[PacketFence-users] PacketFence and Switch Radius

2021-02-01 Thread Louis Scaringella via PacketFence-users
Hello, Does anyone have experience using PacketFence Radius with network switch authentication? I would only need basic Active Directory integration and authentication and point the switch authentication to PacketFence Radius. The information transmitted, including any attachments, is intended

Re: [PacketFence-users] Packetfence Deployed in Private Static environment

2021-01-02 Thread Louis Scaringella via PacketFence-users
Why not use Fingerbank? Maybe just MAC OUI and vendor somehow? Thank you, Louis Scaringella Security Systems Engineer Yellow Dog Networks 785-342-7903 > On Dec 31, 2020, at 5:36 PM, NITISH AGGARWAL via PacketFence-users > wrote: > >  > Hi, > > I have deployed Packetfence in my private(not

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-14 Thread Louis Scaringella via PacketFence-users
Instantiate profile Lab-Aruba-OpenGuest-copy > (pf::Connection::ProfileFactory::_from_profile) > > > Louis Scaringella > Security Systems Engineer > Yellow Dog Networks, Inc > 785-342-7903 > >> On Oct 8, 2020, at 4:03 PM, Louis Scaringella via PacketFence-users >> w

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-09 Thread Louis Scaringella via PacketFence-users
mac:00:24:d6:5b:30:bc] Instantiate profile Lab-Aruba-OpenGuest-copy (pf::Connection::ProfileFactory::_from_profile) Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 > On Oct 8, 2020, at 4:03 PM, Louis Scaringella via PacketFence-users > wrote: > > A

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-08 Thread Louis Scaringella via PacketFence-users
t; Regards >>>> >>>> Fabrice >>>> >>>> >>>> Le 20-10-08 à 14 h 37, Louis Scaringella a écrit : >>>>> What would cause the httpd.aaa process to match the correct profile but >>>>> then the httpd.portal to match the

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-08 Thread Louis Scaringella via PacketFence-users
something just isn’t right here. Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 > On Oct 8, 2020, at 12:11 PM, Louis Scaringella via PacketFence-users > wrote: > > From the Aruba.pm switch file I see this: > > > sub extractSsid { >my

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-08 Thread Louis Scaringella via PacketFence-users
abrice >>>> >>>> >>>> Le 20-10-08 à 14 h 37, Louis Scaringella a écrit : >>>>> What would cause the httpd.aaa process to match the correct profile but >>>>> then the httpd.portal to match the default? >>>>> Does it not use the sa

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-08 Thread Louis Scaringella via PacketFence-users
rofileFactory::_from_profile) >>>>>>>>> Oct 7 13:09:00 localhost packetfence_httpd.portal: >>>>>>>>> httpd.portal(2656) WARN: [mac:00:24:d6:5b:30:bc] locale from the URL >>>>>>>>> is not supported >>>>>>>>

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-08 Thread Louis Scaringella via PacketFence-users
tion profile so something just isn’t right here. >> >> Louis Scaringella >> Security Systems Engineer >> Yellow Dog Networks, Inc >> 785-342-7903 >> >>> On Oct 8, 2020, at 12:11 PM, Louis Scaringella via PacketFence-users >>> wrote: >>> >

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-08 Thread Louis Scaringella via PacketFence-users
;> connection profile so something just isn’t right here. >> >> Louis Scaringella >> Security Systems Engineer >> Yellow Dog Networks, Inc >> 785-342-7903 >> >>> On Oct 8, 2020, at 12:11 PM, Louis Scaringella via PacketFence-users >>> wrote:

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-08 Thread Louis Scaringella via PacketFence-users
oEAP,switch_mac => >>>> (20:4c:03:58:99:8a), mac => [00:24:d6:5b:30:bc], port => 0, username => >>>> "00-24-d6-5b-30-bc" (pf::radius::authorize) >>>> Oct 7 13:09:02 localhost packetfence_httpd.aaa: httpd.aaa(2063) INFO: >>>> [ma

