Re: [PacketFence-users] OAuth2 Facebook/Google

2017-10-26 Thread Diego Lopes da Cruz via PacketFence-users 
Fabrice,
Thanks, works..
I needed to add the passthrought lines in the file
/usr/local/pf/conf/pf.conf.defaults

Regards


2017-10-25 15:40 GMT-02:00 Fabrice Durand :

> You have to allow accounts.google.com in the passthrough too.
>
> Do a pfcmd configreload hard and a pfcmd service pfdns restart to force
> the update of the passthrough.
>
> Regards
>
> Fabrice
>
>
>
> Le 2017-10-25 à 13:34, Diego Lopes da Cruz a écrit :
>
> Sorry,
> I forgot the attachment...
>
>
>
> 2017-10-25 15:18 GMT-02:00 Diego Lopes da Cruz :
>
>> Fabrice,
>> *"you will need to remove facebook from the dns_filters.conf.default in
>> order to fix the fqdn graph.facebook.com ."*
>> *OK, works, thanks!*
>> *"Also the passthroughs for the OAuth sources are in the OAuth config
>> itself (pf side)*."
>> *OK, I found!*
>>
>> *I am having HSTS message from the browser when authenticating with
>> google (see attachment).*
>>
>> *Do I need to generate or install a certificate? *
>> *Can you solve this?*
>> *Thank you!*
>>
>>
>>
>> 2017-10-25 14:37 GMT-02:00 Fabrice Durand via PacketFence-users <
>> packetfence-users@lists.sourceforge.net>:
>>
>>> Hello Diego,
>>>
>>> you will need to remove facebook from the dns_filters.conf.default in
>>> order to fix the fqdn graph.facebook.com.
>>>
>>> Also the passthroughs for the OAuth sources are in the OAuth config
>>> itself (pf side).
>>>
>>> Regards
>>>
>>> Fabrice
>>>
>>>
>>>
>>> Le 2017-10-25 à 12:29, Diego Lopes da Cruz via PacketFence-users a
>>> écrit :
>>>
>>> Hi all,
>>> I'm testing the packetfence ZEN (Pecketfence-7.3.0-2 version) and I'm
>>> trying to use authentication via facebook or google. I have done the
>>> configuration of the API ID and secret of both, but when this in the
>>> authentication screen, the client can not reach the screen of facebook and
>>> google. On the client, the graph.facebook.com domain is being resolved
>>> to 127.0.0.1 and account.google.com for the packetfence LAN IP.
>>> I've been searching the forums and seen that I should put * .
>>> facebook.com and * .google.com domains in "accepted or freed domains"
>>> configuration.
>>> Where is this setting?
>>>
>>> thanks
>>> --
>>> Diego
>>>
>>>
>>> --
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>>
>>>
>>>
>>> ___
>>> PacketFence-users mailing 
>>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>>>
>>>
>>> --
>>> Fabrice durandfdur...@inverse.ca ::  +1.514.447.4918 <+1%20514-447-4918> 
>>> (x135) ::  www.inverse.ca
>>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
>>> (http://packetfence.org)
>>>
>>>
>>> 
>>> --
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>> ___
>>> PacketFence-users mailing list
>>> PacketFence-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>>
>>>
>>
>>
>> --
>> Diego
>>
>
>
>
> --
> Diego Lopes da Cruz
> 48-9 9609-9931 (TIM) Whatsapp
> 48-9 8489-1060 (OI)
>
>
> --
> Fabrice durandfdur...@inverse.ca ::  +1.514.447.4918 <+1%20514-447-4918> 
> (x135) ::  www.inverse.ca
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
> (http://packetfence.org)
>
>


-- 
Diego Lopes da Cruz
48-9 9609-9931 (TIM) Whatsapp
48-9 8489-1060 (OI)
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] OAuth2 Facebook/Google

2017-10-25 Thread Diego Lopes da Cruz via PacketFence-users 
Sorry,
I forgot the attachment...



