[PacketFence-users] ?????? How to config database address

Hello Louis, I have restored /var/lib/mysql folder and executive command,errors show as below: [root@localhost conf]# systemctl status packetfence-mariadb ?? packetfence-mariadb.service - PacketFence MariaDB instance Loaded: loaded (/usr/lib/systemd/system/packetfence-mariadb.service;

Re: [PacketFence-users] Export Nodes from 6.20 for import into 7.2?

e data up a little before importing on > the new server. > > I am all ears If it makes more sense to use mysqldump - any tips for > import/export process for just the nodes table with that command? > > Thanks again > > Will > > >>> > Louis Munro via Pac

[PacketFence-users] Export Nodes from 6.20 for import into 7.2?

Hello, Upgrading from 6.2 to 7.2 and decided to do clean install and import currently registered nodes. Can someone tell me the most simple way to export from 6.2 into a csv that I can import into 7.2? Thank you! will packetfence-users@lists.sourceforge.net -- Will Rossing *Manager,

Re: [PacketFence-users] Caught exception in captiveportal... when choosing sms method

53 x125 > <(866)%20353-6153> > Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence ( > www.packetfence.org) > > On Aug 14, 2017, at 12:51, Rossing, Will via PacketFence-users < > packetfence-users@lists.sourceforge.net> wrote: > > More inf

Re: [PacketFence-users] Caught exception in captiveportal... when choosing sms method

enance patch. >> >> >> Regards, >> -- >> Louis Munro >> lmu...@inverse.ca :: www.inverse.ca >> +1.514.447.4918 x125 <(514)%20447-4918> :: +1 (866) 353-6153 x125 >> <(866)%20353-6153> >> Inverse inc. :: Leaders behind SOGo (www.sogo

Re: [PacketFence-users] Error communicatin with Nessus

Kehinde, I am looking into this. By next tuesday I should have a good solution. Thanks James On 2017-07-17 8:58 AM, Akala Kehinde via PacketFence-users wrote: Hallo Guys, Quick one.. I get this error when PF tries triggering a violation: Checked line 96 and seems it's an error

[PacketFence-users] Problem with radius certificate. Time to renew.

Hi All, I am running version 6.2.1 on CentOS with great success. Untill today! After a restart of the system Packetfence services fail to start. service packetfence start Redirecting to /bin/systemctl start packetfence.service Job for packetfence.service failed because the control process

Re: [PacketFence-users] Caught exception in captiveportal... when choosing sms method

More info, it works when we only put one SMS provider in the list, if we add more than one, it gets the exception error. This is how it writes multiple carriers to the config file and seems like it can't parse it properly or something: [sms] description=SMS-based registration sms_carriers= <

[PacketFence-users] Caught exception in captiveportal... when choosing sms method

Just deploying 7.2 to production and am getting the following when choosing the sms authentication in the captive portal. Caught exception in captiveportal::Controller::Root>dynamic_application "Can't call method "fetchall_arrayref" on an undefined value at /usr/local/pf/lib/pf/sms_carrier.pm

[PacketFence-users] Installing PacketFence Help?

Hey team Im trying to install packetfence on a VM and I keep running into issue after issue I have tried to fix a few of them, but just keep hitting walls. Can I get some help with installing it on my system. I am installing it on a XenServer VM, happy to provide specs if required Here are

Re: [PacketFence-users] email registration always remains status "incomplete"

Hi Fabrice, On 07/13/2017 02:23 AM, Durand fabrice via PacketFence-users wrote: Hello MJ, when it happen, can you check in the database just after the duration has been extended ? select * from node where mac="9c:2a:70:31:9b:9f'; As I need to be there to check this, I will do this

[PacketFence-users] web

I installed PacketFence Zen 7.1 The system gets the ip address but I can't enter the web interface It looks like https://:1443 6.5 doesn't have this problem thanks-- Check out the vibrant tech community on one of the

[PacketFence-users] Web Interface Problem

Hi I installed PacketFence Zen 7.1. The system gets the ip address but I can't enter the web interface It looks like https://:1443 . 6.5 doesn't have this problem Thanks Metin-- Check out the vibrant tech community on

