[PacketFence-users] PF 4.3 and Facebook Oauth2
Hi, i have setup a Debian with PF 4.3 and hostapd from Scratch in Inline mode. Everything works fine till the Point when i connect with Mobile Device (IOS 7.1), i can authorize with Facebook but then i get the message, i have reach the limit of nodes per user. Have somebody a Idea whats wrong is ? Mit freundlichen Grüßen Andreas -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] SSID message Error on PF from Cisco ap1242 and iphone mobile phone
Hi Fabrice,
thank you very much for your prompt answer.
Today evening I will try to perform this change.
I try to modify the script following the error in the logs, but it was not
like yours and the system was not working ;-)
In case, seems a general issue / workaround. Is it possible add it on the
official documentation?
Regards
Matteo
2014-07-01 23:49 GMT+02:00 Durand fabrice fdur...@inverse.ca:
Hello Matteo,
can you edit Aironet.pm and replace the function extractSsid with that
code and retry :
sub extractSsid {
my ($this, $radius_request) = @_;
my $logger = Log::Log4perl::get_logger(ref($this));
if (defined($radius_request-{'Cisco-AVPair'})) {
if (ref($radius_request-{'Cisco-AVPair'}) eq 'ARRAY') {
foreach my $ciscoAVPair (@{$radius_request-{'Cisco-AVPair'}})
{
$logger-trace(Cisco-AVPair: .$ciscoAVPair);
if ($ciscoAVPair =~ /^ssid=(.*)$/) { # ex: Cisco-AVPair =
ssid=PacketFence-Secure
return $1;
} else {
$logger-info(Unable to extract SSID of Cisco-AVPair:
.$ciscoAVPair);
}
}
} else {
if ($radius_request-{'Cisco-AVPair'} =~ /^ssid=(.*)$/) { #
ex: Cisco-AVPair = ssid=PacketFence-Secure
return $1;
} else {
$logger-info(Unable to extract SSID of Cisco-AVPair:
.$ciscoAVPair);
}
}
}
$logger-warn(
Unable to extract SSID for module . ref($this) . . SSID-based
VLAN assignments won't work.
. Make sure you enable Vendor Specific Attributes (VSA) on the AP
if you want them to work.
);
return;
}
Of course restart httpd.webservices service.
Regards
Fabrice
Le 2014-07-01 17:36, Matteo Pidalà a écrit :
Hi everybody!
I reached one satisfied environment of Packetfence, with some switches and
users working with 802.1x authentication with captive portal self
registration.
That's great... thanks once again for this fantastic product.
Anyway right now I have one issue for the Wireless part.
I have (for now), one cisco Aironet 1242 that should be perfectly
compatible with pf.
