Re: [PacketFence-users] 20170621 - Team meeting

2017-06-21 Thread Derek Wuelfrath via PacketFence-users
Please disregard that previous message. Apparently Apple Mail messed up my “contact aliases” :) Cheers! -dw -- Derek Wuelfrath dwuelfr...@inverse.ca <mailto:dwuelfr...@inverse.ca> Inverse inc. :: Leaders behind SOGo (www.sogo.nu <https://www.sogo.nu/>), PacketFence (www.packetfenc

[PacketFence-users] 20170621 - Team meeting

2017-06-21 Thread Derek Wuelfrath via PacketFence-users
- PacketFence v7.2 - API - Distributed cache https://wiki.inverse.ca/focus/meetings/20170621 <https://wiki.inverse.ca/focus/meetings/20170621> Cheers! -dw -- Derek Wuelfrath dwuelfr...@inverse.ca <mailto:dwuelfr...@inverse.ca> :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110)

Re: [PacketFence-users] Multiple endpoints behind a single switchport

2017-06-20 Thread Derek Wuelfrath via PacketFence-users
Which network equipment are you using just out of curiosity ! :) Cheers! -dw -- Derek Wuelfrath dwuelfr...@inverse.ca <mailto:dwuelfr...@inverse.ca> Inverse inc. :: Leaders behind SOGo (www.sogo.nu <https://www.sogo.nu/>), PacketFence (www.packetfence.org <https://www.

Re: [PacketFence-users] Multiple endpoints behind a single switchport

2017-06-20 Thread Derek Wuelfrath via PacketFence-users
You would need network equipment that supports multiple untagged VLAN on the same switch port. Cheers! -dw -- Derek Wuelfrath dwuelfr...@inverse.ca <mailto:dwuelfr...@inverse.ca> Inverse inc. :: Leaders behind SOGo (www.sogo.nu <https://www.sogo.nu/>), PacketFence (www.packetfenc

Re: [PacketFence-users] Multiple endpoints behind a single switchport

2017-06-20 Thread Derek Wuelfrath via PacketFence-users
switch. Cheers! -dw -- Derek Wuelfrath dwuelfr...@inverse.ca <mailto:dwuelfr...@inverse.ca> Inverse inc. :: Leaders behind SOGo (www.sogo.nu <https://www.sogo.nu/>), PacketFence (www.packetfence.org <https://www.packetfence.org/>) and Fingerbank (www.fingerbank.org <https

Re: [PacketFence-users] Multiple endpoints behind a single switchport

2017-06-20 Thread Derek Wuelfrath via PacketFence-users
of the devices or only on the one you are currently editing. Does that helps ? Cheers! -dw -- Derek Wuelfrath dwuelfr...@inverse.ca <mailto:dwuelfr...@inverse.ca> Inverse inc. :: Leaders behind SOGo (www.sogo.nu <https://www.sogo.nu/>), PacketFence (www.packetfenc

Re: [PacketFence-users] IPv6 progress?

2017-02-24 Thread Derek Wuelfrath
e “PD” just to make sure we are on the same page. Cheers! — dw. -- Derek Wuelfrath de...@inverse.ca <mailto:de...@inverse.ca> Inverse inc. :: Leaders behind SOGo (www.sogo.nu <https://sogo.nu/>) and PacketFence (www.packetfence.org <https://packetfence.org/>) > On Nov 10, 2016,

Re: [PacketFence-users] PF on Ubiquity AP

2017-01-13 Thread Derek Wuelfrath
d. Cheers! -dw. -- Derek Wuelfrath de...@inverse.ca <mailto:dwuelfr...@inverse.ca> :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu <https://sogo.nu/>) and PacketFence (www.packetfence.org <https://packetfence.org/>) > On Jan 13

Re: [PacketFence-users] IPv6 progress?

