JFKBSDKJBFSJKDFSKDJ

<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-
com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word"
xmlns:m="http://schemas.microsoft.com/office/2004/12/omml"
xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style></style>
</head>
<body bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
Hi Fabrice,<o:p></o:p>
<o:p> </o:p>
Thank you for the suggestion. I
removed the rule and just leave the rule catch_all to test. I’m able to pass
the the permission to register. However, after I pass it, the error “Your
network should be enabled
within a minute or two. If it is not reboot your computer”. I checked the
pf.log, it said the reassignment required. I only enabled registration vlan here as
we do want clients have limited access (not able to access production). Do I have
to create a normal
vlan or if there’s something I can do to avoid VLAN change?
<o:p></o:p>
In addition, I kept my switch mode
to registration instead of production.<o:p></o:p>
Mar 27 22:41:55 httpd.portal(2419)
INFO: [mac:unknown] Instantiate profile RSP
(pf::Portal::ProfileFactory::_from_profile)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] Instantiate profile RSP
INFO: [mac:7c:01:91:25:f9:eb] Updating node user_agent with useragent:
'WeChat/6.5.6.37 CFNetwork/808.3 Darwin/16.3.0'
(captiveportal::PacketFence::DynamicRouting::Application::process_user_agent)<o:p><
/o:p>
INFO: [mac:7c:01:91:25:f9:eb] Static User-Agent lookup data initialized
(pf::useragent::_init)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] User default has authenticated on the portal.
(Class::MOP::Class:::after)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] Reevaluating access of device.
(captiveportal::PacketFence::DynamicRouting::Module::Root::unknown_state)<o:p></o:p
>
INFO: [mac:7c:01:91:25:f9:eb] re-evaluating access (manage_register called)
(pf::enforcement::reevaluate_access)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] is currentlog connected at (10.1.5.50) ifIndex 1
registration (pf::enforcement::_should_we_reassign_vlan)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] Connection type is WIRELESS_MAC_AUTH. Getting role
from node_info (pf::role::getRegisteredRole)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] Username was defined "7c:01:91:25:f9:eb" -
returning role 'RSPEmployee' (pf::role::getRegisteredRole)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] PID: "helen_chen", Status: reg Returned
VLAN: (undefined), Role: RSPEmployee
(pf::role::fetchRoleForNode)<o:p></o:p>
WARN: [mac:7c:01:91:25:f9:eb] No parameter RSPEmployeeVlan found in
conf/switches.conf for the switch 10.1.5.50
(pf::Switch::getVlanByName)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] Reassignment required (current Role = registration
but should be in Role RSPEmployee)
(pf::enforcement::_should_we_reassign_vlan)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] switch port is (10.1.5.50) ifIndex 1 connection type:
WiFi MAC Auth (pf::enforcement::_vlan_reevaluation)<o:p></o:p>
<div>
Thank you for your
help,<o:p></o:p>
 ---<o:p></o:p>
<o:p> </o:p>
Helen<o:p></o:p>
</div>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
From: Durand fabrice [mailto:fdurand@inverse.ca]
 
Sent: Tuesday, March 28, 2017 7:18 AM 
To: packetfence-users@lists.sourceforge.net 
Subject: Re: [PacketFence-users] help with you do not have permission to
register a device with this username<o:p></o:p>
</div>
</div>
<o:p> </o:p>
Hello Helen,<o:p></o:p>
there is only one rule: 
[RSPEmployee rule RSPEmployee] 
 
