For that radius request, go check Auditing and show me the radius request. Thanks,
Ludovic Zammit [email protected] <mailto:[email protected]> :: +1.514.447.4918 (x145) :: www.inverse.ca <https://www.inverse.ca/> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu <http://www.sogo.nu/>) and PacketFence (http://packetfence.org <http://packetfence.org/>) > On Mar 26, 2021, at 8:43 AM, Joshua Wise <[email protected]> wrote: > > Here we go: > > Mar 26 07:40:11 packetfence auth[2770]: (10350) Login incorrect (celinaisd: > Attribute "User-Password" is required for authentication): > [[email protected] <mailto:[email protected]>] (from client > 10.56.64.222/32 <http://10.56.64.222/32> port 0 cli 78:4f:43:97:f5:fe via TLS > tunnel) > Mar 26 07:40:11 packetfence auth[2770]: [mac:78:4f:43:97:f5:fe] Rejected > user: [email protected] <mailto:[email protected]> > Mar 26 07:40:11 packetfence auth[2770]: (10351) Login incorrect (eap_peap: > The users session was previously rejected: returning reject (again.)): > [[email protected] <mailto:[email protected]>] (from client > 10.56.64.222/32 <http://10.56.64.222/32> port 0 cli 78:4f:43:97:f5:fe) > > Joshua Wise > Systems Engineer, Celina ISD > 469-742-9113 > https://www.celinaisd.com <https://www.celinaisd.com/> > > > On Fri, Mar 26, 2021 at 7:00 AM Ludovic Zammit <[email protected] > <mailto:[email protected]>> wrote: > That’s not good, you should have something in the log related to that Mac > address. Try another computer or clear the cache info related to your Mac in > the wifi controller. > > Check: > > grep MAC_ADDRESS /usr/local/pf/logs/radius.log > > Use 00:11:22:33:44:55 for the Mac address format. > > Thanks, > > Ludovic Zammit > [email protected] <mailto:[email protected]> :: +1.514.447.4918 (x145) :: > www.inverse.ca <https://www.inverse.ca/> > Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu > <http://www.sogo.nu/>) and PacketFence (http://packetfence.org > <http://packetfence.org/>) > > > > > > > >> On Mar 25, 2021, at 2:20 PM, Joshua Wise <[email protected] >> <mailto:[email protected]>> wrote: >> >> I don't get a response when using that command. I can see the log file >> exists, modifying with vi shows the following repeatedly. >> >> Mar 25 03:52:58 packetfence packetfence: pfperl-api(2202) INFO: Using 300 >> resolution threshold (pf::pfcron::task::cluster_check::run) >> Mar 25 03:52:58 packetfence packetfence: pfperl-api(2202) INFO: All cluster >> members are running the same configuration version >> (pf::pfcron::task::cluster_check::run) >> Mar 25 03:52:58 packetfence packetfence: pfperl-api(2204) INFO: processed 0 >> security_events during security_event maintenance (1616662378.2789 >> 1616662378.28441) (pf::security_event::security_event_maintenance) >> Mar 25 03:52:58 packetfence packetfence: pfperl-api(2204) INFO: processed 0 >> security_events during security_event maintenance (1616662378.2855 >> 1616662378.2874) (pf::security_event::security_event_maintenance) >> Mar 25 03:53:58 packetfence packetfence: pfperl-api(2204) INFO: Using 300 >> resolution threshold (pf::pfcron::task::cluster_check::run) >> >> Joshua Wise >> Systems Engineer, Celina ISD >> 469-742-9113 >> https://www.celinaisd.com <https://www.celinaisd.com/> >> >> >> On Thu, Mar 25, 2021 at 10:08 AM Ludovic Zammit <[email protected] >> <mailto:[email protected]>> wrote: >> Give me the output of: >> >> grep MAC_ADDRESS /usr/local/pf/logs/packetfence.log >> >> Thanks, >> >> Ludovic Zammit >> [email protected] <mailto:[email protected]> :: +1.514.447.4918 (x145) :: >> www.inverse.ca <https://www.inverse.ca/> >> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu >> <http://www.sogo.nu/>) and PacketFence (http://packetfence.org >> <http://packetfence.org/>) >> >> >> >> >> >> >> >>> On Mar 25, 2021, at 8:39 AM, Joshua Wise <[email protected] >>> <mailto:[email protected]>> wrote: >>> >>> SSID type is 802.1x with WPA2-Enterprise. >>> >>> Joshua Wise >>> Systems Engineer, Celina ISD >>> 469-742-9113 >>> https://www.celinaisd.com <https://www.celinaisd.com/> >>> >>> >>> On Thu, Mar 25, 2021 at 7:08 AM Ludovic Zammit <[email protected] >>> <mailto:[email protected]>> wrote: >>> Hello, >>> >>> What’s your SSID type ? Open SSID or 8021.x with WPA2 Entreprise? >>> >>> Thanks, >>> >>> Ludovic Zammit >>> [email protected] <mailto:[email protected]> :: +1.514.447.4918 (x145) >>> :: www.inverse.ca <https://www.inverse.ca/> >>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu >>> <http://www.sogo.nu/>) and PacketFence (http://packetfence.org >>> <http://packetfence.org/>) >>> >>> >>> >>> >>> >>> >>> >>>> On Mar 24, 2021, at 3:06 PM, Joshua Wise via PacketFence-users >>>> <[email protected] >>>> <mailto:[email protected]>> wrote: >>>> >>>> I'm in the process of testing Packefence with our Aruba Controller. I've >>>> added our on-prem Active Directory to Packetfence, and can test >>>> authentication fine with pftest, no issues. >>>> >>>> I've configured our Aruba Controller with an 802.1x SSID, RADIUS, etc. >>>> >>>> When I attempt to connect with username/password, it fails. I can see in >>>> the RADIUS log that I get an error "Attribute "User-Password" is required >>>> for authentication." >>>> >>>> Within that log, I can go to the RADIUS section and see: User-Password = >>>> "******" >>>> >>>> This makes me think the password is being passed from our Controller to >>>> Packetfence just fine. >>>> >>>> Not sure what I'm missing, any ideas or suggestions? >>>> >>>> Joshua Wise >>>> Systems Engineer, Celina ISD >>>> 469-742-9113 >>>> https://www.celinaisd.com <https://www.celinaisd.com/> >>>> _______________________________________________ >>>> PacketFence-users mailing list >>>> [email protected] >>>> <mailto:[email protected]> >>>> https://lists.sourceforge.net/lists/listinfo/packetfence-users >>>> <https://lists.sourceforge.net/lists/listinfo/packetfence-users> >>> >> >
_______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