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-08 Thread Louis Scaringella via PacketFence-users
ce(s) : >>>> 'local,file1,LabDC,LabDC-TestSponsor' for realm 'null' >>>> (pf::config::util::filter_authentication_sources) >>>> Oct 7 13:09:02 localhost packetfence_httpd.aaa: httpd.aaa(2063) INFO: >>>> [mac:00:24:d6:5b:30:bc] Connection type i

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-08 Thread Louis Scaringella via PacketFence-users
eless-802.11-NoEAP,switch_mac => >>>> (20:4c:03:58:99:8a), mac => [00:24:d6:5b:30:bc], port => 0, username => >>>> "00-24-d6-5b-30-bc" (pf::radius::authorize) >>>> Oct 7 13:09:02 localhost packetfence_httpd.aaa: httpd.aaa(2063) INFO: >>>> [mac

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-08 Thread Louis Scaringella via PacketFence-users
"00-24-d6-5b-30-bc" (pf::radius::authorize) >>>> Oct 7 13:09:02 localhost packetfence_httpd.aaa: httpd.aaa(2063) INFO: >>>> [mac:00:24:d6:5b:30:bc] Instantiate profile default >>>> (pf::Connection::ProfileFactory::_from_profile) >>>> Oct 7 13:09:02 loca

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-08 Thread Louis Scaringella via PacketFence-users
bc" (pf::radius::authorize) >>>> Oct 7 13:09:02 localhost packetfence_httpd.aaa: httpd.aaa(2063) INFO: >>>> [mac:00:24:d6:5b:30:bc] Instantiate profile default >>>> (pf::Connection::ProfileFactory::_from_profile) >>>> Oct 7 13:09:02 localhost

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-07 Thread Louis Scaringella via PacketFence-users
Is the information in the request sufficient for this to be fixed? I can provide anything else you may need on the Aruba side to help. Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 > On Oct 7, 2020, at 1:12 PM, Louis Scaringella via PacketFence-us

Re: [PacketFence-users] Guest Sponsorship

2020-10-07 Thread Louis Scaringella via PacketFence-users
Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 > On Oct 7, 2020, at 12:39 PM, Louis Scaringella via PacketFence-users > wrote: > > I’ll try and capture that shortly. > > Just as a comparison, whenever I use a PacketFence local user that I create > to

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-07 Thread Louis Scaringella via PacketFence-users
t; 785-342-7903 >> >>> On Oct 7, 2020, at 8:17 AM, Fabrice Durand via PacketFence-users >>> wrote: >>> >>> Hello Louis, >>> >>> can you provide the packetfence.log when you authenticate and hit the >>> portal ? >>> >>> Reg

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-07 Thread Louis Scaringella via PacketFence-users
f::Switch::getVlanByName) >> Oct 7 13:09:02 localhost packetfence_httpd.aaa: httpd.aaa(2063) INFO: >> [mac:00:24:d6:5b:30:bc] Updating locationlog from accounting request >> (pf::api::handle_accounting_metadata) >> Louis Scaringella >> Security Systems Engineer

Re: [PacketFence-users] Guest Sponsorship

2020-10-07 Thread Louis Scaringella via PacketFence-users
for some reason. Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 > On Oct 7, 2020, at 12:24 PM, Louis Scaringella via PacketFence-users > wrote: > > Thank you. I am using that name and just verified that is how it shows in AD > exactly.

Re: [PacketFence-users] Guest Sponsorship

2020-10-07 Thread Louis Scaringella via PacketFence-users
>>>>>>> When you click on the link then the portal ask you to authenticate with >>>>>>> the sponsor credential but the format of the username depend of the >>>>>>> username attribute you defined (like sAMAccountName or

Re: [PacketFence-users] Guest Sponsorship

2020-10-07 Thread Louis Scaringella via PacketFence-users
> What i think it's probably because of the username attribute in the AD >>>>> authentication source. >>>>> >>>>> When you set a sponsor in the portal then packetfence try to find the >>>>> email address in the AD and check if the user account is

Re: [PacketFence-users] Guest Sponsorship

2020-10-07 Thread Louis Scaringella via PacketFence-users
is a sponsor. >>> >>> When you click on the link then the portal ask you to authenticate with the >>> sponsor credential but the format of the username depend of the username >>> attribute you defined (like sAMAccountName or userPrincipalName). >>

