[PacketFence-users] User details.
Hi, We are running v8.0.1 and we noticed that user details are not populated l, only the user is being added. Is there anything we need to do? On v7 we have same setup with no issue on the user details. Thanks, looking forward for your reply. -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] Autoregistering thousand of Chromebooks
We have several thousand chromebooks that are currently authenticating with a pre-shared key. We try and keep the key from getting out, but eventually it does. Then we need to change it on the controller and get the new key on all the chromebooks. It's a pain, so we're trying to move away from pre-shared keys. We thought that a solution would be to use MAC filtering and have Packetfence do the authenticating, rather than load the thousands of MAC addresses onto the controller. As a separate project, we're looking at Packetfence to provide secure limited access wireless to our network for outside vendors coming in. On 6/28/2018 12:35 PM, Sallee, Jake via PacketFence-users wrote: I think I'm confused. I thought your problem was you had lots of chromebooks you wanted to register without having to go through the captive portal on each one. There are two ways you can do this: 1) setup a registration switch / AP and connect the units to it or 2) get a list of the MAC addresses and import them via the Admin GUI Does MAC filtering really not do anything? PF doesn't do MAC filtering by default. Unless you specifically tell PF to deny a connection it will be accepted, but the endpoint will be placed into a vlan or network segment which corresponds to the role you have specified for that endpoint. So it is less MAC filtering and more MAC sorting. The idea being that you setup your roles to restrict the access of the nodes on the segment to only what you want them to have. I think I am missing some info that will help me help you. Can you give me a quick rundown of your situation and the issue you are having? Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor WWW.UMHB.EDU 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 From: Steve Pfister via PacketFence-users Sent: Thursday, June 28, 2018 9:41 AM To: packetfence-users@lists.sourceforge.net Cc: Steve Pfister Subject: Re: [PacketFence-users] Autoregistering thousand of Chromebooks I have it where it will connect and is assigned to the right vlan now. The problem is, it's not doing any MAC filtering at all. It will let anyone at all in. Does MAC filtering really not do anything? On 6/25/2018 5:55 PM, Sallee, Jake via PacketFence-users wrote: Do you have a test area you can use? PF has a mode you can use on your switch / AP that will auto-register any device you plugin / associate to that device. If you set up a switch or AP in PF and set its mode to registration it will do what you want. Where you set the role for the auto-registered endpoints i'm not sure, but I am pretty sure it can be done. Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor http://WWW.UMHB.EDU 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 From: Steve Pfister via PacketFence-users Sent: Monday, June 25, 2018 4:11 PM To: packetfence-users@lists.sourceforge.net Cc: Steve Pfister Subject: [PacketFence-users] Autoregistering thousand of Chromebooks We have thousands of Chromebooks that currently use pre-shared keys to authenticate. We'd like to use Packetfence and MAC authentication instead. I have a test SSID setup, and I'm able to connect to it, but I can't seem to get registered without it trying to go through the captive portal. Is it not possible to just use MAC authentication? -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! https://urldefense.proofpoint.com/v2/url?u=http-3A__sdm.link_slashdot=DwICAg=61yQaCoNVjQr1ah003i6yA=hv6FWbB_1Tauwq1un9h_XR4pflYMFHr0Ag1rvcLKIQA=MFRKEq2S18FB9NrA04Gmd1fQelD2ZsNuGtcJ-dgXeb4=MrXPlulrfhicg_3ycrS0ejrGFVsW550lmspagtFfNYY= ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_packetfence-2Dusers=DwICAg=61yQaCoNVjQr1ah003i6yA=hv6FWbB_1Tauwq1un9h_XR4pflYMFHr0Ag1rvcLKIQA=MFRKEq2S18FB9NrA04Gmd1fQelD2ZsNuGtcJ-dgXeb4=p2-TrZZbEponMonn1FPrf-ABalOHYlm1fBg4x-qZ_aY= -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! https://urldefense.proofpoint.com/v2/url?u=http-3A__sdm.link_slashdot=DwICAg=61yQaCoNVjQr1ah003i6yA=hv6FWbB_1Tauwq1un9h_XR4pflYMFHr0Ag1rvcLKIQA=H1reS47zEW0IGY5pXpFgqEodPcZOJDGxQqCKiGzNU5Q=EmO9qnNC6R2Rwc50-II-eBfrAfSjgfWA5rABicH3uX8= ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net
Re: [PacketFence-users] Autoregistering thousand of Chromebooks
