[PacketFence-users] Need some clarification on Unregistration Date

2021-11-02 Thread Steve Pfister via PacketFence-users
We are using local users for authentication, and there are some we would like to be valid for a certain range of dates. What we've tried to do, is to have the range of valid dates as the Registration Window, and the Unregistration Date as the last day of the range. Not only does the device not

[PacketFence-users] Need help with combining Active Directory authentication with local authentication

2021-10-11 Thread Steve Pfister via PacketFence-users
After several years of using Packetfence, we are upgrading to the latest version. We have created a new VM and have installed a fresh copy. We are starting to set it up from scratch. We have joined the server to our Active Directory domain and AD logins are working now. We are also wanting to

[PacketFence-users] Authenticating from local users or Active Directory

2021-10-10 Thread Steve Pfister via PacketFence-users
After several years of using Packetfence to authenticate guest wireless users (outside vendors), we are upgrading to the newest version. We have a brand new VM that we are installing Packetfence on from scratch. We would like the new server to authenticate using both our Active Directory

[PacketFence-users] Migrating Packet Fence to new server

2020-12-20 Thread Steve Pfister via PacketFence-users
We would like to take our existing Packet Fence installation and move the data over to a completely new server (newer version of Packet Fence). Is there a guide to doing this? -- Steven Pfister Information Technology Admin Building 115 S Ludlow St. Dayton, OH 45402 (937)

Re: [PacketFence-users] Strange behavior since moving packetfence server to virtual data center

2020-12-07 Thread Steve Pfister via PacketFence-users
Thank you... can this be done at any time without affecting users? On 11/20/2020 10:27 PM, Durand fabrice via PacketFence-users wrote: Hello Steve, try: bin/pfcmd pfconfig clear_backend bin/pfcmd configreload hard regards Fabrice Le 20-11-13 à 16 h 56, Steve Pfister via PacketFence

[PacketFence-users] Strange behavior since moving packetfence server to virtual data center

2020-11-15 Thread Steve Pfister via PacketFence-users
We have a packet fence server (version 8.1) that was working without problems up until it was moved to a virtual data center (new ip address). It still work fine, but every Saturday at around 8pm it seems to overwrite its ip address with its old ip address and the entire server becomes

Re: [PacketFence-users] Packetfence server loses ip address information whenever services are stopped or started

2020-09-09 Thread Steve Pfister via PacketFence-users
eneral Configuration still resolves to the old ip address. Could this be causing the issue? On 9/8/2020 9:44 PM, Durand fabrice via PacketFence-users wrote: Le 20-09-08 à 09 h 16, Steve Pfister via PacketFence-users a écrit : We've been using packetfence successfully for quite some time. Recently, we

[PacketFence-users] Packetfence server loses ip address information whenever services are stopped or started

2020-09-08 Thread Steve Pfister via PacketFence-users
We've been using packetfence successfully for quite some time. Recently, we moved all of our servers over to a new data center. Since then, whenever the services on our packetfence server are stopped or started, the ip address information disappears and the service is no longer reachable.

[PacketFence-users] Using only one authentication source

2018-08-13 Thread Steve Pfister via PacketFence-users
I've tested our new Packetfence server using local users and using our Active Directory. The test setups seem to work fine. Now, I'm trying to set up a production WLAN and we'd like to use only local users to authenticate, not AD. Can someone give me a little help in troubleshooting? I can't

[PacketFence-users] Fingerbank API hourly limit

2018-08-09 Thread Steve Pfister via PacketFence-users
We are getting constant emails about exceeding the Fingerbank API hourly limit. Our server is not yet in production use, and at the moment is not even being tested. If it's doing a query on every MAC address it sees, I would have thought it would have done everyone of them many, many times