Re: [PacketFence-users] Guest Sponsorship

2020-10-07 Thread Louis Scaringella via PacketFence-users
gt; When you click on the link then the portal ask you to authenticate with the > sponsor credential but the format of the username depend of the username > attribute you defined (like sAMAccountName or userPrincipalName). > > > Le 20-10-07 à 12 h 13, Louis Scaringella via PacketFe

Re: [PacketFence-users] Guest Sponsorship

2020-10-07 Thread Louis Scaringella via PacketFence-users
onsor credential but the format of the username depend of the username >> attribute you defined (like sAMAccountName or userPrincipalName). >> >> >> Le 20-10-07 à 12 h 13, Louis Scaringella via PacketFence-users a écrit : >>> I tried the same thing, but using Active Directory so

Re: [PacketFence-users] Guest Sponsorship

2020-10-07 Thread Louis Scaringella via PacketFence-users
, but doesn’t mark that user as “sponsor” in its attributes. Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 > On Oct 7, 2020, at 11:13 AM, Louis Scaringella via PacketFence-users > wrote: > > I tried the same thing, but using Active Directory sour

Re: [PacketFence-users] Guest Sponsorship

2020-10-07 Thread Louis Scaringella via PacketFence-users
that the user doesn’t have access to sponsor. The AD source is now set to have an administrative rule to mark as sponsor. Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 > On Oct 7, 2020, at 10:48 AM, Louis Scaringella via PacketFence-users > wrote: > > Of c

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-07 Thread Louis Scaringella via PacketFence-users
20, at 8:17 AM, Fabrice Durand via PacketFence-users > wrote: > > Hello Louis, > > can you provide the packetfence.log when you authenticate and hit the portal ? > > Regards > > Fabrice > > > Le 20-10-06 à 17 h 30, Louis Scaringella via PacketFence-users a écr

Re: [PacketFence-users] Guest Sponsorship

2020-10-07 Thread Louis Scaringella via PacketFence-users
> you will need to check in the packetfence.log what authentication source is > used when you log on the portal (to validate the access). > > Regards > > Fabrice > > > Le 20-10-06 à 21 h 47, Louis Scaringella via PacketFence-users a écrit : >> I made some progress with

Re: [PacketFence-users] Switch Not Managed

2020-10-07 Thread Louis Scaringella via PacketFence-users
https://github.com/inverse-inc/packetfence/issues/3960 Are you using IP in this case then? Thank you, Louis Scaringella Security Systems Engineer Yellow Dog Networks 785-342-7903 On Oct 7, 2020, at 12:22 AM, Louis Scaringella wrote:  Hello, Not sure offhand about your issue but I ran into

Re: [PacketFence-users] Switch Not Managed

2020-10-07 Thread Louis Scaringella via PacketFence-users
Hello, Not sure offhand about your issue but I ran into an issue similar a while ago. Under your network interfaces, do you have one that has Radius enabled on it in to listen in addition to management? Also, are you certain that IP of the controller in the log matches the switch IP you have

Re: [PacketFence-users] Guest Sponsorship

2020-10-06 Thread Louis Scaringella via PacketFence-users
I made some progress with this. I can now progress past the sponsor email section and it accepts it. The sponsor gets the email, clicks the link, I login with the sponsor account, but then it says "does not have permission to sponsor a user”. Any ideas now? Louis Scaringella Security Systems

[PacketFence-users] Guest Sponsorship

2020-10-06 Thread Louis Scaringella via PacketFence-users
Hello, I’m having an issue with the captive portal with sponsored guest access. Basically, when I go to test this and enter a sponsor email, it tells me that email doesn’t have access to be a sponsor. Unfortunately, there isn’t great documentation on this process and the other posts about this

Re: [PacketFence-users] Guest Sponsorship

2020-10-06 Thread Louis Scaringella via PacketFence-users
The exact message is : Email [myem...@mydomain.com] is not allowed to sponsor guest access. When I run the following test, it matches my authentication source which has this marked as a sponsor. [root@localhost bin]# ./pftest authentication lscaringe...@ydn.co xx Testing

