Re: [PacketFence-users] Auto-Register devices

>> value = Gaming Console >> >> [1:gaming_by_devclass] >> scope = AutoRegister >> role = whatever >> >> [2:gaming_by_devclass] >> scope = NodeInfoForAutoReg >> role = whatever >> >> >> >> >> Il 15/06/2018 16:08, Wif

Re: [PacketFence-users] Auto-Register devices

the admin > gui) ? > If it's the case then the issue is with the deauth. > Btw if you have logs it will help to understand what happen. > > Regards > > Fabrice > > > Le 2018-06-16 à 09:31, Wifi Guy via PacketFence-users a écrit : > > This is Device_registration: &g

[PacketFence-users] Auto-Register devices

Hi Hoping someone can help me with the UI/CLI config for Auto-Registration. I wanted to have this on the onboarding SSID that is also used for all other devices. However, from using the fingerbank database to profile devices that are for example playstation and avoid them from the CWP and auto

[PacketFence-users] radiusd failed to start

Hi All, Im getting an issue where radiusd will not start correctly. Job for packetfence-radiusd-acct.service failed because the control process exited with error code. See "systemctl status packetfence-radiusd-acct.service" and "journalctl -xe" for details. radiusd-acct|not started Job for

[PacketFence-users] radiusd failed to start

Hi All, Im getting an issue where radiusd will not start correctly. Job for packetfence-radiusd-acct.service failed because the control process exited with error code. See "systemctl status packetfence-radiusd-acct.service" and "journalctl -xe" for details. radiusd-acct|not started Job for

[PacketFence-users] COA on CWP

Hi All, I have a simple setup where I only have one interface selected (Management). Both deamons for Portal and RADIUS are loaded. I want to be able to authentication via eCWP with my wireless APs. This has all been setup and working. However once I enabled COA I was expecting to be able to

[PacketFence-users] Mac auth

Hi Can someone tell me where I need to fill in MAC addresses of Clients into PF when I only want to do basic MAC authentication without AD integration. So what we want to setup is a local database of MAC addresses which will be authenticated via Radius with our switches and ideally get

[PacketFence-users] Reg VLAN and gaming devices

Hi All, Me again! :) I have Reg VLAN (open SSID with Mac-Auth, CoA to reassign role, returing filter ID to APs) setup with no issues. I am able to use CoA to assign devices into a role, Im using a combination of 802.1X and guest feature this works great! But what is the best solution for

Re: [PacketFence-users] Linux provisioner

Anyone? On Wed, 12 Sep 2018 at 12:11, Wifi Guy wrote: > Hi > > Is there any support for Linux in the provisioner? If not any way to ask > for the feature if not asked for before? > > Thanks > Neil > ___ PacketFence-users mailing list

[PacketFence-users] Cisco 2960 802.1X and MAB

Hi all, Can someone help with what is required to get wired 802.1X and/or MAB to work on wired clients connecting to a cisco 2960 switch? What is needed to be configured in PF? What is needed to be configured on client side? Its a macbook What is needed to be configured on the cisco 2960?

Re: [PacketFence-users] SMS for missing providers

her provider. > > > https://sourceforge.net/p/packetfence/mailman/message/36087197/ > > Le lun. 17 déc. 2018 à 10:58, Wifi Guy via PacketFence-users < > packetfence-users@lists.sourceforge.net> a écrit : > >> How do you add this? Is it within the SQL database? Or ca

Re: [PacketFence-users] SMS for missing providers

t to make in the sql database. > I'm using an other provider. > > > https://sourceforge.net/p/packetfence/mailman/message/36087197/ > > Le lun. 17 déc. 2018 à 10:58, Wifi Guy via PacketFence-users < > packetfence-users@lists.sourceforge.net> a écrit : > >> How d

Re: [PacketFence-users] SMS for missing providers

Its doesnt look like providers have this service anymore? In the UK i check for vodafone and EE and both have no SMTP to SMS service. What option does that leave for registration via SMS? On Fri, 14 Dec 2018 at 13:04, Nicolas Quiniou-Briand via PacketFence-users <

Re: [PacketFence-users] SMS for missing providers

Cool. How do I add that? On Sun, 16 Dec 2018 at 16:38, G PL via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > > https://fastsms.co.uk/solutions/email-to-sms.html > Le vendredi 14 décembre 2018, Wifi Guy via PacketFence-users < > packetfence-users@

[PacketFence-users] SMS for missing providers

Hi all, Is anyone able to explain a few things? I see in the sms providers list, some of the carriers but not all (specifically for UK). I want to add as a test Vodafone UK. Firstly 1. Where can I get the SMS carrier info needed to add to PF? 2. How can I add this into PF? 3. Will this then

Re: [PacketFence-users] SMS for missing providers

add your provider with the good synthax in the sms_carrier > table. %s is the phone number > > > > Le dim. 16 déc. 2018 à 17:54, Wifi Guy via PacketFence-users < > packetfence-users@lists.sourceforge.net> a écrit : > >> Cool. How do I add that? >> >> On

Re: [PacketFence-users] SMS for missing providers

Hey Thanks for the example How would I find the info for Vodafone in the UK for example? Thanks On Fri, 14 Dec 2018 at 10:09, Nicolas Quiniou-Briand via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > Hello, > > Check the `sms_carrier` table in `pf` DB. > > Example: > >