Re: [PacketFence-users] email registration always remains status "incomplete"

Hi Fabrice, list, On 13-7-2017 2:23, Durand fabrice via PacketFence-users wrote: when it happen, can you check in the database just after the duration has been extended ? select * from node where mac="9c:2a:70:31:9b:9f'; ok, here it is: after the link in the registration email has

[PacketFence-users] email registration always remains status "incomplete"

Hi, We're using pf-7.1 with the captive portal with email registration. While everything appears to work (confirmation mails are sent, the links are working, users get "mail activation code has been verified. Access granted for a month" in their browsers. Yet: under Reports / All

Re: [PacketFence-users] mspki computer authentication

Thank you for your help adding an AD Computer auth source fixed me problem and all is working as expected now WillH From: Antoine Amacher via PacketFence-users [mailto:packetfence-users@lists.sourceforge.net] Sent: Wednesday, July 5, 2017 5:48 PM To: packetfence-users@lists.sourceforge.net Cc

[PacketFence-users] The switch(sg300) does not immediately respond to a pf client state change

Hello, I configured sg300 switches and pf,but I found it is not immediately possible to update the client status change of pf,for example: I never registered the status of computer A as registered,and computer A needs to wait half an hour before the status is changed to register,This half hour

Re: [PacketFence-users] Installing PacketFence Help?

, ill go back to playing with debian and see if I can get the installer to work on there as well Thanks From: jrouzier via PacketFence-users Sent: Thursday, 13 July 2017 02:53 To: packetfence-users@lists.sourceforge.net Cc: jrouzier Subject: Re: [PacketFence-users] Installing PacketFence Help

Re: [PacketFence-users] Adding One Time Password (OTP) to captive portal

as a reference. On 2017-07-12 10:24 AM, Nicolás Catalani via PacketFence-users wrote: Hi colleagues! We have implemented PacketFence and it works great! But now we would like to add a captive portal for wirelless access using OTP. The thing is We have our own OTP development. It is possible add

Re: [PacketFence-users] Adding One Time Password (OTP) to captive portal

look at /usr/local/pf/html/captive-portal/lib/captiveportal/PacketFence/DynamicRouting/Module/Authentication/Login.pm On 2017-07-12 10:45 AM, Nicolás Catalani via PacketFence-users wrote: Thanks for the quick response! I understand. I'm going to try with these options and see what I can get

Re: [PacketFence-users] email registration always remains status "incomplete"

e second reg attempt is (still!) logged as "incomplete". So something seems to be malfunctioning This is pf 7.1, completely up-to-date with pf-maint.pl Ideas? MJ On 07/10/2017 07:04 PM, mj via PacketFence-users wrote: Hi, We're using pf-7.1 with the captive portal with email r

Re: [PacketFence-users] Installing PacketFence Help?

) This is where I’m at currently Thanks Tom From: Durand fabrice via PacketFence-users Sent: Thursday, 13 July 2017 13:05 To: packetfence-users@lists.sourceforge.net Cc: Durand fabrice Subject: Re: [PacketFence-users] Installing PacketFence Help? Hello Thomas, yes it's possible to do that, just

Re: [PacketFence-users] Machine authentication

":"allow"} Are you seeing this same message about CLI access? MJ On 07/10/2017 11:58 AM, luca comes via PacketFence-users wrote: I've found this error in radius.log ERROR: mschap_machine: Program returned code (1) and output 'Reading winbind reply failed! (0xc00 1)' But

[SPAM] 回复： [PacketFence-users] How do you prevent a stolen MAC fromaccessing the network

ng the network On Jul 6, 2017, at 05:18, via PacketFence-users <packetfence-users@lists.sourceforge.net> wrote: Hello, I'm testing packfence with version 7.1.0,and I have a issue is that how to prevent a stolen MAC from accessing the network. for example: environment: user au

[PacketFence-users] why is my radius working? :-)

ghehe :-) Happy that after some fiddling with REALMS config, our 802.1x radius auth is working now, but I am seeing behaviour that I don't understand. I have _only_ configured the "DEFAULT" realm and left LOCAL and NULL empty. (also created no new ones) DEFAULT is configured with strip,

