Re: [PacketFence-users] New PF 7.0 Cluster Configuration Question

2017-05-31 Thread Peter Reilly
Thank you, By resync you mean: /usr/local/pf/bin/cluster/sync ? Although that completed correctly the 1st time, now I get errors: ERROR : [1496265119.53917] Failed to connect to config service for namespace resource::switches_list, retrying [1496265119.53917] Failed to connect to config service

Re: [PacketFence-users] New PF 7.0 Cluster Configuration Question

2017-05-31 Thread Antoine Amacher
Hello Peter, One of your node is note properly sync or cannot communicate with others: "wsrep_incoming_addresses 10.18.0.36:3306,10.18.0.37:3306" Only 2 nodes are connected on your instance. Isolate the one which is failing and try to resync it with the rest of the cluster. Thanks On

[PacketFence-users] New PF 7.0 Cluster Configuration Question

2017-05-31 Thread Peter Reilly
I have a new configuration of packetfence, and I'm stuck at the final section of the guide: Checking the MariaDB sync. I'm new to MariaDB clustering. Any help would be appreciated. Thanks! Issuing mysql> show status like 'wsrep%'; shows: wsrep_apply_oooe 0.00 wsrep_apply_oool 0.00

Re: [PacketFence-users] mab+802.1x authentication

2017-05-31 Thread Antoine Amacher
Hello Lucas, 1. I am pretty Windows does favor UserAuthentication if a User is logged in and "User or Machine" is selected in the supplicant. You could also setup the connection has UserAuth only, but then you lose your Machine Authentication. Have a look in VLANfilters, there is a case

Re: [PacketFence-users] EAP-TLS with IP-PHones

2017-05-31 Thread Christian Gfeller
Tank you Fabrice Now it works. I have copied more certificates to the CA File. The "wired Phones" certificate was needed. The only thing im wondering is, that the connection type for the phones is "Wired MAC Auth" and not "Wired 802.1x" like the Win 10 Clients. Von: Fabrice Durand

Re: [PacketFence-users] Language strings in .pm files

2017-05-31 Thread Fabrice Durand
Hello George, sorry for the delay. In fact it suppose to be localized but our script to extract string missed all the lines that contain showError. I did a fix in github for the newer version but you can patch your setup to make it work. So do what i have modified in Email.pm

Re: [PacketFence-users] EAP-TLS with IP-PHones

2017-05-31 Thread Fabrice Durand
You probably miss some certificates, here what i used: Subject: C=FR, O=Alcatel, OU=PKI Authority, CN=Alcatel Enterprise Solutions X509v3 Subject Key Identifier: B7:1F:4E:45:B5:00:DD:F3:C7:9A:97:62:04:08:D1:9A:4C:BA:4A:0D Subject: C=FR, O=Alcatel,

Re: [PacketFence-users] EAP-TLS with IP-PHones

2017-05-31 Thread Christian Gfeller
Hello Fabrice  Thank you for your reply.  I have copied the Alcatel CA Cert to my existing CA Certificate:  -BEGIN CERTIFICATE- MS CA -END CERTIFICATE- -BEGIN CERTIFICATE- Alcatel CA -END CERTIFICATE-  The I restarted radiusd service.  When the phone will

[PacketFence-users] Install questions for 7.0 and Cluster

2017-05-31 Thread Peter Reilly
I'm following this guide: https://github.com/inverse-inc/packetfence/blob/devel/docs/PacketFence_Clustering_Guide.asciidoc I have 3 servers, all with packetfence installed, none configured yet. Guide says: First, start packetfence-mariadb and make sure it was able to start in standalone mode. #

Re: [PacketFence-users] Multiple Graphs showing on 'System State' page in PF 7

2017-05-31 Thread Torry, Andrew
Thanks Louis, that worked perfectly. Andrew Andrew Torry Senior Infrastructure Engineer Tel: 01326 370760 Email: andrew.to...@fxplus.ac.uk [cid:image4c5d1f.PNG@13a37164.45943ea6] [Falmouth Exeter Plus] [cid:image12dccd.PNG@8c0e3660.43995ebd]

Re: [PacketFence-users] mab+802.1x authentication

2017-05-31 Thread luca comes
Hi Antoine, I then tried and machine auth is working fine. The main problem is that when a user login it's not moved on the right VLAN. Debugging 802.1x requests on the switch I can see that dot1x timeout and it scale on mab authentication. So I have two questions: 1. Is there a way to