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-06 Thread Louis Scaringella via PacketFence-users
020, at 8:58 AM, Louis Scaringella via PacketFence-users > wrote: > > To add to this, I tried add an advanced filter with what showed up for the > SSID name in the Radius request in the audit logs but still didn’t match > this. Things like called-station-ID and ArubaESSID but no

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-06 Thread Louis Scaringella via PacketFence-users
. Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 > On Oct 5, 2020, at 7:13 PM, Louis Scaringella via PacketFence-users > wrote: > > Any ideas on this? > > Louis Scaringella > Security Systems Engineer > Yellow Dog Networks, Inc > 785-3

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-05 Thread Louis Scaringella via PacketFence-users
www.inverse.ca >> >> Inverse inc. :: Leaders behind SOGo ( >> http://www.sogo.nu) and PacketFence (http://packetfence.org) >> >> >> >> >>> On Oct 3, 2020, at 5:00 AM, Louis Scaringella via PacketFence-users >>> wrote: >>> >>

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-05 Thread Louis Scaringella via PacketFence-users
erse.ca :: +1.514.447.4918 (x145) :: www.inverse.ca > > Inverse inc. :: Leaders behind SOGo ( > http://www.sogo.nu) and PacketFence (http://packetfence.org) > > > > >> On Oct 3, 2020, at 5:00 AM, Louis Scaringella via PacketFence-users >> wrote: >> >

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-05 Thread Louis Scaringella via PacketFence-users
: Leaders behind SOGo ( > http://www.sogo.nu) and PacketFence (http://packetfence.org) > > > > >> On Oct 3, 2020, at 5:00 AM, Louis Scaringella via PacketFence-users >> wrote: >> >> Ultimately what I am trying to accomplish is to have multiple connecti

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-04 Thread Louis Scaringella via PacketFence-users
I am running 10.1, I forgot to mention. Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 > On Oct 3, 2020, at 1:40 AM, Louis Scaringella > wrote: > > Hello, > > When I configure a custom connection profile for my open guest captive portal > connection with

[PacketFence-users] Connection Profile and SSID Filter

2020-10-04 Thread Louis Scaringella via PacketFence-users
Hello, When I configure a custom connection profile for my open guest captive portal connection with AUP, I am able to have the connection profile get triggered and used when I use the Connection Type filter with “Wireless-802.11-NoEAP”. However, if I add the condition of all and add the SSID

Re: [PacketFence-users] Connection Profile and SSID Filter

2020-10-04 Thread Louis Scaringella via PacketFence-users
Ultimately what I am trying to accomplish is to have multiple connection profiles chosen by SSID so that I can present different captive portal pages and authentication types. The only way I see to do that is through the connection profile. Am I missing something with the SSID filter not

[PacketFence-users] Best Method to Delete a Node

2020-10-01 Thread Louis Scaringella via PacketFence-users
I’m a bit confused. What is the best method to completely delete a node from the node list? I don’t see an option in the GUI. Any help is appreciated and thanks for your time. Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 The information transmitted,

Re: [PacketFence-users] Customer Admin User

2020-08-18 Thread Louis Scaringella via PacketFence-users
Got it figured out! Thank you, Louis Scaringella Security Systems Engineer Yellow Dog Networks 785-342-7903 > On Aug 17, 2020, at 12:36 AM, Louis Scaringella via PacketFence-users > wrote: > > Can someone point me in the right direction for creating a custom web GUI >

[PacketFence-users] Customer Admin User

2020-08-16 Thread Louis Scaringella via PacketFence-users
Can someone point me in the right direction for creating a custom web GUI user other than the “admin” account? I’d like individual user accounts for web administration if possible. Any help is greatly appreciated. Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc

Re: [PacketFence-users] High CPU - pfcmd.pl and Perl

2020-07-23 Thread Louis Scaringella via PacketFence-users
t disable packetfence-radiusd-acct.service > > systemctl disable packetfence-radiusd-acct.service > > Regards > > Fabrice > > > Le 20-07-22 à 22 h 15, Louis Scaringella via PacketFence-users a écrit : >> In the /var/log/messages log I see this: >> >> Ju

