[PacketFence-users] Eduroam - Configuration - Regarding

2023-11-09 Thread Thirunavukkarasu Palanisamy via PacketFence-users
Hi Team, Greetings of the day In the documentation the following information are provided for the eduroam configuration Installation Guide (packetfence.org) --- *13.3.1. Local authentication

Re: [PacketFence-users] Eduroam port 11812 not working

2023-01-25 Thread Zammit, Ludovic via PacketFence-users
ilto:ab.dijks...@noorderpoort.nl> > I > www.noorderpoort.nl > <https://urldefense.com/v3/__http://www.noorderpoort.nl/__;!!GjvTz_vk!Ty0R3ldoMyY_17TKdmD6xAwlIp4poUVzx9PYLE9JC9XhkMrP9Iu8DawtFpKzBz7IXpukcsQ7sr8DJCGHe4qCg02EAw$> > Van: Zammit, Ludovic > Verzonden: Dinsd

Re: [PacketFence-users] Eduroam port 11812 not working

2023-01-24 Thread Zammit, Ludovic via PacketFence-users
ri, 2023 08:55 > Aan: packetfence-users@lists.sourceforge.net > <mailto:packetfence-users@lists.sourceforge.net> > CC: Anne Dijkstra > Onderwerp: RE: [*Suspicious Email*] [PacketFence-users] Eduroam port 11812 > not working > > 1812 is for external eduroam servers. > 1

Re: [PacketFence-users] Eduroam port 11812 not working

2023-01-24 Thread Anne Dijkstra via PacketFence-users
e Dijkstra Van: puz...@man.olsztyn.pl namens Tomasz Karczewski Verzonden: Dinsdag, 24 Januari, 2023 08:55 Aan: packetfence-users@lists.sourceforge.net CC: Anne Dijkstra Onderwerp: RE: [*Suspicious Email*] [PacketFence-users] Eduroam port 11812 not working 1812 is for external eduro

[PacketFence-users] Eduroam port 11812 not working

2023-01-21 Thread Anne Dijkstra via PacketFence-users
Good evening everyone, We are replacing our Microsoft NPS Servers with Packetfence. All is working :) but we are running into a problem with eduroam. I followed the manual exactly. So I created a internal source (the eduroam servers), an external source and connection profiles. If I understand c

Re: [PacketFence-users] Eduroam - without the AD and with LDAP - is possible or not in the NAC?

2022-12-01 Thread Nikunj Vacchani via PacketFence-users
Restart the winbind service. Thanks & Regards, Nikunj Vachhani. Network Engineer. 99091 10490 From: P.Thirunavukkarasu via PacketFence-users Sent: 28 November 2022 11:34 AM To: packetfence-users Cc: P.Thirunavukkarasu Subject: [PacketFence-users] Eduroam - without the AD and with LDAP

[PacketFence-users] Eduroam - without the AD and with LDAP - is possible or not in the NAC?

2022-11-30 Thread P.Thirunavukkarasu via PacketFence-users
Hi Team, Greetings Eduroam configuration, without the AD, is possible or not in the NAC? The authentication source is LDAP. The following is the RADIUS log message noticed in the auditing Module-Failure-Message = "mschap: Reading winbind reply failed! (0xc001)" Regards, Thirunavukkarasu _

Re: [PacketFence-users] eduroam+packetfence with Google LDAP authentication

2022-10-18 Thread P.Thirunavukkarasu via PacketFence-users
My packetfence server version is 11.2 and I want to configure packetfence as an eduroam server with Google Secure LDAP as a user database When I try to log in as an eduroam user, the reply is *access reject.* The error is as follows *Event Type: Radius-Access-RequestReason: mschap: Program ret

[PacketFence-users] eduroam - local users - rejected in roaming

2022-10-18 Thread P.Thirunavukkarasu via PacketFence-users
Hi Team, Our local users roaming in other Universities are rejected with the following message *Module-Failure-Message = "Attribute \"User-Password\" is required for authentication"* We are using the Google LDAPs as the user directory, but the "User-Password" is the attribute of AD. How to make th