description=RSPEmployees 
 
class=authentication 
 
match=all 
 
action0=set_role=RSPEmployee 
 
action1=set_access_duration=5D 
 
condition0=memberOf,equals,CN=wirelessauth,OU=System Function Account,OU=Special
Account,DC=DDDDDDD,DC=DDDDDDDD,DC=com<o:p></o:p>
<o:p> </o:p>
So if the user is not memberOf the group specified then it will have no
role.<o:p></o:p>
What you can do first if the user is suppose to match the group is to use pftest
cli tool to check if the rule match.<o:p></o:p>
You can also use adsiedit.mmc to check if the useraccount contain the correct
group oid.<o:p></o:p>
The last thing, you can create a catch_all rule as last resort. (if no rule
match before then use the last one as catch all).<o:p></o:p>
Regards<o:p></o:p>
Fabrice<o:p></o:p>
<o:p> </o:p>
<o:p> </o:p>
<div>
Le 2017-03-27 � 03:57, Helen Chen a
�crit :<o:p></o:p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
Hi Fabrice,<o:p></o:p>
 <o:p></o:p>
How’s your weekend goes?
<o:p></o:p>
Please see attached for rules that
I set for RSPEmployee source.<o:p></o:p>
In addition, please see the
authen.conf file below:<o:p></o:p>
[root@PFZen ~]# cat
/usr/local/pf/conf/authentication.conf<o:p></o:p>
[local]<o:p></o:p>
description=Local
Users<o:p></o:p>
dynamic_routing_module=AuthModule<o:p></o:p>
type=SQL<o:p></o:p>
[file1]<o:p></o:p>
description=Legacy
Source<o:p></o:p>
style="color:#1F497D">stripped_user_name=yes<o:p></o:p>
style="color:#1F497D">path=/usr/local/pf/conf/admin.conf<o:p></o:p>
style="color:#1F497D">type=Htpasswd<o:p></o:p>
[file1 rule
admins]<o:p></o:p>
description=All
admins<o:p></o:p>
style="color:#1F497D">class=administration<o:p></o:p>
match=all<o:p></o:p>
style="color:#1F497D">action0=set_access_level=ALL<o:p></o:p>
[sms]<o:p></o:p>
description=SMS-based
registration<o:p></o:p>
style="color:#1F497D">sms_carriers=100056,100057,100061,100058,100059,100060,100062
,100063,100071,100064,100116,100066,100117,100112,100067,100065,100068,100069,10007
0,100118,100115,100072,100073,100074,100075,100076,100077,100085,100086,100080,1000
79,100081,100083,100082,100084,100087,100088,100111,100089,100090,100091,100092,100
093,100094,100095,100096,100098,100097,100099,100100,100101,100113,100102,100103,10
0104,100106,100105,100107,100108,100109,100114,100110,100078,100122<o:p></o:
p>
type=SMS<o:p></o:p>
style="color:#1F497D">create_local_account=no<o:p></o:p>
[sms rule
catchall]<o:p></o:p>
description=<o:p></o:p>
style="color:#1F497D">class=authentication<o:p></o:p>
style="color:#1F497D">action0=set_role=guest<o:p></o:p>
style="color:#1F497D">action1=set_access_duration=1D<o:p></o:p>
[email]<o:p></o:p>
description=Email-based
style="color:#1F497D">email_activation_timeout=10m<o:p></o:p>
type=Email<o:p></o:p>
style="color:#1F497D">allow_localdomain=yes<o:p></o:p>
[email rule
[sponsor]<o:p></o:p>
description=Sponsor-based
style="color:#1F497D">type=SponsorEmail<o:p></o:p>
[sponsor rule
[null]<o:p></o:p>
description=Null
Source<o:p></o:p>
type=Null<o:p></o:p>
style="color:#1F497D">email_required=no<o:p></o:p>
[null rule
style="color:#1F497D">description=catchall<o:p></o:p>
style="color:#1F497D">[RSPEmployee]<o:p></o:p>
style="color:#1F497D">description=Employee<o:p></o:p>
style="color:#1F497D">password=DDDDDD<o:p></o:p>
scope=sub<o:p></o:p>
binddn=CN=wirelessauth,OU=System
Function Account,OU=Special
Account,DC=DDDDDD,DC=DDDDDDD,DC=com<o:p></o:p>
style="color:#1F497D">basedn=dc=DDDDDD,dc=DDDDDDD,dc=com<o:p></o:p>
style="color:#1F497D">email_attribute=mail<o:p></o:p>
style="color:#1F497D">usernameattribute=sAMAccountName<o:p></o:p>
style="color:#1F497D">connection_timeout=5<o:p></o:p>
style="color:#1F497D">stripped_user_name=no<o:p></o:p>
style="color:#1F497D">encryption=none<o:p></o:p>
port=389<o:p></o:p>
type=AD<o:p></o:p>
style="color:#1F497D">host=DDDDDDDD<o:p></o:p>
[RSPEmployee rule
RSPEmployee]<o:p></o:p>
style="color:#1F497D">description=RSPEmployees<o:p></o:p>
style="color:#1F497D">action0=set_role=RSPEmployee<o:p></o:p>
style="color:#1F497D">condition0=memberOf,equals,CN=wirelessauth,OU=System Function
Account,OU=Special Account,DC=DDDDDDD,DC=DDDDDDDD,DC=com<o:p></o:p>
[AdminIT]<o:p></o:p>
style="color:#1F497D">description=AdminIT<o:p></o:p>
password=DDDDD!
scope=sub<o:p></o:p>
binddn=CN=wirelessauth,OU=System
Function Account,OU=Special
Account,DC=DDDDDDDDD,DC=DDDDDDD,DC=com<o:p></o:p>
basedn=OU=IT,OU=Special
Account,DC=resourcepro0,DC=resourcepro,DC=com<o:p></o:p>
style="color:#1F497D">email_attribute=mail<o:p></o:p>
style="color:#1F497D">usernameattribute=sAMAccountName<o:p></o:p>
style="color:#1F497D">connection_timeout=5<o:p></o:p>
style="color:#1F497D">stripped_user_name=no<o:p></o:p>
style="color:#1F497D">encryption=none<o:p></o:p>
port=389<o:p></o:p>
type=AD<o:p></o:p>
host=1DDDDDD<o:p></o:p>
[AdminIT rule
AdminLogin]<o:p></o:p>
style="color:#1F497D">class=administration<o:p></o:p>
style="color:#1F497D">action0=mark_as_sponsor=1<o:p></o:p>
style="color:#1F497D">condition0=memberOf,equals,CN=wirelessauth,OU=System Function
Account,OU=Special Account,DC=DDDDDDDDD,DC=DDDDDDDDD,DC=com<o:p></o:p>
style="color:#1F497D">[RSPVisitors]<o:p></o:p>
style="color:#1F497D">description=RSPVisitors<o:p></o:p>
style="color:#1F497D">sponsorship_cc=helen_chen@XXXXXXX<o:p></o:p>
style="color:#1F497D">type=SponsorEmail<o:p></o:p>
style="color:#1F497D">create_local_account=yes<o:p></o:p>
[RSPVisitors rule
RSPVisitors]<o:p></o:p>
style="color:#1F497D">description=Visitors<o:p></o:p>
<div>
 ---<o:p></o:p>
style="color:#595959"> <o:p></o:p>
Helen
<o:p></o:p>
</div>
<div>
style="color:windowtext"> Durand fabrice [<a
href="mailto:fdurand@inverse.ca">mailto:fdurand@inverse.ca</a>]
 
