[PacketFence-users] Help! email is not allowed to sponsor guest access

2019-07-22 Thread Helen Power via PacketFence-users
Hi All, We want to achieve guest self-registration feature via sponsor email. I defined one authentication source type to AD with action "Mark as sponsor" . However, when I use guest signup and put the sponsor email in then it says "Email XX is not allowed to sponsor guest access", which I'm

Re: [PacketFence-users] EAP-MD5 & Active Directory?

2019-07-22 Thread John Sayce via PacketFence-users
Yes I'm interested in this. Thanks My IP phones are Avaya 1608 model. The username is the mac address but the password is numeric only. So is the active directory source just an LDAP connection? (Renamed to help end users?) I thought it'd be different. -Original Message- From:

Re: [PacketFence-users] [PF 9.0.1] Cisco WLC and Virtual IP

2019-07-22 Thread pro fence via PacketFence-users
Hi Fabrice, Thanks for the reply, here is what i have in the pre_auth ACL : [image: acls.png] do you see something wrong ? On Mon, 22 Jul 2019 at 14:54, Fabrice Durand via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > Hello Pro fence, > > packetfence manage the port

Re: [PacketFence-users] Configuration help for Aruba Instant controller needed (guest access)

2019-07-22 Thread Stegmaier, Jona via PacketFence-users
Hello Fabrice, Nicolas Quiniou-Briand already told me, that I have to apply the maintenance patches. It works now, thank you very much for your help! Best regards, Jona Von: Fabrice Durand via PacketFence-users Gesendet: Montag, 22. Juli 2019 15:02 An:

[PacketFence-users] Multi tenancy

2019-07-22 Thread Alina Haider via PacketFence-users
Hi all, Can anybody tell me how can we apply Multi tenancy using PacketFence? Thanks and regards, Alina Haider Development Intern [cid:d0484b68-1f67-417d-a8db-6280fcf1c389] IOTA Solutions. Pvt. Ltd. (A Cloud9 Networks’ Company) Mezzanine Floor, Khumrial Centre,

Re: [PacketFence-users] EAP-MD5 & Active Directory?

2019-07-22 Thread Fabrice Durand via PacketFence-users
Hello John, if your phone does eap-md5 with the username and the password equal to the mac address then it will work as is in PacketFence. Also to use AD you need to be able to fetch the clear text password which is not possible with LDAP. To be able to make it work then you will need to

Re: [PacketFence-users] [pf 9.0.1] password of the day

2019-07-22 Thread pro fence via PacketFence-users
hi, when i fill out the form with the email and password i have the same message in the httpd.portal log; i made the test with the password of the day and with fake password, but the result is the same : Authenticating user using sources : Password-of-the-day

Re: [PacketFence-users] Configuration help for Aruba Instant controller needed (guest access)

2019-07-22 Thread Fabrice Durand via PacketFence-users
Hello Jona, you need to run pf-maint.pl on you system first. Regards Fabrice Le 19-07-22 à 05 h 58, Stegmaier, Jona via PacketFence-users a écrit : Hello, thanks for your reply! I tried the authentication with the help of roles, but nothing changed. Packetfence sends the role update,

Re: [PacketFence-users] Dynamically lookup and register nodes from an external system

2019-07-22 Thread Fabrice Durand via PacketFence-users
Hello Schmidt, we did this king of workflow in PacketFence here: https://github.com/inverse-inc/packetfence/pull/2667/files You will just need to adapt the code. Regards Fabrice Le 19-07-22 à 04 h 22, Schmidt Korbinian via PacketFence-users a écrit : Hello PacketFence users, I am

Re: [PacketFence-users] [PF 9.0.1] Cisco WLC and Virtual IP

2019-07-22 Thread Fabrice Durand via PacketFence-users
Hello Pro fence, packetfence manage the port that needs to be open, so you don't have to do anything. Btw it looks that the issue you have is related to the acl you made on the WLC. (check is there is some hit) What you can do is to capture the traffic on the device your are testing with