*I receive this strange message from the troubleshooting that I did:*
*Jul 02 01:19:29 httpd.webservices(4128) INFO: Unable to extract MAC from
Called-Station-Id: 0021.1be9.8770
(pf::radius::extractApMacFromRadiusRequest)*
*Jul 02 01:19:29 httpd.webservices(4128) INFO: handling radius autz
request: from switch_ip = 10.0.1.10, connection_type =
Wireless-802.11-NoEAP,switch_mac = , mac = 04:f7:e4:f3:d6:99, port =
270, username = 04f7e4f3d699 (pf::radius::authorize)*
*Jul 02 01:19:29 httpd.webservices(4128) ERROR: radius authorize failed
with error: Can't use string (ssid=Public) as an ARRAY ref while strict
refs in use at /usr/local/pf/lib/pf/Switch/Cisco/Aironet.pm line 206.*
* (pf::api::radius_authorize)*
*Jul 02 01:19:32 httpd.webservices(4128) INFO: Unable to extract MAC from
Called-Station-Id: 0021.1be9.8770
(pf::radius::extractApMacFromRadiusRequest)*
*Jul 02 01:19:32 httpd.webservices(4128) INFO: handling radius autz
request: from switch_ip = 10.0.1.10, connection_type =
Wireless-802.11-NoEAP,switch_mac = , mac = 04:f7:e4:f3:d6:99, port =
271, username = 04f7e4f3d699 (pf::radius::authorize)*
*Jul 02 01:19:32 httpd.webservices(4128) ERROR: radius authorize failed
with error: Can't use string (ssid=Public) as an ARRAY ref while strict
refs in use at /usr/local/pf/lib/pf/Switch/Cisco/Aironet.pm line 206.*
* (pf::api::radius_authorize)*
*From the switch:*
**Mar 1 06:04:41.138: %DOT11-7-AUTH_FAILED: Station 04f7.e4f3.d699
Authentication failed*
**Mar 1 06:04:49.713: %DOT11-7-AUTH_FAILED: Station 04f7.e4f3.d699
Authentication failed*
*The extract focused configuration is this:*
#
# Copyright 2006-2008 Inverse inc.
#
# See the enclosed file COPYING for license information (GPL).
# If you did not receive this file, see
# http://www.fsf.org/licensing/licenses/gpl.html
[default]
description=Switches Default Values
vlans=1,2,3,4,5,10,20,30,35,40,50,60,100,110,120
normalVlan=100
registrationVlan=110
isolationVlan=120
macDetectionVlan=4
voiceVlan=5
inlineVlan=6
inlineTrigger=
normalRole=normal
registrationRole=registration
isolationRole=isolation
macDetectionRole=macDetection
voiceRole=voice
inlineRole=inline
VoIPEnabled=no
VlanMap=Y
RoleMap=Y
mode=testing
macSearchesMaxNb=30
macSearchesSleepInterval=2
uplink=dynamic
#
# Command Line Interface
#
# cliTransport could be: Telnet, SSH or Serial
cliTransport=Telnet
cliUser=
cliPwd=
cliEnablePwd=
#
# SNMP section
#
# PacketFence - Switch
SNMPVersion=3
SNMPUserNameRead=readUser
SNMPAuthProtocolRead=MD5
SNMPAuthPasswordRead=authpwdread
SNMPPrivProtocolRead=AES
SNMPPrivPasswordRead=privpwdread
SNMPUserNameWrite=writeUser
SNMPAuthProtocolWrite=MD5
SNMPAuthPasswordWrite=authpwdwrite
Re: [PacketFence-users] SSID message Error on PF from Cisco ap1242 and iphone mobile phone
Hi Fabrice,
I'm sorry to disturb you once again, but after the function change, I
receive a new error from packetfence.log after trying to connect my laptop
in wifi:
*Jul 03 00:19:33 httpd.webservices(3047) INFO: Unable to extract MAC from
Called-Station-Id: 0021.1be9.8770
(pf::radius::extractApMacFromRadiusRequest)*
*Jul 03 00:19:33 httpd.webservices(3047) ERROR: Can not load perl module
for switch 10.0.1.10, type: pf::Switch::Cisco::Aironet_1242. Either the
type is unknown or the perl module has compilation errors. Read the
following message for details: (pf::SwitchFactory::instantiate)*
*Jul 03 00:19:33 httpd.webservices(3047) WARN: Can't instantiate switch
10.0.1.10. This request will be failed. Are you sure your switches.conf is