[PacketFence-users] ?????? The switch(sg300) does not immediately respond to a pf client state change

erse.ca :: +1.514.447.4918 (x145) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org) On Jul 7, 2017, at 3:40 AM, via PacketFence-users <packetfence-users@lists.sourceforge.net> wrote: Hello, I configured sg30

[PacketFence-users] ?????? The switch(sg300) does not immediately respond to a pf client state change

t (shut / no shut) Thanks, Ludovic Zammit lzam...@inverse.ca :: +1.514.447.4918 (x145) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org) On Jul 7, 2017, at 3:40 AM, via PacketFence-users <packetfence-users@lists

Re: [PacketFence-users] Machine authentication

Hi, I noticed two ERROR lines in your packetfence.log: Jul 10 15:21:30 pfnac01 packetfence_httpd.aaa: httpd.aaa(23293) ERROR: [mac:00:9c:02:92:ea:b0] error creating SNMP v1 read connection to 10.10.10.4: No response from remote host "10.10.10.4" (pf::Switch::connectRead) and Jul 10

Re: [PacketFence-users] email registration always remains status "incomplete"

On 07/17/2017 04:53 PM, lists via PacketFence-users wrote: Hi Fabrice, list, On 13-7-2017 2:23, Durand fabrice via PacketFence-users wrote: when it happen, can you check in the database just after the duration has been extended ? select * from node where mac="9c:2a:70:31:9b:9f'; ok,

[PacketFence-users] Per device Stats

Hey Team finally got packetfence setup on my network, Got a few small bugs, but they are just googling around and configuring the settings to match what I need. however, I was just wondering if it was possible to track device network usage, over time I used to have NtopNG installed on a old

[PacketFence-users] Authentication Source question

Hi Folks, I have configured mspki on our system but was wondering about the Authentication Source setup. Initially I used AD with the attribute ServicePrincipalName but the noticed there was an EAPTLS Source so configured that as well. Both work so I was wondering which approach is the best to

[PacketFence-users] Clustering and interfaces.

I am attempting to setup pf in vlan enforcement mode. I setup eth0 as management, and I added a few non-routed 192.168 interfaces to meet the isolation and registration vlan requirements for the config wizard. Do I need to add those other interfaces to cluster.conf even though I am not going to

[PacketFence-users] How to config database address

Hello, PF's database address is /var/lib/mysql,now I need to change it to /opt/sqldata,and I change it follow these steps: #cp -arp /var/lib/mysql /opt/sqldata change mysql script: #vim /etc/init.d/mysql commented out70 line??# datadir=/var/lib/mysql add line??datadir=/opt/sqldata save and exit

[PacketFence-users] ?????? How to config database address

.@inverse.ca>; : Re: [PacketFence-users] How to config database address On Jul 24, 2017, at 23:00, via PacketFence-users <packetfence-users@lists.sourceforge.net> wrote: Hello, PF's database address is /var/lib/mysql,now I need to change it to /opt/sqldata,and I chang

Re: [PacketFence-users] Can't start packetfence-httpd.admin.service

Hello! Dnia 2017-07-19, śro o godzinie 11:07 -0400, Louis Munro via PacketFence-users pisze: > Hi Jarek, > Can you report the output of this command please? > > > # systemct cat packetfence-httpd.admin # /lib/systemd/system/packetfence-httpd.admin.service [Unit] Descript

Re: [PacketFence-users] Installing PacketFence Help?

Thomas, It looks like there is a package missing Try this and let me know. apt-get install libclass-xsaccessor-perl On 2017-07-11 6:01 PM, Thomas via PacketFence-users wrote: Hey team Im trying to install packetfence on a VM and I keep running into issue after issue I have tried to fix

[PacketFence-users] Can't start packetfence-httpd.admin.service

Hello! I'm trying to setup packetfence on new Debian 8. I've tried few times from scratch but failed. At the moment packetfence-httpd.admin.service is continously restarting. I'm able to open configurator page, but after few seconds it becames unavailable. What I'm doing wrong ?