I think I'm confused. I thought your problem was you had lots of chromebooks you wanted to register without having to go through the captive portal on each one. There are two ways you can do this: 1) setup a registration switch / AP and connect the units to it or 2) get a list of the MAC addresses and import them via the Admin GUI > Does MAC filtering really not do anything? PF doesn't do MAC filtering by default. Unless you specifically tell PF to deny a connection it will be accepted, but the endpoint will be placed into a vlan or network segment which corresponds to the role you have specified for that endpoint. So it is less MAC filtering and more MAC sorting. The idea being that you setup your roles to restrict the access of the nodes on the segment to only what you want them to have. I think I am missing some info that will help me help you. Can you give me a quick rundown of your situation and the issue you are having? Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor WWW.UMHB.EDU 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 From: Steve Pfister via PacketFence-users Sent: Thursday, June 28, 2018 9:41 AM To: packetfence-users@lists.sourceforge.net Cc: Steve Pfister Subject: Re: [PacketFence-users] Autoregistering thousand of Chromebooks I have it where it will connect and is assigned to the right vlan now. The problem is, it's not doing any MAC filtering at all. It will let anyone at all in. Does MAC filtering really not do anything? On 6/25/2018 5:55 PM, Sallee, Jake via PacketFence-users wrote: > Do you have a test area you can use? > > PF has a mode you can use on your switch / AP that will auto-register any > device you plugin / associate to that device. > > If you set up a switch or AP in PF and set its mode to registration it will > do what you want. > > Where you set the role for the auto-registered endpoints i'm not sure, but I > am pretty sure it can be done. > > > Jake Sallee > Godfather of Bandwidth > System Engineer > University of Mary Hardin-Baylor > http://WWW.UMHB.EDU > > 900 College St. > Belton, Texas > 76513 > > Fone: 254-295-4658 > Phax: 254-295-4221 > > > From: Steve Pfister via PacketFence-users > > Sent: Monday, June 25, 2018 4:11 PM > To: packetfence-users@lists.sourceforge.net > Cc: Steve Pfister > Subject: [PacketFence-users] Autoregistering thousand of Chromebooks > > We have thousands of Chromebooks that currently use pre-shared keys to > authenticate. We'd like to use Packetfence and MAC authentication > instead. I have a test SSID setup, and I'm able to connect to it, but I > can't seem to get registered without it trying to go through the captive > portal. Is it not possible to just use MAC authentication? > > > -- > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! > https://urldefense.proofpoint.com/v2/url?u=http-3A__sdm.link_slashdot=DwICAg=61yQaCoNVjQr1ah003i6yA=hv6FWbB_1Tauwq1un9h_XR4pflYMFHr0Ag1rvcLKIQA=MFRKEq2S18FB9NrA04Gmd1fQelD2ZsNuGtcJ-dgXeb4=MrXPlulrfhicg_3ycrS0ejrGFVsW550lmspagtFfNYY= > ___ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_packetfence-2Dusers=DwICAg=61yQaCoNVjQr1ah003i6yA=hv6FWbB_1Tauwq1un9h_XR4pflYMFHr0Ag1rvcLKIQA=MFRKEq2S18FB9NrA04Gmd1fQelD2ZsNuGtcJ-dgXeb4=p2-TrZZbEponMonn1FPrf-ABalOHYlm1fBg4x-qZ_aY= > > -- > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! > https://urldefense.proofpoint.com/v2/url?u=http-3A__sdm.link_slashdot=DwICAg=61yQaCoNVjQr1ah003i6yA=hv6FWbB_1Tauwq1un9h_XR4pflYMFHr0Ag1rvcLKIQA=H1reS47zEW0IGY5pXpFgqEodPcZOJDGxQqCKiGzNU5Q=EmO9qnNC6R2Rwc50-II-eBfrAfSjgfWA5rABicH3uX8= > ___ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.sourceforge.net_lists_listinfo_packetfence-2Dusers=DwICAg=61yQaCoNVjQr1ah003i6yA=hv6FWbB_1Tauwq1un9h_XR4pflYMFHr0Ag1rvcLKIQA=H1reS47zEW0IGY5pXpFgqEodPcZOJDGxQqCKiGzNU5Q=ohJIOgEp7rhsbeMatCEiGlPrZ5_Y0HW4heInPqcdm_8= -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! https://urldefense.proofpoint.com/v2/url?u=http-3A__sdm.link_slashdot=DwICAg=61yQaCoNVjQr1ah003i6yA=hv6FWbB_1Tauwq1un9h_XR4pflYMFHr0Ag1rvcLKIQA=H1reS47zEW0IGY5pXpFgqEodPcZOJDGxQqCKiGzNU5Q=EmO9qnNC6R2Rwc50-II-eBfrAfSjgfWA5rABicH3uX8= ___ PacketFence-users
Re: [PacketFence-users] local user not unregistering