correct? (pf::radius::authorize)*
*Jul 03 00:19:36 httpd.webservices(3047) INFO: Unable to extract MAC from
Called-Station-Id: 0021.1be9.8770
(pf::radius::extractApMacFromRadiusRequest)*
*Jul 03 00:19:36 httpd.webservices(3047) ERROR: Can not load perl module
for switch 10.0.1.10, type: pf::Switch::Cisco::Aironet_1242. Either the
type is unknown or the perl module has compilation errors. Read the
following message for details: (pf::SwitchFactory::instantiate)*
*Jul 03 00:19:36 httpd.webservices(3047) WARN: Can't instantiate switch
10.0.1.10. This request will be failed. Are you sure your switches.conf is
correct? (pf::radius::authorize)*
*Jul 03 00:19:39 httpd.webservices(3047) INFO: Unable to extract MAC from
Called-Station-Id: 0021.1be9.8770
(pf::radius::extractApMacFromRadiusRequest)*
*Jul 03 00:19:39 httpd.webservices(3047) ERROR: Can not load perl module
for switch 10.0.1.10, type: pf::Switch::Cisco::Aironet_1242. Either the
type is unknown or the perl module has compilation errors. Read the
following message for details: (pf::SwitchFactory::instantiate)*
*Jul 03 00:19:39 httpd.webservices(3047) WARN: Can't instantiate switch
10.0.1.10. This request will be failed. Are you sure your switches.conf is
correct? (pf::radius::authorize)*
*Jul 03 00:19:43 httpd.webservices(3047) INFO: Unable to extract MAC from
Called-Station-Id: 0021.1be9.8770
(pf::radius::extractApMacFromRadiusRequest)*
*Jul 03 00:19:43 httpd.webservices(3047) ERROR: Can not load perl module
for switch 10.0.1.10, type: pf::Switch::Cisco::Aironet_1242. Either the
type is unknown or the perl module has compilation errors. Read the
following message for details: (pf::SwitchFactory::instantiate)*
*Jul 03 00:19:43 httpd.webservices(3047) WARN: Can't instantiate switch
10.0.1.10. This request will be failed. Are you sure your switches.conf is
correct? (pf::radius::authorize)*
The configuration is still like my first mail.
Any suggestion are welcome!!
Regards
Mattteo
2014-07-01 23:49 GMT+02:00 Durand fabrice fdur...@inverse.ca:
Hello Matteo,
can you edit Aironet.pm and replace the function extractSsid with that
code and retry :
sub extractSsid {
my ($this, $radius_request) = @_;
my $logger = Log::Log4perl::get_logger(ref($this));
if (defined($radius_request-{'Cisco-AVPair'})) {
if (ref($radius_request-{'Cisco-AVPair'}) eq 'ARRAY') {
foreach my $ciscoAVPair (@{$radius_request-{'Cisco-AVPair'}})
{
$logger-trace(Cisco-AVPair: .$ciscoAVPair);
if ($ciscoAVPair =~ /^ssid=(.*)$/) { # ex: Cisco-AVPair =
ssid=PacketFence-Secure
return $1;
} else {
$logger-info(Unable to extract SSID of Cisco-AVPair:
.$ciscoAVPair);
}
}
} else {
if ($radius_request-{'Cisco-AVPair'} =~ /^ssid=(.*)$/) { #
ex: Cisco-AVPair = ssid=PacketFence-Secure
return $1;
} else {
$logger-info(Unable to extract SSID of Cisco-AVPair:
.$ciscoAVPair);
}
}
}
$logger-warn(
Unable to extract SSID for module . ref($this) . . SSID-based
VLAN assignments won't work.
. Make sure you enable Vendor Specific Attributes (VSA) on the AP
if you want them to work.
);
return;
}
Of course restart httpd.webservices service.
Regards
Fabrice
Le 2014-07-01 17:36, Matteo Pidalà a écrit :
Hi everybody!
I reached one satisfied environment of Packetfence, with some switches and
users working with 802.1x authentication with captive portal self
registration.
That's great... thanks once again for this fantastic product.
Anyway right now I have one issue for the Wireless part.
I have (for now), one cisco Aironet 1242 that should be perfectly
compatible with pf.
