date:20160824

Re: [PacketFence-users] wireless extenders - detection and block?

2016-08-24 Thread Damiano Verzulli

Just a couple of questions/comments:

1) if you grant me access to your wireless network, why do you want forbid me 
to use such "access" as I would like? (Example: by connecting whatever I want, 
and not strictly my notebook or smartphone)?

2) detecting a "strictly defined" wireless extender is not an easy task. I also 
think that it would be REALLY hard, to detect me in "sharing" your WiFi 
connection through a secondary ESSID/BSSID and, at the same time, preventing me 
in doing this (with my Linux notebook). Maybe from a "legal" point of view, you 
can "enforce" some rules... but from a technical point of view, I think it's 
hard to "enforce";

3) to me, your problem looks very similar to a full-802.1x wired network where 
a single client with a dual NIC "share" the 802.1x network with a  second, 
private, network hosted on the second NIC and by applying some NAT service: 
easy to achieve and difficult to fight;

4) in the "wired" context (but also in some wireless use cases) probably the 
concept to investigate is "NAT detection"

HTH

Bye,
DV

P.S.: I'm mobile, so please forgive typos ;-)

Il 24 agosto 2016 17:07:08 CEST, forums  ha scritto:
>
>Packetfence users,
>
>I found a wifi extender connected to my wifi network.
>It was a linksys that replaces the first 6 digits of the mac access
>with 
>02:0f:b5.
>
>I have been searching for the method that other vendors are using for 
>their wireless extenders - linksys, d-link, belgin, etc.
>
>has anybody already been down the road of playing wack-a-mole with
>these 
>devices?
>
>The room where I found it had an access-point less then 20 feet away. I
>
>don't get it.
>
>Thanks
>
>--
>___
>PacketFence-users mailing list
>PacketFence-users@lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/packetfence-users

--
sent with my new "Elephone P6000pro" powerful and really cheap android 
smartphone
--
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] device-registration page

2016-08-24 Thread Torry, Andrew

I do not get the same thing in 6.0.3.

It updates the 'nodes' tables with the username that registered the
device and the pre-defined un-regdate from the source.

Andrew




-
Falmouth Exeter Plus
-

-Original Message-
From: Paul Coates [mailto:paul.coa...@ncl.ac.uk]
Sent: 24 August 2016 13:53
To: packetfence-users@lists.sourceforge.net
Subject: Re: [PacketFence-users] device-registration page

Yes that is the page we have enabled. The source is set to our active
directory. We can see the authentication on that page working from the
packetfence logs. The problem is when a user logins in on that page and
registers their MAC, they get the message that it registered OK, but
unless they already have an entry in the person table in the pf database
(i.e. the Users list), the MAC registration is actually stored as unreg
and assigned to user default, not the person who logged into the site.
Logging into the site does not add an entry to the Users list which I
believe is a bug. This is a new CentOS 6 build for this project.

We are thinking about populating the person table each day from a script
as a work around if we can't find why this happens.

Paul

On 24/08/16 12:04, Torry, Andrew wrote:
> There is a specific web page that enabled 'Device Registration'.
> You need to 'Enable' it in the Configuration->Registration
>
> Your users then go to https://YOURPACKETFENCE/Device-Registration
> where they enter a username and password.
>
> The credentials they can use must be matched by one of your defined 
> authentication
> SOURCES (or the local user database or both).
>
> The portal asks you for credentials then for the MAC address of the device 
> before
> registering it.
>
> Andrew
>
>
>
>
> -
>   Falmouth University
> -
>
> -Original Message-
> From: Paul Coates [mailto:paul.coa...@ncl.ac.uk]
> Sent: 23 August 2016 13:44
> To: packetfence-users@lists.sourceforge.net
> Subject: [PacketFence-users] device-registration page
>
> We are attempting to configure PacketFence 6.0.3 to provide student
> halls access using a captive portal/802.1x/MAC Auth. We have an issue
> with the /device-registration interface. I have been using the form to
> add additional devices OK, then I asked a colleague (Jon) to try it and
> all his registrations appear in the Nodes page as unregistered and the
> owner is default.
>
> I have used the captive portal to test it and I appear in the list of
> Users. Jon has not and is not in the user list. I had assumed when he
> logs in on the /device-registration page he would be added to the Users
> list automatically, but he is not. Is this a bug? If not how can I
> change the behavior to automatically create the user?
>
> I'm thinking of the scenario of a student turning up with a game console
> but no PC/laptop, so does not have a device he can register via the
> captive portal. A work around seems to be manually creating a user for
> this student with a fake password (since you need to enter one), then
> under the portal profile set the Sources to just use the Active
> Directory to authenticate users.
>
> Thanks,
>
> Paul
>
> --
> Paul Coates, Newcastle University, Network Team
>
>
> --
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
> --
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users