2017-10-25 15:18 GMT-02:00 Diego Lopes da Cruz :

> Fabrice,
> *"you will need to remove facebook from the dns_filters.conf.default in
> order to fix the fqdn graph.facebook.com ."*
> *OK, works, thanks!*
> *"Also the passthroughs for the OAuth sources are in the OAuth config
> itself (pf side)*."
> *OK, I found!*
>
> *I am having HSTS message from the browser when authenticating with google
> (see attachment).*
>
> *Do I need to generate or install a certificate?*
> *Can you solve this?*
> *Thank you!*
>
>
>
> 2017-10-25 14:37 GMT-02:00 Fabrice Durand via PacketFence-users <
> packetfence-users@lists.sourceforge.net>:
>
>> Hello Diego,
>>
>> you will need to remove facebook from the dns_filters.conf.default in
>> order to fix the fqdn graph.facebook.com.
>>
>> Also the passthroughs for the OAuth sources are in the OAuth config
>> itself (pf side).
>>
>> Regards
>>
>> Fabrice
>>
>>
>>
>> Le 2017-10-25 à 12:29, Diego Lopes da Cruz via PacketFence-users a écrit :
>>
>> Hi all,
>> I'm testing the packetfence ZEN (Pecketfence-7.3.0-2 version) and I'm
>> trying to use authentication via facebook or google. I have done the
>> configuration of the API ID and secret of both, but when this in the
>> authentication screen, the client can not reach the screen of facebook and
>> google. On the client, the graph.facebook.com domain is being resolved
>> to 127.0.0.1 and account.google.com for the packetfence LAN IP.
>> I've been searching the forums and seen that I should put * .facebook.com
>> and * .google.com domains in "accepted or freed domains" configuration.
>> Where is this setting?
>>
>> thanks
>> --
>> Diego
>>
>>
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>
>>
>>
>> ___
>> PacketFence-users mailing 
>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>>
>> --
>> Fabrice durandfdur...@inverse.ca ::  +1.514.447.4918 <+1%20514-447-4918> 
>> (x135) ::  www.inverse.ca
>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
>> (http://packetfence.org)
>>
>>
>> 
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> ___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>>
>
>
> --
> Diego
>



-- 
Diego Lopes da Cruz
48-9 9609-9931 (TIM) Whatsapp
48-9 8489-1060 (OI)
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] OAuth2 Facebook/Google

2017-10-25 Thread Fabrice Durand via PacketFence-users 
You have to allow accounts.google.com in the passthrough too.

Do a pfcmd configreload hard and a pfcmd service pfdns restart to force
the update of the passthrough.

Regards

Fabrice



Le 2017-10-25 à 13:34, Diego Lopes da Cruz a écrit :
> Sorry,
> I forgot the attachment...
>
>
>
> 2017-10-25 15:18 GMT-02:00 Diego Lopes da Cruz  >:
>
> Fabrice,
> /"you will need to remove facebook from the
> dns_filters.conf.default in order to fix the
> fqdn graph.facebook.com ."/
> *OK, works, thanks!*
> /"Also the passthroughs for the OAuth sources are in the OAuth
> config itself (pf side)/."*
> *
> *OK, I found!*
> *
> *
> *I am having HSTS message from the browser when authenticating
> with google (see attachment).*
> *Do I need to generate or install a certificate?
> *
> *Can you solve this?*
> *Thank you!*
> *
> *
> *
> *
>
> 2017-10-25 14:37 GMT-02:00 Fabrice Durand via PacketFence-users
>  >:
>
> Hello Diego,
>
> you will need to remove facebook from the
> dns_filters.conf.default in order to fix the fqdn
> graph.facebook.com .
>
> Also the passthroughs for the OAuth sources are in the OAuth
> config itself (pf side).
>
> Regards
>
> Fabrice
>
>
>
> Le 2017-10-25 à 12:29, Diego Lopes da Cruz via
> PacketFence-users a écrit :
>> Hi all,
>> I'm testing the packetfence ZEN (Pecketfence-7.3.0-2 version)
>> and I'm trying to use authentication via facebook or google.
>> I have done the configuration of the API ID and secret of
>> both, but when this in the authentication screen, the client
>> can not reach the screen of facebook and google. On the
>> client, the graph.facebook.com 
>> domain is being resolved to 127.0.0.1 and account.google.com
>>  for the packetfence LAN IP.
>> I've been searching the forums and seen that I should put *
>> .facebook.com  and * .google.com
>>  domains in "accepted or freed domains"
>> configuration.
>> Where is this setting?
>>
>> thanks
>> -- 
>> Diego 
>>
>>
>> 
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>
>>
>> ___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> 
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>> 
>
> -- 
> Fabrice Durand
> fdur...@inverse.ca  ::  +1.514.447.4918 
>  (x135) ::  www.inverse.ca 
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and 
> PacketFence (http://packetfence.org) 
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> 
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
> 
>
>
>
>
> -- 
> Diego
>
>
>
>
> -- 
> Diego Lopes da Cruz
> 48-9 9609-9931 (TIM) Whatsapp
> 48-9 8489-1060 (OI)