*I receive this strange message from the troubleshooting that I did:*
*Jul 02 01:19:29 httpd.webservices(4128) INFO: Unable to extract MAC from
Called-Station-Id: 0021.1be9.8770
(pf::radius::extractApMacFromRadiusRequest)*
*Jul 02 01:19:29 httpd.webservices(4128) INFO: handling radius autz
request: from switch_ip = 10.0.1.10, connection_type =
Wireless-802.11-NoEAP,switch_mac = , mac =
Re: [PacketFence-users] PF 4.3 and Facebook Oauth2
Hi, after checking the Log files i have found this Part: == /usr/local/pf/logs/packetfence.log == Jul 02 22:53:50 httpd.portal(4094) ERROR: Error while setting locale to en_US.utf8. Is the locale generated on your system? (captiveportal::PacketFence::Controller::Root::setupLanguage) Jul 02 22:53:53 httpd.portal(4094) INFO: OAuth2 successfull, register and release for username andreas.*@facebook.com (captiveportal::PacketFence::Controller::Oauth2::oauth2Result) Jul 02 22:53:54 httpd.portal(4094) WARN: No role specified or found for pid andreas.***@facebook.com (MAC 40:b3:95:ff:ff:ff); assume maximum number of registered nodes is reached (pf::node::is_max_reg_nodes_reached) Am 02.07.2014 um 21:07 schrieb Andreas Schacht ascha...@gmx.de: Can somebody explain to wich Roles i have to Setup ? Mit freundlichen Grüßen Andreas Hi, i have setup a Debian with PF 4.3 and hostapd from Scratch in Inline mode. Everything works fine till the Point when i connect with Mobile Device (IOS 7.1), i can authorize with Facebook but then i get the message, i have reach the limit of nodes per user. Have somebody a Idea whats wrong is ? Mit freundlichen Grüßen Andreas -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
[PacketFence-users] Help!!
Hello, I was wondering if you could help my confusion more with this product. I have an environment that is virtualized…(makes that part easy) Yet, it appears I don’t get the switches or wireless part out at all… I have Cisco SG200-26 Switches, what option do I choose there?? They support radius, snmp (not sure on the trap part), http, and https configurations which way should I set them up. Also I am running cisco e1200 wireless switches would love help in making those work too. (open wrt doesn’t seem to work with wireless but dd wrt does) Confusion -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] PF 4.3 and Facebook Oauth2
Hi Andreas, You need to set a role for the nodes in your facebook source. In the sources page at the bottom you can add a catch all rule that will set the access duration and the role of the node. On 14-07-02 04:58 PM, Andreas Schacht wrote: Hi, after checking the Log files i have found this Part: == /usr/local/pf/logs/packetfence.log == Jul 02 22:53:50 httpd.portal(4094) ERROR: Error while setting locale to en_US.utf8. Is the locale generated on your system? (captiveportal::PacketFence::Controller::Root::setupLanguage) Jul 02 22:53:53 httpd.portal(4094) INFO: OAuth2 successfull, register and release for username andreas.*@facebook.com (captiveportal::PacketFence::Controller::Oauth2::oauth2Result) Jul 02 22:53:54 httpd.portal(4094) WARN: No role specified or found for pid andreas.***@facebook.com (MAC 40:b3:95:ff:ff:ff); assume maximum number of registered nodes is reached (pf::node::is_max_reg_nodes_reached) Am 02.07.2014 um 21:07 schrieb Andreas Schacht ascha...@gmx.de: Can somebody explain to wich Roles i have to Setup ? Mit freundlichen Grüßen Andreas Hi, i have setup a Debian with PF 4.3 and hostapd from Scratch in Inline mode. Everything works fine till the Point when i connect with Mobile Device (IOS 7.1), i can authorize with Facebook but then i get the message, i have reach the limit of nodes per user. Have somebody a Idea whats wrong is ? Mit freundlichen Grüßen Andreas -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Julien Semaan jsem...@inverse.ca :: +1.514.447.4918 *155 :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] PF 4.3 and Facebook Oauth2
