Re: [PacketFence-users] [Packetfence] AD authentication with FreeRadius: "reading winbind reply failed!"

2018-03-06 Thread E.P. via PacketFence-users
Hi Jimmy and Fabrice, I would like to report the same experience. I have a realm (OPTIONS-AD-REALM) and it is associated with the AD domain (optionsad), i.e. [OPTIONS-AD-REALM] domain=optionsad options=strip I had similar problems with winbind, same errors in the output of RADIUS

Re: [PacketFence-users] Hostapd causing duplicate Sign-Into-Network prompts intermittently

2018-03-06 Thread Durand fabrice via PacketFence-users
Hello Ian, there is a configuration parameter that can be change to raise the time between the deauth order and the CoA request. It's Config{'fencing'}{'wait_for_redirect'} , so in pf.conf: [fencing] # # fencing.wait_for_redirect # # How many seconds should the WebAPI sleep before actually

Re: [PacketFence-users] CoA on EX2200

2018-03-06 Thread Durand fabrice via PacketFence-users
Hello Sergio, Le 2018-03-06 à 11:54, Sergio Rizzi via PacketFence-users a écrit : Hi,  i'm using PF 7.3.0 with active cluster and i have some trouble using CoA deauth. These are the code changes to make it works (sorry for a non patch-like code): lib/pf/accounting.pm: on clusters,

Re: [PacketFence-users] Unknown Switch - Rejected User

2018-03-06 Thread Durand fabrice via PacketFence-users
Hello Ebrar, This should work: [192.168.56.100] description=IOUvL2 type=Cisco::Catalyst_2960 radiusSecret=useStrongerSecret deauthMethod=RADIUS Regards Fabrice Le 2018-03-06 à 08:49, ebrar via PacketFence-users a écrit : Hi All, I have set up PF on a virtual machine whose OS is Centos

Re: [PacketFence-users] So is support for Meru dead now on 7.4 ?

2018-03-06 Thread Arthur Emerson via PacketFence-users
Considering that Meru as a company is 404 and the brain-drain following the Fortinet acquisition essentially put the whole product line into life support mode in terms of customer support, I would not hold my breath waiting for someone to fix any Meru problems in PF. We are running PF 5.x with

Re: [PacketFence-users] Hostapd causing duplicate Sign-Into-Network prompts intermittently

2018-03-06 Thread Ian MacDonald via PacketFence-users
Well, We easily narrowed this down to a timing issue related to the Access-Accept(2) messages and how long an authorization is considered valid by hostapd. In short, we need to make sure that the CoA from portal activation is NOT sent to the AP within 30 seconds of the initial connection to the

[PacketFence-users] CoA on EX2200

2018-03-06 Thread Sergio Rizzi via PacketFence-users
Hi, i'm using PF 7.3.0 with active cluster and i have some trouble using CoA deauth. These are the code changes to make it works (sorry for a non patch-like code): lib/pf/accounting.pm: on clusters, cache seems not to work [...] +use pf::cluster; [...] sub

[PacketFence-users] So is support for Meru dead now on 7.4 ?

2018-03-06 Thread Derek Brabrook via PacketFence-users
seeing as packetfence won't connect to the meru controller either via telnet or ssh to de-associate macs ? (see previous posts on this issue Meru 3200) -- Check out the vibrant tech community on one of the world's

Re: [PacketFence-users] Access to PF captive portal is blocked

2018-03-06 Thread Ian MacDonald via PacketFence-users
Eugene, I think a good old fashioned network diagram could be of help here. I am not sure which linux flavour your running, but I can see one problem that might be confusing your forwarding/arp/iptables. You have two IP addresses on the same subnet configured both on the raw device (eth0) and a

[PacketFence-users] [Packetfence] AD authentication with FreeRadius: "reading winbind reply failed!"

2018-03-06 Thread Jimmy Claes via PacketFence-users
I've been trying to figure out this problem for days, whenever I try to authenticate a user on Windows, I get the following error while the login is correct: [cid:image001.png@01D3B54D.1667FFA0] 'wbinfo -p' fails aswell: [cid:image002.png@01D3B54D.1667FFA0] Winbind service is running:

[PacketFence-users] Unknown Switch - Rejected User

2018-03-06 Thread ebrar via PacketFence-users
Hi All, I have set up PF on a virtual machine whose OS is Centos and i have set up a switch on GNS3 by using the image below : i86bi-linux-l2-adventerprisek9-15.1a This SW lets me do all the configurations mentioned on PacketFence Out-of-Band Deployment Quick Guide. You can see the related

[PacketFence-users] Hostapd causing duplicate Sign-Into-Network prompts intermittently

2018-03-06 Thread Ian MacDonald via PacketFence-users
We have packetfence 7.4 instances out-of-band running on Debian 8, and use the captive portal with hostapd for WiFi client access. Our clients register using an email source for activation. Our configuration uses all captive_portal defaults except for the network detection IP, shown below.

Re: [PacketFence-users] Wrong language after upgrade to 7.0.4

2018-03-06 Thread Ian MacDonald via PacketFence-users
Hubert, I would assume you mean upgraded from 7.3.0 to 7.4.0; I think by default, connection profiles support whatever locale your browser requests. Maybe confirm your local setup using mybrowserinfo.com and make sure you are requesting the language you want. Using locale= will let your