Re: [PacketFence-users] PacketFence and Domain Join Issues

2020-07-22 Thread Louis Scaringella via PacketFence-users
Fix is on Github for this. https://github.com/inverse-inc/packetfence/issues/5681 Thank you, Louis Scaringella Security Systems Engineer Yellow Dog Networks 785-342-7903 On Jul 22, 2020, at 8:02 PM, Michael Brown via PacketFence-users wrote:  We are seeing this too. Did you find a

Re: [PacketFence-users] High CPU - pfcmd.pl and Perl

2020-07-22 Thread Louis Scaringella via PacketFence-users
problem and why pfcmd.pl keeps getting triggered and ran. Any ideas? Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 > On Jul 22, 2020, at 5:21 PM, Louis Scaringella via PacketFence-users > wrote: > > Hello, > > I just install Cent OS 7.8 and ins

Re: [PacketFence-users] PacketFence and Domain Join Issues

2020-07-22 Thread Louis Scaringella via PacketFence-users
wrote: > > Bug with winbindd not being enabled after joining the domain...so winbindd > isn’t running when you reboot. > > Run /usr/local/pf/addons/pf-maint.pl to pull latest patches and try again. > > On Wed, Jul 22, 2020 at 1:02 PM Louis Scaringella via PacketFence-users

Re: [PacketFence-users] PacketFence and Domain Join Issues

2020-07-22 Thread Louis Scaringella via PacketFence-users
not sure where to adjust this. Any help would be greatly appreciated! Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 > On Jul 22, 2020, at 11:45 AM, Louis Scaringella via PacketFence-users > wrote: > > Hello, > > We are running PacketFence

[PacketFence-users] High CPU - pfcmd.pl and Perl

2020-07-22 Thread Louis Scaringella via PacketFence-users
Hello, I just install Cent OS 7.8 and installed PacketFence and applied the latest bug fixes today. When running the top command, I seem to be having an issue now where the pfcmd.pl and perl processes are continuously running and using high CPU. Any ideas where to start with investigating why

[PacketFence-users] PacketFence and Domain Join Issues

2020-07-22 Thread Louis Scaringella via PacketFence-users
Hello, We are running PacketFence 10.1.0 and running into an issue when joining the domain. It seems we are able to join the domain just fine, but after a rebooting, we see the message “Cannot open network namespace RQSDomain”. When we re-join it seems to join fine and is green, but always

Re: [PacketFence-users] Zero Effort NAC and VMware 7

2020-06-22 Thread Louis Scaringella via PacketFence-users
I’m not certain. I’ll have to try and gather that from my client. Thank you, Louis Scaringella Security Systems Engineer Yellow Dog Networks 785-342-7903 > On Jun 22, 2020, at 12:21 AM, Nicolas Quiniou-Briand wrote: > > Hi Louis, > > I reopened your issue [1]. Could you tell me if you got

Re: [PacketFence-users] Zero Effort NAC and VMware 7

2020-06-19 Thread Louis Scaringella via PacketFence-users
Perfect! Thank you so much. > On Jun 18, 2020, at 8:42 AM, Nicolas Quiniou-Briand wrote: > >  > >> On 18/06/2020 15:19, Louis Scaringella wrote: >> Do you know when it’ll be available on the website? I’ll send it over to my >> client to try ASAP. > > It has been updated 20 minutes ago:

Re: [PacketFence-users] Zero Effort NAC and VMware 7

2020-06-19 Thread Louis Scaringella via PacketFence-users
Looks like this did not work, at least in my customer environment. Here is their response: Still the same error. I tried this on both our old cluster and the HCI cluster. The error occurs when it is trying to validate the storage. Louis Scaringella Security Systems Engineer Yellow Dog

Re: [PacketFence-users] Zero Effort NAC and VMware 7

2020-06-18 Thread Louis Scaringella via PacketFence-users
I will give it a try with one of my clients as soon as I can. Thanks! I don’t have VMware 7 to test with just yet. Louis > On Jun 18, 2020, at 12:19 AM, Nicolas Quiniou-Briand via PacketFence-users > wrote: > > Hello Louis, > >> On 17/06/2020 23:20, Louis Scaringella