Hi Julien, thank you, it was this role option. Now it works and need some fine tune. Can somebody explain this Options ? root@privileg:~# cat /usr/local/pf/conf/profiles.conf [default] description=Default Profile logo=/common/packetfence-cp.png billing_engine=disabled redirecturl=http://www.packetfence.org/ always_use_redirecturl=disabled mandatory_fields=custom_field_1 locale=en_US nbregpages=0 allow_android_devices=0 —— This Option allowed_devices=——— This Option sources=Privileg root@privileg:~# Mit freundlichen Grüßen Andreas Am 02.07.2014 um 23:19 schrieb Julien Semaan jsem...@inverse.ca: Hi Andreas, You need to set a role for the nodes in your facebook source. In the sources page at the bottom you can add a catch all rule that will set the access duration and the role of the node. On 14-07-02 04:58 PM, Andreas Schacht wrote: Hi, after checking the Log files i have found this Part: == /usr/local/pf/logs/packetfence.log == Jul 02 22:53:50 httpd.portal(4094) ERROR: Error while setting locale to en_US.utf8. Is the locale generated on your system? (captiveportal::PacketFence::Controller::Root::setupLanguage) Jul 02 22:53:53 httpd.portal(4094) INFO: OAuth2 successfull, register and release for username andreas.*@facebook.com (captiveportal::PacketFence::Controller::Oauth2::oauth2Result) Jul 02 22:53:54 httpd.portal(4094) WARN: No role specified or found for pid andreas.***@facebook.com (MAC 40:b3:95:ff:ff:ff); assume maximum number of registered nodes is reached (pf::node::is_max_reg_nodes_reached) Am 02.07.2014 um 21:07 schrieb Andreas Schacht ascha...@gmx.de: Can somebody explain to wich Roles i have to Setup ? Mit freundlichen Grüßen Andreas Hi, i have setup a Debian with PF 4.3 and hostapd from Scratch in Inline mode. Everything works fine till the Point when i connect with Mobile Device (IOS 7.1), i can authorize with Facebook but then i get the message, i have reach the limit of nodes per user. Have somebody a Idea whats wrong is ? Mit freundlichen Grüßen Andreas -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Julien Semaan jsem...@inverse.ca :: +1.514.447.4918 *155 :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
[PacketFence-users] Installing Packetfence on Amazon EC2
Hello , I have been trying for days to install packetfence on a ubuntu instance on Amazon EC with no luck. Anyone can assist in a way or a cocument of how I can make that possible if its possible. Thanks in advance.. *- Moe * Email: malsm...@gmail.com Fortune Favors The Brave -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] Installing Packetfence on Amazon EC2
Can you describe the problem(s) you're encountering? On Wed, Jul 2, 2014 at 3:58 PM, Moe Alsmadi malsm...@gmail.com wrote: Hello , I have been trying for days to install packetfence on a ubuntu instance on Amazon EC with no luck. Anyone can assist in a way or a cocument of how I can make that possible if its possible. Thanks in advance.. *- Moe * Email: malsm...@gmail.com Fortune Favors The Brave -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Fletcher Haynes fhay...@willamette.edu Systems Administrator/Network Services Consultant Willamette Integrated Technology Services Willamette University, Salem, OR Phone: 503.370.6016 -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] SSID message Error on PF from Cisco ap1242 and iphone mobile phone
My fault, it´s just a little syntax error, try this:
sub extractSsid {
my ($this, $radius_request) = @_;
my $logger = Log::Log4perl::get_logger(ref($this));
if (defined($radius_request-{'Cisco-AVPair'})) {
if (ref($radius_request-{'Cisco-AVPair'}) eq 'ARRAY') {
foreach my $ciscoAVPair
(@{$radius_request-{'Cisco-AVPair'}}) {
$logger-trace(Cisco-AVPair: .$ciscoAVPair);
if ($ciscoAVPair =~ /^ssid=(.*)$/) { # ex: Cisco-AVPair
= ssid=PacketFence-Secure
return $1;
} else {
$logger-info(Unable to extract SSID of
Cisco-AVPair: .$ciscoAVPair);
}
}
} else {
if ($radius_request-{'Cisco-AVPair'} =~ /^ssid=(.*)$/) { #
ex: Cisco-AVPair = ssid=PacketFence-Secure
return $1;
} else {
$logger-info(Unable to extract SSID of Cisco-AVPair:
.$radius_request-{'Cisco-AVPair'});
}
}
}
$logger-warn(
Unable to extract SSID for module . ref($this) . .
SSID-based VLAN assignments won't work.
. Make sure you enable Vendor Specific Attributes (VSA) on the
AP if you want them to work.