Sent: Saturday, March 25, 2017 9:17 AM 
To: <a href="mailto:packetfence-users@lists.sourceforge.net">packetfence-
users@lists.sourceforge.net</a> 
register a device with this username<o:p></o:p>
</div>
</div>
 <o:p></o:p>
Hi Helen,<o:p></o:p>
sorry for the late reply.<o:p></o:p>
Did you defines any rules in the RSPEmployee source ?<o:p></o:p>
Also can you post your authentication.conf file (without sensible
info)<o:p></o:p>
Regards<o:p></o:p>
 <o:p></o:p>
<div>
</div>
Just an
update.<o:p></o:p>
WLC: I enabled MAC filter and I
did change the NAC to ISE NAC.<o:p></o:p>
PF: I changed the radius secret to
PF default value, of course I did the change on WLC side accordingly as
well.<o:p></o:p>
 I set the
switch rule from production to registration.<o:p></o:p>
Then I get the captive portal up.
However, I still get the You do not have permission to register a device with this
username. PF.log please see below:<o:p></o:p>
(pf::Portal::ProfileFactory::_from_profile)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] Authenticating user using sources :
RSPEmployee,AdminIT
(captiveportal::PacketFence::DynamicRouting::Module::Authentication::Login::authent
icate)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] [RSPEmployee] Authentication successful for
helen_chen
(pf::Authentication::Source::LDAPSource::authenticate)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] Authentication successful for 'helen_chen' in source
RSPEmployee (AD) (pf::authentication::authenticate)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] User helen_chen has authenticated on the portal.
(Class::MOP::Class:::after)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] Found source RSPEmployee in session.
(Class::MOP::Class:::around)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] Successfully authenticated helen_chen
icate)<o:p></o:p>
WARN: [mac:7c:01:91:25:f9:eb] Calling match with empty/invalid rule class.
Defaulting to 'authentication' (pf::authentication::match)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] Using sources RSPEmployee for matching
(pf::authentication::match)<o:p></o:p>
WARN: [mac:7c:01:91:25:f9:eb] Calling match with empty/invalid rule class.
Defaulting to 'authentication' (pf::authentication::match)<o:p></o:p>
INFO: [mac:7c:01:91:25:f9:eb] Using sources RSPEmployee for matching
(pf::authentication::match)<o:p></o:p>
WARN: [mac:7c:01:91:25:f9:eb] Use of uninitialized value in concatenation (.) or
string at /usr/local/pf/html/captive-
portal/lib/captiveportal/PacketFence/DynamicRouting/Module/Authentication.pm
line 139.<o:p></o:p>
style="color:#1F497D">(captiveportal::PacketFence::DynamicRouting::Module::Authenti
cation::execute_actions)<o:p></o:p>
WARN: [mac:7c:01:91:25:f9:eb] Use of uninitialized value in concatenation (.) or
string at /usr/local/pf/html/captive-
portal/lib/captiveportal/PacketFence/DynamicRouting/Module/Authentication.pm
line 139.<o:p></o:p>
style="color:#1F497D">(captiveportal::PacketFence::DynamicRouting::Module::Authenti
cation::execute_actions)<o:p></o:p>
WARN: [mac:7c:01:91:25:f9:eb] Cannot find unregdate () or role() for user.
(captiveportal::PacketFence::DynamicRouting::Module::Authentication::execute_action
s)<o:p></o:p>
WARN: [mac:7c:01:91:25:f9:eb] Execute actions of module
default_policy+default_registration_policy+default_login_policy did not
succeed.
(captiveportal::PacketFence::DynamicRouting::Module::done)<o:p></o:p>
If I don’t keep the mode
production, then the WLC will shown the client status as “WEBAUTH_REQ”,
and I got the captive.apple.com page pop up automatically but without anything
showing and then it will display
some kind of error.<o:p></o:p>
Would you please shed some lights
what I need to check next?<o:p></o:p>
Wish you a happy weekend. Thank
you so much for the help.<o:p></o:p>
<div>
<o:p></o:p>
</div>
<div>
style="color:windowtext"> Helen Chen [<a
href="mailto:Helen_Chen@resourcepro.com.cn">mailto:Helen_Chen@resourcepro.com.cn</a
>]
 
