Re: [PacketFence-users] Trying to join AD.... routing is having major issue

2018-06-14 Thread Durand fabrice via PacketFence-users
Hello Steven, 169.254.0.0 is a virtual interface to be able to link a virtual network namespace used by the chroot where winbind is running. Can you post the result of: ip a and the content of /usr/local/pf/var/conf/iptables.conf Regards Fabrice Le 2018-06-14 à 17:39, Steven Pfister

Re: [PacketFence-users] (no subject)

2018-06-14 Thread Durand fabrice via PacketFence-users
Hello Hajar, when you fill the form then PacketFence send a email to the sponsor. So you need to be sure that the smtp configuration is correct or you can install postfix. Regards Fabrice Le 2018-06-14 à 17:33, hajar benjat via PacketFence-users a écrit : Hello I wanna ask u ... I

Re: [PacketFence-users] (no subject)

2018-06-14 Thread hajar benjat via PacketFence-users
Hello I wanna ask u ... I create a user I mark it as sponsor and I go to the user and I want to singup using sponsor based registration When I set an email and I set the sponsor email ... it show me pending approval ... Why I can't connect to internet ? Regards Le jeu. 31 mai 2018 2:40 AM,

[PacketFence-users] Trying to join AD.... routing is having major issue

2018-06-14 Thread Steven Pfister via PacketFence-users
We are in the middle of trying to join our AD server in order to authenticate against it. After adding our domain, it's not able to join it. It's added a virtual interface and some routing for the 169.254.0.0 network. I'm not sure what the routing table is supposed to look like. I'm having trouble

Re: [PacketFence-users] Google authentication options

2018-06-14 Thread Fabrice Durand via PacketFence-users
In PacketFence we do a person lookup (fetch info from ldap) when a 802.1x user connect on the network so indirectly you can have the google information from the AD. Le 2018-06-14 à 10:05, Steve Pfister via PacketFence-users a écrit : I've heard that you can sync accounts between your Active

Re: [PacketFence-users] Network access monitoring

2018-06-14 Thread Murilo Calegari via PacketFence-users
I've notived that, but I needed a system that could aggregate different MACs and/or users' access logs specifically under their identification. So far I haven't had the time to check these options presented, hope I can return soon! Em qui, 14 de jun de 2018 09:40, Fabrice Durand via

[PacketFence-users] Google authentication options

2018-06-14 Thread Steve Pfister via PacketFence-users
I've heard that you can sync accounts between your Active Directory and Google. Can you do the same between Google and local Packetfence accounts? -- Check out the vibrant tech community on one of the world's most

[PacketFence-users] HPE 1920 and NAS-Port

2018-06-14 Thread Johan Thomas via PacketFence-users
Hi, We are installing packetfence and we have a lot of HPE 1920 and 1910. I'm testing them with packetfence but i'm having a strange behavior. Packetfence receive the Radius request, the port received the registration VLAN but the switch port is not good in the interface: we only see "port 0". I

Re: [PacketFence-users] Wifi Registration without using CP

2018-06-14 Thread Fabrice Durand via PacketFence-users
You just need to join the PacketFence server to the domain. Le 2018-06-14 à 08:42, Geert Heremans via PacketFence-users a écrit : Thanks Fabrice, just to be sure. I use the PF radius server for the WPA2 authentication then and not NPS on Windows Server 2016? 2018-06-14 14:39 GMT+02:00

Re: [PacketFence-users] EAP and Local

2018-06-14 Thread Fabrice Durand via PacketFence-users
Hello Josh, Le 2018-06-14 à 03:42, Josh Nathan via PacketFence-users a écrit : Hi Fabrice, For what it's worth, I've found the same results on both PacketFence 6.4 and 8.0. And yes, I did/do have packetfence-local-auth enabled. Our goal is to use an external RADIUS server for

Re: [PacketFence-users] Wifi Registration without using CP

2018-06-14 Thread Geert Heremans via PacketFence-users
Thanks Fabrice, just to be sure. I use the PF radius server for the WPA2 authentication then and not NPS on Windows Server 2016? 2018-06-14 14:39 GMT+02:00 Fabrice Durand via PacketFence-users < packetfence-users@lists.sourceforge.net>: > Hello Geert, > > since wpa2-entreprise already

Re: [PacketFence-users] Network access monitoring

2018-06-14 Thread Fabrice Durand via PacketFence-users
Btw the new pfdns in go provide this information in the log. Le 2018-06-14 à 03:15, mj via PacketFence-users a écrit : Hi, We have (kind of) solved this by logging dns requests done by the inline clients, plus their mac address. We are using this: https://github.com/gamelinux/passivedns

Re: [PacketFence-users] Wifi Registration without using CP

2018-06-14 Thread Fabrice Durand via PacketFence-users
Hello Geert, since wpa2-entreprise already authenticate the user (AD credential) then you can auto register device in this case and no need to have the captive portal. Regards Fabrice Le 2018-06-14 à 02:52, Geert Heremans via PacketFence-users a écrit : Hello everyone, I'm wondering if

[PacketFence-users] Wifi Registration without using CP

2018-06-14 Thread Geert Heremans via PacketFence-users
Hello everyone, I'm wondering if it's possible to setup my PF system so that I don't need a unsecured SSID with a Captive Portal behind it to allow the users to register their device. In my ideal setup I would have only one SSID with WPA2-Enterprise authentication. When one fo my domain users

Re: [PacketFence-users] Network access monitoring

2018-06-14 Thread Murilo Calegari via PacketFence-users
I'll give it a try, thanks! Em qui, 14 de jun de 2018 04:30, mj via PacketFence-users < packetfence-users@lists.sourceforge.net> escreveu: > Hi, > > We have (kind of) solved this by logging dns requests done by the inline > clients, plus their mac address. We are using this: > >

Re: [PacketFence-users] Need advice on server certificates

2018-06-14 Thread Tobias Friede via PacketFence-users
Hi, Have a look at the packetfence documentation. You can implement your own certificates for the radius server. https://packetfence.org/doc/PacketFence_Installation_Guide.html#_pki_integration For example we use a Windows Server CA and we deploy the certificates via Group Policy to our

[PacketFence-users] number of allowed devices having no effect

2018-06-14 Thread Franklin, Adam via PacketFence-users
Hi Would you be able to assist with an issue I have found with our PacketFence system, I have a "visitor" role configured with a max number of devices allowed to be registered at 2. I manually created a test account and assigned it the "visitor" role. I've just tested this and the max number of

Re: [PacketFence-users] EAP and Local

2018-06-14 Thread Josh Nathan via PacketFence-users
Hi Fabrice, For what it's worth, I've found the same results on both PacketFence 6.4 and 8.0. And yes, I did/do have packetfence-local-auth enabled. Our goal is to use an external RADIUS server for authentication. However, the RADIUS server doesn't store the realm identification as part of the

Re: [PacketFence-users] Network access monitoring

2018-06-14 Thread mj via PacketFence-users
Hi, We have (kind of) solved this by logging dns requests done by the inline clients, plus their mac address. We are using this: https://github.com/gamelinux/passivedns We run a cron script to purge the collected data after x number of days. MJ On 06/13/2018 03:52 PM, Murilo Calegari via