[PacketFence-users] rules in vlan_filters.conf will only change role if device is NOT auto-registered, and auto-registration rules in vlan_filters.conf will only register a node as 'default' role desp

2017-02-15 Thread Gary Stansbury
Hello all, Inverse folks, 6.5 is really looking good, well done as usual! I have noted the following on both PF5.4 and 6.5 and would like some help determining how to accomplish the mission: I am using the following filters and rules in /usr/local/pf/conf/vlan_filters.conf: [WirelessEAP] filt

Re: [PacketFence-users] rules in vlan_filters.conf will only change role if device is NOT auto-registered, and auto-registration rules in vlan_filters.conf will only register a node as 'default' role

2017-02-15 Thread Gary Stansbury
As a further update to this issue, adding in another filter and rule like these: [autoreg] filter=node_info.autoreg operator=is value=yes [u1:WirelessEAP&machineauth¬empl&autoreg] scope=RegisteredRole role=Employee action=modify_node action_param=mac=$mac,autoreg=no,notes= actually (sort of, in

Re: [PacketFence-users] Lets Encrypt compatability

2017-02-15 Thread Arthur Emerson
Sallee, Jake wrote: Since it looks like I will need to be replacing my cert I was wondering about using Lets Encrypt. It looks like a really nice project and the cost is right up my alley! Is there any reason I should not use a LE cert? Anyone see a problem with th

[PacketFence-users] Lets Encrypt compatability

2017-02-15 Thread Sallee, Jake
Hello All! My current captive portal cert is through Comodo, suddenly all kinds of devices are very upset about this fact. Most mobile devices no longer trust my cert and now some desktop/laptop systems are complaining as well. Since it looks like I will need to be replacing my cert I was wond

Re: [PacketFence-users] hostapd/Openwrt with Multiple SSIDs on same vlan Bug

2017-02-15 Thread Louis Munro
> On Feb 15, 2017, at 8:53 AM, Chris Abel wrote: > > I don't mean to be a pest, but is there any more information that you might > need? This seems like basic functionality that others would want working as > well. A Pull Request would be nice. Regards, -- Louis Munro lmu...@inverse.ca

Re: [PacketFence-users] PacketFence-users Digest, Vol 106, Issue 41

2017-02-15 Thread Antoine Amacher
Hello Erik, you should try to look for the logs on the WLC side, you might have more information of why the CoA is not accepted, at least see if the CoA is received by the WLC. Can you also link the 10.0.12.2 and the default section of conf/switches.conf ? Thanks On 02/14/2017 01:06 PM,

Re: [PacketFence-users] hostapd/Openwrt with Multiple SSIDs on same vlan Bug

2017-02-15 Thread Chris Abel
I don't mean to be a pest, but is there any more information that you might need? This seems like basic functionality that others would want working as well. On Fri, Feb 10, 2017 at 4:09 PM, Chris Abel wrote: > Hi Ludovic, > > I'll do my best with the Use Case. Let me know if you don't understan

Re: [PacketFence-users] Active/Passive cluster - Slave server rejecting user Auth

2017-02-15 Thread Campanaro, Michael
So I'm still getting the same results. I've taken notice to the time of the log entries as well: After my test PC is registered and authenticated it will get rejected exactly 4 hours later. The last few times it's been kicked off the network it was always exactly 4 hours after the radius accepta

[PacketFence-users] Switch compatibility ?

2017-02-15 Thread Thomas Massip
Hi all, I actually use FreeRADIUS Version 3.0.13 with PacketFence 6. I have 2 types of Switchs NAS, Huawei and cisco. But with they Huawei switch I have this error : "PacketFence does not support this switch for read/write access login" And with Cisco that works fine. The configuration is t