Re: [PacketFence-users] HP 1920 (JG1920-14G) support ?

s pf webgui such a dumb beast ? I did not find bells and whistles of generic modules being documented somewehere... regards Roland > Gesendet: Mittwoch, 05. Juli 2017 um 17:07 Uhr > Von: "Sallee, Jake via PacketFence-users" > <packetfence-users@lists.sourceforge.net&

Re: [PacketFence-users] Unable to save authentication setting

: [mac:unknown] Error writing authentication configuration (pf::ConfigStore::Authentication::writeAuthenticationConfigFile) the GUI gives the following: is there any other way of adding a authentication source? [cid:image001.png@01D2F638.30FC7AA0] From: Will Halsall via PacketFence-users

Re: [PacketFence-users] HP 1920 (JG1920-14G) support ?

ok, thanks for the info.   being curious why generic is an option to be selected in the webgui at all then   regards roland       Gesendet: Donnerstag, 06. Juli 2017 um 15:53 Uhr Von: "Louis Munro via PacketFence-users" <packetfence-users@lists.sourceforge.net> An: p

[PacketFence-users] How do you prevent a stolen MAC from accessing the network

Hello, I'm testing packfence with version 7.1.0,and I have a issue is that how to prevent a stolen MAC from accessing the network. for example: environment: user auth with microsoft active directory switches:cisco2960g and sg300 domain computer name: computer1@test.local registered mac:

Re: [PacketFence-users] Unable to save authentication setting

Thank you folks that has resolved my problem WillH From: Antoine Amacher via PacketFence-users [mailto:packetfence-users@lists.sourceforge.net] Sent: Thursday, July 6, 2017 2:52 PM To: packetfence-users@lists.sourceforge.net Cc: Antoine Amacher Subject: Re: [PacketFence-users] Unable to save

Re: [PacketFence-users] Active Directory Domains problem

Hi, For you information: starting packetfence 7.2, samba will use auto-discovery for DC location. (password server = *) MJ On 27-6-2017 15:52, Louis Munro via PacketFence-users wrote: Hi Luca, I am no Active Directory expert, but I believe you don't have much to do for that since the DC

[PacketFence-users] HP 1920 (JG1920-14G) support ?

Hello, any chance to get packectfence work with HP 1920 Switches? I wanted to try as a generic device via snmp and getting this far: Jul 5 15:57:18 packetfence packetfence: INFO pfcmd.pl(12509): generating /usr/local/pf/var/conf/ssl-certificates.conf

[PacketFence-users] mspki computer authentication

Hi All, I have tried to setup mspki to use ad computer authentication and have folloed the Qick instaolation guide but cannot get the clients to work. The client is a windows 10 domain laptop The server is PF 7.1.0 The CA is installed on windows2012R2 When I try to connect I get the following

[PacketFence-users] Unable to save authentication setting

When I try to save an Authentication Source I get the following error: PF 7.1.0 httpd.admin.log:Jul 5 19:16:21 packetfence httpd_admin: httpd.admin(2612) ERROR: [mac:unknown] Error writing authentication configuration (pf::ConfigStore::Authentication::writeAuthenticationConfigFile)

Re: [PacketFence-users] Export Nodes from 6.20 for import into 7.2?

with that command? Thanks again Will >>> Louis Munro via PacketFence-users Wed, 02 Aug 2017 06:55:06 -0700 Why a CSV? A myslqdump would preserve the data and be much easier to reimport. On Wed, Aug 2, 2017 at 6:15 AM, Rossing, Will <wross...@css.edu> wrote: > > Hello, > >

Re: [PacketFence-users] Captive portal SSL not using defined cert after PF7 upgrade

nce/conf/httpd.conf.d/ssl-certificates.conf:SSLCertificateChainFile %%install_dir%%/conf/ssl/intermediates.crt See if that helps From: Thomas, Gregory A via PacketFence-users [mailto:packetfence-users@lists.sourceforge.net] Sent: Tuesday, August 22, 2017 8:21 PM To: packetfence-us

[PacketFence-users] haproxy | mysql

Hi, So, just for fun I tried a fresh install of packetfence 7.1.0 on debian 8. As far as I know, we need to configure the OS debian to start mysql. However, also Packetfence tries to start something on port 3306 as well (haproxy) so there seems to be a conflict? Found that out, because I

