Re: [PacketFence-users] Query Database for MAC address match

[Chris Jordan via PacketFence-users]

Hello Fabrice,

We use ManageEngine Desktop Central and they do have an API here
https://www.manageengine.com/products/desktop-central/api/index.html Is it
possible to integrate this with PacketFence?



On Thu, Jan 27, 2022 at 4:36 PM Fabrice Durand via PacketFence-users <
packetfence-users@lists.sourceforge.net> wrote:

> Hello Christopher,
>
> if you have an API in front of the postgresql db then it won´t be too
> complicate to code.
>
> I did that in the past and the code is there:
>
> https://github.com/inverse-inc/packetfence/compare/feature/rest_provisioner
>
> Regards
> Fabrice
>
>
> Le jeu. 27 janv. 2022 à 14:51, Chris Jordan via PacketFence-users <
> packetfence-users@lists.sourceforge.net> a écrit :
>
>> Hello,
>>
>> I am trying to figure out how to get PacketFence to query a postgresql
>> database to look for MAC addresses in a column to determine what vlan they
>> belong to.
>>
>> For example a user connects to wifi, packetfence goes to the database to
>> see if there is a mac address and if it does exist then it is approved on
>> the corporate vlan. If the mac address is not found in the database it will
>> set it to the guest vlan.
>>
>> This will help us determine what is corporate owned device and what is
>> not to prevent unauthorized access to our network. Has anybody done this
>> before?
>>
>> Thanks,
>>
>> --
>> [image: formlabslogo] 
>>
>> *Christopher Jordan* | Sr. Systems Administrator
>> 22 McGrath Hwy | Suite 206 | Somerville | MA 02143
>>
>> www.formlabs.com
>>
>>   
>>   
>> 
>> www.christopherjordan.com
>> ___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>


-- 
[image: formlabslogo] 

*Christopher Jordan* | Sr. Systems Administrator
22 McGrath Hwy | Suite 206 | Somerville | MA 02143

www.formlabs.com

  
  

www.christopherjordan.com
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Query Database for MAC address match

[Chris Jordan via PacketFence-users]

Hi Ludovic,

It changes since it comes from a software called ManageEngine Desktop
Central which manages our inventory. I can do a mass export and import it
but with multiple nics (wifi/wired) and inventory changes not sure how well
that would work

Is there anything for Desktop Central or Postgresql API?

On Thu, Jan 27, 2022 at 3:23 PM Zammit, Ludovic  wrote:

> Hello Chris,
>
> How often the Mac address change status ? How they change status / VLAN ?
>
> You could export the Mac addresses from postgresql and import them in PF.
>
> As is, we don’t do external call during the authentication process because
> it will create issue if the external service fast enough.
>
> I think it will be better to sync the data set.
>
> Thanks,
>
> *Ludovic Zammit*
> *Product Support Engineer Principal*
> *Cell:* +1.613.670.8432
> Akamai Technologies - Inverse
> 145 Broadway
> Cambridge, MA 02142
> Connect with Us:  
>  
> 
> 
>
> On Jan 27, 2022, at 2:07 PM, Chris Jordan via PacketFence-users <
> packetfence-users@lists.sourceforge.net> wrote:
>
> Hello,
>
> I am trying to figure out how to get PacketFence to query a postgresql
> database to look for MAC addresses in a column to determine what vlan they
> belong to.
>
> For example a user connects to wifi, packetfence goes to the database to
> see if there is a mac address and if it does exist then it is approved on
> the corporate vlan. If the mac address is not found in the database it will
> set it to the guest vlan.
>
> This will help us determine what is corporate owned device and what is not
> to prevent unauthorized access to our network. Has anybody done this before?
>
> Thanks,
>
> --
> [image: formlabslogo]
> 
>
> *Christopher Jordan* | Sr. Systems Administrator
> 22 McGrath Hwy | Suite 206 | Somerville | MA 02143
>
> www.formlabs.com
> 
>
>
> 
>
> 
>
> 
>
> 
>
> 
> www.christopherjordan.com
> 
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
>
> https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!DidLQccce8I57_4wEvu7CIhL4MsbHE4yMbdapumw2CsLYgo95BqeJ0EiogQ13Z2q$
>
>
>

-- 
[image: formlabslogo] 

*Christopher Jordan* | Sr. Systems Administrator
22 McGrath Hwy | Suite 206 | Somerville | MA 02143

www.formlabs.com

  
  

www.christopherjordan.com
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Query Database for MAC address match

[Fabrice Durand via PacketFence-users]

Hello Christopher,

if you have an API in front of the postgresql db then it won´t be too
complicate to code.

