Re: [PacketFence-users] Packetfence RADIUS and Unifi Out of Band

2018-02-02 Thread Timothy Mullican via PacketFence-users
Fabrice, Do you know if PacketFence caches authentication tokens for the https de-auth method? For instance, if the UniFi AP is de-authenticating 5 clients at one time via the controller, will it login 5 separate times or 1 time to the controller and issue 5 separate API calls? I’m wondering if

Re: [PacketFence-users] Packetfence RADIUS and Unifi Out of Band

2018-02-02 Thread Timothy Mullican via PacketFence-users
Eugene: You should use the IP address of your AP instead of the MAC address. The pictures are available at: https://github.com/inverse-inc/packetfence/blob/ae18f50b4879cc2d4132490fcee33f2fbe53b36f/docs/images/unifi-open.png

Re: [PacketFence-users] Packetfence RADIUS and Unifi Out of Band

2018-02-02 Thread David Harvey via PacketFence-users
Update: My changes in the unifi config.properties weren't being pushed due to a failure on my part to understand how the item/line numbers work :) "Note that each line has it's own number just before the equals sign, so for a second customization you would enter 2, etc."

[PacketFence-users] Restarting swicthports errors

2018-02-02 Thread David Harvey via PacketFence-users
Sorry for all the mailing list spam. I've been having a bit of a packetfence tinkering week! Since upgrading to packetfence 7.4 followed by applying the Unifi patch 2735.patch (the latter probably unrelated

Re: [PacketFence-users] Packetfence RADIUS and Unifi Out of Band

2018-02-02 Thread David Harvey via PacketFence-users
Yes, thank you Tim, I've reverted my manual hacks of Unifi.pm in favour of applying the patch which seems to be successful in maintaining the same behaviour as the manual changes had. I'm seeing a failure on other (cisco) switches to restart switchports, but I think that is unrelated, or relates

Re: [PacketFence-users] users stay in registration VLAN after authentication success

2018-02-02 Thread tom lo via PacketFence-users
Hi Fabrice, Just to see if you have any idea or suggestions for us to troubleshoot the issues. Regards, Tom On Thu, Jan 25, 2018 at 12:21 PM, tom lo wrote: > Hi Fabrice, > > Here is the content from the log file httpd.portal.access when the > user hit the portal. >

Re: [PacketFence-users] Packetfence RADIUS and Unifi Out of Band

2018-02-02 Thread E.P. via PacketFence-users
Hi Tim, As usual, your comments are invaluable ;) Looking at the guide which is in asciidoc to see how to properly deal with Unifi. Would be nice to see pictures as they are missing. Also, do I need to replace IP addresses for AP in the switches.conf with their MAC addresses ? Eugene

Re: [PacketFence-users] Packetfence RADIUS and Unifi Out of Band

2018-02-02 Thread Holger Patzelt via PacketFence-users
Hello Tim, hi all, we do use Juniper EX3200 Switches here and I would like to discuss a security issue in your example conf for Juniper in the documentation referenced by your posting below: your doc suggests the option „mac radius“ to be activated. I would rather NOT suggest that, because: