Hello,


> - Once a Client has been supplied with certificate, it get registered on the 
> NW without problems but when we try to revoke the certificate, the access 
> persists until the PacketFence Server reboots (which is not a viable solution 
> for revoking access). We've also tried to restart Radius and PKI services, 
> without success



1. Did you apply maintenance patches [1] on your setup ?

2. Could you post here content of /usr/local/pf/conf/radiusd/ocsp.conf ?



> - When a Client without a certificate plugs into the access port at the 
> switch, it stays in mode "authenticating" without the administrator seeing 
> any indication of an access request (no log entry with flag "rejected" in 
> Auditing tab)



3. What do you see on switch side ? What do you see in 
/usr/local/pf/logs/radius.log ?

[1] 
https://www.packetfence.org/doc/PacketFence_Installation_Guide.html#_maintenance_patches

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76103.1508BF90]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76103.1508BF90]<https://community.akamai.com/> 
[cid:image003.png@01D76103.1508BF90] <http://blogs.akamai.com/>  
[cid:image004.png@01D76103.1508BF90] <https://twitter.com/akamai>  
[cid:image005.png@01D76103.1508BF90] 
<http://www.facebook.com/AkamaiTechnologies>  
[cid:image006.png@01D76103.1508BF90] 
<http://www.linkedin.com/company/akamai-technologies>  
[cid:image007.png@01D76103.1508BF90] 
<http://www.youtube.com/user/akamaitechnologies?feature=results_main>



_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to