--
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] wireless extenders - detection and block?

2016-08-24 Thread forums


Packetfence users,

I found a wifi extender connected to my wifi network.
It was a linksys that replaces the first 6 digits of the mac access with 
02:0f:b5.

I have been searching for the method that other vendors are using for 
their wireless extenders - linksys, d-link, belgin, etc.

has anybody already been down the road of playing wack-a-mole with these 
devices?

The room where I found it had an access-point less then 20 feet away. I 
don't get it.

Thanks

--
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Problem with network connectivity test after successful VLAN change.

2016-08-24 Thread Antoine Amacher

Hello Dominic,

You are right for the test for internet connectivity, all we do is 
requesting a small gif from inverse.ca, it could be an issue with MacOS 
which does not manage to renew it's IP in time, could also be a browser 
cache issue.

You could try to raise up the redirection_timer for instance 
(progression bar while getting redirected on the portal), under the 
section trapping in configuration.

To be sure of the issue you should do a packet capture on one of the Mac 
which have issue, and from there you should be able to see, if the issue 
come from the address which is taking time to get renew or a browser 
cache issue for instance.

Thanks

On 08/24/2016 08:26 AM, Dominic Kilbride wrote:

Hi Antoine,
Thank you for answering.
YES the CoA is properly applied and the client ends up in the production VLAN. 
Im using VLAN enforcement.
It seems to be only the test that fails, despite the client being moved to the 
correct Vlan with CoA. The Clint then displays the error text even though it is 
connected to the internet as configured.
Im wondering how the connectivity test is run? I understand that if you are 
using the default ip address then the clients web browser will try to fetch a 
small img file from the inverse web server … But how is this done? Is this 
compatible with all browser and client versions? Windows 10 is working great 
for me but I’m having problems with MacOS.
Could it be a timeout problem? Like the client trys too early to get the image? 
And the change to production Vlan occures later?
Any suggestions?
Best regards
Dominic
-
Hellp Dominic

Is your CoA properly applied? Do you obtain an IP in your new VLAN
(production)?
Are you using VLAN or WebAuth enforcement type?

If VLAN enforcement, you could try to lower the DHCP lease in the
registration VLAN, to force an earlier re-auth.

Also make sure the configuration 'Allow AAA override' in the SSID
configuration on the WLC.

Thanks

On 08/23/2016 07:42 AM, Dominic Kilbride wrote:
> Hi all,
> Im running 6.2 on CentOS and am having the following problems.
>
> After successful registration and CoA on my Cisco WLC the client ends up at
> the …
> ‘Unable to detect network connectivity. Try to restarting your web browser or
> opening a new tab to see if your access has been successfully enabled.’
>
> Im an using the default method using the address of the inverse web server
> for the control. The test seems to be failing despite a working connection!
>
> Is there som time-out that can be adjusted? Can the detection method be
> bypassed as a workaround?
>
> Thanks in advance
>
> Dominic Kilbride
> --
> ___
> PacketFence-users mailing list
>PacketFence-users@lists.sourceforge.net 

>https://lists.sourceforge.net/lists/listinfo/packetfence-users

--
Antoine Amacher
aamac...@inverse.ca    ::www.inverse.ca 

+1.514.447.4918 x130  :: +1 (866) 353-6153 x130
Inverse inc. :: Leaders behind SOGo (www.sogo.nu ) and 
PacketFence
(www.packetfence.org )

--

___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

--
Antoine Amacher
aamac...@inverse.ca  ::  www.inverse.ca
+1.514.447.4918 x130  :: +1 (866) 353-6153 x130
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

--
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] device-registration page

2016-08-24 Thread Antoine Amacher

Hello Paul,

There have been changes in PacketFence 6.1 for the device-registration page.
You could try to update to 6.1 or later and see if this was a bug 
related issue.

