Re: [PacketFence-users] Can't link PacketFence with AD Server.

[Adrian Dessaigne via PacketFence-users]

Hi 

Tanks for your help 

I've found the solution to it. It seems like he don't like when there is wrong 
timezone, I configured the same on both server and it work ! 

It show up in green and troubleshooting command work ! 

For this squetch, I only need packetfence has Radius service. 
After doing the remaining configuration, I've tested the radius service. 

BUT, I have the following error in radius.log 

(51) rest: ERROR: 
{"control:PacketFence-Authorization-Status":"allow","Reply-Message":"CLI Access 
is not allowed by PacketFence on this switch"} 
Feb 5 11:01:05 pfcen7 auth[11140]: Need 2 more connections to reach min 
connections (3) 
Feb 5 11:01:05 pfcen7 auth[11140]: rlm_rest (rest): Opening additional 
connection (4), 1 of 63 pending slots used 
Feb 5 11:01:05 pfcen7 auth[11140]: (51) Rejected in post-auth: [NOVAYS\pfadmin] 
(from client 192.168.1.201 port 0 cli 4???I? via TLS tunnel) 
Feb 5 11:01:05 pfcen7 auth[11140]: (51) Login incorrect (rest: Server 
returned:): [NOVAYS\pfadmin] (from client 192.168.1.201 port 0 cli 4???I? via 
TLS tunnel) 
Feb 5 11:01:05 pfcen7 auth[11140]: [mac:4▒▒I▒] Rejected user: NOVAYS\pfadmin 
Feb 5 11:01:05 pfcen7 auth[11140]: (52) Login incorrect (eap_peap: The users 
session was previously rejected: returning reject (again.)): [NOVAYS\pfadmin] 
(from client 192.168.1.201 port 0 cli 4???I?) 

I've tested many user like: 
NOVASYS\administrateur 
NOVASYS\pfadmin 
administrateur 
pfadmin 

I always get the same error. I've search in the documentation about CLI 
configuration. In 26.3 Switch Login Access (page 229) I've added an Admin Role 
in "Configuration-> System Configuration -> Admin access" 
witch "Action : Switch CLI - Read" 

Still have the same probleme 
Is the CLI configuration faulty or do I use a wrong syntaxe in the 
authentication prompt ? 

Btw I restart radius service on each configuration change. 

Adrian 

_______________________________________________ 
PacketFence-users mailing list 
PacketFence-users@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/packetfence-users



_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users