Re: [PacketFence-users] Wifi Registration without using CP

2018-06-25 Thread Dang Van Chuyen via PacketFence-users 
Hi,
I have a similar question...I have a wireless network with configurations:

Access Point: Meraki
Authentication: 802.1x (AD credential with NPS on Windows Server 2012R2)
DHCP: Windows Server 2012R2

Can I integrate PF into this network then PF can apply roles to groups as
well as compliance checking without creating a new CP SSID? I already have
PFZen with domain joined, working LDAP source... I looked for the document
but could not find the configuration for this. Or do I have to change
802.1x authentication setting to PF server?

Thanks

On Wed, Jun 20, 2018 at 8:13 AM, Durand fabrice via PacketFence-users <
packetfence-users@lists.sourceforge.net> wrote:

> Hello Geert,
>
> we just merged the unify code in PacketFence 8.1 and this version will be
> release next week.
>
> Regards
>
> Fabrice
>
>
>
> Le 2018-06-19 à 04:03, Geert Heremans a écrit :
>
> Hello Fabrice and all readers,
>
> I've got this working. Users are redirected to the CP page to register the
> device. This works but after registration the users must manually
> disconnect from the WiFi and Reconnect to be put inside the correct Vlan.
> It isn't changed automatically.
>
> Any Unifi AP users out there who are willing to share their configuration?
>
> Best regards
> Geert
>
> 2018-06-14 19:49 GMT+02:00 Fabrice Durand via PacketFence-users <
> packetfence-users@lists.sourceforge.net>:
>
>> You just need to join the PacketFence server to the domain.
>>
>> Le 2018-06-14 à 08:42, Geert Heremans via PacketFence-users a écrit :
>>
>> Thanks Fabrice,
>>
>> just to be sure. I use the PF radius server for the WPA2 authentication
>> then and not NPS on Windows Server 2016?
>>
>> 2018-06-14 14:39 GMT+02:00 Fabrice Durand via PacketFence-users <
>> packetfence-users@lists.sourceforge.net>:
>>
>>> Hello Geert,
>>>
>>> since wpa2-entreprise already authenticate the user (AD credential) then
>>> you can auto register device in this case and no need to have the captive
>>> portal.
>>>
>>> Regards
>>>
>>> Fabrice
>>>
>>> Le 2018-06-14 à 02:52, Geert Heremans via PacketFence-users a écrit :
>>>
>>> Hello everyone,
>>>
>>> I'm wondering if it's possible to setup my PF system so that I don't
>>> need a unsecured SSID with a Captive Portal behind it to allow the users to
>>> register their device.
>>>
>>> In my ideal setup I would have only one SSID with WPA2-Enterprise
>>> authentication. When one fo my domain users connects to this SSID without a
>>> registered device, he/she should be redirected to the registration portal.
>>> After a succesfull registration subsequent login's should automaticlly put
>>> the user in the designated VLAN.
>>>
>>> For what it's worth I'm using Ubiquito Unifi AP's on a Server 2016
>>> Domain controlled enviroment.
>>>
>>> Thanks you for your kind help.
>>>
>>> Best regards,
>>> Geert
>>>
>>>
>>> --
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>>
>>>
>>>
>>> ___
>>> PacketFence-users mailing 
>>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>>>
>>>
>>> --
>>> Fabrice durandfdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  
>>> www.inverse.ca
>>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
>>> (http://packetfence.org)
>>>
>>>
>>> 
>>> --
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>> ___
>>> PacketFence-users mailing list
>>> PacketFence-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>>
>>>
>>
>>
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>
>>
>>
>> ___
>> PacketFence-users mailing 
>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>>
>> --
>> Fabrice durandfdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  
>> www.inverse.ca
>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
>> (http://packetfence.org)
>>
>>
>> 
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> ___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>>
>
>
> 
>

Re: [PacketFence-users] Wifi Registration without using CP

2018-06-19 Thread Durand fabrice via PacketFence-users 

Hello Geert,

we just merged the unify code in PacketFence 8.1 and this version will 
be release next week.


Regards

Fabrice



Le 2018-06-19 à 04:03, Geert Heremans a écrit :

Hello Fabrice and all readers,

I've got this working. Users are redirected to the CP page to register 
the device. This works but after registration the users must manually 
disconnect from the WiFi and Reconnect to be put inside the correct Vlan.