);
return;
}
Fabrice
Le 2014-07-02 16:21, Matteo Pidalà a écrit :
Hi Fabrice,
I'm sorry to disturb you once again, but after the function change, I
receive a new error from packetfence.log after trying to connect my
laptop in wifi:
*/Jul 03 00:19:33 httpd.webservices(3047) INFO: Unable to extract MAC
from Called-Station-Id: 0021.1be9.8770
(pf::radius::extractApMacFromRadiusRequest)/*
*/Jul 03 00:19:33 httpd.webservices(3047) ERROR: Can not load perl
module for switch 10.0.1.10, type: pf::Switch::Cisco::Aironet_1242.
Either the type is unknown or the perl module has compilation errors.
Read the following message for details:
(pf::SwitchFactory::instantiate)/*
*/Jul 03 00:19:33 httpd.webservices(3047) WARN: Can't instantiate
switch 10.0.1.10. This request will be failed. Are you sure your
switches.conf is correct? (pf::radius::authorize)/*
*/Jul 03 00:19:36 httpd.webservices(3047) INFO: Unable to extract MAC
from Called-Station-Id: 0021.1be9.8770
(pf::radius::extractApMacFromRadiusRequest)/*
*/Jul 03 00:19:36 httpd.webservices(3047) ERROR: Can not load perl
module for switch 10.0.1.10, type: pf::Switch::Cisco::Aironet_1242.
Either the type is unknown or the perl module has compilation errors.
Read the following message for details:
(pf::SwitchFactory::instantiate)/*
*/Jul 03 00:19:36 httpd.webservices(3047) WARN: Can't instantiate
switch 10.0.1.10. This request will be failed. Are you sure your
switches.conf is correct? (pf::radius::authorize)/*
*/Jul 03 00:19:39 httpd.webservices(3047) INFO: Unable to extract MAC
from Called-Station-Id: 0021.1be9.8770
(pf::radius::extractApMacFromRadiusRequest)/*
*/Jul 03 00:19:39 httpd.webservices(3047) ERROR: Can not load perl
module for switch 10.0.1.10, type: pf::Switch::Cisco::Aironet_1242.
Either the type is unknown or the perl module has compilation errors.
Read the following message for details:
(pf::SwitchFactory::instantiate)/*
*/Jul 03 00:19:39 httpd.webservices(3047) WARN: Can't instantiate
switch 10.0.1.10. This request will be failed. Are you sure your
switches.conf is correct? (pf::radius::authorize)/*
*/Jul 03 00:19:43 httpd.webservices(3047) INFO: Unable to extract MAC
from Called-Station-Id: 0021.1be9.8770
(pf::radius::extractApMacFromRadiusRequest)/*
*/Jul 03 00:19:43 httpd.webservices(3047) ERROR: Can not load perl
module for switch 10.0.1.10, type: pf::Switch::Cisco::Aironet_1242.
Either the type is unknown or the perl module has compilation errors.
Read the following message for details:
(pf::SwitchFactory::instantiate)/*
*/Jul 03 00:19:43 httpd.webservices(3047) WARN: Can't instantiate
switch 10.0.1.10. This request will be failed. Are you sure your
switches.conf is correct? (pf::radius::authorize)/*
The configuration is still like my first mail.
Any suggestion are welcome!!