I tested this on devel version and this is not happening to me, I used 
an AD account to login in the device-registration page and then register 
a device. I will probably test it with your version (6.0.3) just to confirm.

Also note that you need to empty the file conf/allowed_device_oui.txt to 
be able to register any device type from the device-registration page.

Make sure to do the following if you make any change to 
conf/allowed_device_oui.txt;
bin/pfcmd configreload hard
bin/pfcmd service httpd.portal restart

Thanks

On 08/24/2016 08:53 AM, Paul Coates wrote:
> Yes that is the page we have enabled. The source is set to our active
> directory. We can see the authentication on that page working from the
> packetfence logs. The problem is when a user logins in on that page and
> registers their MAC, they get the message that it registered OK, but
> unless they already have an entry in the person table in the pf database
> (i.e. the Users list), the MAC registration is actually stored as unreg
> and assigned to user default, not the person who logged into the site.
> Logging into the site does not add an entry to the Users list which I
> believe is a bug. This is a new CentOS 6 build for this project.
>
> We are thinking about populating the person table each day from a script
> as a work around if we can't find why this happens.
>
> Paul
>
> On 24/08/16 12:04, Torry, Andrew wrote:
>> There is a specific web page that enabled 'Device Registration'.
>> You need to 'Enable' it in the Configuration->Registration
>>
>> Your users then go to https://YOURPACKETFENCE/Device-Registration
>> where they enter a username and password.
>>
>> The credentials they can use must be matched by one of your defined 
>> authentication
>> SOURCES (or the local user database or both).
>>
>> The portal asks you for credentials then for the MAC address of the device 
>> before
>> registering it.
>>
>> Andrew
>>
>>
>>
>>
>> -
>>Falmouth University
>> -
>>
>> -Original Message-
>> From: Paul Coates [mailto:paul.coa...@ncl.ac.uk]
>> Sent: 23 August 2016 13:44
>> To: packetfence-users@lists.sourceforge.net
>> Subject: [PacketFence-users] device-registration page
>>
>> We are attempting to configure PacketFence 6.0.3 to provide student
>> halls access using a captive portal/802.1x/MAC Auth. We have an issue
>> with the /device-registration interface. I have been using the form to
>> add additional devices OK, then I asked a colleague (Jon) to try it and
>> all his registrations appear in the Nodes page as unregistered and the
>> owner is default.
>>
>> I have used the captive portal to test it and I appear in the list of
>> Users. Jon has not and is not in the user list. I had assumed when he
>> logs in on the /device-registration page he would be added to the Users
>> list automatically, but he is not. Is this a bug? If not how can I
>> change the behavior to automatically create the user?
>>
>> I'm thinking of the scenario of a student turning up with a game console
>> but no PC/laptop, so does not have a device he can register via the
>> captive portal. A work around seems to be manually creating a user for
>> this student with a fake password (since you need to enter one), then
>> under the portal profile set the Sources to just use the Active
>> Directory to authenticate users.
>>
>> Thanks,
>>
>> Paul
>>
>> --
>> Paul Coates, Newcastle University, Network Team
>>
>>
>> --
>> ___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>> --
>> ___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
> --
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

-- 
Antoine Amacher
aamac...@inverse.ca  ::  www.inverse.ca
+1.514.447.4918 x130  :: +1 (866) 353-6153 x130
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)


--
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] device-registration page

2016-08-24 Thread Fabrice Durand

Hello Paul,


can you try that:


diff --git 
a/html/captive-portal/lib/captiveportal/PacketFence/Controller/Authenticate.pm 
b/html/captive-portal/lib/captiveportal/PacketFence/Controller/Authenticate.pm
index 277fd9f..2e8be4a 100644
--- 
a/html/captive-portal/lib/captiveportal/PacketFence/Controller/Authenticate.pm
+++ 
b/html/captive-portal/lib/captiveportal/PacketFence/Controller/Authenticate.pm
@@ -17,7 +17,7 @@ use HTML::Entities;
  use List::MoreUtils qw(any uniq all);
  use pf::config;
  use pf::auth_log;
-use pf::person qw(person_modify);
+use pf::person qw(person_modify person_exist person_add);
  use Email::Valid;

