Re: [PacketFence-users] customizing security event email notifications

2020-02-10 Thread lists via PacketFence-users
On 10-2-2020 14:25, Nicolas Quiniou-Briand via PacketFence-users wrote: Hello MJ, HTML files are generated from MJML files using a Makefile in yout Git repository. Unless you know how to re-generate HTML files from MJML files, you should edit HTML files. Thanks! MJ

Re: [PacketFence-users] customizing security event email notifications

2020-02-04 Thread lists via PacketFence-users
Super, I found it! Edited the mjml file. Thanks! On 4-2-2020 13:28, Nicolas Quiniou-Briand via PacketFence-users wrote: Hello MJ, On 04/02/2020 10:39, lists via PacketFence-users wrote: We could of course customize the files there, but we are unsure how well this would work with packetfence

[PacketFence-users] customizing security event email notifications

2020-02-04 Thread lists via PacketFence-users
Hi, We have defined some triggers to isolate and notify endusers, based on the default templates under /usr/local/pf/html/captive-portal/templates/emails We could of course customize the files there, but we are unsure how well this would work with packetfence updates. Plus: do we edit the

Re: [PacketFence-users] Inverse.ca Certificate problem

2020-02-03 Thread lists via PacketFence-users
Hi Uzzi, It looks fine from my point of view. https://www.sslshopper.com/ssl-checker.html#hostname=https://inverse.ca/downloads/GPG_PUBLIC_KEY MJ On 3-2-2020 11:36, Andrea Lenarduzzi via PacketFence-users wrote: I've add http://inverse.ca/downloads/PacketFence/debian stretch to

[PacketFence-users] bug reg/unreg state in the pf admin..?

2019-12-17 Thread lists via PacketFence-users
Hi, Not sure to consider it a bug or not, but we noticed using the ZEG 9.2 (inline mode) that when: - search a node - set it to unreg - save - brought back to the search results, with: - device listed correctly as unreg - go to the actual physical device - go through the registration process

[PacketFence-users] interesting difference between pf on debian vs centos

2019-12-17 Thread lists via PacketFence-users
Hi, Sometimes you want to get rid of all old pf logs, and see just new log lines as they are generated. I always: - service rsyslog stop - rm -f /usr/local/pf/logs/* - service rsyslog start - tail -f /usr/local/pf/logs/* On CentOS this works as expected. However, on debian this causes all

[PacketFence-users] install on debian faq

2019-12-10 Thread lists via PacketFence-users
Hi, Here in the debian install FAQ: https://packetfence.org/support/faq/how-to-install-packetfence-on-debian.html we can read to do: apt-key adv --keyserver keys.gnupg.net --recv-key 0x810273C4 but after doing that, apt still complains: Get:5 http://inverse.ca/downloads/PacketFence/debian

Re: [PacketFence-users] PF 9.1 clean install problem

2019-10-22 Thread lists via PacketFence-users
se, no user, nothing. -- Üdvözlettel, Szél Gábor WanTax Kft. tel.: +36 20 3838 171 fax: +36 82 357 585 email:gabor.s...@wantax.hu web:http://wantax.hu web:http://halozatom.hu 2019. 10. 21. 13:45 keltezéssel, lists via PacketFence-users írta: Hi Szél Gábor, Just for the record: just did a 9.1

Re: [PacketFence-users] PF 9.1 clean install problem

2019-10-21 Thread lists via PacketFence-users
Hi Szél Gábor, Just for the record: just did a 9.1 test install, using fresh minimal debian 9, and the instructions on https://packetfence.org/support/faq/how-to-install-packetfence-on-debian.html Instructions are missing a step: > apt-get install dirmngr During the install, there were many

Re: [PacketFence-users] Help : Fail to start Packet fence service

2019-07-23 Thread lists via PacketFence-users
Hi, No expert, but: On 19-7-2019 11:12, adr.lebron--- via PacketFence-users wrote: juil. 17 14:28:43 debian pfcmd[4448]: FATAL - please define exactly one management interface juil. 17 14:28:43 debian pfcmd[4448]: WARNING - internal network(s) not defined! juil. 17 14:28:43 debian

[PacketFence-users] dhcp domain-search option

2018-09-27 Thread lists via PacketFence-users
Hi, We would like to provide a dhcp domain-search option for our packetfence (7.1) inline clients. The gui only allows for a dhcp ip range to be set. Is it possible to provide a search option somewhere? MJ ___ PacketFence-users mailing list

Re: [PacketFence-users] iptables.conf customisation

2018-02-20 Thread lists via PacketFence-users
Hi Fabrice, On 20-2-2018 0:40, Durand fabrice via PacketFence-users wrote: mark match 0x1 mean the devices that are registered. (cf ipset -L). So check if unreg devices are still redirect to the portal. Just verified that, and this still works. Thanks!

[PacketFence-users] iptables.conf customisation

2018-02-19 Thread lists via PacketFence-users
Hi, We are trying to specifically allow only certain traffic from our forward-internal-inline-if interface, and have edited our iptables.conf accordingly: root@packetfence:/usr/local/pf# iptables -L forward-internal-inline-if -n --line-numbers Chain forward-internal-inline-if (1

Re: [PacketFence-users] firewalling for inline on the packetfence server

2018-01-16 Thread lists via PacketFence-users
Hi Fabrice, On 16-1-2018 14:54, Fabrice Durand via PacketFence-users wrote: Hello, you can play with iptables.conf in the conf directory in order to add your custom rules. So, in the case of limiting outgoing traffic for inline nat clients to http/https/dns, do you mean adding lines