Re: [PacketFence-users] nodes being unregistered after pf upgrade from 5.6 to 7.1

On 19-6-2017 22:17, lists via PacketFence-users wrote: Hi, I just tried upgrading our production network from 5.6 to 7.1, and even though things seemed to have worked out, after a while we discovered that some nodes were 'unregistered' after the upgrade. (they were registrered before

Re: [PacketFence-users] packetfence-pki on Debian Jessie

On 06/22/2017 05:06 PM, David Harvey via PacketFence-users wrote: Hi packetfence users, I've been attmepting to experiment with packetfence-pki, but have fallen at the first hurdle. Namely there doesn't seem to be a Debian Jessie package avialable as advertised at Ah sorry: packetfence

Re: [PacketFence-users] packetfence-pki on Debian Jessie

/2017 05:06 PM, David Harvey via PacketFence-users wrote: Hi packetfence users, I've been attmepting to experiment with packetfence-pki, but have fallen at the first hurdle. Namely there doesn't seem to be a Debian Jessie package avialable as advertised at https://packetfence.org/doc

Re: [PacketFence-users] PacketFence-users Digest, Vol 110, Issue 31

. > > Also the port for ocsp is 9292. > > Last thing, to have online/offline status you need to have the radius > accounting enable. > > Regards > > Fabrice > > > > Le 2017-06-19 ? 14:30, Rokkhan via PacketFence-users a ?crit : > > Hi, > > >

[PacketFence-users] Packetfence-pki IOS provisiones error

Hi, I am trying to generate certificate for IOs devices but I am unable to install the on IOs devices. I see in the documentation that I need a certificate signed by a know Certificate Authority and I have a certificate that I am using on web servers signed by godaddy but I think that i am doing

[PacketFence-users] packetfence-pki EAP-tls users and certificate management

Hi, I am trying to configure a wireless network using pakcetfence-pki and user certificates. I have configured a role limited to 3 devices per user and configured packetfence-pki to generate user certifcates using ldap's user id instead of device mac adress. The issue is that when the user

[PacketFence-users] nodes being unregistered after pf upgrade from 5.6 to 7.1

Hi, I just tried upgrading our production network from 5.6 to 7.1, and even though things seemed to have worked out, after a while we discovered that some nodes were 'unregistered' after the upgrade. (they were registrered before the upgrade, on 5.6.1) Also, unlike normally, these

Re: [PacketFence-users] Welcome to the "PacketFence-users" mailing list (Digest mode)

HI, I have installed Packet fence on VM, it starts web access, I can preview the login and signup pages but while trying to sign up its showing invalid credential. In their Packet fence can we add open source SMS gateway for Guest, as guest arrived on our premises they can generate their

Re: [PacketFence-users] e-mail portal login

Please ignore this I am just being silly Sorry WillH From: Will Halsall via PacketFence-users [mailto:packetfence-users@lists.sourceforge.net] Sent: Tuesday, June 6, 2017 8:28 AM To: packetfence-users@lists.sourceforge.net Cc: Will Halsall Subject: [PacketFence-users] e-mail portal login Hi

[PacketFence-users] e-mail portal login

Hi Folks, Testing pf 7.1 I noticed that when using email portal login the password is displayed and is also included in the activation e-mail. Is this action desired ? WillH [http://fcot5.farn-ct.ac.uk/Email_Signature_Open_Events.jpg] This message

Re: [PacketFence-users] generated chroot config for samba / krb5

Hi Thierry, list, I would like to revive this discussion from last month. I started a new discussion on the samba mailinglist on the "password server =" subject. Please see here: https://lists.samba.org/archive/samba/2017-June/208999.html The outcome of that discussion is that the samba

[PacketFence-users] node database errors after upgrade?

Hello, I'm running a 6.4 PF server, upgraded from 4.x 6 months ago. Primary functionnalities ( 802.1x, vlan enforcement, autoregistration...) are working as expected, but nodes databases seems to be corrupted : - node status is always unknown, switches and ports are not displayed on node

Re: [PacketFence-users] node database errors after upgrade?