2016-11-14 Thread Derek Wuelfrath
for related work. Cheers! -dw. -- Derek Wuelfrath de...@inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Nov 14, 2016, at 12:59, Tim DeNike <tim.den...@mcc.edu> wrote: > > Nada? > > On Thu, Nov 10, 2016 at 8:23 AM

Re: [PacketFence-users] Sponsor guest access issue

2016-10-14 Thread Derek Wuelfrath
Daren, Can you send the log file ? Looks like there may be a problem with matching the provided sponsor… (error message displayed on the portal seems incomplete...) Cheers! -dw. — Derek Wuelfrath de...@inverse.ca <mailto:de...@inverse.ca> > On Oct 14, 2016, at 04:22, Morgan, Dar

Re: [PacketFence-users] web configurator - I dun goofed

2016-10-13 Thread Derek Wuelfrath
Jake, my man ! Can you check if you have the ‘/usr/local/pf/conf/currently-at’ file and what is the content ? Cheers! -dw. — Derek Wuelfrath de...@inverse.ca <mailto:de...@inverse.ca> > On Oct 13, 2016, at 12:55, Sallee, Jake <jake.sal...@umhb.edu> wrote: > > I n

Re: [PacketFence-users] Sponsor guest access issue

2016-10-13 Thread Derek Wuelfrath
Hello Daren, Can you try to add the “sponsor” source to your portal profiles ? You have the “Sponsors” which defines who is able to sponsor, but not the “sponsor” which activate the sponsor feature. Sponsor ! (not mentionned enough ;)) Cheers! -dw. — Derek Wuelfrath de...@inverse.ca

Re: [PacketFence-users] 802.1x access without logging on

2016-09-28 Thread Derek Wuelfrath
an “access_duration”. You might want to set a date. Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Sep 28, 2016, at 08:42, Will Halsall <

Re: [PacketFence-users] problems after upgraded database

2016-09-23 Thread Derek Wuelfrath
MJ, No problem, we are here to help ! Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Sep 23, 2016, at 10:42, mj <li...@merit.unu.edu&

Re: [PacketFence-users] problems after upgraded database

2016-09-23 Thread Derek Wuelfrath
MJ, That’s strange. You are effectively missing the “login_remaining” column in the “password” table. It should be part of the upgrade-5.7.0-6.0.0.sql script. Can you open it and tell me what you have at line 35 of that file ? Thanks Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca

Re: [PacketFence-users] problems after upgraded database

2016-09-23 Thread Derek Wuelfrath
database IS running: Curious… Can you send output of ‘explain password’ in MySQL. Can you also send the output of 'select * from pf_version;’ in MySQL. Thanks! Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders

Re: [PacketFence-users] OpenVAS scanning results of our PacketFence server

2016-07-04 Thread Derek Wuelfrath
make sure nothing could affect the security of the solution. If you have any concern, don’t hesitate ! Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org

Re: [PacketFence-users] Graphite errors

2016-06-29 Thread Derek Wuelfrath
Hello Bebbet, > I've just checked again, and since monday there have been no errors! > So i'm quite sure this adjustment works. Let me know if you need to test > more. Great ! And logs are being rotated and compressed ? Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514

Re: [PacketFence-users] Graphite errors

2016-06-28 Thread Derek Wuelfrath
Excellent, Let me know so that I can adjust the config in the package ! Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Jun 28, 2016, at 16

Re: [PacketFence-users] Graphite errors

2016-06-28 Thread Derek Wuelfrath
Hello Bebbet, Any news ? Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Jun 27, 2016, at 09:32, Bebbet van Dinges <beb...@bebbet.nl&

Re: [PacketFence-users] Possible race condition between packetfence and fingerprint?

2016-06-27 Thread Derek Wuelfrath
which mean, other actions (that may or may not depend on the fingerprinting result) can be triggered even if the fingerprinting process is not done. (using a queue) Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders

Re: [PacketFence-users] Graphite errors

2016-06-27 Thread Derek Wuelfrath
Hello Bebbet, In the logrotate configuration file, can you change the two ‘su’ statements from su pf pf to su root pf Thanks Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu

Re: [PacketFence-users] Graphite errors

2016-06-23 Thread Derek Wuelfrath
Can you remove the two lines create 640 pf pf from /etc/logrotate.d/packetfence and check tomorrows logrotate logs. (Send them over) Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu

Re: [PacketFence-users] Graphite errors

2016-06-23 Thread Derek Wuelfrath
Bebbet, Jumping in related to the logrotate issues. Can you tell me which version of PacketFence you are actually running ? Also, can you provide me the /etc/logrotate.d/packetfence file. Thanks Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153