  BEGIN { extends 'captiveportal::Base::Controller'; }
@@ -132,6 +132,9 @@ sub authenticationLogin : Private {
  $c->user_session->{username} = $username // $default_pid;
  $c->user_session->{source_id} = $source_id;
  $c->user_session->{source_match} = $source_id;
+if(!person_exist($username)){
+person_add($username);
+}
  # Logging USER/IP/MAC of the just-authenticated user
  $logger->info("Successfully authenticated 
".$username."/".$portalSession->clientIp."/".$portalSession->clientMac);
  } else {

Regards

Fabrice



Le 2016-08-24 à 08:53, Paul Coates a écrit :
> Yes that is the page we have enabled. The source is set to our active
> directory. We can see the authentication on that page working from the
> packetfence logs. The problem is when a user logins in on that page and
> registers their MAC, they get the message that it registered OK, but
> unless they already have an entry in the person table in the pf database
> (i.e. the Users list), the MAC registration is actually stored as unreg
> and assigned to user default, not the person who logged into the site.
> Logging into the site does not add an entry to the Users list which I
> believe is a bug. This is a new CentOS 6 build for this project.
>
> We are thinking about populating the person table each day from a script
> as a work around if we can't find why this happens.
>
> Paul
>
> On 24/08/16 12:04, Torry, Andrew wrote:
>> There is a specific web page that enabled 'Device Registration'.
>> You need to 'Enable' it in the Configuration->Registration
>>
>> Your users then go to https://YOURPACKETFENCE/Device-Registration
>> where they enter a username and password.
>>
>> The credentials they can use must be matched by one of your defined 
>> authentication
>> SOURCES (or the local user database or both).
>>
>> The portal asks you for credentials then for the MAC address of the device 
>> before
>> registering it.
>>
>> Andrew
>>
>>
>>
>>
>> -
>>Falmouth University
>> -
>>
>> -Original Message-
>> From: Paul Coates [mailto:paul.coa...@ncl.ac.uk]
>> Sent: 23 August 2016 13:44
>> To: packetfence-users@lists.sourceforge.net
>> Subject: [PacketFence-users] device-registration page
>>
>> We are attempting to configure PacketFence 6.0.3 to provide student
>> halls access using a captive portal/802.1x/MAC Auth. We have an issue
>> with the /device-registration interface. I have been using the form to
>> add additional devices OK, then I asked a colleague (Jon) to try it and
>> all his registrations appear in the Nodes page as unregistered and the
>> owner is default.
>>
>> I have used the captive portal to test it and I appear in the list of
>> Users. Jon has not and is not in the user list. I had assumed when he
>> logs in on the /device-registration page he would be added to the Users
>> list automatically, but he is not. Is this a bug? If not how can I
>> change the behavior to automatically create the user?
>>
>> I'm thinking of the scenario of a student turning up with a game console
>> but no PC/laptop, so does not have a device he can register via the
>> captive portal. A work around seems to be manually creating a user for
>> this student with a fake password (since you need to enter one), then
>> under the portal profile set the Sources to just use the Active
>> Directory to authenticate users.
>>
>> Thanks,
>>
>> Paul
>>
>> --
>> Paul Coates, Newcastle University, Network Team
>>
>>
>> --
>> ___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>> --
>> ___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
> --
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
>

Re: [PacketFence-users] device-registration page

2016-08-24 Thread Paul Coates

Yes that is the page we have enabled. The source is set to our active 
directory. We can see the authentication on that page working from the 
packetfence logs. The problem is when a user logins in on that page and 
registers their MAC, they get the message that it registered OK, but 
unless they already have an entry in the person table in the pf database 
(i.e. the Users list), the MAC registration is actually stored as unreg 
and assigned to user default, not the person who logged into the site. 
Logging into the site does not add an entry to the Users list which I 
believe is a bug. This is a new CentOS 6 build for this project.

We are thinking about populating the person table each day from a script 
as a work around if we can't find why this happens.