[PacketFence-users] eduroam+packetfence with Google LDAP authentication

2022-10-12 Thread P.Thirunavukkarasu via PacketFence-users
My packetfence server version is 11.2 and I want to configure packetfence as an eduroam server with Google Secure LDAP as a user database Few doubts about the configuration *The first one is...* >From my understanding, for eduroam, there is no need to create a separate connection profile to authen

[PacketFence-users] Eduroam - Port forwarding

2022-10-11 Thread P.Thirunavukkarasu via PacketFence-users
Hi Team, Please clarify me regarding eduroam port forwarding We configured two interfaces in NAC One NIC for management Another one is configured as other with Radius My question is Port forwarding of 1812, 1813 to management IP or to the radius IP I forwarded the port to the radius IP Ref: htt

[PacketFence-users] EDUROAM RADSEC

2022-06-24 Thread Marek Hrbáč via PacketFence-users
Hello, iam trying to implement eduroam authentication in my network. But i have problem with communication with the main radius server (radius1.eduroam.cz) through RADSEC. I see in logs that radius1.eduroam is sending auth requests to my radius but it ignoring them: Ignoring request to auth+acct

Re: [PacketFence-users] Eduroam configuration - SSID filter and REALM Filter

2022-03-21 Thread P.Thirunavukkarasu via PacketFence-users
Hi Fabrice, Greetings of the day Changed the configuration as follows..."*Realm Filter eduroam*" [image: image.png] FYKI in our setup we are not using any AD DC. Our authentication sources are Google LDAPs and MS AAD. Hence not configured the Domain (not listed any domain) in the *Default and NULL

[PacketFence-users] eduroam - Reading winbind reply failed - Regardingg

2022-03-21 Thread P.Thirunavukkarasu via PacketFence-users
Hi Team, The eduroam users are not connected with the SSID eduroam through packetfence. The same users are connected thro the standalone freeRADIUS server on centos (VM). The radius log in the NAC shows as follows *Module-Failure-Message = "mschap: Program returned code (1) and output 'Reading win

Re: [PacketFence-users] Eduroam configuration - SSID filter and REALM Filter

2022-03-21 Thread P.Thirunavukkarasu via PacketFence-users
Thanks Fabrice... [image: image.png] There is such an option in the filter to select. Should I create a Realm "eduroam" in the realms section? Regards, Thirunavukkarasu ___ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lis

Re: [PacketFence-users] Eduroam configuration - SSID filter and REALM Filter

2022-03-20 Thread Fabrice Durand via PacketFence-users
Just like that: [image: image.png] Le dim. 20 mars 2022 à 07:39, P.Thirunavukkarasu a écrit : > Hi Fabrice, > Thank you and Sorry for the question... > > *Create the connection profile for outbound authentication* > *"Create the Connection Profile named External Eduroam authentication > Check A

Re: [PacketFence-users] Eduroam configuration - SSID filter and REALM Filter

2022-03-20 Thread P.Thirunavukkarasu via PacketFence-users
Hi Fabrice, Thank you and Sorry for the question... *Create the connection profile for outbound authentication* *"Create the Connection Profile named External Eduroam authentication Check Automatically register devices then create a REALM filter Eduroam. Next, make sure to add the Eduroam source p

Re: [PacketFence-users] Eduroam configuration - SSID filter and REALM Filter

2022-03-20 Thread P.Thirunavukkarasu via PacketFence-users
Hi Fabrice, Thank you *"Create a connection profile named Local and external Eduroam authentication Check Automatically register devices then create a SSID filter Eduroam. Make sure to add the Active Directory source to match on the local users."* [image: image.png] Then how to create the SSID filt

Re: [PacketFence-users] Eduroam configuration - SSID filter and REALM Filter

2022-03-18 Thread Fabrice Durand via PacketFence-users
Hello Thirunavukkarasu, the realm eduroam is define in the freeradius unlang, so if the logic detect that it´s an outbound authentication then the realm eduroam will be added in the request. For the DEFAULT one you should use your domain for that. Regards Fabrice Le ven. 18 mars 2022 à 09:45, P