Le 14/06/2017 à 17:51, Fabrice Durand via PacketFence-users a écrit : Hello Denis, you will have to compare the current schema and the schema from this file : https://github.com/inverse-inc/packetfence/blob/devel/db/pf-schema-6.4.0.sql Connect to the db pf and do :explain node; and compare

Re: [PacketFence-users] node database errors after upgrade?

Le 14/06/2017 à 17:51, Fabrice Durand via PacketFence-users a écrit : Hello Denis, you will have to compare the current schema and the schema from this file : https://github.com/inverse-inc/packetfence/blob/devel/db/pf-schema-6.4.0.sql Connect to the db pf and do :explain node; and compare

Re: [PacketFence-users] [SPAM] Re: haproxy | mysql

Hi Bebbet and Louis, Thanks for your answers! MJ On 06/13/2017 03:05 PM, Bebbet van Dinges via PacketFence-users wrote: if you run netstat -tapn, can you see where the mysql instance is listening? if its on 127.0.0.1:3306, then the haproxy can listen on the management:3306, no problem. When

Re: [PacketFence-users] Utilize Google SMTP servers for guest access emails

Hi, I guess this would not be done in packetfence, but you'd configure packetfence to use a local postfix, and configure postfix to use a smarthost with authentication for it's outgoing mail. MJ On 06/16/2017 05:53 AM, Max McGrath via PacketFence-users wrote: Hello - We have a lot

Re: [PacketFence-users] haproxy | mysql

On 12-6-2017 20:48, lists via PacketFence-users wrote: "Project-Id-Version: 7.0.0 POT-Creation-Date: YEAR-MO-DA HO:MI+ZONE PO-Revision-Date: 2017-04-19 11:56-0400 Last-Translator: Inverse inc. <i...@inverse.ca> Language-Team: English Language: en MIME-Version: 1.0 Content-Type:

Re: [PacketFence-users] nodes being unregistered after pf upgrade from 5.6 to 7.1

Hi Fabrice, Just to provide feedback: On 21-6-2017 1:10, Durand fabrice via PacketFence-users wrote: I just tried upgrading our production network from 5.6 to 7.1, and even though things seemed to have worked out, after a while we discovered that some nodes were 'unregistered' after

[PacketFence-users] person_cleanup / node_cleanup not doing anything

Hi, We have enabled the tasks person_cleanup and node_cleanup to comply with privacy regulations within the EU. Both tasks don't seem to do very much. :-( Let's focus on person_cleanup: From pfmon.conf: [person_cleanup] status=enabled interval=1D # [node_cleanup] status=enabled interval=1D

[PacketFence-users] Can't deauth device from registration VLAN and reevaluate access to production VLAN

Hi dear mate, My packetfence is installed in CentOS 7 with V7.2. My config file is listed as below. When I connected pf-public ssid, the device was put into registration role and user was redirected to pf portal page. Once the user completed auth(where I set authentication source NULL,just

Re: [PacketFence-users] person_cleanup / node_cleanup not doing anything

On 18-9-2017 12:46, lists via PacketFence-users wrote: Hi, No response... :-( Does that mean that the tasks - person_cleanup and - node_cleanup are working for everybody here? On 7.1? Anyone? -- Check out

Re: [PacketFence-users] person_cleanup / node_cleanup not doing anything

Hi Frederic, On 19-9-2017 10:39, Frederic Hermann via PacketFence-users wrote: Well, here we created our own cleanup tasks, using the database-cleaner.pl perl script in /usr/local/pf/tools Did you also find the 'regular' packetfence GUI person_cleanup & node_cleanup didn't work..? Or si

Re: [PacketFence-users] person_cleanup / node_cleanup not doing anything

the task to run after 22hrs, or schedule the reboot every *other* day. MJ On 09/19/2017 06:19 PM, Tobias Friede via PacketFence-users wrote: Hi, we use PF 7.2 and have no problems with Node or User cleanup. Maybe you should have a look at your logs (maybe increase your log level) 2017-09

Re: [PacketFence-users] Can't deauth device from registration VLAN and reevaluate access to production VLAN

Hi all, After reading the code, I know that PF can send radius CoA request to change device's role, and send radius disconnect request to deauth a online device. I don't know why in my environment pf only send radius CoA but no disconnect request. I can see that device's role has changed in

