Re: [PacketFence-users] [9.1] certificate

2019-10-11 Thread mj via PacketFence-users
On 10/10/19 5:24 PM, pro fence via PacketFence-users wrote: hi, does anybody know if it is possible to use a wildcard certificate (*.mydomain.com ) ? because as per the documentation, the CN must be the same for the certificate and in pf.conf. But you can't add a wildc

Re: [PacketFence-users] [9.1] password of the day

2019-10-11 Thread Durand fabrice via PacketFence-users
Hi, the rotation date is store in the db, so you need at leat to reach this date in order to use the new rotation duration. Also you can change it in the db. Regards Fabrice Le 19-10-03 à 09 h 40, pro fence via PacketFence-users a écrit : Hi, i maintain my first message, when changing th

Re: [PacketFence-users] Packetfence not moving to next source in list

2019-10-11 Thread Durand fabrice via PacketFence-users
Hello Jordan, the error message is related to ntlm, so it mean that it try to authenticate the student account on the AD. When it fail in freeradius then the radius request doesn't reach the packetfence code to test the authentication sources with the rules. So you need to find a way to aut

Re: [PacketFence-users] User/machine auth and role

2019-10-11 Thread Durand fabrice via PacketFence-users
Hello, in fact what you need is 2 authentications sources, one for user with authentication rules and the other one for machine without any rules. So the user source will assign the role and the machine source will just validate the account. The only issue i can see is when you do machine a

Re: [PacketFence-users] FortiGate EAP Type Issue

2019-10-11 Thread Durand fabrice via PacketFence-users
Hello Jason, is it possible to have the raddebug of the request ? raddebug -f /usr/local/pf/var/run/radiusd.sock -t 3000 Regards Fabrice Le 19-10-04 à 14 h 21, Jason Tally via PacketFence-users a écrit : Hi, I'm attempting to setup the FortiGate + 802.1x scenario but I'm running into issue

Re: [PacketFence-users] Email Authentication for Guest

2019-10-11 Thread Durand fabrice via PacketFence-users
Hello Martin, can you post the packetfence.log lines when it happen ? (registration process) Regards Fabrice Le 19-10-07 à 21 h 11, Martin Rodriguez via PacketFence-users a écrit : Hi! I would like to understand why I get a Disconnect Request from PF after few senconds the user connect usi

Re: [PacketFence-users] [9.1] password field

2019-10-11 Thread Durand fabrice via PacketFence-users
Hello pro, you can use a null authentication source for that. Regards Fabrice Le 19-10-08 à 05 h 36, pro fence via PacketFence-users a écrit : may i add that removing it from html/captive-portal/lib/captiveportal/PacketFence/DynamicRouting/Module/Authentication/Password.pm doesn't work. The

Re: [PacketFence-users] Fingerbank should be disabled, but it seems it is not.

2019-10-11 Thread Durand fabrice via PacketFence-users
Hello Guy, Le 19-10-09 à 11 h 29, Guy BLAVIN via PacketFence-users a écrit : Hello all, On a 8.3.0 packetfence cluster of three nodes on debian 8.11 I have a lot of logs about Fingerbank but I don't use it, there is no API key and I read that it means it should be disabled. On the web services

Re: [PacketFence-users] Setup questions

2019-10-11 Thread Durand fabrice via PacketFence-users
Le 19-10-08 à 21 h 14, Javier Pobeda via PacketFence-users a écrit : Hi folks, I'm struggling to understand basic design stuff. I want to run my PF server to authenticate remote users (wired 802.1x) and also provide AAA to access network gear assigning role privilege levels, etc. Remote o

Re: [PacketFence-users] RADIUS on additional interfaces.

2019-10-11 Thread Durand fabrice via PacketFence-users
Hello Justin, can you run : netstat -nlp| grep 1812 and check if the radius server is listening on the ip you want ? Regards Fabrice Le 19-10-09 à 17 h 27, Justin Hartman via PacketFence-users a écrit : Hello, I am hoping someone can help me with what I think is a simple problem but I seem

Re: [PacketFence-users] [9.1] enhancement request in cluster mode

2019-10-11 Thread Durand fabrice via PacketFence-users
https://github.com/inverse-inc/packetfence/blob/devel/docs/PacketFence_Clustering_Guide.asciidoc#adding-files-to-the-synchronization Le 19-10-10 à 04 h 33, pro fence via PacketFence-users a écrit : Hi, in a cluster, is it possible to include the translation files (packetfence.po and packetfen

Re: [PacketFence-users] [9.1] certificate

2019-10-11 Thread Durand fabrice via PacketFence-users
Just a detail, you can't use it for freeradius but for https it's ok. Le 19-10-11 à 05 h 23, mj via PacketFence-users a écrit : On 10/10/19 5:24 PM, pro fence via PacketFence-users wrote: hi, does anybody know if it is possible to use a wildcard certificate (*.mydomain.com

Re: [PacketFence-users] Problem with DHCP in Captive Portal - Inline Mode

2019-10-11 Thread Durand fabrice via PacketFence-users
Hello André, can you do that: curl http://127.0.0.1:2/api/v1/dhcp/stats/eth2 | python -m json.tool and paste the result ? Regards Fabrice Le 19-10-01 à 11 h 23, André Scrivener via PacketFence-users a écrit : Hi guys, I hope you are fine. I have created a captive portal for network au