Paul

On 24/08/16 12:04, Torry, Andrew wrote:
> There is a specific web page that enabled 'Device Registration'.
> You need to 'Enable' it in the Configuration->Registration
>
> Your users then go to https://YOURPACKETFENCE/Device-Registration
> where they enter a username and password.
>
> The credentials they can use must be matched by one of your defined 
> authentication
> SOURCES (or the local user database or both).
>
> The portal asks you for credentials then for the MAC address of the device 
> before
> registering it.
>
> Andrew
>
>
>
>
> -
>   Falmouth University
> -
>
> -Original Message-
> From: Paul Coates [mailto:paul.coa...@ncl.ac.uk]
> Sent: 23 August 2016 13:44
> To: packetfence-users@lists.sourceforge.net
> Subject: [PacketFence-users] device-registration page
>
> We are attempting to configure PacketFence 6.0.3 to provide student
> halls access using a captive portal/802.1x/MAC Auth. We have an issue
> with the /device-registration interface. I have been using the form to
> add additional devices OK, then I asked a colleague (Jon) to try it and
> all his registrations appear in the Nodes page as unregistered and the
> owner is default.
>
> I have used the captive portal to test it and I appear in the list of
> Users. Jon has not and is not in the user list. I had assumed when he
> logs in on the /device-registration page he would be added to the Users
> list automatically, but he is not. Is this a bug? If not how can I
> change the behavior to automatically create the user?
>
> I'm thinking of the scenario of a student turning up with a game console
> but no PC/laptop, so does not have a device he can register via the
> captive portal. A work around seems to be manually creating a user for
> this student with a fake password (since you need to enter one), then
> under the portal profile set the Sources to just use the Active
> Directory to authenticate users.
>
> Thanks,
>
> Paul
>
> --
> Paul Coates, Newcastle University, Network Team
>
>
> --
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
> --
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users


--
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Problem with network connectivity test after successful VLAN change.

2016-08-24 Thread Dominic Kilbride

Hi Antoine,
Thank you for answering.
YES the CoA is properly applied and the client ends up in the production VLAN. 
Im using VLAN enforcement.

It seems to be only the test that fails, despite the client being moved to the 
correct Vlan with CoA. The Clint then displays the error text even though it is 
connected to the internet as configured.

Im wondering how the connectivity test is run? I understand that if you are 
using the default ip address then the clients web browser will try to fetch a 
small img file from the inverse web server … But how is this done? Is this 
compatible with all browser and client versions? Windows 10 is working great 
for me but I’m having problems with MacOS.

Could it be a timeout problem? Like the client trys too early to get the image? 
And the change to production Vlan occures later? 

Any suggestions?

Best regards
Dominic

-

Hellp Dominic

Is your CoA properly applied? Do you obtain an IP in your new VLAN 
(production)?
Are you using VLAN or WebAuth enforcement type?

If VLAN enforcement, you could try to lower the DHCP lease in the 
registration VLAN, to force an earlier re-auth.

Also make sure the configuration 'Allow AAA override' in the SSID 
configuration on the WLC.

Thanks

On 08/23/2016 07:42 AM, Dominic Kilbride wrote:
> Hi all,
> Im running 6.2 on CentOS and am having the following problems.
>
> After successful registration and CoA on my Cisco WLC the client ends up at 
> the …
> ‘Unable to detect network connectivity. Try to restarting your web browser or 
> opening a new tab to see if your access has been successfully enabled.’
>
> Im an using the default method using the address of the inverse web server 
> for the control. The test seems to be failing despite a working connection!
>
> Is there som time-out that can be adjusted? Can the detection method be 
> bypassed as a workaround?
>
> Thanks in advance
>
> Dominic Kilbride
> --
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users 
> 

-- 
Antoine Amacher
aamac...@inverse.ca  ::  www.inverse.ca
+1.514.447.4918 x130  :: +1 (866) 353-6153 x130
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

--
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Latest 6.2.1 ZEN release on CENTOS 6

2016-08-24 Thread Torry, Andrew

I cannot install OpenVAS on this platform as it fails lots of dependencies.
Any ideas on how to get this working?