Re: [PacketFence-users] Can't deauth device from registration VLAN and reevaluate access to production VLAN

Can I download specific files where I might modified from github and overwrite them in my local PF directory ? The directory I edited is under /usr/local/pf/lib/ ... I just want to restore its original system configuration to ensure not my typo causing the web portal service not

[PacketFence-users] Packetfence working with WLC 8.3.122

Hello, We have had packetfence working on older versions and are looking upgrade our WLC and Packetfence install. From a fresh install only using "web-auth" and following the provided guide on the website for the WLC controller it looks as if everything is fine. I see the client connect,

[PacketFence-users] reply??Unable to disconnect a device during initial logon

Hi all, Since we've solved our problem by ourselves, here I post it in case someone else meet the same issue. For question 1, for "Unable to perform RADIUS Disconnect-Request. Disconnect-NAK received with Error-Cause: Session-Context-Not-Found" issue, as we are sure our issue was caused by

[PacketFence-users] Can't download and update fingerbank DB

Hi dear users, We are using PF V7.2 in our office. We want to use PF to recognize mobile devices from computers when connecting wireless ssid. It seems PF define device's type via DHCP fingerprint. Our packetfence.log keeps logging "pfqueue: pfqueue(1341) WARN: [mac:ff:ee:dd:cc:bb:aa] Unable

Re: [PacketFence-users] Packetfence working with WLC 8.3.122

e in error, please contact the sender and delete all copies. Opinions, conclusions or other information contained in this message may not be that of the organization. *From:* Durand fabrice via PacketFence-users <pack

Re: [PacketFence-users] Packetfence working with WLC 8.3.122

in this message may not be that of the organization. *From:* Durand fabrice via PacketFence-users <packetfence-users@lists.sourceforge.net> *Sent:* Friday, October 6, 2017 5:54:37 PM *To:* packetfence

Re: [PacketFence-users] Packetfence working with WLC 8.3.122

this message in error, please contact the sender and delete all copies. Opinions, conclusions or other information contained in this message may not be that of the organization. *From:* Durand fabrice via PacketFence-users

Re: [PacketFence-users] Packetfence working with WLC 8.3.122

Thanks for the reply Fabrice! Changing to HTTP doesn't alter the results, it still doesn't forward. Regards, On 2017-10-06 05:54 PM, Durand fabrice via PacketFence-users wrote: Hello, can you try to set the redirect url in http instead of https ? Regards Fabrice Le 2017-10-06 à 16:02

[PacketFence-users] 802.1x auth failed

Hi all, I installed PF V7.2.0 in centos in my environment. PF is in trunk mode, registration vlan 2 with ip 192.168.2.0/24, violation vlan 3 with ip 192.168.3.0, both controlled by PF. The switch ip is 172.30.1.254 and Aruba AC ip is 172.30.1.250. I create two ssid "pf-public" and

Re: [PacketFence-users] 802.1x auth failed

Hi Now I have successfully accomplished 802.1x local auth with newly created user "test124", but now the question is, why it always showed "is of status unreg" and just put the device into registration role. The user has finished 802.1x auth and the device should be put into

[PacketFence-users] ?????? 802.1x auth failed

Hi Antoine, Do you mean the "Automatically register devices" check in my "radius_auth" connection profile ? I read the explanation besides and maybe you are right, I'll try it in my PoC environment later. But there is another question: even if pf set my device to registration role, why

[PacketFence-users] Howto: Migrate Packetfence 6 and Packetfence-pki from server

Hi, Due to some performance issues with Centos6 and Packetfence-PKI, I have installed a new server on Centos 7. I am doing some test and it is working OK, but how should I migrate users, nodes, CA certificate and user-certificates generated with pf6 and packetfence-pki from centos 6 to centos 7

[PacketFence-users] prevent certain ldap usernames from registering devices

Hi, Is there a way to 'blacklist' specific ldap usernames from registering devices in the packetfence portal? Running pf 7 with inline guest portal, with an AD ldap-based usersource. I tried creating a rule under our ldap authentication source: - condition 'username' - role REJECT - access

