Re: [pfSense] Captive portal and RADIUS authentication

2014-07-10 Thread Nicola Ferrari (#554252)
I tried to config the internal freeradius2 package with ldap to interface with the win2008ad, but it doesn't seem to work. could you please explain me your config? N Il 09/07/2014 19:20, Brian Caouette ha scritto: I use the internal radius server with captive portal and it works great. Have

Re: [pfSense] Captive portal and RADIUS authentication

2014-07-11 Thread Nicola Ferrari (#554252)
On 07/10/2014 07:20 PM, Mathieu Simon (Lists) wrote: I guess since if you have an NPS up and running that it's better to try this route. Are you positive that you entered the hostname or IP, port and shared secret in Service: Captive portal: yourcaptiveportal? I'm asking since youre initial

[pfSense] [SOLVED] Re: Captive portal and RADIUS authentication

2014-07-11 Thread Nicola Ferrari (#554252)
OK, now it's working with NDS Radius on Win2008R2 and radius settings directly in Captive Portal. I think the problem was simply a too strong/too long shared secret with non standard characters such as @, commas and others... maybe encoding problems?? Now I deleted some of that characters from

Re: [pfSense] Https proxy squid3 squidguard squid3 not working

2014-09-22 Thread Nicola Ferrari (#554252)
That's the correct behaviour: you're gettings cert warning because you are doing https filtering, so your pfsense needs to inspect https traffic: this is a sort of man in the middle, so the browser detect that the source cert is varied in his CommonName field. Usually I don't use https

Re: [pfSense] pfsense squid sso

2015-04-11 Thread Nicola Ferrari (#554252)
Hi David. Be patient for my english, I'm italian... I suggest you to install a separated Samba4 appliance to have a DC in your network, and then setup PFSense to authenticate users via LDAP or RADIUS services. Zentyal is one of the most common Samba4 appliances, that you can configure as a

Re: [pfSense] Disable DHCP domain-name request

2015-11-23 Thread Nicola Ferrari (#554252)
Hi, marco? Did you remove old dhcp leases on pfsense? If you renew dhcp request on an already present client (in dhcp leases), the client will use the old lease (and all its options), so you'll not see your new configurations reflected. Delete all leases from Status -> DHCP leases, restart

[pfSense] MBR restore

2017-06-30 Thread Nicola Ferrari (#554252)
Hi guys! I'm writing here since one of my collegues had to move a pfsense install to new hardware, so imaged the pfsense using clonezilla but forgot to enable the option to save MBR also. So, after restoring the image, pfSense is no more able to boot. What's the best way to restore the MBR on

Re: [pfSense] MBR restore

2017-06-30 Thread Nicola Ferrari (#554252)
On 30/06/2017 16:04, Eric Landry wrote: > You could always write a new boot0 to your disk. If you load a FreeBSD disc > and run the following command on your pfsense hard disk. > > fdisk -B -b /boot/boot0 device > > Where device is your pfsense drive. > > This should do the trick. > > Source:

Re: [pfSense] MBR restore

2017-06-30 Thread Nicola Ferrari (#554252)
On 30/06/2017 16:20, Steve Yates wrote: > Even if the config wasn't exported (the original died) it might be faster to > copy the file off the drive from wherever it lives? > Thanks Steve for your suggestion. I'm not an expert in PfSense.. What file(s) do we need to trasfer from the original

Re: [pfSense] MBR restore

2017-06-30 Thread Nicola Ferrari (#554252)
On 30/06/2017 16:28, Paul Mather wrote: > Boot a FreeBSD 10.3 installer image (either CD/DVD or memstick image), > depending upon your hardware. You can download them from here: > https://www.freebsd.org/where.html > > The install media supports a "Live"