Hi Nicolas, Thanks for getting back in touch and sorry for the delay.
I have had Ruckus spend some time working with us on this to no avail. What they have managed to do is run some RADIUS test from their SmartZone controller back to PF which always seem to fail. I would have thought that the RADIUS request would have been a MAC request so we have tried putting in a MAC Address as the username and the password which always seems to fail. This does work when going via our Cisco WLCs, so I guess the Ruckus is doing something slightly different. One thing I have noticed is the SmartZone.pm file in PF creates a API call to the Ruckus controller and when I take that payload and try the request myself the Ruckus controller responds with "Bad Request". At this point I am wondering if Ruckus have updated their API Northbound endpoints in their later versions of software, we are running 5.1 which is a relatively new piece of software. Could you confirm whether the PF integration has been tested with this newer version of controller? Also could you confirm the process of on boarding a user to PF from a Ruckus controller so we can be sure we are investigating the right section? To clarify users are being forwarded to the portal and they are able to enrol but the Ruckus SmartZone never receives/recognises that PF has authorized that user for access. If we could understand what PF does to send that authorization then we can concentrate on what might be causing the issue. Thanks, Talan -----Original Message----- From: Nicolas Quiniou-Briand <n...@inverse.ca> Sent: 23 August 2019 16:16 To: Talan Westby <talan.wes...@derby-college.ac.uk>; packetfence-users@lists.sourceforge.net Subject: Re: [PacketFence-users] Ruckus SmartZone and PF 9 On 2019-08-23 5:08 p.m., Talan Westby wrote: > If you could let me know which logs I should be looking at that would be > great. I really don't know which logs. Did you check on Ruckus documentation ? I found this link [0] Otherwise, you can try to capture traffic between PacketFence and Ruckus Smartzone when a device try to register. If traffic is not encrypted, you could have some hint. [0] /usr/local/pf/addons/packages/build-go.sh build /usr/local/pf /usr/local/pf/sbin/ -- Nicolas Quiniou-Briand n...@inverse.ca :: +1.514.447.4918 *140 :: https://inverse.ca Inverse inc. :: Leaders behind SOGo (https://sogo.nu), PacketFence (https://packetfence.org) and Fingerbank (http://fingerbank.org) _____________________________________ This electronic message contains information from Derby College which may be privileged and confidential. The information is intended to be for the use of the individual(s) or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. Internet communications are not secure and therefore Derby College does not accept legal responsibility for the contents of this message. Any views or opinions presented are only those of the author and not those of Derby College. If you have received this message in error, please reply to this message and include d...@derby-college.ac.uk immediately. _________________________________________ _______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