-- 
Fabrice Durand
fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org) 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] OAuth2 Facebook/Google

2017-10-25 Thread Diego Lopes da Cruz via PacketFence-users 
Fabrice,
*"you will need to remove facebook from the dns_filters.conf.default in
order to fix the fqdn graph.facebook.com ."*
*OK, works, thanks!*
*"Also the passthroughs for the OAuth sources are in the OAuth config
itself (pf side)*."
*OK, I found!*

*I am having HSTS message from the browser when authenticating with google
(see attachment).*

*Do I need to generate or install a certificate?*
*Can you solve this?*
*Thank you!*



2017-10-25 14:37 GMT-02:00 Fabrice Durand via PacketFence-users <
packetfence-users@lists.sourceforge.net>:

> Hello Diego,
>
> you will need to remove facebook from the dns_filters.conf.default in
> order to fix the fqdn graph.facebook.com.
>
> Also the passthroughs for the OAuth sources are in the OAuth config itself
> (pf side).
>
> Regards
>
> Fabrice
>
>
>
> Le 2017-10-25 à 12:29, Diego Lopes da Cruz via PacketFence-users a écrit :
>
> Hi all,
> I'm testing the packetfence ZEN (Pecketfence-7.3.0-2 version) and I'm
> trying to use authentication via facebook or google. I have done the
> configuration of the API ID and secret of both, but when this in the
> authentication screen, the client can not reach the screen of facebook and
> google. On the client, the graph.facebook.com domain is being resolved to
> 127.0.0.1 and account.google.com for the packetfence LAN IP.
> I've been searching the forums and seen that I should put * .facebook.com
> and * .google.com domains in "accepted or freed domains" configuration.
> Where is this setting?
>
> thanks
> --
> Diego
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
>
> ___
> PacketFence-users mailing 
> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
> --
> Fabrice durandfdur...@inverse.ca ::  +1.514.447.4918 <+1%20514-447-4918> 
> (x135) ::  www.inverse.ca
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
> (http://packetfence.org)
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>


-- 
Diego
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] OAuth2 Facebook/Google

2017-10-25 Thread Fabrice Durand via PacketFence-users 
Hello Diego,

you will need to remove facebook from the dns_filters.conf.default in
order to fix the fqdn graph.facebook.com.

Also the passthroughs for the OAuth sources are in the OAuth config
itself (pf side).

Regards

Fabrice



Le 2017-10-25 à 12:29, Diego Lopes da Cruz via PacketFence-users a écrit :
> Hi all,
> I'm testing the packetfence ZEN (Pecketfence-7.3.0-2 version) and I'm
> trying to use authentication via facebook or google. I have done the
> configuration of the API ID and secret of both, but when this in the
> authentication screen, the client can not reach the screen of facebook
> and google. On the client, the graph.facebook.com
>  domain is being resolved to 127.0.0.1 and
> account.google.com  for the packetfence LAN
> IP.
> I've been searching the forums and seen that I should put *
> .facebook.com  and * .google.com
>  domains in "accepted or freed domains" configuration.
> Where is this setting?
>
> thanks
> -- 
> Diego 
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

-- 
Fabrice Durand
fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org) 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users