Hello there, I think the answer is that you have to do computer authentication only, because I think you do computer + user authentication and the user authentication overrides the computer authentication.
Thanks, Ludovic Zammit Product Support Engineer Principal Lead Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: <https://community.akamai.com/> <http://blogs.akamai.com/> <https://twitter.com/akamai> <http://www.facebook.com/AkamaiTechnologies> <http://www.linkedin.com/company/akamai-technologies> <http://www.youtube.com/user/akamaitechnologies?feature=results_main> > On Mar 5, 2024, at 3:47 AM, Jochen Ackermann via PacketFence-users > <packetfence-users@lists.sourceforge.net> wrote: > > Hi All, > > We would like to use packetfence for Dot1X EAP-TLS authentication based on > machine certificates with the hostname as the TLS-Client-Cert-Common-Name > (the user of the machine afterwards authenticates against AD directly). > The role-mapping and authentication itself in PF works well, but as a sort of > irksome result the authenticated (and auto-registered) machine lists on the > Nodes tab with the corresponding MAC address and an empty computername. > Instead the hostname is shown as owner and the machine name is registered > under the Users tab with the FQDN, together with other regular (i.e. "real") > user's accounts. > Auditing->Node Information shows Computer Name N/A and username > host/hostname.domain.tld > The Authentication Source uses servicePricipalName as Username Attribute, > that is the only hint I found to distingish between user and machine > authentication. > Is there some way to treat the hostname to show up as node instead of user as > normally indicated by the form host/... or hostname$ > > > Kind regards, > > > Jochen > > > > > _______________________________________________ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!T034Bq_8aUUncg2ZjGI3Vn0b2eznq3oi_ekRuEBi8YGwGoG5ekFIzPbXk402VR0AXnA1yt3TUkENYmHGDEstqo__usn_-MsTk6fD4A$ >
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