Re: [PacketFence-users] Using eduroam Radius on a packetFence Portal

2016-06-03 Thread Derek Wuelfrath
authentication. That VLAN would then be an inline VLAN managed by PacketFence. Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Jun 3, 2016, at 10:04, PR

Re: [PacketFence-users] Mandatory fields on guest signup page

2016-06-03 Thread Derek Wuelfrath
to introduce custom code. Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Jun 3, 2016, at 03:19, Morris, Andi <amor...@cardiffmet.ac.uk> wrote: >

Re: [PacketFence-users] Listening HTTPD on a second interface

2016-06-03 Thread Derek Wuelfrath
It is unfortunately not available. I was speaking out loud to add that feature just as we did for the ‘portal’ type. Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence

Re: [PacketFence-users] Listening HTTPD on a second interface

2016-06-02 Thread Derek Wuelfrath
We could also have the ability to specify the admin as a “listening daemon”, just as for the portal. That way, you could configure the “admin” as an additionnal listening daemon on different interfaces. Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110

Re: [PacketFence-users] Fingerbank

2016-05-09 Thread Derek Wuelfrath
are OK :) Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On May 7, 2016, at 12:28, Guntharp, Jason W. <jwgunth...@iccms.edu> wrote: > &

Re: [PacketFence-users] Guest SMS log

2016-05-03 Thread Derek Wuelfrath
Unfortunately, not really. You would see a log entry if the SMS email attempt failed, but in the case of an external SMTP, once PacketFence relayed the message to that SMTP, it is considered as a success… Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110

Re: [PacketFence-users] Registration via E-Mail - another issue

2016-05-03 Thread Derek Wuelfrath
Hello Andrew, First, thanks for your report. We will look at both “issues” that you raised and will get back to you. Thanks! Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu

Re: [PacketFence-users] Guest SMS log

2016-05-03 Thread Derek Wuelfrath
an error if there’s one when trying to send the email Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On May 2, 2016, at 15:27, Justin Nelson &l

Re: [PacketFence-users] pf 6 questions

2016-05-03 Thread Derek Wuelfrath
Yes we saw that issue and it is being fixed. Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Apr 30, 2016, at 09:33, Will Halsall <w.h

Re: [PacketFence-users] Guest registration SMS code

2016-04-28 Thread Derek Wuelfrath
t, it should not ! But we tend to see that there is a difference between “should not” and “not doing it” :P Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org)

Re: [PacketFence-users] Guest registration SMS code

2016-04-28 Thread Derek Wuelfrath
will add that. In fact it is already there (at least, in the latest version of the code) -Derek — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Apr 28, 2016

Re: [PacketFence-users] How do I update to version 5.7

2016-04-28 Thread Derek Wuelfrath
Hello Joel, yum update packetfence-5.7 —enablerepo=packetfence will do the job! Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Apr 28, 2

Re: [PacketFence-users] PF 6 Inline: dhcpd eats CPU

2016-04-27 Thread Derek Wuelfrath
Till, What is the exact version of dhcpd you are running ? Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Apr 27, 2016, at 10:46, g

Re: [PacketFence-users] PF 6 Inline: dhcpd eats CPU

2016-04-27 Thread Derek Wuelfrath
Can you also make sure there is no isc dhcpd update available ? Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Apr 27, 2016, at 08:25, De

Re: [PacketFence-users] PF 6 Inline: dhcpd eats CPU

2016-04-27 Thread Derek Wuelfrath
Hello Till Hmm: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703698 Do you mind sharing /usr/local/pf/var/conf/dhcpd.conf Thanks Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu

Re: [PacketFence-users] PF 6 Inline: dhcpd eats CPU

2016-04-25 Thread Derek Wuelfrath
> An strace on the 100% cpu dhcpd looks like this: We might need a bit more than that if we want to have a look at what the process “is doing" Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders beh

Re: [PacketFence-users] PF 6 Inline: dhcpd eats CPU

2016-04-25 Thread Derek Wuelfrath
an you run the following and see if there abnormal amount of packets (like… a lot…) when you see a spike tcpdump -i any port 7911 Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and Packe

Re: [PacketFence-users] PF 6 Inline: dhcpd eats CPU

2016-04-25 Thread Derek Wuelfrath
gful manor? Maybe you could attach to the pid when you see that it is “spiking” and output to a file ? Something like strace -p MY_PID -o MY_OUTPUT_FILE should do the job. Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :

Re: [PacketFence-users] PF 6 Inline: dhcpd eats CPU

2016-04-25 Thread Derek Wuelfrath
Hello Felix, > We're seeing the same behavior, but only on one of the two nodes in the > cluster. Running RHEL (includes CentOS) or Debian ? Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behin

Re: [PacketFence-users] PF 6 Inline: dhcpd eats CPU

2016-04-25 Thread Derek Wuelfrath
by the PacketFence dhcpd service ? (registration, isolation) Any “evident” errors / warnings in the packetfence.log ? What is the result of select count(ip) from iplog_history on the PacketFence database ? Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153

Re: [PacketFence-users] PF 6 Inline: dhcpd eats CPU

2016-04-25 Thread Derek Wuelfrath
ter changing the timezone ? :) It seems a bit strange to me since [general.timezone] PacketFence configuration parameter is not really used in “that workflow”. Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo

Re: [PacketFence-users] ANN: PacketFence 6.0.0

2016-04-22 Thread Derek Wuelfrath
Great success as Borat would say ! I’ll make it the new default value. Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Apr 22, 2016, at 10

Re: [PacketFence-users] ANN: PacketFence 6.0.0

2016-04-22 Thread Derek Wuelfrath
Josh, Can you do a quick test and change the startup order of pfdetect from 88 (which is the default value) to 79. You should be able to do that from the “services” section under the MAIN category in the Configuration tab. Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca

Re: [PacketFence-users] PfDns Configuration

2016-04-22 Thread Derek Wuelfrath
it and the client. Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Apr 22, 2016, at 09:57, g4-l...@tonarchiv.ch wrote: > > Hello Derek, > >

Re: [PacketFence-users] PfDns Configuration

2016-04-22 Thread Derek Wuelfrath
Hello Till, Not really sure what you are asking for. Can you be a bit more specific ? Cheers! -dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Apr

Re: [PacketFence-users] [Packetfence] Inline Enforcement

2016-04-19 Thread Derek Wuelfrath
along with the IP your client is getting. Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Apr 19, 2016, at 11:39, Ian del Barrio <delba

Re: [PacketFence-users] Client set DNS for OOB Captive portals, or, how to MITM DNS for less helpdesk calls.

2016-04-18 Thread Derek Wuelfrath
/ answer… it is not “a choice” of using TCP or not so you may want to consider it :) Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Apr 1

Re: [PacketFence-users] inline network select nic for outgoing traffic

2016-04-14 Thread Derek Wuelfrath
Sam! Have a look at the following configuration parameter. network.interfaceSNAT Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Apr 14, 2

Re: [PacketFence-users] Isolating a device flooding the portal from registration network ?

2016-03-29 Thread Derek Wuelfrath
Hello Denis, In current releases of PacketFence, there is a feature called mod_evasive that can be configured for such purpose. Upcoming PacketFence v6 will include a more customizable and flexible “parking” feature that will address exactly that kind of issue. Cheers! dw. — Derek Wuelfrath

Re: [PacketFence-users] No Violation Triggers Are Working

2016-02-18 Thread Derek Wuelfrath
ted alert ID, you should use the “detect” trigger type rather than the “suricata_event” one. Let me know Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org)

Re: [PacketFence-users] dhcplistener configuration

2015-11-20 Thread Derek Wuelfrath
Good suggestion Arthur but that would not cause the listener on PacketFence not to start, which is what we are seeing. Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence

Re: [PacketFence-users] Client (with inline enforcement) not added to ipset

2015-11-18 Thread Derek Wuelfrath
Nicola, Is the DHCP handled by PacketFence for the inline segment ? A locationlog entry is required by PacketFence to modify iptables / ipset. The message you are getting seems to state that no such entry exists. A locationlog, in inline, is created / modified by DHCP Cheers! dw. — Derek

Re: [PacketFence-users] PF 5.2 Dashboard - Registrations

2015-11-17 Thread Derek Wuelfrath
to understand. Cheers! dw. -- Derek Wuelfrath dwuelfr...@inverse.ca :: www.inverse.ca +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Nov 17, 2015, at 18:59, Bauerly, Aaron <aaron.baue...@bhsu.edu&