[PacketFence-users] Eduroam configuration - SSID filter and REALM FIlter

2022-03-18 Thread P.Thirunavukkarasu via PacketFence-users
Hi Team, Plz help me in solving the problem stated below >From the installation guide *13.3.3. Create the connection profile for local authentication* Go to Configuration → Policies and Access Control → Connection Profiles → New Connection Profile. Create a connection profile named Local and exter

[PacketFence-users] Eduroam configuration - SSID filter and REALM Filter

2022-03-18 Thread P.Thirunavukkarasu via PacketFence-users
Hi Team, The corrected one for my previous email... Plz help me in solving the problem stated below >From the installation guide *13.3.3. Create the connection profile for local authentication* Go to Configuration → Policies and Access Control → Connection Profiles → New Connection Profile. Creat

Re: [PacketFence-users] Eduroam as authentication source

2019-07-17 Thread DOMINEAUX Philippe via PacketFence-users
Thank you very much for the explanations. It seems that this is the 2 information I was missing to complete the configuration. So, with your help, I have successfully configured eduroam on my site. Maybe you could add more details in the Installation Guide to help people like who were facing issu

Re: [PacketFence-users] Eduroam as authentication source

2019-07-16 Thread Fabrice Durand via PacketFence-users
Hello Philippe, Eduroam will only work for 802.1x not for doing chap/pap. So in order to make it work you need to have a secure ssid called eduroam and use the port 11812 for the radius server. In the eduroam authentication source you also need to define your local realm (create your realm a

Re: [PacketFence-users] Eduroam as authentication source

2019-07-16 Thread Martijn Langendoen via PacketFence-users
Philippe Subject: [PacketFence-users] Eduroam as authentication source Hello, I’ve just configured a fresh new installation of packetfence (9.0.1) and I’m trying to make it work with Eduroam. Following the documentation I’ve created an exclusive source to declare Eduroam radius servers for my

[PacketFence-users] Eduroam as authentication source

2019-07-16 Thread DOMINEAUX Philippe via PacketFence-users
Hello, I’ve just configured a fresh new installation of packetfence (9.0.1) and I’m trying to make it work with Eduroam. Following the documentation I’ve created an exclusive source to declare Eduroam radius servers for my country * rad1.eduroam.fr ( 1812 ) * rad2.eduroam.fr ( 1812 )

[PacketFence-users] Eduroam and PF 9.0.1

2019-06-18 Thread Lupe Silva via PacketFence-users
I am setting up Eduroam on PF 9.0.1 and I have created the Exclusive Source for Eduroam. I configured my firewall and I am successful in getting Eduroam servers to validate our ID's. Now I am trying to make the "eduroam" SSID on our wireless. I looked at https://packetfence.org/support/faq/pack

Re: [PacketFence-users] Eduroam and PF 9.0.1

2019-06-18 Thread Lupe Silva via PacketFence-users
I have worked something out. In following the packetfence/eduroam guide I had changed the accthost to the eduroam servers in the US. I also had those same servers in the Exclusive Source. I was getting errors about servers being defined already. In looking at the proxy.conf.inc files, I rever

Re: [PacketFence-users] Eduroam local login

2018-11-21 Thread Durand fabrice via PacketFence-users
cketfence-users@lists.sourceforge.net *Cc:* Fabrice Durand *Subject:* Re: [PacketFence-users] Eduroam local login Hello Will, it's not enough, i need to see the raddebug for this user. Regards Fabrice Le 18-11-21 à 07 h 05, Will Halsall via PacketFence-users a écrit : Hi Fabrie,

Re: [PacketFence-users] Eduroam local login

2018-11-21 Thread Fabrice Durand via PacketFence-users
*Cc:* Durand fabrice *Subject:* Re: [PacketFence-users] Eduroam local login Hello Will, yes but it's not yet available in packetfence 8.2. If you want to test you can use the following PR https://github.com/inverse-inc/packetfence/pull/3429 <https://github.com/inverse-inc/packetfence/pu

Re: [PacketFence-users] Eduroam local login

2018-11-21 Thread Will Halsall via PacketFence-users
lp WillH From: Durand fabrice via PacketFence-users Sent: 20 November 2018 04:35 To: packetfence-users@lists.sourceforge.net Cc: Durand fabrice Subject: Re: [PacketFence-users] Eduroam local login Hello Will, yes but it's not yet available in packetfence 8.2. If you want to test you can

