Re: [PacketFence-users] Device registration portal

2019-03-19 Thread Nicolas Quiniou-Briand via PacketFence-users
Hello Enrico, On 2019-03-19 5:05 p.m., Enrico Becchetti via PacketFence-users wrote: I'd like to know which is the last IP because some users could make connection from other host to their devices. In my case some endpoints are linux and MacOSX and some users need to make ssh and so on. Not su

Re: [PacketFence-users] PacketFence cisco-avpair ip-inacl

2019-03-19 Thread Durand fabrice via PacketFence-users
Hello Carlos, the correct syntax is this one: answer1 = Cisco-AVPair => ip:inacl#190=deny ip any 153.144.129.128 0.0.0.127;ip:inacl#200=deny ip any 153.144.27.0 0.0.0.255;ip:inacl#210=permit ip any any; Regards Fabrice Le 19-03-06 à 11 h 12, Carlos Wetli via PacketFence-users a écrit :

Re: [PacketFence-users] Vlan Assignemnt via Port

2019-03-19 Thread Durand fabrice via PacketFence-users
Hello Silvester, you are in the correct way, you just need to change the position of you connection profile to match first. Regards Fabrice Le 19-03-19 à 10 h 51, Silvester Schattauer via PacketFence-users a écrit : Hey List, it is me again with another issue i cannot figure out myself.

[PacketFence-users] Vlan Assignemnt via Port

2019-03-19 Thread Silvester Schattauer via PacketFence-users
Hey List, it is me again with another issue i cannot figure out myself. In my network the devices (not the users) are authenticated and assigned a role against ldap. This works all fine but i have a slight issue if i want to have a certain vlan on certain ports no matter what device is plugged

Re: [PacketFence-users] Device registration portal

2019-03-19 Thread Enrico Becchetti via PacketFence-users
Il 19/03/2019 13:56, Nicolas Quiniou-Briand via PacketFence-users ha scritto: Hello Enrico, On 2019-03-13 10:17 a.m., Enrico via PacketFence-users wrote: but what do you think about ip address ? Can ip address be displayed  ? In your situation, for what do you need this information ?   Hell

Re: [PacketFence-users] PacketFence cisco-avpair ip-inacl

2019-03-19 Thread Nicolas Quiniou-Briand via PacketFence-users
Hello Carlos, Did you try directly with a Cisco module ? All Cisco modules that inherite from Catalyst_2960 support directly this feature [0]. ``` $ grep "sub supportsAccessListBasedEnforcement" lib/pf/Switch/Cisco/Catalyst_2960.pm sub supportsAccessListBasedEnforcement { return $TRUE } $

Re: [PacketFence-users] Device registration portal

2019-03-19 Thread Nicolas Quiniou-Briand via PacketFence-users
Hello Enrico, On 2019-03-13 10:17 a.m., Enrico via PacketFence-users wrote: but what do you think about ip address ? Can ip address be displayed  ? In your situation, for what do you need this information ? -- Nicolas Quiniou-Briand n...@inverse.ca :: +1.514.447.4918 *140 :: https://inver

[PacketFence-users] oauth openid microsoft 365

2019-03-19 Thread Brendan Gravé via PacketFence-users
Hi i'm trying to run openid oauth with microsoft 365, here is my last authentication.conf : [Microsoft O365] client_secret=XXX description=Microsoft 0365 local_account_logins=0 client_id= XX access_token_path=/common/oauth2/token create_local_account=no protected_resource_url= https:

Re: [PacketFence-users] PacketFence 8.3.0 on Centos 7.6

2019-03-19 Thread Nicolas Quiniou-Briand via PacketFence-users
Hello, On 2019-03-18 5:33 p.m., pro fence via PacketFence-users wrote: One more thing though, i don't understand why it is not mentionned in the installation doc that we should apply the maintenance patches; it could save some folks days, weeks of searching and trying to figure it out. The  do