It isn't changed automatically.

Any Unifi AP users out there who are willing to share their configuration?

Best regards
Geert

2018-06-14 19:49 GMT+02:00 Fabrice Durand via PacketFence-users 
>:


You just need to join the PacketFence server to the domain.


Le 2018-06-14 à 08:42, Geert Heremans via PacketFence-users a écrit :

Thanks Fabrice,

just to be sure. I use the PF radius server for the WPA2
authentication then and not NPS on Windows Server 2016?

2018-06-14 14:39 GMT+02:00 Fabrice Durand via PacketFence-users
mailto:packetfence-users@lists.sourceforge.net>>:

Hello Geert,

since wpa2-entreprise already authenticate the user (AD
credential) then you can auto register device in this case
and no need to have the captive portal.

Regards

Fabrice


Le 2018-06-14 à 02:52, Geert Heremans via PacketFence-users a
écrit :

Hello everyone,

I'm wondering if it's possible to setup my PF system so that
I don't need a unsecured SSID with a Captive Portal behind
it to allow the users to register their device.

In my ideal setup I would have only one SSID with
WPA2-Enterprise authentication. When one fo my domain users
connects to this SSID without a registered device, he/she
should be redirected to the registration portal. After a
succesfull registration subsequent login's should
automaticlly put the user in the designated VLAN.

For what it's worth I'm using Ubiquito Unifi AP's on a
Server 2016 Domain controlled enviroment.

Thanks you for your kind help.

Best regards,
Geert



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org!http://sdm.link/slashdot


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/packetfence-users



-- 
Fabrice Durand

fdur...@inverse.ca   ::  +1.514.447.4918 (x135) 
::www.inverse.ca 
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and 
PacketFence (http://packetfence.org)



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/packetfence-users






--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org!http://sdm.link/slashdot


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/packetfence-users



-- 
Fabrice Durand

fdur...@inverse.ca   ::  +1.514.447.4918 (x135) 
::www.inverse.ca 
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org)



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Wifi Registration without using CP

2018-06-19 Thread Geert Heremans via PacketFence-users 
Hello Fabrice and all readers,

I've got this working. Users are redirected to the CP page to register the
device. This works but after registration the users must manually
disconnect from the WiFi and Reconnect to be put inside the correct Vlan.
It isn't changed automatically.

Any Unifi AP users out there who are willing to share their configuration?

Best regards
Geert

2018-06-14 19:49 GMT+02:00 Fabrice Durand via PacketFence-users <
packetfence-users@lists.sourceforge.net>:

> You just need to join the PacketFence server to the domain.
>
> Le 2018-06-14 à 08:42, Geert Heremans via PacketFence-users a écrit :
>
> Thanks Fabrice,
>
> just to be sure. I use the PF radius server for the WPA2 authentication
> then and not NPS on Windows Server 2016?
>
> 2018-06-14 14:39 GMT+02:00 Fabrice Durand via PacketFence-users <
> packetfence-users@lists.sourceforge.net>:
>
>> Hello Geert,
>>
>> since wpa2-entreprise already authenticate the user (AD credential) then
>> you can auto register device in this case and no need to have the captive
>> portal.
>>
>> Regards
>>
>> Fabrice
>>
>> Le 2018-06-14 à 02:52, Geert Heremans via PacketFence-users a écrit :
>>
>> Hello everyone,
>>
>> I'm wondering if it's possible to setup my PF system so that I don't need
>> a unsecured SSID with a Captive Portal behind it to allow the users to
>> register their device.
>>
>> In my ideal setup I would have only one SSID with WPA2-Enterprise
>> authentication. When one fo my domain users connects to this SSID without a
>> registered device, he/she should be redirected to the registration portal.
>> After a succesfull registration subsequent login's should automaticlly put
>> the user in the designated VLAN.
>>
>> For what it's worth I'm using Ubiquito Unifi AP's on a Server 2016 Domain
>> controlled enviroment.
>>
>> Thanks you for your kind help.
>>
>> Best regards,
>> Geert
>>
>>
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>
>>
>>
>> ___
>> PacketFence-users mailing 
>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>>
>> --
>> Fabrice durandfdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  
>> www.inverse.ca
>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
>> (http://packetfence.org)
>>
>>
>> 
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> ___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>>
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
>
> ___
> PacketFence-users mailing 
> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
> --
> Fabrice durandfdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
> (http://packetfence.org)
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Wifi Registration without using CP

2018-06-14 Thread Fabrice Durand via PacketFence-users 

You just need to join the PacketFence server to the domain.