Re: [PacketFence-users] Eduroam local login

2018-11-19 Thread Durand fabrice via PacketFence-users
with a filter to retrieve the sAMAccountName Thanks Will H *From:*Fabrice Durand via PacketFence-users *Sent:* 14 November 2018 20:08 *To:* packetfence-users@lists.sourceforge.net *Cc:* Fabrice Durand *Subject:* Re: [PacketFence-users] Eduroam local login Hello Will, i think it's becau

Re: [PacketFence-users] Eduroam local login

2018-11-19 Thread Will Halsall via PacketFence-users
retrieve the sAMAccountName Thanks Will H From: Fabrice Durand via PacketFence-users Sent: 14 November 2018 20:08 To: packetfence-users@lists.sourceforge.net Cc: Fabrice Durand Subject: Re: [PacketFence-users] Eduroam local login Hello Will, i think it's because the username is no

Re: [PacketFence-users] Eduroam local login

2018-11-14 Thread Fabrice Durand via PacketFence-users
Hello Will, i think it's because the username is not stripped on the ntlm_auth call. Can you strip it in the farn-ct-ac-uk realm config ? It's like that right now: realm farn-ct.ac.uk { nostrip } Regards Fabrice Le 18-11-14 à 11 h 34, Will Halsall via PacketFence-users a écrit : Hi

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-06-21 Thread jabang konate via PacketFence-users
hello fabrice, im sorry late inform you, last day im in vacation. i try this morning your patch, and it works. On Fri, Jun 8, 2018 at 9:06 PM, Fabrice Durand via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > Hello Jabang, > > it should be fixed with this patch: > > https:

Re: [PacketFence-users] Eduroam unable to process request local REALM from other university

2018-06-07 Thread jabang konate via PacketFence-users
hi fabrice. thanks a lot it work. Regards. Jabang On Wed, Jun 6, 2018 at 9:49 PM, Fabrice Durand via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > Hello Jabang, > > your issue is because in the Ruckus radius request it miss the > NAS-Port-Type attribute. > > > Can you tr

Re: [PacketFence-users] Eduroam unable to process request local REALM from other university

2018-06-06 Thread Fabrice Durand via PacketFence-users
Hello Jabang, your issue is because in the Ruckus radius request it miss the NAS-Port-Type attribute. Can you try that: diff --git a/lib/pf/Switch.pm b/lib/pf/Switch.pm index 22bd94288..db9ee3921 100644 --- a/lib/pf/Switch.pm +++ b/lib/pf/Switch.pm @@ -3015,7 +3015,7 @@ sub parseRequest {   

[PacketFence-users] Eduroam unable to process request local REALM from other university

2018-06-06 Thread jabang konate via PacketFence-users
im using packetfence 8.0.1 my user from other university complain can't connect to eduroam with local REALM my university. from raddebug output i see error message like this. (79) Wed Jun 6 10:17:11 2018: ERROR: rest: Server returned: (79) Wed Jun 6 10:17:11 2018: ERROR: rest: {"Reply-Message"

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-06-05 Thread jabang konate via PacketFence-users
hi fabrice any update for this issue? On Thu, May 31, 2018 at 4:41 PM, jabang konate wrote: > hi fabrice. > > i already try the code and it work well. > i try with limit 1 node per user with DEFAULT role. > > but i have something strange. > > when user rejected/denied by the packetfence, i saw

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-31 Thread jabang konate via PacketFence-users
hi fabrice. i already try the code and it work well. i try with limit 1 node per user with DEFAULT role. but i have something strange. when user rejected/denied by the packetfence, i saw user will be in REJECT role. and then i try to deregister the first device from nodes tab, then i try again w

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-30 Thread Fabrice Durand via PacketFence-users
Hello Jabang, thanks for testing it. Also for the limitation, i did some work on that not a long time ago and it should be fixed by https://patch-diff.githubusercontent.com/raw/inverse-inc/packetfence/pull/3236.diff Can you test it too and let me know. Regards Fabrice Le 2018-05-30 à 00

