[PacketFence-users] Guest Network / Private Network with Capture and Radius

2021-09-15 Thread Peter Griggs via PacketFence-users
Hello, I have a use case where I need to be able to configure two different SSID’s with UniFi: 1. Private Network auth’d by an upstream radius server (cloud hosted) and separate captive portal. 2. Guest Network with landing page and data capture Can I achieve this with PacketFence

Re: [PacketFence-users] Issue I noticed upgrading to v11

2021-09-15 Thread Quiniou-Briand, Nicolas via PacketFence-users
Hello Arun, > Are you going to provide a patch for issue [2]? Yes. > If yes then with v11.0 do i need to use "pf-main.pl" or follow a different > procedure once patch is ready. pf-maint.pl has been deprecated, you will need to follow this procedure [1] once bug is fixed; [1]

[PacketFence-users] radiusd frequent segfaults

2021-09-15 Thread Cristian Mammoli via PacketFence-users
Hi, after upgrading to v11 I noticed tha radiusd auth (packetfence-radiusd-auth systemd unit) frequenty exits with SEGV or ABRT and gets restarted by systemd: Sep 15 11:29:04 srvpf.apra.it kernel: traps: radiusd[344149] general protection fault ip:42c6a8 sp:7f95a9c1aad0 error:0 in

Re: [PacketFence-users] Admin Guide

2021-09-15 Thread Zeljko Milovanovic via PacketFence-users
Hello Ivo, prices are available on official website: https://www.packetfence.org/support.html#/commercial Greetings! On Wed, Sep 15, 2021 at 3:18 PM Admin SielNet via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > Hello, > > how much does a support hour cost? > >

Re: [PacketFence-users] Issue I noticed upgrading to v11

2021-09-15 Thread Arun Kangle via PacketFence-users
Hi Nicolas, I copied the fingerbank key manually to the new installation, after that it's working fine. Are you going to provide a patch for issue [2]? If yes then with v11.0 do i need to use "pf-main.pl" or follow a different procedure once patch is ready. Thanks, - Arun On Wed, Sep 15, 2021 at

Re: [PacketFence-users] Custom Security Event

2021-09-15 Thread Fabrice Durand via PacketFence-users
In fact it´s a little bit more complicate since you do autoregistration. What you can do is to trigger the security event with action isolate. Then create a vlan filter that disable the autoregistration if the security event is open for this device. Then the first request will be rejected

Re: [PacketFence-users] 回复:RE: v11: whether the new version contain the feature of Zero Trust or micro-segmentation

2021-09-15 Thread Quiniou-Briand, Nicolas via PacketFence-users
Hello, > Are there any plans to add these features? No plan for now. Nicolas Quiniou-Briand Product Support Engineer [cid:image001.png@01D7AA45.76FF7F00] Office: +33156696210 Akamai Technologies 145 Broadway Cambridge, MA 02142 Connect with Us:

Re: [PacketFence-users] Issue I noticed upgrading to v11

2021-09-15 Thread Quiniou-Briand, Nicolas via PacketFence-users
Hello Arun and Cristian, Thanks for your feedback. I opened following issue [1] @Arun, > On GUI I see many services are not running (pid 0) but they are showing as > running (green tick). Please see attached screenshot. Certainly this issue [2] Regarding fingerbank-collector state, it is

Re: [PacketFence-users] Admin Guide

2021-09-15 Thread Admin SielNet via PacketFence-users
Hello, how much does a support hour cost? Greetings Ivo > Am 15.09.2021 um 14:38 schrieb Zammit, Ludovic via PacketFence-users > : > > Hello there, > > You an ask the mailing list questions or purchase support hours to get help > with your deployment. > > Thanks, > > Ludovic Zammit >

Re: [PacketFence-users] Admin Guide

2021-09-15 Thread Zeljko Milovanovic via PacketFence-users
Hello Ludovic, Thank you for the reply and information! On Wed, Sep 15, 2021 at 2:04 PM Zammit, Ludovic wrote: > Hello there, > > You an ask the mailing list questions or purchase support hours to get > help with your deployment. > > Thanks, > > *Ludovic Zammit* > *Product Support Engineer

Re: [PacketFence-users] Admin Guide

2021-09-15 Thread Zammit, Ludovic via PacketFence-users
Hello there, You an ask the mailing list questions or purchase support hours to get help with your deployment. Thanks, Ludovic Zammit Product Support Engineer Principal Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us:

Re: [PacketFence-users] How to use username rewriting in v11?

2021-09-15 Thread Fabrice Durand via PacketFence-users
Yes you can do that Le mar. 14 sept. 2021 à 06:15, David Harvey a écrit : > Borderline thread hijack, but as it's on topic: > > Is it possible to use the radius username rewrite functionality in > combination with "Dot1x recompute role from portal" > > Thanks, > > David > > On Tue, Sep 7, 2021

Re: [PacketFence-users] host prefix missing

2021-09-15 Thread Fabrice Durand via PacketFence-users
Hello Stephan, it looks that you strip the username somewhere, do you have a realm or a radius filter who do that ? Regards Fabrice Le lun. 13 sept. 2021 à 16:41, Kaufhold, Stephan via PacketFence-users < packetfence-users@lists.sourceforge.net> a écrit : > Hello, > > > > the client

[PacketFence-users] Admin Guide

2021-09-15 Thread Zeljko Milovanovic via PacketFence-users
Hello to all! Is there some sort of Admin manual for PacketFence? We've recently installed v11 on Debian, and even though a lot can be learned from Installation guide, there are still bunch of stuff that we, as novice admins, don't understand... and can't easily find on the web. Thank you! --

Re: [PacketFence-users] CaptivePortal with ssl certificate

2021-09-15 Thread Diego Garcia del Rio via PacketFence-users
make sure you restart haproxy-portal after applying the new cert. On Mon, Sep 13, 2021 at 5:41 PM Zestermann, Ronald via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > Hello, > > > > We use the CaptivePortal for a guest WLAN and would like to secure the > CaptivePortal

Re: [PacketFence-users] CaptivePortal with ssl certificate

2021-09-15 Thread Zammit, Ludovic via PacketFence-users
Hello Ronald, Once you have installed the certs in the web admin did you restart the proper services ? packetfence-haproxy-admin and packetfence-haproxy-portal ? If yes, what is the certificate, if it’s a self signed, PacketFence would automatically disabled the SSL secure redirect on the fly

Re: [PacketFence-users] SSL Certs with EC key

2021-09-15 Thread Zammit, Ludovic via PacketFence-users
Hello Ivo, The portal and the web admin look for that file /usr/local/pf/conf/ssl/server.pem It should contain the private key encrypted, the public certificate and the intermediate if needed. The PKI is stored in the DB, right now we don’t provide any way to wipe everything out from the web

Re: [PacketFence-users] How to use username rewriting in v11?

2021-09-15 Thread David Harvey via PacketFence-users
Borderline thread hijack, but as it's on topic: Is it possible to use the radius username rewrite functionality in combination with "Dot1x recompute role from portal" Thanks, David On Tue, Sep 7, 2021 at 9:50 AM Cristian Mammoli via PacketFence-users < packetfence-users@lists.sourceforge.net>