Re: [PacketFence-users] Mac Book Pro Air Portal

2015-10-21 Thread Derek Wuelfrath
Moi, Can you specify if that happens when using the “Apple reduced captive-portal browser” thingy ? I mean, when you first connect to an SSID, MacBook will try to detect if you have Internet access or not, and if not, will popup a simili browser containing the portal. We already encountered

Re: [PacketFence-users] AD auth fails

2015-10-21 Thread Holger.Patzelt
Hi Louis, Here you are: (don’t be irritated, due to a restart, i changed the PID…) # lsof -nPp 15000 | grep IPv4 tells: httpd 15000 root7u IPv4 139071 0t0 TCP 127.0.0.1:7070 (LISTEN) httpd 15000 root8u IPv4 139073 0t0 TCP

Re: [PacketFence-users] AD auth fails

2015-10-21 Thread Louis Munro
> On Oct 21, 2015, at 9:33 , > wrote: > > httpd.aaa|1|8993 Ok, so that’s the one that matters. The error you are seeing is caused by a failure of the radiusd process to connect over http to the httpd.aaa service that provides

[PacketFence-users] Recommended setup for HA and efficiency

2015-10-21 Thread Morris, Andi
Hi all, I've recently come into some issues with the load on my PacketFence setup during peak times and so we're now looking at seeing if we can split the service into separate components across servers, and also across our two sites for high availability. Loads are currently around 2000

Re: [PacketFence-users] Recommended setup for HA and efficiency

2015-10-21 Thread Tim DeNike
Move MySQL to a different server on fast storage. I run 2 MySQL vms in ha on ssd storage and that helps. Sent from my iPhone On Oct 21, 2015, at 12:37 PM, Morris, Andi wrote: Hi all, I’ve recently come into some issues with the load on my PacketFence setup during

Re: [PacketFence-users] How to enforce guest role on mobile devices after registration?

2015-10-21 Thread Fabrice DURAND
Hello Dale, i am not sure to understand the workflow you want to achieve. What i think you can do is the following: On the secure SSID you must have a way to detect that the device who is trying to connect is a corporate device. Per example for windows device you must do machine auth and after

[PacketFence-users] SMS gateway configuration

2015-10-21 Thread Ing. Vanen Vythilingum
How and where to setup sms gateway? Would like to use http://www.skebby.com/sms-gateway/sms-api/sending-text-messaging/ for sending sms registration. -- ___

Re: [PacketFence-users] Issue with dhcp sending wrong DNS in clustered mode

2015-10-21 Thread Simon Gottschlag
Hi, I think PF works with DNS interception in inline mode, forcing all queries to 123.123.123.123 or something like that and by that, forcing it to the Captive Portal. In my case, DNS doesn’t work after registration when the PacketFence-nodes are the DNS servers. Either I need to get the

Re: [PacketFence-users] Recommended setup for HA and efficiency

2015-10-21 Thread Arthur Emerson
On 10/21/15, 12:35 PM, "Morris, Andi" > wrote: Has anyone else run into this sort of issue with devices sitting in the captive portal, and if so how do you combat it? I made a local portal user ID for unregistered devices that are

Re: [PacketFence-users] multiple dc's in domain.conf

2015-10-21 Thread Louis Munro
That is not supported at this time, in part because the templated files themselves don’t necessarily support it. But more to the point, that is not how ntlm authentication works. The winbind process finds it’s DC dynamically using dns SRV records. So changing the config files on the client side

[PacketFence-users] Erro trying to install Packetfence

2015-10-21 Thread Mercadeo - Magellan
I get this error when i try to install packetfence complete with the following command... yum groupinstall -enablerepo=PacketFence,rpmforge PacketFence-complete --> Finished Dependency Resolution Error: Package: packetfence-5.4.0-1.el6.noarch (packetfence) Requires: freeradius

Re: [PacketFence-users] How to enforce guest role on mobile devices after registration?