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-30 Thread jabang konate via PacketFence-users
hi fabrice thanks a lot and great work. now i can login with my local realm and remote realm from other university. i have another question,is it possible to limit device node per user in eduroam? i try with default role to limit 2 devices, but when third devices login with the same username , u

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-29 Thread Fabrice Durand via PacketFence-users
Hello Jabang, can you try that: https://github.com/inverse-inc/packetfence/compare/fix/eduroam_standalone.diff Regards Fabrice Le 2018-05-25 à 03:50, jabang konate via PacketFence-users a écrit : hi fabrice, ok i will wait for patch thank you On Fri, May 25, 2018 at 1:33 AM, Fabrice Dura

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-25 Thread jabang konate via PacketFence-users
hi fabrice, ok i will wait for patch thank you On Fri, May 25, 2018 at 1:33 AM, Fabrice Durand via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > Ok there is a bug, i need to fix it. > > > > Le 2018-05-24 à 11:33, jabang konate via PacketFence-users a écrit : > > hi fabric

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-24 Thread Fabrice Durand via PacketFence-users
Ok there is a bug, i need to fix it. Le 2018-05-24 à 11:33, jabang konate via PacketFence-users a écrit : hi fabrice. 10.18.23.60 is ip National Roaming Operator  eduroam in my Country. attach my eduroam config file. On Thu, May 24, 2018 at 7:43 PM, Fabrice Durand via PacketFence-users

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-24 Thread jabang konate via PacketFence-users
hi fabrice. 10.18.23.60 is ip National Roaming Operator eduroam in my Country. attach my eduroam config file. On Thu, May 24, 2018 at 7:43 PM, Fabrice Durand via PacketFence-users < packetfence-users@lists.sourceforge.net> wrote: > What is 10.18.23.60 ? > > can you share with me your file /us

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-24 Thread Fabrice Durand via PacketFence-users
What is 10.18.23.60 ? can you share with me your file /usr/local/pf/raddb/sites-enabled/eduroam ? Le 2018-05-24 à 00:46, jabang konate via PacketFence-users a écrit : Hi fabrice, today i try again with my packetfence. in packetfence-tunnel configuration i change configuration like this, if (u

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-23 Thread Fabrice Durand via PacketFence-users
Le 2018-05-23 à 13:36, jabang konate via PacketFence-users a écrit : Hi fabrice. Thanks for speedy response. > so i am not sure what you try to do with the ldap module. ldap module for configuration user with openldap right? i read in EAP Authentication against OpenLDAP. yes, the only differ

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-23 Thread jabang konate via PacketFence-users
Hi fabrice. Thanks for speedy response. > so i am not sure what you try to do with the ldap module. ldap module for configuration user with openldap right? i read in EAP Authentication against OpenLDAP. > You have 3 scenarios: yes i want like that, I will try again and will share the results on

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-23 Thread Fabrice Durand via PacketFence-users
Hello Jabang, so i am not sure what you try to do with the ldap module. You have 3 scenarios: 1: a user from your university connect on the ssid eduroam from your university.  (the ap/controller use the port 11812) You need to configure the local realm (let's say myuniversity.org) in the ed

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-23 Thread jabang konate via PacketFence-users
Thanks Fabrice, let me clear my goals first. i'm still confuse which file i must to configure packetfence-tunnel or eduroam file in sites-available. my packetfence will be act as manage eduroam user so i will use port 11812 in my access point. here's my step how i configure my eduroam in packetfen

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-23 Thread jabang konate via PacketFence-users
Thanks Fabrice, let me clear my goals first. i'm still confuse which file i must to configure packetfence-tunnel or eduroam file in sites-available. my packetfence will be act as manage eduroam user so i will use port 11812 in my access point. here's my step how i configure my eduroam in packetfen

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-23 Thread Fabrice Durand via PacketFence-users
If it's a server for eduroam (like the eduroam servers use this server for your domain) then 1812, if it's to manage eduroam user how connect on a eduroam ssid then 11812. Also what you can do in packetfence-tunnel     #  The ldap module reads passwords from the LDAP database.     ldap     i