Le 2018-06-14 à 08:42, Geert Heremans via PacketFence-users a écrit :

Thanks Fabrice,

just to be sure. I use the PF radius server for the WPA2 
authentication then and not NPS on Windows Server 2016?


2018-06-14 14:39 GMT+02:00 Fabrice Durand via PacketFence-users 
>:


Hello Geert,

since wpa2-entreprise already authenticate the user (AD
credential) then you can auto register device in this case and no
need to have the captive portal.

Regards

Fabrice


Le 2018-06-14 à 02:52, Geert Heremans via PacketFence-users a écrit :

Hello everyone,

I'm wondering if it's possible to setup my PF system so that I
don't need a unsecured SSID with a Captive Portal behind it to
allow the users to register their device.

In my ideal setup I would have only one SSID with WPA2-Enterprise
authentication. When one fo my domain users connects to this SSID
without a registered device, he/she should be redirected to the
registration portal. After a succesfull registration subsequent
login's should automaticlly put the user in the designated VLAN.

For what it's worth I'm using Ubiquito Unifi AP's on a Server
2016 Domain controlled enviroment.

Thanks you for your kind help.

Best regards,
Geert



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org!http://sdm.link/slashdot


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/packetfence-users



-- 
Fabrice Durand

fdur...@inverse.ca   ::  +1.514.447.4918 (x135) 
::www.inverse.ca 
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org)



--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net

https://lists.sourceforge.net/lists/listinfo/packetfence-users





--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users


--
Fabrice Durand
fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org)

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Wifi Registration without using CP

2018-06-14 Thread Geert Heremans via PacketFence-users 
Thanks Fabrice,

just to be sure. I use the PF radius server for the WPA2 authentication
then and not NPS on Windows Server 2016?

2018-06-14 14:39 GMT+02:00 Fabrice Durand via PacketFence-users <
packetfence-users@lists.sourceforge.net>:

> Hello Geert,
>
> since wpa2-entreprise already authenticate the user (AD credential) then
> you can auto register device in this case and no need to have the captive
> portal.
>
> Regards
>
> Fabrice
>
> Le 2018-06-14 à 02:52, Geert Heremans via PacketFence-users a écrit :
>
> Hello everyone,
>
> I'm wondering if it's possible to setup my PF system so that I don't need
> a unsecured SSID with a Captive Portal behind it to allow the users to
> register their device.
>
> In my ideal setup I would have only one SSID with WPA2-Enterprise
> authentication. When one fo my domain users connects to this SSID without a
> registered device, he/she should be redirected to the registration portal.
> After a succesfull registration subsequent login's should automaticlly put
> the user in the designated VLAN.
>
> For what it's worth I'm using Ubiquito Unifi AP's on a Server 2016 Domain
> controlled enviroment.
>
> Thanks you for your kind help.
>
> Best regards,
> Geert
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
>
> ___
> PacketFence-users mailing 
> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
> --
> Fabrice durandfdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
> (http://packetfence.org)
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Wifi Registration without using CP

2018-06-14 Thread Fabrice Durand via PacketFence-users 

Hello Geert,

since wpa2-entreprise already authenticate the user (AD credential) then 
you can auto register device in this case and no need to have the 
captive portal.


Regards

Fabrice


Le 2018-06-14 à 02:52, Geert Heremans via PacketFence-users a écrit :

Hello everyone,

I'm wondering if it's possible to setup my PF system so that I don't 
need a unsecured SSID with a Captive Portal behind it to allow the 
users to register their device.


In my ideal setup I would have only one SSID with WPA2-Enterprise 
authentication. When one fo my domain users connects to this SSID 
without a registered device, he/she should be redirected to the 
registration portal. After a succesfull registration subsequent 
login's should automaticlly put the user in the designated VLAN.


For what it's worth I'm using Ubiquito Unifi AP's on a Server 2016 
Domain controlled enviroment.


Thanks you for your kind help.

Best regards,
Geert


--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users


--
Fabrice Durand
fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org)

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users