Re: [PacketFence-users] Dynamic Vlan based on AD group membership

2019-06-25 Thread Durand fabrice via PacketFence-users
This mean that there is no sources associate to your connection profile: Jun 26 00:42:44 PacketFence-ZEN packetfence_httpd.aaa: httpd.aaa(8940) INFO: [mac:38:c9:86:06:f2:85] Using sourcesfor matching (pf::authentication::match2) So no source then no rules then no roles. Can you paste before

Re: [PacketFence-users] Dynamic Vlan based on AD group membership

2019-06-25 Thread Robert McNutt via PacketFence-users
Thats not the issue, PF is matching on the user, its just not ever returning the role, I see this in the log: Jun 26 00:42:44 PacketFence-ZEN packetfence_httpd.aaa: httpd.aaa(8940) INFO: [mac:38:c9:86:06:f2:85] Using sources for matching (pf::authentication::match2) Jun 26 00:42:44

[PacketFence-users] Dynamic Vlan based on AD group membership

2019-06-25 Thread Robert McNutt via PacketFence-users
Can someone share a working config that returns a VLAN in a radius reply based on a memberof match? I cant seem to get PF to return a vlan/role for anything other then whats defined in the node... Here is my config if it helps. from authentication.conf [TLGAD] cache_match=0 read_timeout=10