Hello there,

If you want to do a match on specific OU, it better to change the BaseDN of the 
look up and create one source pet OU you want to match one.

Then you create a catch all rule with no conditions.

Thanks,



Ludovic Zammit
Product Support Engineer Principal Lead

Cell: +1.613.670.8432
Akamai Technologies - Inverse
145 Broadway
Cambridge, MA 02142
Connect with Us:         <https://community.akamai.com/>  
<http://blogs.akamai.com/>  <https://twitter.com/akamai>  
<http://www.facebook.com/AkamaiTechnologies>  
<http://www.linkedin.com/company/akamai-technologies>  
<http://www.youtube.com/user/akamaitechnologies?feature=results_main>

> On Jul 27, 2023, at 3:03 AM, Uğur Aygün via PacketFence-users 
> <packetfence-users@lists.sourceforge.net> wrote:
> 
> Hello all i have a basic problem in packetfence and can not be able to solve 
> it.
> 
> I have an active directory connection and I also have an authentication 
> source. like dc=domain,dc=com
> 
> I want to simply write a rule that if a person is in specific ou like 
> ou=users,dc=domain,dc=com
> And i want else to not be able to connect that specific ssid. 
> 
> I write it in the condition like "distinguished name is 
> ou=users,dc=domain,dc=com
> and assign a role and duration.
> 
> In the end a user from another ou for example ou=users2 can also be able to 
> login my ssid with his/her credentials.
> 
> How can i solve this problem? Also when is try to use a more specific rule 
> like sAMAaccount name is testuser i can not be able to connect that ssid. In 
> audit tab it says there is no role to attend.
> 
> I think this is because of active directory implementation how can i solve 
> this?
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!QsMwOEo9A3o3KFif3jj9nLPdNvkFNWBfuj5TtgzAU9Je3yiAR28sJxoHlwsw0k3vSQ7y7aKYAAJkDd0QnoS3qzv8luMatcjwx_lTrQ$
>  

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to