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-23 Thread jabang konate via PacketFence-users
thanks for your reply fabrice. here i attach my packetfence-tunnel file. and which port should i use for my access point 1812 or 11812 in radius configuration for eduroam? thank you On Wed, May 23, 2018 at 7:33 PM, Fabrice Durand via PacketFence-users < packetfence-users@lists.sourceforge.net> wr

Re: [PacketFence-users] eduroam+packetfence with openldap authentication

2018-05-23 Thread Fabrice Durand via PacketFence-users
Hello Jabang, can you paste your packetfence-tunnel file ? Regards Fabrice Le 2018-05-23 à 04:08, jabang konate via PacketFence-users a écrit : my packetfence server version is 8.0.1 and i want to configure packetfence as an eduroam server with openldap as user database, then i look into do

Re: [PacketFence-users] eduroam

2018-05-02 Thread Fabrice Durand via PacketFence-users
Hello Will, Le 2018-04-28 à 18:09, Will Halsall via PacketFence-users a écrit : > > Hi Folks > >   > >   > > Having a problem getting packetfence 7.4 to work with .ac.uk radius > servers > >   > > 1.   Server 1 and server 2 have different secrets and I cannot see > a way of configuring this

Re: [PacketFence-users] eduroam authentication

2018-05-02 Thread Fabrice Durand via PacketFence-users
Hello Will, it looks that the authentication fail in the chroot. What you can try is the following: chroot /chroots/RadiusAD wbinfo -u ntlm_auth --userbane=helpdesk --password=... And let me know the result. Regards Fabrice Le 2018-05-02 à 03:39, Will Halsall via PacketFence-users a écr

[PacketFence-users] eduroam authentication

2018-05-02 Thread Will Halsall via PacketFence-users
Hi Folks I am still having problems with the eduroam authentication to our AD domain. I am now getting rejected although the username and password are correct Below are the radius logs for the test and was wondering if anyone could shed some light on my problem Thanks Will Halsall ap: Finis

[PacketFence-users] eduroam

2018-04-28 Thread Will Halsall via PacketFence-users
Hi Folks Having a problem getting packetfence 7.4 to work with .ac.uk radius servers 1. Server 1 and server 2 have different secrets and I cannot see a way of configuring this 2. Tests even from one of the servers with the correct secret configured will not work. The radius-edur

Re: [PacketFence-users] eduroam and PF

2015-04-17 Thread Morris, Andi
.net Subject: [PacketFence-users] eduroam and PF Hi all - I'd be interested in hearing from anyone who uses PF and eduroam together. We've been on PF for a couple years now and I am just starting to investigate eduroam. How easy to the two systems tie into each other? What considerations sh

[PacketFence-users] eduroam and PF

2015-04-16 Thread Max McGrath
Hi all - I'd be interested in hearing from anyone who uses PF and eduroam together. We've been on PF for a couple years now and I am just starting to investigate eduroam. How easy to the two systems tie into each other? What considerations should I take as far as VLANs, subnets, etc... when dea

Re: [PacketFence-users] eduroam home users being processed by packetfence

2014-07-17 Thread Morris, Andi
t seems to be working without, but I want to make sure there's no knock on effect anywhere. Cheers, Andi From: Morris, Andi [mailto:amor...@cardiffmet.ac.uk] Sent: 17 July 2014 10:16 To: 'packetfence-users@lists.sourceforge.net' Subject: Re: [PacketFence-users] eduroam home users be

Re: [PacketFence-users] eduroam home users being processed by packetfence

2014-07-17 Thread Morris, Andi
gestions? Cheers, Andi From: Morris, Andi [mailto:amor...@cardiffmet.ac.uk] Sent: 17 July 2014 09:33 To: packetfence-users@lists.sourceforge.net Subject: [PacketFence-users] eduroam home users being processed by packetfence Hi, I have a packetfence setup, version 4.2.2, which is configured to pro

[PacketFence-users] eduroam home users being processed by packetfence

2014-07-17 Thread Morris, Andi
Hi, I have a packetfence setup, version 4.2.2, which is configured to proxy visiting users out to our eduroam ORPS servers, and process local users here. This is all working well and we have a record of what users are on the wireless on our campus. However, there's an issue with our users connec

Re: [PacketFence-users] Eduroam ...