[PacketFence-users] Fwd: EAP-TLS Computer and User Auth

ll Rosenbaum wrote: > >> We have considered something similar in our environment, but haven’t yet >> spent the time that you have to evaluate and test. >> >> >> >> One thing that we considered to help with distinguishing college issued >> vs. BYOD, was to l

Re: [PacketFence-users] EAP-TLS Computer and User Auth

This is it not working for machine - Node Information - Device Information - RADIUS

Re: [PacketFence-users] EAP-TLS Computer and User Auth

Hi All, I seem to now have this working to a degree. I have two authentication sources setup. One for servicePrincipalName and one for sAMAccountName. So if a windows machine is booted up, pre any login/sign in, machine auth is completed and a role is assigned. When the device logs in,

Re: [PacketFence-users] EAP-TLS Computer and User Auth

Here is profiles.conf [Gaming] dot1x_recompute_role_from_portal=0 locale= filter=node_role:gaming autoregister=enabled [Dot11] locale= filter=ssid:Dot11 description=Dot11 sources=AD-Source,AD-Source-Machine provisioners=EAP-TLS-Apple,EAP-TLS-Windows [Secure] locale= filter=ssid:Secure

Re: [PacketFence-users] EAP-TLS Computer and User Auth

Hi Fabrice Is the vlan.conf the only way? Currently I’m not using VLAN but returning filter ID? On Wed, 5 Dec 2018 at 14:33, Fabrice Durand via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > Hello Wifi, > Le 18-12-03 à 09 h 18, Wifi Guy via PacketFence-u

Re: [PacketFence-users] EAP-TLS Computer and User Auth

Hi Nicolas, Excuse my ignorance but I dont understand the context of this? Im not sure what VLAN filter does? machine] filter = node_info attribute = machine_account operator = defined value = default [EthernetEAP] filter = connection_type operator = is value = Ethernet-EAP Refuse User

Re: [PacketFence-users] EAP-TLS Computer and User Auth

packetfence-users@lists.sourceforge.net> wrote: > Hello Wifi > > On 2018-12-06 9:39 a.m., Wifi Guy via PacketFence-users wrote: > > Excuse my ignorance but I dont understand the context of this? Im not > > sure what VLAN filter does? > > See > > https://packetfe

[PacketFence-users] EAP-TLS Computer and User Auth

Good Morning all, I have managed to get very far to date with my installation. Howver I am struggling with the last piece of the puzzle, how to handle BYOD device that authenticate via EAP-TLS (onboarding process) and distinguishing that with corp users. So I thought the best way to handle this

Re: [PacketFence-users] PKI Error

to be in base64 format. > > Regards > > Fabrice > Le 18-11-22 à 01 h 47, Wifi Guy via PacketFence-users a écrit : > > Hi Fabrice > > I left in default location as specified in the original eap.conf I believe > as .cer file. Does this have to be moved into a file like be

Re: [PacketFence-users] PKI Error

Nov 2018 at 02:51, Durand fabrice via PacketFence-users < > packetfence-users@lists.sourceforge.net> wrote: > >> Hello Wifi, >> >> the certificates need to be in base64 format. >> >> Regards >> >> Fabrice >> Le 18-11-22 à 01 h 47, Wifi Guy via

Re: [PacketFence-users] PKI Error

; the path to your CA certificate ? > > Regards > > Fabrice > > > Le 18-11-21 à 16 h 49, Wifi Guy via PacketFence-users a écrit : > > Hi Fabrice, > > I managed to get a step further and now have the cert on the device, but > it shows this error on connection to t

[PacketFence-users] PKI Error

Hi All, Seem to get the following error when trying to obtain a cert via the Reg VLAN. Error is Caught exception in captiveportal::Controller::Root->dynamic_application "PKCS12.xs:71: OpenSSL error: No such file or directory at /usr/local/pf/lib/pf/pki_provider/scep.pm line 111." I have

[PacketFence-users] Linux provisioner

Hi Is there any support for Linux in the provisioner? If not any way to ask for the feature if not asked for before? Thanks Neil ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net

Re: [PacketFence-users] SMS for missing providers

see the last id of the table > and after the insert > > Le mardi 18 décembre 2018, Wifi Guy via PacketFence-users < > packetfence-users@lists.sourceforge.net> a écrit : > >> This is the error >> >> >> [root@PF-NAC ~]# mysql -upf -p pf >> >

Re: [PacketFence-users] Floating Devices cisco 2960

linkdown traps On Wed, 6 Feb 2019 at 02:25, Durand fabrice via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > Hello Wifi, > > Floating device works with radius, so a port with 802.1x/MAB enabled > should work. > > Regards > > Fabrice > >

[PacketFence-users] RADIUS Reply: Reject

Hi All, Seem to be getting an issue when I try to connect a macbook pro to the wired port on a cisco 2960 switch. If I connect a windows 10 machine to the same port it works fine. I am using a username and password combo (MS-CHAPv2). Is this something you can help me with? This is the error?

Re: [PacketFence-users] Floating Devices cisco 2960

the accounting. (accounting stop) > https://github.com/inverse-inc/packetfence/blob/devel/lib/pf/radius.pm#L421 > > Regards > > Fabrice > > > Le 19-02-06 à 08 h 21, Wifi Guy via PacketFence-users a écrit : > > Hi Fabrice > > Thanks for the note. So this seems to work pus

[PacketFence-users] Smoothwall

Hi All, Has anyone used PF and smoothwall together before? If so how can you set this up? Users are authenticating via 802.1X (EAP-PEAP) Thanks ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net