Re: [PacketFence-users] dhcplistener configuration

2015-11-16 Thread Derek Wuelfrath
Josep, Can you send output of ‘ifconfig’ and ’service packetfence status’ Thanks Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Nov 13, 2

Re: [PacketFence-users] dhcplistener configuration

2015-11-13 Thread Derek Wuelfrath
Hello Josep, > [interface eht0.100] > mask=255.255.255.0 > type=dhcp-listener > ip=192.168.100.1 What about eth0.100 and not eht0.100 ? :) You can also get rid of the mask and ip parameters for a “dhcp-listener” interface. Cheers! dw. — Derek Wuelfrath dwuelfr..

Re: [PacketFence-users] Perform checkup

2015-11-12 Thread Derek Wuelfrath
Gregory, That is kind of “inoffensive” but still ! Can you do a ‘ls -l /usr/local/fingerbank/logs’ and paste the output please ! Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu

Re: [PacketFence-users] radius authorization interval

2015-11-10 Thread Derek Wuelfrath
! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Nov 9, 2015, at 12:09 PM, Morris, Andi <amor...@cardiffmet.ac.uk> wrote: > > Hi all, > I

Re: [PacketFence-users] Adding a session variable

2015-11-10 Thread Derek Wuelfrath
What I mean by request is the HTTP call. The stash is being initialized when the HTTP call comes in and then is “destroyed” once the page is loaded on the client side. You can’t then use the stash to pass values from call to call… Is that better ? :P Cheers! dw. — Derek Wuelfrath dwuelfr

Re: [PacketFence-users] radius authorization interval

2015-11-10 Thread Derek Wuelfrath
Also, As i can see, included log snippet only shows relevant radius authz requests. Is there anyway you can check in that same log just to make sure PacketFence does not send a COA or anything else that can lead the client to reauthz ? Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca

Re: [PacketFence-users] Suricata alerts to Packet Fence (Derek, Wuelfrath)

2015-11-09 Thread Derek Wuelfrath
> I saw your suggestion regarding SecurityOnion however I am running Suricata > from a FreeBsd platform within Jails. > Security Onion doesn't offer that for me. The refactor also includes support for remote Suricata and Snort :) Cheers! dw. — Derek Wuelfrath dwuelfr...@i

Re: [PacketFence-users] Suricata alerts to Packet Fence (Derek, Wuelfrath)

2015-11-09 Thread Derek Wuelfrath
Please state me the specific version of PacketFence you are running (cat /usr/local/pf/conf/pf-release) and I will point you the exact lines to change :) Thanks Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders

Re: [PacketFence-users] Suricata alerts to Packet Fence (Derek, Wuelfrath)

2015-11-03 Thread Derek Wuelfrath
olations along with pfdetect. It will natively support SecurityOnion. Let me know Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Nov

Re: [PacketFence-users] Certificate

2015-10-30 Thread Derek Wuelfrath
As Tim said, make sure to have a “named” cert (not wildcard) if using it with 802.1x because some supplicants does not deal well with them (wildcard) :) Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo

Re: [PacketFence-users] Adding a session variable

2015-10-30 Thread Derek Wuelfrath
The stash “lives” the time of the request. Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Oct 29, 2015, at 6:04 AM, Andy A <andth

Re: [PacketFence-users] email registration always as 'guest'`

2015-10-23 Thread Derek Wuelfrath
Didn’t see the “other thread” about the same thing. Forget my last answer… I merged the two issues Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org

Re: [PacketFence-users] No device Captive portal triggers

2015-10-23 Thread Derek Wuelfrath
Hello, Can you please provide packetfence.log along with the MAC address and IP of a device trying to connect. Thanks Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence

Re: [PacketFence-users] Device not found in Database

2015-10-23 Thread Derek Wuelfrath
not have any impact. They are old remainings of before iplog refactor and they stayed there because they are meant to be used for the “circular buffer”, which has not find it’s way in yet… The best bet for the moment is really the database script. Cheers! dw. — Derek Wuelfrath dwuelfr..

