Hello Robin,

Use the command:

/usr/local/pf/bin/pftest authentication USERNAME “"

To see what rule the user brings.

Thanks,

Ludovic Zammit
[email protected] <mailto:[email protected]> ::  +1.514.447.4918 (x145) ::  
www.inverse.ca <https://www.inverse.ca/>
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu <http://www.sogo.nu/>) 
and PacketFence (http://packetfence.org <http://packetfence.org/>)







> On Mar 16, 2021, at 3:06 AM, Cortat Robin <[email protected]> wrote:
> 
> Oh, but there is still a small problem.
> 
> If I check "Automatically use my Windows logon name and password" and I 
> connect a client whose user is part of a VLAN1 group that will assign him 
> vlan 1, it works.
> 
> But if I move the user to a VLAN2 AD group, and reconnect the client with the 
> checkbox checked, it will somehow recover its old authentication and remain 
> in VLAN1.
> 
> The only way I found to fix this is to uncheck the box every time I change 
> groups in the AD, enter my username and password in wndows, then check the 
> box again.
> 
> If you have a solution that would avoid this, I'm interested.
> 
> I thank you in advance for your answer.
> De : Cortat Robin
> Envoyé : mardi, 16 mars 2021 08:00:28
> À : Ludovic Zammit
> Cc : [email protected]
> Objet : RE: [PacketFence-users] VLAN Assignement
>  
> Yes, it is.
>  
> Thank you for your answer. It works.
> 
> De : Ludovic Zammit <[email protected]>
> Envoyé : lundi, 15 mars 2021 19:32:46
> À : Cortat Robin
> Cc : [email protected]
> Objet : Re: [PacketFence-users] VLAN Assignement
>  
> Is it a domain joined computer ?
> 
> If yes, the config needs to be done on the windows:
> 
> Click on Settings:
> 
> <tips-and-tricks-for-using-802-1x-in-windows_5facc11dabcf8.png>
> 
> Then check:
> 
> <Configuring-the-MSCHAPv2-properties.png>
> Thanks,
> 
> Ludovic Zammit
> [email protected] <mailto:[email protected]> ::  +1.514.447.4918 (x145) ::  
> www.inverse.ca <https://www.inverse.ca/>
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu 
> <http://www.sogo.nu/>) and PacketFence (http://packetfence.org 
> <http://packetfence.org/>)
> 
> 
> 
> 
> 
> 
> 
>> On Mar 15, 2021, at 1:33 PM, Cortat Robin <[email protected] 
>> <mailto:[email protected]>> wrote:
>> 
>> 802.1x
>> 
>> From Windows, a popup appear prompting me for a username and password.
>> 
>> 
>>   
>> De : Ludovic Zammit via PacketFence-users 
>> <[email protected] 
>> <mailto:[email protected]>>
>> Envoyé : lundi, 15 mars 2021 18:16:46
>> À : [email protected] 
>> <mailto:[email protected]>
>> Cc : Ludovic Zammit
>> Objet : Re: [PacketFence-users] VLAN Assignement
>>  
>> Hello Robin,
>> 
>> Are you doing 802.1x or Mac authentication ?
>> 
>> Where do you put the username / password ? On the windows level or the web 
>> captive portal ?
>> 
>> Thanks,
>> 
>> Ludovic Zammit
>> [email protected] <mailto:[email protected]> ::  +1.514.447.4918 (x145) :: 
>>  www.inverse.ca <https://www.inverse.ca/>
>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu 
>> <http://www.sogo.nu/>) and PacketFence (http://packetfence.org 
>> <http://packetfence.org/>)
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>>> On Mar 15, 2021, at 11:22 AM, Robin Cortat via PacketFence-users 
>>> <[email protected] 
>>> <mailto:[email protected]>> wrote:
>>> 
>>> Hello,
>>>  
>>> I have a question.
>>>  
>>> Currently, I have a working system that allows me to assign a VLAN ID to a 
>>> computer according to an AD group. However, every time I plug the computer 
>>> into the switch, I have to log in with a domain username. 
>>>  
>>> My question is, is it possible to remove this step? Is it possible to 
>>> assign the VLAN ID directly to an AD group without having to enter the 
>>> username and password?
>>>  
>>> Thank you for your answer.
>>>  
>>>  <http://www.imageson.ch/>
>>>  <http://www.bnjpublicite.ch/>      
>>>  <http://www.rjb.ch/>       
>>>  <http://www.rtn.ch/>       
>>>  <http://www.rfj.ch/>       
>>>  <http://www.grrif.ch/>
>>>  <https://redir.bnj.ch/site/IS>
>>>  
>>> _______________________________________________
>>> PacketFence-users mailing list
>>> [email protected] 
>>> <mailto:[email protected]>
>>> https://lists.sourceforge.net/lists/listinfo/packetfence-users 
>>> <https://lists.sourceforge.net/lists/listinfo/packetfence-users>
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to