Re: [PacketFence-users] Autoregistering thousand of Chromebooks

2018-07-02 Thread Steve Pfister via PacketFence-users
Bandwidth System Engineer University of Mary Hardin-Baylor WWW.UMHB.EDU 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 ____ From: Steve Pfister via PacketFence-users Sent: Friday, June 29, 2018 8:59 AM To: Sallee, Jake via PacketFenc

Re: [PacketFence-users] Autoregistering thousand of Chromebooks

2018-06-29 Thread Steve Pfister via PacketFence-users
by default. Hope that helps. Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor WWW.UMHB.EDU 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221 From: Steve Pfister via PacketFence-users Sent

Re: [PacketFence-users] Autoregistering thousand of Chromebooks

2018-06-29 Thread Steve Pfister via PacketFence-users
Actually, I thought the WLC was still doing the MAC filtering. It appears to be sending an auth request to PF using the MAC address as the username, and something obscured as the password (I'm assuming it's also the MAC). It looks like it's getting authenticated even though no username like

Re: [PacketFence-users] Autoregistering thousand of Chromebooks

2018-06-28 Thread Steve Pfister via PacketFence-users
Fone: 254-295-4658 Phax: 254-295-4221 From: Steve Pfister via PacketFence-users Sent: Thursday, June 28, 2018 9:41 AM To: packetfence-users@lists.sourceforge.net Cc: Steve Pfister Subject: Re: [PacketFence-users] Autoregistering thousand of Chromebooks I

Re: [PacketFence-users] Updating fingerbank db?

2018-06-26 Thread Steve Pfister via PacketFence-users
, I would say your PF server isn't configured correctly to send emails. Note that these are sent to the alerting email address in PacketFence. Best Regards, - Julien On 2018-06-26 10:13 AM, Steve Pfister via PacketFence-users wrote: The Fingerbank settings have an option 'Update Fingerbank

Re: [PacketFence-users] Updating fingerbank db?

2018-06-26 Thread Steve Pfister via PacketFence-users
in PacketFence. Best Regards, - Julien On 2018-06-26 10:13 AM, Steve Pfister via PacketFence-users wrote: The Fingerbank settings have an option 'Update Fingerbank DB'. This doesn't appear to be doing anything. It says something about an email which is never received and our /usr/local

Re: [PacketFence-users] Updating fingerbank db?

2018-06-26 Thread Steve Pfister via PacketFence-users
Pfister via PacketFence-users wrote: The Fingerbank settings have an option 'Update Fingerbank DB'. This doesn't appear to be doing anything. It says something about an email which is never received and our /usr/local/fingerbank/db directory looks like: drwxrwxr-x. 3 fingerbank fingerbank

Re: [PacketFence-users] Updating fingerbank db?

2018-06-26 Thread Steve Pfister via PacketFence-users
, I would say your PF server isn't configured correctly to send emails. Note that these are sent to the alerting email address in PacketFence. Best Regards, - Julien On 2018-06-26 10:13 AM, Steve Pfister via PacketFence-users wrote: The Fingerbank settings have an option 'Update Fingerbank DB

Re: [PacketFence-users] Updating fingerbank db?

2018-06-26 Thread Steve Pfister via PacketFence-users
, in the event its not working for you, I would say your PF server isn't configured correctly to send emails. Note that these are sent to the alerting email address in PacketFence. Best Regards, - Julien On 2018-06-26 10:13 AM, Steve Pfister via PacketFence-users wrote: The Fingerbank settings have

[PacketFence-users] Autoregistering thousand of Chromebooks

2018-06-25 Thread Steve Pfister via PacketFence-users
We have thousands of Chromebooks that currently use pre-shared keys to authenticate. We'd like to use Packetfence and MAC authentication instead. I have a test SSID setup, and I'm able to connect to it, but I can't seem to get registered without it trying to go through the captive portal. Is

[PacketFence-users] Disable fingerbank?