I did that in the past and the code is there:

https://github.com/inverse-inc/packetfence/compare/feature/rest_provisioner

Regards
Fabrice


Le jeu. 27 janv. 2022 à 14:51, Chris Jordan via PacketFence-users <
packetfence-users@lists.sourceforge.net> a écrit :

> Hello,
>
> I am trying to figure out how to get PacketFence to query a postgresql
> database to look for MAC addresses in a column to determine what vlan they
> belong to.
>
> For example a user connects to wifi, packetfence goes to the database to
> see if there is a mac address and if it does exist then it is approved on
> the corporate vlan. If the mac address is not found in the database it will
> set it to the guest vlan.
>
> This will help us determine what is corporate owned device and what is not
> to prevent unauthorized access to our network. Has anybody done this before?
>
> Thanks,
>
> --
> [image: formlabslogo] 
>
> *Christopher Jordan* | Sr. Systems Administrator
> 22 McGrath Hwy | Suite 206 | Somerville | MA 02143
>
> www.formlabs.com
>
>   
>   
> 
> www.christopherjordan.com
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Query Database for MAC address match

[Zammit, Ludovic via PacketFence-users]

Hello Chris,

How often the Mac address change status ? How they change status / VLAN ?

You could export the Mac addresses from postgresql and import them in PF.

As is, we don’t do external call during the authentication process because it 
will create issue if the external service fast enough.

I think it will be better to sync the data set.

Thanks,

Ludovic Zammit
Product Support Engineer Principal

Cell: +1.613.670.8432
Akamai Technologies - Inverse
145 Broadway
Cambridge, MA 02142
Connect with Us:   
    
  
  


> On Jan 27, 2022, at 2:07 PM, Chris Jordan via PacketFence-users 
>  wrote:
> 
> Hello,
> 
> I am trying to figure out how to get PacketFence to query a postgresql 
> database to look for MAC addresses in a column to determine what vlan they 
> belong to. 
> 
> For example a user connects to wifi, packetfence goes to the database to see 
> if there is a mac address and if it does exist then it is approved on the 
> corporate vlan. If the mac address is not found in the database it will set 
> it to the guest vlan. 
> 
> This will help us determine what is corporate owned device and what is not to 
> prevent unauthorized access to our network. Has anybody done this before?
> 
> Thanks,
> 
> -- 
>  
> 
> 
> Christopher Jordan | Sr. Systems Administrator
>  <> <>22 McGrath Hwy | Suite 206 | Somerville | MA 02143 <>
> www.formlabs.com 
> 
> 
>  
> 
>   
> 
>   
> 
>   
> 
>   
> 
> www.christopherjordan.com 
> 
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!DidLQccce8I57_4wEvu7CIhL4MsbHE4yMbdapumw2CsLYgo95BqeJ0EiogQ13Z2q$
>  



smime.p7s
Description: S/MIME cryptographic signature
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] Query Database for MAC address match

[Chris Jordan via PacketFence-users]

Hello,

I am trying to figure out how to get PacketFence to query a postgresql
database to look for MAC addresses in a column to determine what vlan they
belong to.

For example a user connects to wifi, packetfence goes to the database to
see if there is a mac address and if it does exist then it is approved on
the corporate vlan. If the mac address is not found in the database it will
set it to the guest vlan.

This will help us determine what is corporate owned device and what is not
to prevent unauthorized access to our network. Has anybody done this before?

Thanks,

-- 
[image: formlabslogo] 

*Christopher Jordan* | Sr. Systems Administrator
22 McGrath Hwy | Suite 206 | Somerville | MA 02143

www.formlabs.com

  
  

www.christopherjordan.com
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users