[PacketFence-users] firewalling for inline on the packetfence server

2018-01-15 Thread lists via PacketFence-users
Hi, We're using packetfence in inline modus for our wifi (10.10.10.0/24) segment. The external packetfence interface is inside our dmz lan /24 segment. (192.84.141.0/24) We currently firewall on our gateway 192.84.141.1. Even though this works, it has the negative side effect that everybody

Re: [PacketFence-users] Packetfence missing snort config

2017-10-04 Thread lists via PacketFence-users
Hi Fabrice, On 4-10-2017 14:51, Fabrice Durand via PacketFence-users wrote: What you can do is to install security onion on another server and configure it to send the alert to the packetfence server. (see doc). We didn't know security union. Thanks for mentioning it! MJ

Re: [PacketFence-users] radius | node remains unreg

2017-10-03 Thread lists via PacketFence-users
On 3-10-2017 15:11, Fabrice Durand via PacketFence-users wrote: you can create a connection profile based on the connection type Ethernet-EAP and activate autoregistration on it. Perfect! Worked like a charm! :-) Thanks Fabrice

[PacketFence-users] radius | node remains unreg

2017-10-03 Thread lists via PacketFence-users
Hi, We have an pf-inline wifi-segment with a captive portal, and also a pf-out-of-band wired network, where we have enabled 802.1x / radius authentication for our windows workstations. We authenticate using the workstation account first, and then change to the logged-in user account. This

Re: [PacketFence-users] person_cleanup / node_cleanup not doing anything

2017-09-19 Thread lists via PacketFence-users
Hi Frederic, On 19-9-2017 10:39, Frederic Hermann via PacketFence-users wrote: Well, here we created our own cleanup tasks, using the database-cleaner.pl perl script in /usr/local/pf/tools Did you also find the 'regular' packetfence GUI person_cleanup & node_cleanup didn't work..? Or simply

Re: [PacketFence-users] person_cleanup / node_cleanup not doing anything

2017-09-19 Thread lists via PacketFence-users
On 18-9-2017 12:46, lists via PacketFence-users wrote: Hi, No response... :-( Does that mean that the tasks - person_cleanup and - node_cleanup are working for everybody here? On 7.1? Anyone? -- Check out

Re: [PacketFence-users] prevent certain ldap usernames from registering devices

2017-09-12 Thread lists via PacketFence-users
On 12-9-2017 14:42, Arthur Emerson via PacketFence-users wrote: What we do with PF 5.x is have a limit (N) on the number of devices that guest users can register...and then make sure that there are N+1 bogus MAC addresses registered/active for that user account.  Anyone who tries to register

[PacketFence-users] prevent certain ldap usernames from registering devices

2017-09-12 Thread lists via PacketFence-users
Hi, Is there a way to 'blacklist' specific ldap usernames from registering devices in the packetfence portal? Running pf 7 with inline guest portal, with an AD ldap-based usersource. I tried creating a rule under our ldap authentication source: - condition 'username' - role REJECT - access

Re: [PacketFence-users] email registration always remains status "incomplete"

2017-07-17 Thread lists via PacketFence-users
Hi Fabrice, list, On 13-7-2017 2:23, Durand fabrice via PacketFence-users wrote: when it happen, can you check in the database just after the duration has been extended ? select * from node where mac="9c:2a:70:31:9b:9f'; ok, here it is: after the link in the registration email has been

Re: [PacketFence-users] Active Directory Domains problem

2017-06-27 Thread lists via PacketFence-users
Hi, For you information: starting packetfence 7.2, samba will use auto-discovery for DC location. (password server = *) MJ On 27-6-2017 15:52, Louis Munro via PacketFence-users wrote: Hi Luca, I am no Active Directory expert, but I believe you don't have much to do for that since the DC is

Re: [PacketFence-users] nodes being unregistered after pf upgrade from 5.6 to 7.1

2017-06-27 Thread lists via PacketFence-users
Hi Fabrice, Just to provide feedback: On 21-6-2017 1:10, Durand fabrice via PacketFence-users wrote: I just tried upgrading our production network from 5.6 to 7.1, and even though things seemed to have worked out, after a while we discovered that some nodes were 'unregistered' after the

Re: [PacketFence-users] nodes being unregistered after pf upgrade from 5.6 to 7.1

2017-06-20 Thread lists via PacketFence-users
On 19-6-2017 22:17, lists via PacketFence-users wrote: Hi, I just tried upgrading our production network from 5.6 to 7.1, and even though things seemed to have worked out, after a while we discovered that some nodes were 'unregistered' after the upgrade. (they were registrered before

[PacketFence-users] nodes being unregistered after pf upgrade from 5.6 to 7.1

2017-06-19 Thread lists via PacketFence-users
Hi, I just tried upgrading our production network from 5.6 to 7.1, and even though things seemed to have worked out, after a while we discovered that some nodes were 'unregistered' after the upgrade. (they were registrered before the upgrade, on 5.6.1) Also, unlike normally, these

Re: [PacketFence-users] haproxy | mysql

2017-06-13 Thread lists via PacketFence-users
On 12-6-2017 20:48, lists via PacketFence-users wrote: "Project-Id-Version: 7.0.0 POT-Creation-Date: YEAR-MO-DA HO:MI+ZONE PO-Revision-Date: 2017-04-19 11:56-0400 Last-Translator: Inverse inc. <i...@inverse.ca> Language-Team: English Language: en MIME-Version: 1.0 Content-Type:

[PacketFence-users] haproxy | mysql

2017-06-12 Thread lists via PacketFence-users
Hi, So, just for fun I tried a fresh install of packetfence 7.1.0 on debian 8. As far as I know, we need to configure the OS debian to start mysql. However, also Packetfence tries to start something on port 3306 as well (haproxy) so there seems to be a conflict? Found that out, because I