Re: [PacketFence-users] pfdhcplistener 5.5.0

2015-11-25 Thread Christian Hanster
Hi Louis, It’s me again and I found the problem finally. It has to do with the rewritten dhcplistener in the new release. The new listener configuration is checking, if there is a dhcp server running on the interface. If this is the case then it will not work with dhcp-request packages. In my

[PacketFence-users] packetfence-windows-agent.exe

2015-11-25 Thread Hack, Daniel (DPIPWE)
Hi All, Another question hopefully someone can help with? Is there a way to customise the options in packetfence-windows-agent.exe before it is downloaded by the client? There is an option I'd like to enable by default called 'Connect even if this network is not broadcasting its name (SSID)'.

Re: [PacketFence-users] pfdhcplistener 5.5.0

2015-11-25 Thread Christian Hanster
Hi Louis, No there are no lines with DHCPACK or OFFER. This is, because there are no such packets coming (seen in Tcpdump). Our setup is the following: remote client — LAN— router (with dnsmasq and a relay to PF) =VPN-Tunnel= VPN-Server —LAN— PF-Server So PF is not offering any leases to the

Re: [PacketFence-users] pfdhcplistener 5.5.0

2015-11-25 Thread Louis Munro
Hi Christian, Is this all that is in the pfdhcplistener log? No lines with DHCPACK or DHCPOFFER? Which dhcp server is offering leases in the VLAN? The PF dhcp service, or do you have another server providing that service? Are there any dhcpd errors in /var/log/messages? Please post your conf/

Re: [PacketFence-users] Possible bug in admin GUI node list PF v5.5.0

2015-11-25 Thread Sallee, Jake
Fabrice: Thanks for the info! What is the inverse suggested method for cleaning out the location log. I mean, I could just truncate the table but I didn't think that would be best : ) Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor WWW.UMHB.EDU 900 College

Re: [PacketFence-users] pfdhcplistener 5.5.0

2015-11-25 Thread Christian Hanster
Hi, thanks for the response! So after some more testing I found out, that I have to restart the pfdhcplistener manually. Then it is recognising the traffic. I do not what is then different because the pfdhcplistener is running before too… Now the problem is, that PF recognises the new Mac-ad

Re: [PacketFence-users] Possible bug in admin GUI node list PF v5.5.0

2015-11-25 Thread Fabrice DURAND
Hello Jake, you probably have multiples locationlog entry for the same mac address. We fixed that in this version 5.5, when you changed something from the gui (node) then a new locationlog entry was open. So clean the locationlog. Regards Fabrice Le 2015-11-25 12:36, Sallee, Jake a écrit : >

Re: [PacketFence-users] Third Party DNS

2015-11-25 Thread Louis Munro
Not through the logs. First check the dhcpd configuration under var/conf/dhcpd.conf for the subnet in question. Second, do a dhcp release and renew on the client device and see what gets returned. Finally, if that did not work try a packet capture for dhcp. Opening it in wireshark will show yo

[PacketFence-users] Possible bug in admin GUI node list PF v5.5.0

2015-11-25 Thread Sallee, Jake
Hello all! I think you will all be happy to hear that I did not screw up my upgrade from 5.3 to 5.5! ***que trumpets*** I think, though, there may be a bug in the admin GUI. When I pull up a list of my nodes I get multiple entries for the same node. The entries are identical as far as I hav

[PacketFence-users] Order of services start

2015-11-25 Thread Nicola Canepa
Hello, is it possible to change the order which PacketFence uses to start its services? Could it be possible to start at first those needed to keep who was using the service running? I think they are: - pfdhcplistener - dhcpd - iptables - pfmon I think memcached is not strictly necessary, so it

Re: [PacketFence-users] pfdhcplistener 5.5.0

2015-11-25 Thread Louis Munro
> On Nov 25, 2015, at 10:01 , Christian Hanster > wrote: > > Hello everybody, > > I just updated to 5.5.0 but now there are some problems with the > dhcplistener. We have PF running in a two node cluster in inline mode. An active/active or active/passive cluster? Inline is not supported in

Re: [PacketFence-users] DKIM fails while sending packetfence emails.

2015-11-25 Thread Andy A
Hi Louis Firstly, the problem is not with HTML emails, but the text based template emails. I don't have a proof of that but I haven't received complaints from anyone regarding HTML emails going to spam.  Secondly, the problem (afaik) is in guest.pm or util.pm (not in activation.pm which only se

[PacketFence-users] pfdhcplistener 5.5.0

2015-11-25 Thread Christian Hanster
Hello everybody, I just updated to 5.5.0 but now there are some problems with the dhcplistener. We have PF running in a two node cluster in inline mode. Our devices are remote, connected via a vpn-server in the inline network. We have configured a inlinel3 network for the remote clients. On the

Re: [PacketFence-users] Third Party DNS

2015-11-25 Thread Andy A
Anyway to confirm through the logs, that two DNS servers are being sent? > From: lmu...@inverse.ca > Date: Tue, 24 Nov 2015 14:30:16 -0500 > To: packetfence-users@lists.sourceforge.net > Subject: Re: [PacketFence-users] Third Party DNS > > > On Nov 24, 2015,

Re: [PacketFence-users] Third Party DNS

2015-11-25 Thread Andy A
I tried adding a list of dns servers in networks.conf as comma separated list, but I am still only getting first DNS server in the list as my DNS server. This is on a device that I have been testing on for a while. Would it be the case that since PF has seen this device previously, it will send

Re: [PacketFence-users] 802.1x Without AD

2015-11-25 Thread Nathan, Josh
OK guys, sorry for spamming, but I've gotten this far... Authentication works using EAP-TTLS. So the Windows 10 computer can authenticate. However, PacketFence is not updating the VLAN properly. If I have the credentials saved in the computer, it successfully reaches the Registration VLAN, but

Re: [PacketFence-users] 802.1x Without AD

2015-11-25 Thread Durand fabrice
Hello Joshua, you can't use MD5 hash for the password: http://deployingradius.com/documents/protocols/compatibility.html Only clear text or nt hash will work. Regards Fabrice Le 2015-11-25 04:42, Nathan, Josh a écrit : Hello, So... I'm trying to setup 802.1x in a test environment, but I'm

Re: [PacketFence-users] 802.1x Without AD

2015-11-25 Thread Nathan, Josh
OK... correction. The PacketFence radius.log file reports: Auth: Login OK AND the switch does assign the VLAN, but the computer thinks that authentication failed. I had to force it to do a DHCP renew for it to get an IP Address and acknowledge the success. Any ideas on how to smooth that out? A

[PacketFence-users] 802.1x Without AD

2015-11-25 Thread Nathan, Josh
Hello, So... I'm trying to setup 802.1x in a test environment, but I'm getting login faiIures even when the credentials are good. We don't have an Active Directory server or the like, but instead we're storing accounts in a MySQL database using MD5 encryption. With a Linux computer (Chromixium t

Re: [PacketFence-users] Open Mesh CT4 - Out of Band Support

2015-11-25 Thread mourik jan heupink
Hi Michael, Searching the archives, I found your message below. It seems you are using with open-mesh, as are we. Did you manage to use packetfence as external radius server with your openmesh ct4 network? MJ On 07/29/2015 06:27 AM, Michael Stone wrote: > Has anyone had a look at the new sof