Re: [PacketFence-users] 802.1x Computer and User Authentication

2020-04-30 Thread Bill Handler via PacketFence-users
Ludovic, That resolved it!! Thanks!! Thanks, Bill From: Ludovic Zammit Sent: Thursday, April 30, 2020 7:52 AM To: Bill Handler Cc: packetfence-users@lists.sourceforge.net Subject: Re: [PacketFence-users] 802.1x Computer and User Authentication Hello Bill, It looks like when it’s doing the

Re: [PacketFence-users] 802.1x Computer and User Authentication

2020-04-30 Thread Bill Handler via PacketFence-users
Ludvic, Thanks for the quick reply… Looking in the log, I think I found the issue in this log entry: Apr 30 08:58:19 PFserver packetfence_httpd.aaa: httpd.aaa(2385) INFO: [mac:XX:XX:XX:XX:XX:XX] Role has already been computed and we don't want to recompute it. Getting role from node_info (pf::

Re: [PacketFence-users] 802.1x Computer and User Authentication

2020-04-30 Thread Bill Handler via PacketFence-users
Ludovic, See below: [root@pf428 conf]# cat realm.conf # Copyright (C) Inverse inc. [1 DEFAULT] permit_custom_attributes=disabled radius_auth_proxy_type=keyed-balance radius_auth_compute_in_pf=enabled eduroam_radius_auth= domain=PCS eduroam_radius_auth_proxy_type=keyed-balance eduroam_radius_acct=

[PacketFence-users] Let's Encrypt issue in PF 10.

2020-04-30 Thread Lupe Silva via PacketFence-users
I have a fresh install of PF 10 on both Centos and Debian. I am having the same issue with Let's Encrypt. I have updated PF with the latest patches: /usr/local/pf/addons/ pf-maint.pl Following previous issues with lets encrypt, I ran: journalctl -u packetfence-pfperl-api -f Below is the outpu

Re: [PacketFence-users] 802.1x Computer and User Authentication

2020-04-30 Thread Bill Handler via PacketFence-users
Ludvic, For that authentication it shows Realm default – my Domain is listed in both the default and null realms. Thanks, Bill From: Ludovic Zammit Sent: Thursday, April 30, 2020 9:16 AM To: Bill Handler Cc: packetfence-users@lists.sourceforge.net Subject: Re: [PacketFence-users] 802.1x Comp

Re: [PacketFence-users] 802.1x Computer and User Authentication

2020-04-30 Thread Ludovic Zammit via PacketFence-users
Could you post the conf/realm.conf ? cat /usr/local/pf/conf/realm.conf Thanks, Ludovic Zammit lzam...@inverse.ca :: +1.514.447.4918 (x145) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu ) an

Re: [PacketFence-users] 802.1x Computer and User Authentication

2020-04-30 Thread Ludovic Zammit via PacketFence-users
Bill, What’s the realm assign with your connection if you look it up in the Auditing tab in the web admin ? Is that realm stripping in radius authorization ? Thanks, Ludovic Zammit lzam...@inverse.ca :: +1.514.447.4918 (x145) :: www.inverse.ca

Re: [PacketFence-users] 802.1x Computer and User Authentication

2020-04-30 Thread Ludovic Zammit via PacketFence-users
Hello Bill, It looks like when it’s doing the user authentication the EAP authentication happens correctly but the Authorization does not work by not matching your rule in your AD source. Could you paste a user authentication from the logs/packetfence.log? Remove personal infos. My guess is th