create 2 connection profiles (802.1x and mac-auth) and 2 authentication sources (one for secure and the other one for mac-auth). Associate the first authentication source on the secure portal and the 2nd one to the mac-auth portal.
Now you just need to play with the authentication rules on each source to return a different role. Le dim. 22 mai 2022 à 15:22, José Ramos <joseramosdeoli...@gmail.com> a écrit : > Hello Fabrice. > > Thanks a lot for your answer but as I said I managed to do it :) > I have a second question since you are here : > I would like to give VLAN x if AD user connects through 802.1x and VLAN y > if AD user connects through portal. To me the best thing to do is to add a > condition with Connection type in the AD-users authentication source. But > the combobox is empty :'( which is a little bit problematic (I tried to add > the connection type manually in authentication.conf but it did not work) > > This is not urgent. > > PS : I don't know if you using oeufd...@gmail.com is planned :D > > > On Sun, May 22, 2022 at 8:43 PM Fabrice Durand <oeufd...@gmail.com> wrote: > >> Hello José, >> >> you have to combine 2 authentication sources, one for the user and the >> other for the computer. >> The difference between the 2 will be the username attribute , for user >> it´s sAMAccountName and for computer it´s userPrincipalName (btw create >> authentication rules for user and machines) >> >> So once you have the 2 authentication sources , assign them on the same >> connection profile (per example the one you use to filter on the secure >> ssid) . >> >> >> https://www.packetfence.org/doc/PacketFence_Installation_Guide.html#_using_the_corporate_machine_role >> >> Regards >> Fabrice >> >> >> >> >> >> Le dim. 22 mai 2022 à 12:41, José Ramos via PacketFence-users < >> packetfence-users@lists.sourceforge.net> a écrit : >> >>> I went the wrong way actually I didn't want to do that. >>> What I would like to do is give the user a role if he is on a domain >>> computer. >>> I guess it is just a condition in my AD-users authentication source.but >>> I can't do it. >>> Does someone have a suggestion ? :) >>> _______________________________________________ >>> PacketFence-users mailing list >>> PacketFence-users@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/packetfence-users >>> >>
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
