I think I've found the problem. I tried to join again with a different
identifier, so that I got a different log name, and found a "kinit failed:
Clock skew too great" as the last entry in the winbindd log. I know what
this is, it's a time error. I adjusted my server time accordingly, and now
my PF machine and AD server have the same time, at least when compared
visually. However, I am noticing that the timestamps in the log are about 5
hours off of what the server reports as the time and date when I issue a
"date" command. For example, the date command gives me the time and date
of:
Sat. Oct. 15 13:31:41 CDT 2016
The last log timestamp is:
2016/10/15 18:21:11
On Sat, Oct 15, 2016 at 3:09 AM, <
packetfence-users-requ...@lists.sourceforge.net> wrote:
> Send PacketFence-users mailing list submissions to
> packetfence-users@lists.sourceforge.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
> or, via email, send a message with subject or body 'help' to
> packetfence-users-requ...@lists.sourceforge.net
>
> You can reach the person managing the list at
> packetfence-users-ow...@lists.sourceforge.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of PacketFence-users digest..."
>
>
> Today's Topics:
>
> 1. Re: Can't join packetfence to domain for RADIUS (Antoine Amacher)
> 2. Re: Sponsor guest access issue (Derek Wuelfrath)
> 3. Can't join packetfence to domain for RADIUS (Alex Fishel)
> 4. Re: Sponsor guest access issue (Morgan, Darren)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Fri, 14 Oct 2016 10:52:32 -0400
> From: Antoine Amacher <aamac...@inverse.ca>
> Subject: Re: [PacketFence-users] Can't join packetfence to domain for
> RADIUS
> To: packetfence-users@lists.sourceforge.net
> Message-ID: <1823f34f-182a-f4da-8b6d-67579519f...@inverse.ca>
> Content-Type: text/plain; charset="windows-1252"
>
> Hello Alex,
>
> You can have a look under
> /chroots/DOMAIN-NAME/var/log/sambaDOMAIN-NAME/log.winbind
>
> Thanks
>
>
> On 10/13/2016 11:28 PM, Alex Fishel wrote:
> > Hello all,
> >
> > I upgraded the server as suggested but it hasn't seemed to make a
> > difference yet. Is there a log file that could be examined to
> > diagnose the problem?
> >
> > Thanks!
> >
> > --
> > Alex Fishel
> >
> >
> >
> >
> >
> > ------------------------------------------------------------
> ------------------
> > Check out the vibrant tech community on one of the world's most
> > engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> >
> >
> > _______________________________________________
> > PacketFence-users mailing list
> > PacketFence-users@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
> --
> Antoine Amacher
> aamac...@inverse.ca :: www.inverse.ca
> +1.514.447.4918 x130 :: +1 (866) 353-6153 x130
> Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (
> www.packetfence.org)
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
>
> ------------------------------
>
> Message: 2
> Date: Fri, 14 Oct 2016 13:04:51 -0400
> From: Derek Wuelfrath <dwuelfr...@inverse.ca>
> Subject: Re: [PacketFence-users] Sponsor guest access issue
> To: ML PF <packetfence-users@lists.sourceforge.net>
> Message-ID: <5921d7fc-01ea-45b6-a693-5b94e6e6f...@inverse.ca>
> Content-Type: text/plain; charset="utf-8"
>
> Daren,
>
> Can you send the log file ?
> Looks like there may be a problem with matching the provided sponsor?
> (error message displayed on the portal seems incomplete...)
>
> Cheers!
> -dw.
>
> ?
> Derek Wuelfrath
> de...@inverse.ca <mailto:de...@inverse.ca>
> > On Oct 14, 2016, at 04:22, Morgan, Darren <dmor...@oundleschool.org.uk>
> wrote:
> >
> > I now no longer get the error, but when we try to authorise the guest
> with any of the users from the Sponsors group we get the message that they
> do not have permission. As you can see from the previous .conf files I?ve
> marked the users in the Sponsers source as ?sponsor=1?
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
>
> ------------------------------
>
> Message: 3
> Date: Fri, 14 Oct 2016 16:24:37 -0500
> From: Alex Fishel <fishal...@gmail.com>
> Subject: [PacketFence-users] Can't join packetfence to domain for
> RADIUS
> To: packetfence-users@lists.sourceforge.net
> Message-ID:
> <CAEqJ9_+QO74h1mMcy8ERNwd2Hyw6jMLu4iEBV
> cypmtst4px...@mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> Thank you everyone for your suggestions. Unfortunately I am still having
> trouble here. I tried the suggestions provided by Darren but I have not
> yet been able to join successfully. I will go back and double-check
> everything I've already tried first but is there anything else that can be
> done? Happy to provide config information if needed.
>
> Thanks again!
>
> --
> Alex Fishel
> -------------- next part --------------
> An HTML attachment was scrubbed...
>
> ------------------------------
>
> Message: 4
> Date: Sat, 15 Oct 2016 08:09:02 +0000
> From: "Morgan, Darren" <dmor...@oundleschool.org.uk>
> Subject: Re: [PacketFence-users] Sponsor guest access issue
> To: "packetfence-users@lists.sourceforge.net"
> <packetfence-users@lists.sourceforge.net>
> Message-ID: <3d313fd7cd6d4aaeb58089115ee07...@oundleschool.org.uk>
> Content-Type: text/plain; charset="utf-8"
>
> Hi Derek,
>
> Many thanks for getting back to me. I?ve investigated further this
> morning and saw that the sponsor was in 2 sources but only 1 was marked as
> sponsor, so when the process iterated through the available sources it
> matched on the one that wasn?t marked as sponsor. Soon fixed that! Now I
> get a different error message;
>
> [mac:b8:ca:3a:85:ce:ce] Caught exception in captiveportal::Controller::
> Activate::Email->doSponsorRegistration "SMTP recipient() command failed:
> 5.7.1 Unable to relay
> " (captiveportal::PacketFence::Controller::Root::end)
>
>
> Which I assume is to do with security on our email server.
>
> As ever ? Many thanks for the help.
>
> Regards
>
> Darren
>
>
>
>
> From: Derek Wuelfrath [mailto:dwuelfr...@inverse.ca]
> Sent: 14 October 2016 18:05
> To: ML PF <packetfence-users@lists.sourceforge.net>
> Subject: Re: [PacketFence-users] Sponsor guest access issue
>
> Daren,
>
> Can you send the log file ?
> Looks like there may be a problem with matching the provided sponsor?
> (error message displayed on the portal seems incomplete...)
>
> Cheers!
> -dw.
>
> ?
> Derek Wuelfrath
> de...@inverse.ca<mailto:de...@inverse.ca>
>
> On Oct 14, 2016, at 04:22, Morgan, Darren <dmor...@oundleschool.org.uk<
> mailto:dmor...@oundleschool.org.uk>> wrote:
>
> I now no longer get the error, but when we try to authorise the guest with
> any of the users from the Sponsors group we get the message that they do
> not have permission. As you can see from the previous .conf files I?ve
> marked the users in the Sponsers source as ?sponsor=1?
>
>
> This email is sent from either Oundle School or Laxton Junior School for
> The Corporation of Oundle School and is intended only for the addressee
> named above. The Corporation of Oundle School is a Charity incorporated
> under Royal Charter RC000396 and charity number 309921.
> www.oundleschool.org.uk
> Scanned by iCritical.
> -------------- next part --------------
> An HTML attachment was scrubbed...
>
> ------------------------------
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
>
> ------------------------------
>
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
> End of PacketFence-users Digest, Vol 102, Issue 24
> **************************************************
>
--
Alex Fishel
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
