[PacketFence-users] Fwd: packetfence dhcp api status error

2021-02-01 Thread Sonali Gulia via PacketFence-users
hi all we are using our own dhcp but getting constant dhcp status error log here is the log file *tail -f /usr/local/pf/logs/pfstats.log* Jan 6 14:43:06 pfnac pfstats[9306]: t=2021-01-06T14:43:06+0530 lvl=warn msg="Unhandled response type from GET /api/v1/dhcp/stats" pid=9306 Jan 6 14:43:16 pfnac

Re: [PacketFence-users] Packetfence PKI and EAP-TLS

2021-02-01 Thread Thijs Vandecasteele via PacketFence-users
Hi Ludovic, Thanks for your feedback. Indeed, that is what I was referring to. I tested both on Windows 10 and Android 10. This is what I did: 1. Generate a root CA using Integration > PKI > Certificate Authorities 2. Copy the root CA to System Configuration > SSL Certificates > Radius > Certifica

[PacketFence-users] multiple reject radius audit log for single request in cluster

2021-02-01 Thread Sonali Gulia via PacketFence-users
hi all, whenever a user gets rejected due to any reason multiple radius audit log generated for single request in cluster.sometimes 10 logs generated sometimes 5. while it's working fine on a single server environment. we try packet monitoring ,check switch interface reauth timer everything . pl

[PacketFence-users] node status shows unregistered for auto registered device

2021-02-01 Thread Sonali Gulia via PacketFence-users
hi all in gui node section node status shows unregistered while they got registered due to auto registered in connection profile . i am attaching node section and radius audit log section screenshot [image: image.png] [image: image.png] ___ PacketFen

Re: [PacketFence-users] Packetfence PKI add SAN

2021-02-01 Thread Thomas Michel via PacketFence-users
Hi Ludovic, did you find out anything? Thanks, Tom. Am 07.12.2020 um 15:32 schrieb Ludovic Zammit: I’m actually testing it and I will let you know what we can do about that. Thanks, Ludovic Zammit lzam...@inverse.ca :: +1.514.447.4918 (x145) ::www.inverse.c

Re: [PacketFence-users] Cannot join domain using GUI - net ads join works

2021-02-01 Thread Geert Heremans via PacketFence-users
Adrian I did the Yum update if I remember correctly and rebooted the machine. Worked perfectly afterwards. Best regards Geert Op ma 1 feb. 2021 om 17:13 schreef Adrian Dessaigne via PacketFence-users < packetfence-users@lists.sourceforge.net>: > Hello ! > > I got the exact same issue ! Do you h

Re: [PacketFence-users] choice of role an access duration

2021-02-01 Thread Diego García del Río via PacketFence-users
Ok. I'm terribly sorry for the multiple posts. It seems the mailing list was stuck. On Mon, Feb 1, 2021, 13:14 Diego Garcia del Rio via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > By the way, I tried using the "stone_role" option but it didn't work. > > I mean: I woul

Re: [PacketFence-users] Cannot join domain using GUI - net ads join works

2021-02-01 Thread Ludovic Zammit via PacketFence-users
Hello Adrian, systemctl restart packetfence-iptables Thanks, Ludovic Zammit lzam...@inverse.ca :: +1.514.447.4918 (x145) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu ) and PacketFence (http

Re: [PacketFence-users] Packetfence PKI and EAP-TLS

2021-02-01 Thread Ludovic Zammit via PacketFence-users
Hello, eap_tls: TLS Alert read:fatal:unknown CA That error means that the client want to trust the Radius certificate that is installed on PAcketFence and does not trust his root CA. To avoid that error, you can first configure a good certificate on the PacketFence Radius service and trust his

Re: [PacketFence-users] PacketFence and Switch Radius

2021-02-01 Thread Ludovic Zammit via PacketFence-users
Hello Louis, You can find great ressources in the documentation: https://www.packetfence.org/doc/PacketFence_Installation_Guide.html https://www.packetfence.org/support.html#/documentation

Re: [PacketFence-users] choice of role an access duration

2021-02-01 Thread Diego Garcia del Rio via PacketFence-users
By the way, I tried using the "stone_role" option but it didn't work. I mean: I would first do the "select role" option in the chain and then the "fixed role" to only set a duration but it doesnt seem to work... On Sun, Jan 31, 2021 at 7:15 PM Diego Garcia del Rio wrote: > Hi Everyone, > > Im

Re: [PacketFence-users] Cannot join domain using GUI - net ads join works

2021-02-01 Thread Adrian Dessaigne via PacketFence-users
Hello ! I got the exact same issue ! Do you have a command to reload PacketFence iptable configuration ? Regards, Adrian. De: "packetfence-users" À: "Geert Heremans" , "packetfence-users" Cc: "Durand fabrice" Envoyé: Mercredi 7 Octobre 2020 15:30:09 Objet: Re: [PacketFence-users]

[PacketFence-users] choice of role an access duration

2021-02-01 Thread Diego Garcia del Rio via PacketFence-users
Hi Everyone, Im trying to achieve the following: On the captive portal, I'd have an admin user login and then select a Role and access duration for a particular device. I got it working but I think im relying on a bit of a bug for it to work. The following is my relevant config: [Select-Role]

[PacketFence-users] Packetfence PKI and EAP-TLS

2021-02-01 Thread Thijs Vandecasteele via PacketFence-users
Hi, For a while now, I'm trying to get EAP-TLS working on Packetfence using the built-in PKI. I'm following the installation guide ( https://www.packetfence.org/doc/PacketFence_Installation_Guide.html#pf-pki), but I think I'm still missing something, or doing something wrong: The guide mentions:

[PacketFence-users] Choice of access duration together with "role choice"

2021-02-01 Thread Diego García del Río via PacketFence-users
Hi Everyone, (sorry if it got double-posted, im not finding my previous email in the archive nor did a get it back when posting) Im trying to achieve the following: On the captive portal, I'd have an admin user login and then select a Role and access duration for a particular device. The role pa

[PacketFence-users] PacketFence and Switch Radius

2021-02-01 Thread Louis Scaringella via PacketFence-users
Hello, Does anyone have experience using PacketFence Radius with network switch authentication? I would only need basic Active Directory integration and authentication and point the switch authentication to PacketFence Radius. The information transmitted, including any attachments, is intended o

[PacketFence-users] Choice of access duration together with "role choice"

2021-02-01 Thread Diego Garcia del Rio via PacketFence-users
Hi Everyone, Im trying to achieve the following: On the captive portal, I'd have an admin user login and then select a Role and access duration for a particular device. The role part is easy as there is a portal module specifically for it. But the Access duration / unreg-date is a bit more comple

[PacketFence-users] Choice of access duration together with "role choice"

2021-02-01 Thread Diego Garcia del Rio via PacketFence-users
Hi Everyone, (sorry if it got double-posted, im not finding my previous email in the archive nor did a get it back when posting) Im trying to achieve the following: On the captive portal, I'd have an admin user login and then select a Role and access duration for a particular device. The role pa

[PacketFence-users] Akamai Technologies, Inc. Acquires Inverse

2021-02-01 Thread Ludovic Marcotte via PacketFence-users
Dear Valued Community Member, We have exciting news to share with you. Today, _Akamai Technologies _ of Cambridge, Massachusetts announced its acquisition of Inverse. Akamai is a global content delivery network, cybersecurity and cloud service company, providing web an