2013-02-12 Thread Jan Behrend
Hi Rich, thanks for the answer ... On 02/07/2013 04:31 PM, Rich Graves wrote: >> When I try to log into the WPA enterprise (802.1x) WLAN my freeradius is >> having trouble to obtain the NT-Password. The hash resides in our LDAP, >> but does PF take care of retrieving it, or do I need to configure

Re: [PacketFence-users] Eduroam ...

2013-02-08 Thread Derek Wuelfrath
Rich, will have a look. Thanks for comment. On 2013-02-07 10:31 AM, Rich Graves wrote: > (Inverse friends: this should get a mention in the "PacketFence and Eduroam" > FAQ entry.) -- dwuelfr...@inverse.ca :: +1.514.447.4918 (x110) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.n

Re: [PacketFence-users] Eduroam ...

2013-02-07 Thread Rich Graves
> When I try to log into the WPA enterprise (802.1x) WLAN my freeradius is > having trouble to obtain the NT-Password. The hash resides in our LDAP, > but does PF take care of retrieving it, or do I need to configure the > connection from the freeradius to the LDAP myself? To debug, killall radiu

[PacketFence-users] Eduroam ...

2013-02-07 Thread Jan Behrend
Hi list, I have a working, valid eduroam radius server. Now I am trying to consolidate this eduroam server into our PF infrastructure. I followed the FAQ to integrate eduroam into PF. Unfortunately I am still stuck: When I try to log into the WPA enterprise (802.1x) WLAN my freeradius is having

Re: [PacketFence-users] Eduroam and Guest Logins

2013-02-05 Thread Jan Behrend
On 02/04/2013 09:26 PM, Rich Graves wrote: > Well, Europe is about 5 years ahead of US .edu's, so your sense of what's > normal for eduroam is better than mine. I'm surprised, though. If the same > person visits mpifr-bonn and uni-bonn and cam.uk, they might need three > different passwords, and

Re: [PacketFence-users] Eduroam and Guest Logins

2013-02-04 Thread Rich Graves
Well, Europe is about 5 years ahead of US .edu's, so your sense of what's normal for eduroam is better than mine. I'm surprised, though. If the same person visits mpifr-bonn and uni-bonn and cam.uk, they might need three different passwords, and they must accept three different certificates for

Re: [PacketFence-users] Eduroam and Guest Logins

2013-02-04 Thread Jan Behrend
On 02/04/2013 06:23 PM, Rich Graves wrote: > Are you allowing locally authenticated guests to use your "eduroam" SSID? > That's unusual. Typically, guests go on an open SSID. > If your guests use a 802.1X SSID other than eduroam, then I think you > should be able to short-circuit the proxy logic b

Re: [PacketFence-users] Eduroam and Guest Logins

2013-02-04 Thread Jan Behrend
On 02/04/2013 06:01 PM, Durand Fabrice wrote: > in your proxy.conf, add : > realm domain_name { > } > > Where domain_name is your domaine name. Hi Durand, thank for your answer. I have my own domain correctly proxied to the local radius instance. The problem is, I cannot distinguish between an

Re: [PacketFence-users] Eduroam and Guest Logins

2013-02-04 Thread Rich Graves
Are you allowing locally authenticated guests to use your "eduroam" SSID? That's unusual. Typically, guests go on an open SSID. If your guests use a 802.1X SSID other than eduroam, then I think you should be able to short-circuit the proxy logic based on ESSID. For example, my controllers put i

Re: [PacketFence-users] Eduroam and Guest Logins

2013-02-04 Thread Durand Fabrice
Hello, in your proxy.conf, add : realm domain_name { } Where domain_name is your domaine name. Regards Fabrice Le 2013-02-04 10:59, Jan Behrend a écrit : Hi, I have integrated "eduroam" in my PF setup. The problem now occurs, that guest logins which use their email address as login name (PID

[PacketFence-users] Eduroam and Guest Logins

2013-02-04 Thread Jan Behrend
Hi, I have integrated "eduroam" in my PF setup. The problem now occurs, that guest logins which use their email address as login name (PID) are now proxied to the superior eduroam radius server because the email is not recognized as a guest login but rather taken as a foreign realm. How can I ma