Regards
Mattteo
2014-07-01 23:49 GMT+02:00 Durand fabrice fdur...@inverse.ca
mailto:fdur...@inverse.ca:
Hello Matteo,
can you edit Aironet.pm and replace the function extractSsid with
that code and retry :
sub extractSsid {
my ($this, $radius_request) = @_;
my $logger = Log::Log4perl::get_logger(ref($this));
if (defined($radius_request-{'Cisco-AVPair'})) {
if (ref($radius_request-{'Cisco-AVPair'}) eq 'ARRAY') {
foreach my $ciscoAVPair
(@{$radius_request-{'Cisco-AVPair'}}) {
$logger-trace(Cisco-AVPair: .$ciscoAVPair);
if ($ciscoAVPair =~ /^ssid=(.*)$/) { # ex:
Cisco-AVPair = ssid=PacketFence-Secure
return $1;
} else {
$logger-info(Unable to extract SSID of
Cisco-AVPair: .$ciscoAVPair);
}
Re: [PacketFence-users] Installing Packetfence on Amazon EC2
I successfully installed it I just need some help determining what kind of enforcement I shold use with an EC2 setup and also how to assign the interfaces. this instance have 4 Network interfaces as follow: eth0 = 192.168.1.10 eth1 = 192.168.1.20 eth2 = 192.168.1.30 eth4 = 192.168.1.40 Gateway is = 192.168.1.1 I am not sure what to assign to each one or how to assign the vlans from there *-Moe Alsmadi* Tel. (424) 260-7171 Email: malsm...@gmail.com Fortune Favors The Brave On Wed, Jul 2, 2014 at 4:06 PM, Fletcher Haynes fhay...@willamette.edu wrote: Can you describe the problem(s) you're encountering? On Wed, Jul 2, 2014 at 3:58 PM, Moe Alsmadi malsm...@gmail.com wrote: Hello , I have been trying for days to install packetfence on a ubuntu instance on Amazon EC with no luck. Anyone can assist in a way or a cocument of how I can make that possible if its possible. Thanks in advance.. *- Moe * Email: malsm...@gmail.com Fortune Favors The Brave -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Fletcher Haynes fhay...@willamette.edu Systems Administrator/Network Services Consultant Willamette Integrated Technology Services Willamette University, Salem, OR Phone: 503.370.6016 -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] PF 4.3 and Facebook Oauth2
Hi Andreas, allow_android_devices and allowed_devices will be to new options for incoming MDM feature. Regards Fabrice Le 2014-07-02 18:37, Andreas Schacht a écrit : Hi Julien, thank you, it was this role option. Now it works and need some fine tune. Can somebody explain this Options ? root@privileg:~# cat /usr/local/pf/conf/profiles.conf [default] description=Default Profile logo=/common/packetfence-cp.png billing_engine=disabled redirecturl=http://www.packetfence.org/ always_use_redirecturl=disabled mandatory_fields=custom_field_1 locale=en_US nbregpages=0 allow_android_devices=0 —— This Option allowed_devices= ——— This Option sources=Privileg root@privileg:~# Mit freundlichen Grüßen Andreas Am 02.07.2014 um 23:19 schrieb Julien Semaan jsem...@inverse.ca: Hi Andreas, You need to set a role for the nodes in your facebook source. In the sources page at the bottom you can add a catch all rule that will set the access duration and the role of the node. On 14-07-02 04:58 PM, Andreas Schacht wrote: Hi, after checking the Log files i have found this Part: == /usr/local/pf/logs/packetfence.log == Jul 02 22:53:50 httpd.portal(4094) ERROR: Error while setting locale to en_US.utf8. Is the locale generated on your system? (captiveportal::PacketFence::Controller::Root::setupLanguage) Jul 02 22:53:53 httpd.portal(4094) INFO: OAuth2 successfull, register and release for username andreas.*@facebook.com (captiveportal::PacketFence::Controller::Oauth2::oauth2Result) Jul 02 22:53:54 httpd.portal(4094) WARN: No role specified or found for pid andreas.***@facebook.com (MAC 40:b3:95:ff:ff:ff); assume maximum number of registered nodes is reached (pf::node::is_max_reg_nodes_reached) Am 02.07.2014 um 21:07 schrieb Andreas Schacht ascha...@gmx.de: Can somebody explain to wich Roles i have to Setup ? Mit freundlichen Grüßen Andreas Hi, i have setup a Debian with PF 4.3 and hostapd from Scratch in Inline mode. Everything works fine till the Point when i connect with Mobile Device (IOS 7.1), i can authorize with Facebook but then i get the message, i have reach the limit of nodes per user. Have somebody a Idea whats wrong is ? Mit freundlichen Grüßen Andreas -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Julien Semaan jsem...@inverse.ca :: +1.514.447.4918 *155 :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and systems into organized workflows Winner of BOSSIE, CODIE, OW2 and Gartner awards http://p.sf.net/sfu/Bonitasoft ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Open source business process management suite built on Java and Eclipse Turn processes into business applications with Bonita BPM Community Edition Quickly connect people, data, and