2015-10-21 Thread Dale Whiteaker-Lewis
Here is the process: - Employee has a company-issued laptop - Employee has a personal phone with WiFi. - We have a WPA2 Enterprise SSID using 802.1x/EAP-PEAP-MSCHAPv2 for authentication, with PF as the RADIUS server. - We want to allow employee VLAN access for the laptop after

Re: [PacketFence-users] AD auth fails

2015-10-21 Thread Holger.Patzelt
Hi Louis, Yes Services do run (I suppose that snort does not impact the auth processes...) service|shouldBeStarted|pid carbon-cache|1|8964 carbon-relay|1|8971 collectd|1|8974 dhcpd|1|8991 haproxy|0|0 httpd.aaa|1|8993 httpd.admin|1|8935 httpd.graphite|1|9004 httpd.portal|1|9018 httpd.proxy|1|9030

Re: [PacketFence-users] Mac Book Pro Air Portal

2015-10-21 Thread Moises Moreno
Derek, When we connect to the SSID, the apple portal window pops up automatically. We fill out the information and hit the register by email button. It then attempts to allow us access but it just gets stuck at that point. Wet get a message stating our network access will be enabled, the

Re: [PacketFence-users] Issue with dhcp sending wrong DNS in clustered mode

2015-10-21 Thread Simon Gottschlag
Hi All, It was an issue with the inline detection. @fdurand solved it! https://github.com/inverse-inc/packetfence/issues/975 Best regards, Simon Gottschlag From: Simon Gottschlag Sent: den 21 oktober 2015 18:00 To: packetfence-users@lists.sourceforge.net Subject: RE: [PacketFence-users] Issue

Re: [PacketFence-users] email registration always as 'guest'`

2015-10-21 Thread mourik jan heupink
On 10/21/2015 10:19 AM, Timur Gubaev wrote: > The same issue, and also cannot guess, why it happens > Then a reaction from inverse would be even more appreciated... Thanks for replying. MJ --

Re: [PacketFence-users] email registration always as 'guest'`

2015-10-21 Thread mourik jan heupink
ok, done here: https://github.com/inverse-inc/packetfence/issues/969 On 10/21/2015 01:39 PM, Durand fabrice wrote: > Hello, good morning from inverse ! > > So it's a bug then open an issue there : > https://github.com/inverse-inc/packetfence/issues > > Regards > Fabrice > > > Le 2015-10-21

Re: [PacketFence-users] Issue with dhcp sending wrong DNS in clustered mode

2015-10-21 Thread Tim DeNike
When a device is in registration vlan, the DHCP assigned dns server is the PF server. This is so they can redirect to the captive portal. Im not sure how it operates in inline mode. What is your setup? On Wed, Oct 21, 2015 at 7:23 AM, Simon Gottschlag wrote: > Hi

[PacketFence-users] multiple dc's in domain.conf

2015-10-21 Thread mourik jan heupink
Hi, Are we able to provide multiple ip's and ad_server names in domain.conf? I would like to add more dc's, to make things more stable. Currently my file looks like this: [intech] bind_pass= dns_server=192.x.z.15 bind_dn=username workgroup=WRKGRP ad_server=dc2.samba.company.com server_name=pf

Re: [PacketFence-users] email registration always as 'guest'`

2015-10-21 Thread Timur Gubaev
The same issue, and also cannot guess, why it happens >Hi, > >On packetfence 5.3.1, inline, using email registration I would like >different roles to be applied, based on the kind of email address the >user used. But all registrations end up as type 'guest', and the roles I >configured are

[PacketFence-users] Issue with dhcp sending wrong DNS in clustered mode

2015-10-21 Thread Simon Gottschlag
Hi all! I'm using the latest version of PacketFence (ZEN) and have setup a cluster. Registration works, and after that I'm able to ping the internet (example 8.8.8.8). My problem is that I'm not able to resolve anything else. The DHCP server (packetfence server) are sending the cluster nodes

Re: [PacketFence-users] email registration always as 'guest'`

2015-10-21 Thread Durand fabrice
Hello, good morning from inverse ! So it's a bug then open an issue there : https://github.com/inverse-inc/packetfence/issues Regards Fabrice Le 2015-10-21 07:29, mourik jan heupink a écrit : > > On 10/21/2015 10:19 AM, Timur Gubaev wrote: >> The same issue, and also cannot guess, why it