Re: [PacketFence-users] Zero Effort NAC and VMware 7

2020-06-18 Thread Louis Scaringella via PacketFence-users
ust yet. > > Louis > >> On Jun 18, 2020, at 12:19 AM, Nicolas Quiniou-Briand via PacketFence-users >> wrote: >> >> Hello Louis, >> >>>> On 17/06/2020 23:20, Louis Scaringella via PacketFence-users wrote: >>> I may install in ESXI 6.7 and the

Re: [PacketFence-users] Zero Effort NAC and VMware 7

2020-06-17 Thread Louis Scaringella via PacketFence-users
> > I had the same problem, I solved to install it first on the vmware player or > workstation and then convert and then upload it on the infrastructure. > Thanks > > On Wed, 17 Jun 2020, 20:52 Louis Scaringella via PacketFence-users, > wrote: > There is an issue when using the

Re: [PacketFence-users] Question about Aruba and MAC/802.1X Auth

2020-06-05 Thread Louis Scaringella via PacketFence-users
; On Jun 4, 2020, at 9:56 PM, Durand fabrice via PacketFence-users >>> wrote: >>> >>> Hello Louis, >>> >>> my answer bellow. >>> >>> Le 20-06-04 à 21 h 53, Louis Scaringella via PacketFence-users a écrit : >>>> Hello, >>>&

Re: [PacketFence-users] Question about Aruba and MAC/802.1X Auth

2020-06-05 Thread Louis Scaringella via PacketFence-users
0-06-04 à 21 h 53, Louis Scaringella via PacketFence-users a écrit : >> Hello, >> >> Thank you for your time in helping. >> >> I am working with a client and the goal is to build upon the current 802.1X >> PEAP environment they have with Windows NPS and expand this t

Re: [PacketFence-users] Question about Aruba and MAC/802.1X Auth

2020-06-05 Thread Louis Scaringella via PacketFence-users
llow. > > Le 20-06-04 à 21 h 53, Louis Scaringella via PacketFence-users a écrit : >> Hello, >> >> Thank you for your time in helping. >> >> I am working with a client and the goal is to build upon the current 802.1X >> PEAP environment they have with Win

Re: [PacketFence-users] Question about Aruba and MAC/802.1X Auth

2020-06-05 Thread Louis Scaringella via PacketFence-users
0, at 9:56 PM, Durand fabrice via PacketFence-users >> wrote: >> >> Hello Louis, >> >> my answer bellow. >> >> Le 20-06-04 à 21 h 53, Louis Scaringella via PacketFence-users a écrit : >>> Hello, >>> >>> Thank you for your t

[PacketFence-users] Question about Aruba and MAC/802.1X Auth

2020-06-04 Thread Louis Scaringella via PacketFence-users
Hello, Thank you for your time in helping. I am working with a client and the goal is to build upon the current 802.1X PEAP environment they have with Windows NPS and expand this to use PacketFence and to limit BYOD by using MAC address authentication in conjunction with 802.1X PEAP.

Re: [PacketFence-users] NAC bypass

2019-05-23 Thread Louis Scaringella via PacketFence-users
Thanks! I always like to get different perspectives on how people do things. That is the same with many of my customer environments. > On May 23, 2019, at 3:16 PM, Sallee, Jake via PacketFence-users > wrote: > >> Out of curiosity, how are you prevent IPv6 addresses from flowing? Is this >>

Re: [PacketFence-users] NAC bypass

2019-05-23 Thread Louis Scaringella via PacketFence-users
Out of curiosity, how are you prevent IPv6 addresses from flowing? Is this at the router/L3 switch or firewall level? What about non-routable link local addresses? > On May 23, 2019, at 1:21 PM, Sallee, Jake via PacketFence-users > wrote: > > Max: > > This strikes me as an uninformed

Re: [PacketFence-users] Captive Portal-Computer not found in database

2019-05-17 Thread Louis Scaringella via PacketFence-users
fixed the issue with the aruba instant access, just need to run >>> /usr/local/pf/addons/pf-main.pl , restart packetfence and use the aruba >>> instant access module. >>> >>> Regards >>> >>> Fabrice >>> >>> >>>>

