node c
>>>    indicates the correct schema version when running the above sql query 
>>> from
>>>    the command line.
>>>
>>>
>>> --
>>> R. Christian McDonald
>>> *Information Technology Manager*
>>> Grand Rapids Adventist Academy
>>>
>>> T: (888) 791-3108 (x1105)
>>> O: (616) 791-9797 (x1105)
>>> C: (616) 856-9291
>>>
>>> 1151 Oakleigh Road
>>> <https://www.google.com/maps/search/1151+Oakleigh+Road?entry=gmail&source=g>
>>> NW
>>> Grand Rapids, MI 49504
>>> _______________________________________________
>>> PacketFence-users mailing list
>>> [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>>
>>>
>>> _______________________________________________
>>> PacketFence-users mailing list
>>> [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>>
>> --
>> *R. Christian McDonald *
>> M: (616) 856-9291
>> E: [email protected]
>>
>>
>> _______________________________________________
>> PacketFence-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>
>
> --
> R. Christian McDonald
> *Information Technology Manager*
> Grand Rapids Adventist Academy
>
> T: (888) 791-3108 (x1105)
> O: (616) 791-9797 (x1105)
> C: (616) 856-9291
>
> 1151 Oakleigh Road NW
> Grand Rapids, MI 49504
>
>
>

-- 
R. Christian McDonald
*Information Technology Manager*
Grand Rapids Adventist Academy

T: (888) 791-3108 (x1105)
O: (616) 791-9797 (x1105)
C: (616) 856-9291

1151 Oakleigh Road NW
Grand Rapids, MI 49504
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to