--> Finished Dependency Resolution
Error: Package: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Requires: libhdb.so.9(HEIMDAL_HDB_1.0)(64bit)
Error: Package: perl-Net-WMIClient-0.62-0.x86_64 (@packetfence)
   Requires: libasync_wmi_lib.so.0()(64bit)
   Removing: wmi-1.3.14-4.centos6.x86_64 (@packetfence)
   libasync_wmi_lib.so.0()(64bit)
   Obsoleted By: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Not found
   Updated By: wmi-1.3.14-4.el6.art.x86_64 (atomic)
   libasync_wmi_lib.so.0()(64bit)
   Available: wmi-1.3.14-3.el6.art.x86_64 (atomic)
   libasync_wmi_lib.so.0()(64bit)
Error: Package: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Requires: libwind.so.0()(64bit)
Error: Package: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Requires: libkrb5.so.26()(64bit)
Error: Package: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Requires: libasn1.so.8()(64bit)
Error: Package: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Requires: libheimntlm.so.0()(64bit)
Error: Package: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Requires: libroken.so.18()(64bit)
Error: Package: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Requires: libgssapi.so.3()(64bit)
Error: Package: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Requires: libhx509.so.5()(64bit)
Error: Package: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Requires: libkrb5.so.26(HEIMDAL_KRB5_2.0)(64bit)
Error: Package: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Requires: libgssapi.so.3(HEIMDAL_GSS_2.0)(64bit)
Error: Package: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Requires: libasn1.so.8(HEIMDAL_ASN1_1.0)(64bit)
Error: Package: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Requires: libhdb.so.9()(64bit)
Error: Package: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Requires: libroken.so.18(HEIMDAL_ROKEN_1.0)(64bit)
Error: Package: openvas-smb-1.0.1-1.el6.art.x86_64 (atomic)
   Requires: libhcrypto.so.4()(64bit)

I have installed SAMBA and SAMBA-WINBIND but neither of these contain the 
missing libraries.

Andrew


-
 Falmouth University
-

--
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] device-registration page

2016-08-24 Thread Torry, Andrew

There is a specific web page that enabled 'Device Registration'.
You need to 'Enable' it in the Configuration->Registration

Your users then go to https://YOURPACKETFENCE/Device-Registration
where they enter a username and password.

The credentials they can use must be matched by one of your defined 
authentication
SOURCES (or the local user database or both).

The portal asks you for credentials then for the MAC address of the device 
before
registering it.

Andrew




-
 Falmouth University
-

-Original Message-
From: Paul Coates [mailto:paul.coa...@ncl.ac.uk]
Sent: 23 August 2016 13:44
To: packetfence-users@lists.sourceforge.net
Subject: [PacketFence-users] device-registration page

We are attempting to configure PacketFence 6.0.3 to provide student
halls access using a captive portal/802.1x/MAC Auth. We have an issue
with the /device-registration interface. I have been using the form to
add additional devices OK, then I asked a colleague (Jon) to try it and
all his registrations appear in the Nodes page as unregistered and the
owner is default.

I have used the captive portal to test it and I appear in the list of
Users. Jon has not and is not in the user list. I had assumed when he
logs in on the /device-registration page he would be added to the Users
list automatically, but he is not. Is this a bug? If not how can I
change the behavior to automatically create the user?

I'm thinking of the scenario of a student turning up with a game console
but no PC/laptop, so does not have a device he can register via the
captive portal. A work around seems to be manually creating a user for
this student with a fake password (since you need to enter one), then
under the portal profile set the Sources to just use the Active
Directory to authenticate users.

Thanks,

Paul

--
Paul Coates, Newcastle University, Network Team


--
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] wireless extenders - detection and block?

Re: [PacketFence-users] device-registration page

[PacketFence-users] wireless extenders - detection and block?

Re: [PacketFence-users] Problem with network connectivity test after successful VLAN change.

Re: [PacketFence-users] device-registration page

Re: [PacketFence-users] device-registration page

Re: [PacketFence-users] device-registration page

Re: [PacketFence-users] Problem with network connectivity test after successful VLAN change.

Re: [PacketFence-users] Latest 6.2.1 ZEN release on CENTOS 6

Re: [PacketFence-users] device-registration page

10 matches

Site Navigation

Mail list logo

Footer information