Re: [PacketFence-users] Captive Portal-Computer not found in database

2019-05-16 Thread Louis Scaringella via PacketFence-users
wrote: > > hello Louis, > > i fixed the issue with the aruba instant access, just need to run > /usr/local/pf/addons/pf-main.pl , restart packetfence and use the aruba > instant access module. > > Regards > > Fabrice > > >> Le 19-05-16 à 02 h 30, Louis Scaring

Re: [PacketFence-users] Captive Portal-Computer not found in database

2019-05-16 Thread Louis Scaringella via PacketFence-users
> this myself. Anyway we can create a module specifically for Aruba 6.5+ that > would work with Instant and Controllers? > > Louis Scaringella > Security Systems Engineer > Yellow Dog Networks, Inc > 785-342-7903 > > > > > > >> On May 15, 2019, at 6:19 PM, Louis Sc

Re: [PacketFence-users] Captive Portal-Computer not found in database

2019-05-15 Thread Louis Scaringella via PacketFence-users
rsed in Perl to do this myself. Anyway we can create a module specifically for Aruba 6.5+ that would work with Instant and Controllers? Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 > On May 15, 2019, at 6:19 PM, Louis Scaringella via PacketFence-use

[PacketFence-users] 9.0 Upgrade and Aruba Controller and Instant Issues

2019-05-15 Thread Louis Scaringella via PacketFence-users
I have another open thread with this same issue, but I upgraded tonight to 9.0 and I am still having the same problem with this Aruba controller and instant module. Seems the module itself errors out: May 16 01:06:50 PacketFence-ZEN packetfence_httpd.portal: httpd.portal(3377) WARN:

Re: [PacketFence-users] Captive Portal-Computer not found in database

2019-05-15 Thread Louis Scaringella via PacketFence-users
he controller and processed, so >> something with the session isn’t right. >> >> Any ideas? >> >> Louis Scaringella >> Security Systems Engineer >> Yellow Dog Networks, Inc >> 785-342-7903 >> >> >> >> >> >> >>&

Re: [PacketFence-users] Captive Portal-Computer not found in database

2019-05-15 Thread Louis Scaringella via PacketFence-users
w/inverse-inc/packetfence/pull/4211.diff > | patch -p1 > > Also is it a Aruba COntroller in cluster ? > > Regards > Fabrice > > Le 19-05-15 à 11 h 11, Louis Scaringella via PacketFence-users a écrit : >> Hi Fabrice, >> >> I ran the /usr/local/pf/addons/pf-maint.

Re: [PacketFence-users] Captive Portal-Computer not found in database

2019-05-15 Thread Louis Scaringella via PacketFence-users
> Instant access module instead(we did it because the CoA changed on this > equipment) > > curl > https://patch-diff.githubusercontent.com/raw/inverse-inc/packetfence/pull/4211.diff > | patch -p1 > > Also is it a Aruba COntroller in cluster ? > > Regards > Fabri

Re: [PacketFence-users] Captive Portal-Computer not found in database

2019-05-15 Thread Louis Scaringella via PacketFence-users
t; curl > https://patch-diff.githubusercontent.com/raw/inverse-inc/packetfence/pull/4211.diff > | patch -p1 > > Also is it a Aruba COntroller in cluster ? > > Regards > Fabrice > > Le 19-05-15 à 11 h 11, Louis Scaringella via PacketFence-users a écrit : >> Hi Fabrice

Re: [PacketFence-users] Captive Portal-Computer not found in database

2019-05-15 Thread Louis Scaringella via PacketFence-users
This is the section of code that appears to be an issue: my $node_info = node_attributes($mac); # transforming MAC to the expected format 00-11-22-33-CA-FE $mac = lc($mac); $mac =~ s/://g; I can tell you that the MAC address format that appears on the controller

Re: [PacketFence-users] Captive Portal-Computer not found in database

2019-05-15 Thread Louis Scaringella via PacketFence-users
CoA changed on this > equipment) > > curl > https://patch-diff.githubusercontent.com/raw/inverse-inc/packetfence/pull/4211.diff > | patch -p1 > > Also is it a Aruba COntroller in cluster ? > > Regards > Fabrice > > Le 19-05-15 à 11 h 11, Louis Scaringella via