Re: [PacketFence-users] Device not found in Database

2015-10-23 Thread Derek Wuelfrath
tries to iplog_archives, but that maintenance was not “ready”. That’s why we have the database-backup-and-maintenance.sh Let me know if there’s any questions, concerns or anything. :) Thanks! Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Invers

Re: [PacketFence-users] Mac Book Pro Air Portal

2015-10-23 Thread Derek Wuelfrath
are saying it is working perfectly fine with other devices. What are thoses other devices ? Are they using webauth too ? Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence

Re: [PacketFence-users] Adding a session variable

2015-10-23 Thread Derek Wuelfrath
Hello Andy, Something like $c->session->{"paidup"} = “DEFAULT_VALUE"; Should work just fine. You should then be able to access it using: my $custom_value = $c->session->{"paidup"}; The stash is mainly used to pass values to the “view" Cheers! dw

Re: [PacketFence-users] AD auth fails

2015-10-23 Thread Derek Wuelfrath
change that part in you pf.conf file. [webservices] proto=http Once done, please make sure to reload configs and restart RADIUS / httpd.aaa services /usr/local/pf/bin/pfcmd configreload hard /usr/local/pf/bin/pfcmd service httpd.aaa restart /usr/local/pf/bin/pfcmd service radiusd restart Cheers! dw. —

Re: [PacketFence-users] Mac Book Pro Air Portal

2015-10-21 Thread Derek Wuelfrath
some kind of issues with this “simili browser” so that’s why I ask. Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Oct 20, 2015, at 12:50

Re: [PacketFence-users] pfdhcplistener

2015-10-19 Thread Derek Wuelfrath
Chinmay, I created an issue (more like a feature request) on Github: https://github.com/inverse-inc/packetfence/issues/966 <https://github.com/inverse-inc/packetfence/issues/966> You can follow up on that issue to see the progress. Thanks Cheers! dw. — Derek Wuelfrath dwuelfr...@inve

Re: [PacketFence-users] redirect directly to guest portal page

2015-10-18 Thread Derek Wuelfrath
Excellent! Glad to hear it worked. Cheers! dw. -- Derek Wuelfrath dwuelfr...@inverse.ca :: www.inverse.ca +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Oct 16, 2015, at 13:10, Moises Mor

Re: [PacketFence-users] redirect directly to guest portal page

2015-10-16 Thread Derek Wuelfrath
Hello Moi, Can you try going under “Portal Profiles”, select the “default” one (which is probably the one you are using) and in the “Sources” section, select only the SMS and email sources. Thanks Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110

Re: [PacketFence-users] Slow database and RADIUS Accounting not working

2015-10-16 Thread Derek Wuelfrath
comes from Mac OSX devices, you may want to consider web auth rather than L2 vlan changing. Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Oct

Re: [PacketFence-users] redirect directly to guest portal page

2015-10-16 Thread Derek Wuelfrath
You should be able to add multiple from the GUI using the ‘+’ sign on the right. Otherwise, if you add it in the flat file (as you did) you need to tell PacketFence that configuration changed /usr/local/pf/bin/pfcmd configreload hard Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca

Re: [PacketFence-users] pfdhcplistener

2015-10-14 Thread Derek Wuelfrath
interface to avoid node table getting populated by nodes outside of the PacketFence inline network. Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) &g

Re: [PacketFence-users] tweaking the create users page

2015-10-14 Thread Derek Wuelfrath
Excellent! Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Oct 14, 2015, at 4:51 AM, Morris, Andi <amor...@cardiffmet.ac.uk> wrote: &g

Re: [PacketFence-users] No association between user and IP (or MAC) in logs

2015-10-14 Thread Derek Wuelfrath
ive-portal), you may want to add a logging statement to the “WebNodeRegister” method in /usr/local/pf/html/captive-portal/lib/captive-portal/PacketFence/Controller/CaptivePortal.pm Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. ::

Re: [PacketFence-users] pfdhcplistener

2015-10-13 Thread Derek Wuelfrath
Hello Chinmay, I’m looking at it and I’ll get back to you. Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Oct 13, 2015, at 2:17 AM, Chin

Re: [PacketFence-users] Send remote Suricata sensor alerts to PacketFence via syslog

2015-10-13 Thread Derek Wuelfrath
} else { $logger->warn("unknown input: $_ "); next; } Restart both packetfence and rsyslog Let me know how it goes. Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www

Re: [PacketFence-users] tweaking the create users page

2015-10-13 Thread Derek Wuelfrath
Andi, What is the “expiration” action type ? Can you send me the whole file so I see what you are trying to do. If you try to hide the “registration window” section use the followings: For the “actions” section, the followings: Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca

Re: [PacketFence-users] Violation trigger change in 5.3?

2015-10-08 Thread Derek Wuelfrath
ations which should be part of future PacketFence version, we will make sure that we cover that. Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > O

Re: [PacketFence-users] tweaking the create users page

2015-10-08 Thread Derek Wuelfrath
ess duration is confusing to users. Can you make the fields “hidden” with a value ? That’s how I usually do it Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org)

Re: [PacketFence-users] pfdhcplistener

2015-10-08 Thread Derek Wuelfrath
as a DHCP server, dhcpd is. ‘pfdhcplistener’ is only listening to DHCP packet for MAC <-> IP association useful in PacketFence. If you do a ps uafx | grep dhcpd you should see the dhcpd daemon running with only eth0 as listening interface. Cheers! dw. — Derek Wuelfrath dwuelfr...@inver

Re: [PacketFence-users] tweaking the create users page

2015-10-08 Thread Derek Wuelfrath
> I’ll keep looking for ways to give the users a default unreg date. Here’s how I usually do it: Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.

Re: [PacketFence-users] Accounting and reporting not working for bandwidth

2015-10-02 Thread Derek Wuelfrath
Can you look in the ‘radacct’ table of the PF database to see if there’s data in it? Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: www.inverse.ca +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org

Re: [PacketFence-users] tweaking the create users page

2015-10-01 Thread Derek Wuelfrath
more file to check but basically, that should do it :) Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: www.inverse.ca +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) > On Oct 1, 2015, at 11

Re: [PacketFence-users] Accounting and reporting not working for bandwidth

2015-10-01 Thread Derek Wuelfrath
Chris, You would need to RADIUS Accounting on your network equipment to point to PacketFence management IP address (just as for the authentication). With RADIUS Accounting data, you’ll be able to process that kind of graphic. Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca

Re: [PacketFence-users] Error in GUI domain config [SOLVED]

2015-08-20 Thread Derek Wuelfrath
Ahah Jake you are awesome! My personal BTW, - Thanks to Jake for being awesome with the community !! - Thanks to Julien (Inverse guy too) for helping me figuring it quickly :) Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: www.inverse.ca +1.514.447.4918 (x110) :: +1.866.353.6153 (x110

Re: [PacketFence-users] PF DNS record changed

2015-08-20 Thread Derek Wuelfrath
interfaces only = false (Thoses two lines are already at the end of the file, simply uncomment them and change the values) - Remove the actual record in your AD so we make sure a new one is created - In the PacketFence webadmin GUI, rejoin the domain. Let me know! Cheers! dw. — Derek Wuelfrath

Re: [PacketFence-users] PacketFence only for self registered guest users

2015-08-18 Thread Derek Wuelfrath
. -- Derek Wuelfrath dwuelfr...@inverse.ca :: www.inverse.ca +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) On Aug 13, 2015, at 07:49, Brian Lucas bcl1...@gmail.com wrote: That one I think is a bug

Re: [PacketFence-users] Guest registration via email not setting Unregistration time

2015-08-12 Thread Derek Wuelfrath
Excellent! Keep us posted ;) Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: www.inverse.ca +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) On Aug 11, 2015, at 21:20, Istvan Bernath i...@dtu.dk

Re: [PacketFence-users] Weird text on registration page after 5.2 upgrade

2015-08-11 Thread Derek Wuelfrath
= undef} %] To be like: [% skipFields = {firstname = undef, lastname = undef, sponsor_email = undef} %] That should fix it. Please report to make sure that doesn’t break anything else :) Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca mailto:dwuelfr...@inverse.ca

Re: [PacketFence-users] Guest registration via email not setting Unregistration time

2015-08-11 Thread Derek Wuelfrath
/2d89bf1bb30b3ce81b5529c3d2128a4c3ed5511b Cheers! dw. — Derek Wuelfrath dwuelfr...@inverse.ca :: www.inverse.ca +1.514.447.4918 (x110) :: +1.866.353.6153 (x110) Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) On Aug 11, 2015, at 10:44, Istvan Bernath i...@adm.dtu.dk

  1   2   3   4   >