2018-06-22 Thread Steve Pfister via PacketFence-users
Is there any way to disable fingerbank? It doesn't appear to work too well, and is generating lots and lots of logs and I'm being emailed constantly about the API hourly limit. -- Check out the vibrant tech community

[PacketFence-users] Our Packetfence server seems to be bombarding Fingerbank

2018-06-21 Thread Steve Pfister via PacketFence-users
I've been getting a lot of emails about Fingerbank's API hourly limit being exceeded. Looking through the fingerbank.log, I'm seeing lines like: Jun 21 14:39:02 PacketFence-ZEN fingerbank-collector: [GIN] 2018/06/21 - 14:39:02 | 200 |  173.74µs | 127.0.0.1 | GET /endpoint_data/ I'm

Re: [PacketFence-users] 802.1x auth and local auth too?

2018-06-20 Thread Steve Pfister via PacketFence-users
Fabrice Le 2018-06-19 à 14:16, Steve Pfister via PacketFence-users a écrit : Are there any problems with allowing 802.1x authentication against our Active Directory, and against locally defined users too? I've gotten them both working separately. Now I'm trying to get both working at the same

[PacketFence-users] 802.1x auth and local auth too?

2018-06-19 Thread Steve Pfister via PacketFence-users
Are there any problems with allowing 802.1x authentication against our Active Directory, and against locally defined users too? I've gotten them both working separately. Now I'm trying to get both working at the same time and neither are working.

[PacketFence-users] No luck joining AD domain

2018-06-18 Thread Steve Pfister via PacketFence-users
I'm trying to join our Packetfence server to our AD domain. No luck so far, and the errors I'm getting aren't really that helpful. In Policies and Access Control -> Active Directory Domains, I'm getting "Test Join failed!" and "Error! An error occurred while contacting the server. Please try

[PacketFence-users] Google authentication options

2018-06-14 Thread Steve Pfister via PacketFence-users
I've heard that you can sync accounts between your Active Directory and Google. Can you do the same between Google and local Packetfence accounts? -- Check out the vibrant tech community on one of the world's most

[PacketFence-users] Need advice on server certificates

2018-06-12 Thread Steve Pfister via PacketFence-users
I have a test setup of PacketFence working now. I need some advice on server certificates. Windows tries to validate the certificate by default, so I can only get a connection to work if I turn off validation.  I'm trying to understand what the best practice is for our users, some of whom may

Re: [PacketFence-users] 802.1x authentication on Cisco WLC

2018-06-12 Thread Steve Pfister via PacketFence-users
ve Pfister via PacketFence-users a écrit : I am trying to get 802.1x authentication working on a Cisco WLC 5520. The client machines are all Windows 10. I have a registration and isolation vlan set up. The clients seem to get registered and authenticated OK, but never get a dhcp address and the ra

Re: [PacketFence-users] Fingerbank gives 401 unauthorized in packetfence.log

2018-06-12 Thread Steve Pfister via PacketFence-users
expire Regards Fabrice Le 2018-06-08 à 11:55, Steve Pfister via PacketFence-users a écrit : We are evaluating PacketFence for use in our organization. The setup of Fingerbank has been quite a problem, but I think I've finally got it set up sort of the way its supposed to be. I'm still getting

[PacketFence-users] 802.1x authentication on Cisco WLC

2018-06-11 Thread Steve Pfister via PacketFence-users
I am trying to get 802.1x authentication working on a Cisco WLC 5520. The client machines are all Windows 10. I have a registration and isolation vlan set up. The clients seem to get registered and authenticated OK, but never get a dhcp address and the radius reply says "Encryption-required".

[PacketFence-users] Fingerbank gives 401 unauthorized in packetfence.log

2018-06-08 Thread Steve Pfister via PacketFence-users
We are evaluating PacketFence for use in our organization. The setup of Fingerbank has been quite a problem, but I think I've finally got it set up sort of the way its supposed to be. I'm still getting lines in the  packetfence.log several times a second that look like: Jun  8 15:48:05