Re: [PacketFence-users] Captive Portal-Computer not found in database

2019-05-15 Thread Louis Scaringella via PacketFence-users
. The CoA is getting to the controller and processed, so something with the session isn’t right. Any ideas? Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 > On May 14, 2019, at 8:32 PM, Louis Scaringella via PacketFence-users > wrote: > > It

Re: [PacketFence-users] Captive Portal-Computer not found in database

2019-05-14 Thread Louis Scaringella via PacketFence-users
cess then you will need to apply this > patch: > > cd /usr/local/pf > > curl > https://patch-diff.githubusercontent.com/raw/inverse-inc/packetfence/pull/4211.diff > | patch -p1 > > and restart packetfence and choose "Aruba Instant Access" as the switch mod

Re: [PacketFence-users] Captive Portal-Computer not found in database

2019-05-14 Thread Louis Scaringella via PacketFence-users
I’m very confused because also seeing this in Packetfence logs. Looks like it is authenticating then dissociating right away. May 14 16:17:12 PacketFence-ZEN packetfence_httpd.portal: httpd.portal(3367) INFO: [mac:00:24:d6:5b:30:bc] User default has authenticated on the portal.

Re: [PacketFence-users] Captive Portal-Computer not found in database

2019-05-14 Thread Louis Scaringella via PacketFence-users
Captive portal AUP page is now displayed, I hit accept, and it says “You network access is currently being enabled…..”, however the new role isn’t sent to the controller. But getting this error now: [root@PacketFence-ZEN DynamicRouting]# cat /usr/local/pf/logs/httpd.portal.error May 14

[PacketFence-users] Captive Portal-Computer not found in database

2019-05-14 Thread Louis Scaringella via PacketFence-users
Hello, I’m relatively new to PacketFence, but not NAC in general. I’m having some difficulty getting PacketFence to work in my lab environment with the Captive Portal correctly. I have a single interface that i’ve setup for management, RADIUS, and the portal. I have an Aruba wireless

Re: [PacketFence-users] SSL Cert Change

2019-05-10 Thread Louis Scaringella via PacketFence-users
Are you saying that the server.pem for the captive portal needs to include the private key and intermediates bundled? It appears different then from the web admin where you can configure the .conf file to include 3 separate files for these? Louis Scaringella Security Systems Engineer Yellow

Re: [PacketFence-users] Strip Username Question

2019-05-10 Thread Louis Scaringella via PacketFence-users
ration in packetfence you can choose to strip on the >>> portal/radius/admin, also you can add "strip" in the freeradius option and >>> it will add the configuration in freeradius. >>> >>> Regards >>> >>> Fabrice >>> >>> >>

[PacketFence-users] SSL Cert Change

2019-05-10 Thread Louis Scaringella via PacketFence-users
Anyone aware of where to go to change the default admin SSL certificate as well as anything used for captive portal, etc? Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 The information transmitted, including any attachments, is intended only for the

Re: [PacketFence-users] Strip Username Question

2019-05-10 Thread Louis Scaringella via PacketFence-users
ose to strip on the > portal/radius/admin, also you can add "strip" in the freeradius option and it > will add the configuration in freeradius. > > Regards > > Fabrice > > > Le 19-05-09 à 10 h 16, Louis Scaringella via PacketFence-users a écrit :

Re: [PacketFence-users] Mailist List Question

2019-05-09 Thread Louis Scaringella via PacketFence-users
Thank you! I’m seeing my other message now showing up. Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 > On May 9, 2019, at 4:59 PM, Durand fabrice via PacketFence-users > wrote: > > yes > > Le 19-05-09 à 10 h 23, Louis Scaringella via

[PacketFence-users] Mailist List Question

2019-05-09 Thread Louis Scaringella via PacketFence-users
I’m embarrassed to say at my age, i’ve never used a mailing list so trying to understand how it works. Will this message show up on Sourceforge? Louis Scaringella Security Systems Engineer Yellow Dog Networks, Inc 785-342-7903 The information transmitted, including any attachments, is

[PacketFence-users] Strip Username Question

2019-05-09 Thread Louis Scaringella via PacketFence-users
Where is the username strip option configured? Is this a FreeRadius config? The information transmitted, including any attachments, is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission,