Re: [PacketFence-users] PF 7.4 with 'Reading winbind reply failed!'
Hi Fabrice Thank you for looking into it. Well, I may be damned but after running "pfcmd confireload hard" I finally see the desired result, i.e. My realm OPTIONS after being created allows me to authenticate using this realm and its linked AD domain. Hurray, winbind error is gone But my matching rules in the authentication source still don't work. I'll continue in the separate email with a different subject to handle problems easily Eugene session-state:Module-Failure-Message := "mschap: Program returned code (1) and output 'Reading winbind reply failed! (0xc001) -Original Message- From: Durand fabrice via PacketFence-users [mailto:packetfence-users@lists.sourceforge.net] Sent: Wednesday, March 14, 2018 5:22 PM To: packetfence-users@lists.sourceforge.net Cc: Durand fabrice <fdur...@inverse.ca> Subject: Re: [PacketFence-users] PF 7.4 with 'Reading winbind reply failed!' Hello Eugene, when you create a realm in packetfence and you restart the radius server (pfcmd service radius restart) then you should have the realm defined in the proxy.conf.inc file. So from the admin gui, create the realm, do pfcmd configreload hard and pfcmd service radius restart. If the proxy.conf.inc file is still empty then open an issue on github. Regards Fabrice Le 2018-03-13 à 22:00, E.P. via PacketFence-users a écrit : > Hi Chris, > Welcome on board, we are in the same boat with someone else here with the > same error message. > I already provided Fabrice with all sort of answers here kindly requested > trying to help me but we are still at nowhere. > Hoping this issue will be a spotlight > > Eugene > > -Original Message- > From: Christian Sudec via PacketFence-users > [mailto:packetfence-users@lists.sourceforge.net] > Sent: Tuesday, March 13, 2018 8:33 AM > To: packetfence-users@lists.sourceforge.net > Cc: Christian Sudec <c.su...@htlwrn.ac.at> > Subject: [PacketFence-users] PF 7.4 with 'Reading winbind reply failed!' > > Hi! > > Currently installed PacketFence 7.4 on Debian 8.0 (latest patchlevel) > as described in the 'Administrators Guide', chapters 1 to 6 and 9 to > 10.2 - as you see I just want RADIUS enforcement (for 802.1x) to work. > > PF is bound to our active directory domain and I also created two new realms > as told in chapter 10.7, but sadly everytime I connect a supplicant and type > in my ad-user and password, it get's rejected with the following log entry in > Auditing: > chrooted_mschap: Program returned code (1) and output 'Reading winbind reply > failed! (0xc001)' > > I searched the lists but apart from a "permissions problem" I couldn't find > anything useful, which is why I'm kindly asking for help! > > regards > Chris > > -- > Check out the vibrant tech community on one of the world's > most engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ___ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users > > > -- > Check out the vibrant tech community on one of the world's > most engaging tech sites, Slashdot.org! http://sdm.link/slashdot > ___ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] PF 7.4 with 'Reading winbind reply failed!'
Hello Eugene, when you create a realm in packetfence and you restart the radius server (pfcmd service radius restart) then you should have the realm defined in the proxy.conf.inc file. So from the admin gui, create the realm, do pfcmd configreload hard and pfcmd service radius restart. If the proxy.conf.inc file is still empty then open an issue on github. Regards Fabrice Le 2018-03-13 à 22:00, E.P. via PacketFence-users a écrit : Hi Chris, Welcome on board, we are in the same boat with someone else here with the same error message. I already provided Fabrice with all sort of answers here kindly requested trying to help me but we are still at nowhere. Hoping this issue will be a spotlight Eugene -Original Message- From: Christian Sudec via PacketFence-users [mailto:packetfence-users@lists.sourceforge.net] Sent: Tuesday, March 13, 2018 8:33 AM To: packetfence-users@lists.sourceforge.net Cc: Christian Sudec <c.su...@htlwrn.ac.at> Subject: [PacketFence-users] PF 7.4 with 'Reading winbind reply failed!' Hi! Currently installed PacketFence 7.4 on Debian 8.0 (latest patchlevel) as described in the 'Administrators Guide', chapters 1 to 6 and 9 to 10.2 - as you see I just want RADIUS enforcement (for 802.1x) to work. PF is bound to our active directory domain and I also created two new realms as told in chapter 10.7, but sadly everytime I connect a supplicant and type in my ad-user and password, it get's rejected with the following log entry in Auditing: chrooted_mschap: Program returned code (1) and output 'Reading winbind reply failed! (0xc001)' I searched the lists but apart from a "permissions problem" I couldn't find anything useful, which is why I'm kindly asking for help! regards Chris -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
Re: [PacketFence-users] PF 7.4 with 'Reading winbind reply failed!'
Hi Chris, Welcome on board, we are in the same boat with someone else here with the same error message. I already provided Fabrice with all sort of answers here kindly requested trying to help me but we are still at nowhere. Hoping this issue will be a spotlight Eugene -Original Message- From: Christian Sudec via PacketFence-users [mailto:packetfence-users@lists.sourceforge.net] Sent: Tuesday, March 13, 2018 8:33 AM To: packetfence-users@lists.sourceforge.net Cc: Christian Sudec <c.su...@htlwrn.ac.at> Subject: [PacketFence-users] PF 7.4 with 'Reading winbind reply failed!' Hi! Currently installed PacketFence 7.4 on Debian 8.0 (latest patchlevel) as described in the 'Administrators Guide', chapters 1 to 6 and 9 to 10.2 - as you see I just want RADIUS enforcement (for 802.1x) to work. PF is bound to our active directory domain and I also created two new realms as told in chapter 10.7, but sadly everytime I connect a supplicant and type in my ad-user and password, it get's rejected with the following log entry in Auditing: chrooted_mschap: Program returned code (1) and output 'Reading winbind reply failed! (0xc001)' I searched the lists but apart from a "permissions problem" I couldn't find anything useful, which is why I'm kindly asking for help! regards Chris -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
[PacketFence-users] PF 7.4 with 'Reading winbind reply failed!'
Hi! Currently installed PacketFence 7.4 on Debian 8.0 (latest patchlevel) as described in the 'Administrators Guide', chapters 1 to 6 and 9 to 10.2 - as you see I just want RADIUS enforcement (for 802.1x) to work. PF is bound to our active directory domain and I also created two new realms as told in chapter 10.7, but sadly everytime I connect a supplicant and type in my ad-user and password, it get's rejected with the following log entry in Auditing: chrooted_mschap: Program returned code (1) and output 'Reading winbind reply failed! (0xc001)' I searched the lists but apart from a "permissions problem" I couldn't find anything useful, which is why I'm kindly asking for help! regards Chris -- Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