Re: [PacketFence-users] prevent certain ldap usernames from registering devices

On 12-9-2017 14:42, Arthur Emerson via PacketFence-users wrote: What we do with PF 5.x is have a limit (N) on the number of devices that guest users can register...and then make sure that there are N+1 bogus MAC addresses registered/active for that user account.  Anyone who tries to register

[PacketFence-users] Unable to disconnect a device during initial logon

Hi all, We are planning to use PF to replace our current ACS server to achieve some custom health check during device first logon. I have achieved our basic functions in our PoC environment such as 802.1x auth with AD integration??assign specific role to specific group??trigger a violation to

[PacketFence-users] radius | node remains unreg

Hi, We have an pf-inline wifi-segment with a captive portal, and also a pf-out-of-band wired network, where we have enabled 802.1x / radius authentication for our windows workstations. We authenticate using the workstation account first, and then change to the logged-in user account. This

Re: [PacketFence-users] radius | node remains unreg

On 3-10-2017 15:11, Fabrice Durand via PacketFence-users wrote: you can create a connection profile based on the connection type Ethernet-EAP and activate autoregistration on it. Perfect! Worked like a charm! :-) Thanks Fabrice

Re: [PacketFence-users] How to update PF-zen 7.1.0?

Aug 24, 2017 at 4:36 PM, Rokkhan via PacketFence-users < > packetfence-users@lists.sourceforge.net> wrote: > >> Hi, >> >> I have recently installed packetfence-zen 7.1.0 using the OVA file. If i >> would like to upgrade to 7.2 is there any step i should take care?

[PacketFence-users] radiusd service not starting on PF 7.2

i can not start radiusd service on PF 7.2 but packetfence logs show like it has started without any problems: Aug 25 16:27:12 SLX00012040 packetfence: INFO pfcmd.pl(10671): Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Aug 25 16:27:20 SLX00012040 packetfence: INFO

[PacketFence-users] How to update PF-zen 7.1.0?

Hi, I have recently installed packetfence-zen 7.1.0 using the OVA file. If i would like to upgrade to 7.2 is there any step i should take care? Or the upgrade procedure is the same as if have installed packetfence manually? Greetings

[PacketFence-users] packetfence-httpd.admin can't start after initial install

Hi all, I'm new to PF. I used to install pf via ZEN package and this time to our Poc environment, we need to install pf in a centos 7 server. I install the pf as the administration guide(Software Installation part) said and nothing wrong appeared. But when I want to do the web-based

[PacketFence-users] PF 7.2 +PF-PKI Android Provisioning questions

Hi, I am trying to configure a BYOD connection profile. The profile works but devices are not registered automatically. I have created a connection profile with chained portal module that first asks for users to autenticate against an external ldap source and after shows a provisioning portal

[PacketFence-users] PF 7.2 +PF-PKI Android Provisioning questions

Hi, I am trying to configure a BYOD connection profile. I have created a connection profile with chained portal module that first asks for users to authenticate against an external ldap source and after shows a provisioning portal module that generates an user certificate and after configures

Re: [PacketFence-users] Packetfence missing snort config

Hi Fabrice, On 4-10-2017 14:51, Fabrice Durand via PacketFence-users wrote: What you can do is to install security onion on another server and configure it to send the alert to the packetfence server. (see doc). We didn't know security union. Thanks for mentioning it! MJ

Re: [PacketFence-users] Can't download and update fingerbank DB

you didn't imported fingerbank into mysql. Go in Configuration -> Compliance -> Fingerbank Profiling -> General settings then in Action "Initialize MySQL database". Regards Fabrice Le 2017-10-17 ?? 03:19, Yan via PacketFen

Re: [PacketFence-users] Can't download and update fingerbank DB

on -> Initialize MySQL database" If the access to the db is ok then you should be able to see a process "python" running that import the db from the sqlite file. It can take a long time. Regards Fabrice Le 2017-10-18 ??

Re: [PacketFence-users] Can't download and update fingerbank DB

db from the sqlite file. It can take a long time. Regards Fabrice Le 2017-10-18 ?? 12:19, Yan via PacketFence-users a ??crit : Hi Durand, After running "yumreinstall fingerbank --enablerepo=packetfence", I can findfi

  1   2   3   4   5   6   7   8   9   10   >