Hello Franklin, is there any devices associated to this username ? Regards Fabrice Le 2018-06-28 à 06:00, Franklin, Adam via PacketFence-users a écrit : Hello Can anyone tell me why when I use the PacketFence GUI to manually create a user and set an “unregistration date” – the unregistration date has no effect? How do I get my temporary accounts to unregister on the date selected? Thanks This message may contain confidential information and is intended only for the individual(s) named. If you are not the named addressee you should not disseminate, distribute, print or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. Please note that any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of NCG. Finally, the recipient should check this e-mail and any attachments for the presence of viruses. Although this e-mail and its attachments are believed to be free of any virus or other defects, which might a ffect any computer or IT system into which they are received, no responsibility is accepted by NCG or any of its associated companies for any loss or damage arising in any way from the receipt or use thereof. NCG Corporation is incorporated under the Further and Higher Education Act for the provision of education to students, its trading divisions are Newcastle College, Newcastle Sixth Form College and West Lancashire College, Kidderminster College, Carlisle College, Lewisham and Southwark and its registered office is at Rye Hill House, Scotswood Road, Newcastle upon Tyne, NE4 7SA. NCG works nationally to meet diverse education and training needs in partnership with its subsidiary companies: The Intraining Group Limited is a private limited company registered in England and Wales with registration number 6540854 whose registered office is at Rye Hill House, Scotswood Road, Newcastle upon Tyne, NE4 7SA. Rathbone Training is: a company limited by guarantee with registration number 7830590; a charity registered in England and Wales with registration number 1145138; a charity registered in Scotland with registration number SC042758. The registered office of Rathbone Training is at Rye Hill Campus, Scotswood Road, Newcastle upon Tyne, NE4 7SA -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Fabrice Durand fdur...@inverse.ca :: +1.514.447.4918 (x135) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org) -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
[PacketFence-users] Multiple Server Installation - Backup/Restore.
Hi, I am going to install multiple servers with packetfence v8.0.1, mixed between VMs & Physical servers, is it possible to synchronize the authentication sources/roles/sso firewalls and roles in the sso's only? or if we take a sql backup, can we restore between servers? I have tried the sql restore and it's always defaulting :( Thanks. -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
[PacketFence-users] local user not unregistering
Hello Can anyone tell me why when I use the PacketFence GUI to manually create a user and set an "unregistration date" - the unregistration date has no effect? How do I get my temporary accounts to unregister on the date selected? Thanks This message may contain confidential information and is intended only for the individual(s) named. If you are not the named addressee you should not disseminate, distribute, print or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. Please note that any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of NCG. Finally, the recipient should check this e-mail and any attachments for the presence of viruses. Although this e-mail and its attachments are believed to be free of any virus or other defects, which might a ffect any computer or IT system into which they are received, no responsibility is accepted by NCG or any of its associated companies for any loss or damage arising in any way from the receipt or use thereof. NCG Corporation is incorporated under the Further and Higher Education Act for the provision of education to students, its trading divisions are Newcastle College, Newcastle Sixth Form College and West Lancashire College, Kidderminster College, Carlisle College, Lewisham and Southwark and its registered office is at Rye Hill House, Scotswood Road, Newcastle upon Tyne, NE4 7SA. NCG works nationally to meet diverse education and training needs in partnership with its subsidiary companies: The Intraining Group Limited is a private limited company registered in England and Wales with registration number 6540854 whose registered office is at Rye Hill House, Scotswood Road, Newcastle upon Tyne, NE4 7SA. Rathbone Training is: a company limited by guarantee with registration number 7830590; a charity registered in England and Wales with registration number 1145138; a charity registered in Scotland with registration number SC042758. The registered office of Rathbone Training is at Rye Hill Campus, Scotswood Road, Newcastle upon Tyne, NE4 7SA-- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