Re: [PacketFence-users] Configuration help for Aruba Instant controller needed (guest access)

2019-07-22 Thread Stegmaier, Jona via PacketFence-users
Hello Nicolas, that's it, thank you so much! :) Best regards, Jona -- Jona Stegmaier Fraunhofer-Institut für Physikalische Messtechnik IPM; ITK Heidenhofstr. 8, 79110 Freiburg, Germany Phone +49 761 8857-132, jona.stegma...@ipm.fraunhofer.de https://www.ipm.fraunhofer.de -Ursprüngliche

Re: [PacketFence-users] EAP-MD5 & Active Directory?

2019-07-22 Thread John Sayce via PacketFence-users
I've tried changing that setting (and restarting) but it doesn't seem to have any effect. I assume that's because it controls how packetfence stores user passwords in its local database rather than in active directory. I appreciate that the password needs to be plain text, however I'm not sure

Re: [PacketFence-users] EAP-MD5 & Active Directory?

2019-07-22 Thread Nicolas Quiniou-Briand via PacketFence-users
Hello John On 2019-07-22 11:34 a.m., John Sayce via PacketFence-users wrote: Mon Jul 22 10:13:31 2019 : Auth: (13018) Login incorrect (eap_md5: Cleartext-Password is required for EAP-MD5 authentication): [asd\switch1] (from client 10.8.4.2 port 31 cli 54:80:28:9c:50:50) Try to change

Re: [PacketFence-users] Configuration help for Aruba Instant controller needed (guest access)

2019-07-22 Thread Nicolas Quiniou-Briand via PacketFence-users
Hello Jona, On 2019-07-22 11:58 a.m., Stegmaier, Jona via PacketFence-users wrote: Jul 22 11:04:32 packetfence pfqueue: pfqueue(28927) ERROR: [mac:ac:7b:a1:55:25:9e] Error handling desAssociate : Undefined subroutine ::Switch::Aruba::Instant_Access::perform_coa called at

Re: [PacketFence-users] PROBLEM DURING LOGIN PHASE FROM PORTAL

2019-07-22 Thread Nicolas Quiniou-Briand via PacketFence-users
Hello, Did you create your user "packettest" in packetfence DB with a role ? -- Nicolas Quiniou-Briand n...@inverse.ca :: +1.514.447.4918 *140 :: https://inverse.ca Inverse inc. :: Leaders behind SOGo (https://sogo.nu), PacketFence (https://packetfence.org) and Fingerbank

Re: [PacketFence-users] Configuration help for Aruba Instant controller needed (guest access)

2019-07-22 Thread Stegmaier, Jona via PacketFence-users
Hello, thanks for your reply! I tried the authentication with the help of roles, but nothing changed. Packetfence sends the role update, but the access points can’t enforce the VLAN change. The only error message, that Packetfence creates, you can find in the last line: Jul 22

[PacketFence-users] PROBLEM DURING LOGIN PHASE FROM PORTAL

2019-07-22 Thread Süleyman Gelener via PacketFence-users
Dear Subscribers, i am trying to connect my device to the packetfence, however it gave me errors that are shown below. My user is not available in packetfence so this is first time i am trying to add my user. However, switch automatically assign my device to default owner, so i am not able to

[PacketFence-users] EAP-MD5 & Active Directory?

2019-07-22 Thread John Sayce via PacketFence-users
I have some phones and switches that only support EAP-MD5 authentication. Can I use EAP-MD5 authentication with Active Directory as an authentication source? I have this working with NPS. I needed to enable EAP-MD5 in the registry and I had to create a different password policy to save the

[PacketFence-users] Dynamically lookup and register nodes from an external system

2019-07-22 Thread Schmidt Korbinian via PacketFence-users
Hello PacketFence users, I am looking for ways to automatically synchronize pre-registered nodes with an external system like a database. One way to achieve this would be an application that periodically calls pfcmd or the HTTP API to import nodes into PacketFence. Now I was just wondering