Sent: Wednesday, March 22, 2017 3:38 PM 
</div>
</div>
I’d like to share more
information with you.<o:p></o:p>
I tried to add one local MAC
filter on WLC side and then I’m able to get the ip address and have captive
portal shown up. So, which means the the controller mac filter function should be
fine. Can you shed some
lights on if there’s anything I can check on PF MAC authen?
Thank you for your
help.<o:p></o:p>
<div>
<o:p></o:p>
</div>
<div>
style="color:windowtext"> Helen Chen
 
Sent: Wednesday, March 22, 2017 10:25 AM 
Subject: RE: [PacketFence-users] help with you do not have permission to
</div>
</div>
Sorry, just found out all your
questions. Please see my answers below.<o:p></o:p>
 <o:p></o:p>
Are you using flexconnect in your setup ? if it's the case
then you have to define the acl as a flex connect acl. – We didn’t use
flexconnect on our current test AP.
<o:p></o:p>
Also can you take a capture of the advance tab off your
ssid ?<o:p></o:p>
<img border="0" width="720" height="374" id="Picture_x0020_1"
src="cid:image001.jpg@01D2A7B0.A5C54FA0"><o:p></o:p>
<img border="0" width="498" height="254" id="Picture_x0020_2"
src="cid:image002.png@01D2A7B0.A5C54FA0"><o:p></o:p>
From the vlan 51 are you able to reach the portal ip ?
– I put the VLAN 51 gateway on our layer 3 switch (172.17.0.1). While my PF
management /portal IP is in VLAN 254, which is our production VLAN. I’m able
to ping portal IP.<o:p></o:p>
Why don't you have a dhcp server defined in the interface
guest ? – I use the ip-helper on the layer 3 switch to point the DHCP to
172.17.254.254(PF registration interface). Do I still need to do this?
<o:p></o:p>
Do you have another choice in Nac State like radius NAC ?
– SNMP NAC\ISE NAC\None<o:p></o:p>
What happen if you remove the radius config for this ssid and
try to connect – Do you mean I disable the AAA Server and try? I can try that
and get back to you. But I did try to disable MAC filter, then I’m able to
get the IP address and
captive portal redirection.<o:p></o:p>
<div>
Chen<o:p></o:p>
</div>
<div>
style="color:windowtext"> Durand fabrice [<a
href="mailto:fdurand@inverse.ca">mailto:fdurand@inverse.ca</a>]
 
Sent: Wednesday, March 22, 2017 9:35 AM 
</div>
</div>
Hello Helen,<o:p></o:p>
i ask you some questions multiples times about your issue but you never
answered, so first answer the questions.<o:p></o:p>
Also you need mac filter.<o:p></o:p>
 <o:p></o:p>
<div>
</div>
Hi,<o:p></o:p>
I disabled mac filter on WLC2500 and finally have my endpoint
gained ip address from PF and redirected to the registration page. Can we do user
authentication? I added AD in the source. However, it shown “You do not have
permission to register
a device with this username” after I input my domain credentials. Please see
the pf.log , profile. Conf and authentication.conf below.<o:p></o:p>
PF Log:<o:p></o:p>
Mar 21 03:54:53 httpd.portal(3466) INFO: [mac:unknown]
Instantiate profile RSP (pf::Portal::ProfileFactory::_from_profile)<o:p></o:p>
Mar 21 03:54:53 httpd.portal(3466) INFO:
[mac:7c:01:91:25:f9:eb] Instantiate profile RSP
(pf::Portal::ProfileFactory::_from_profile)<o:p></o:p>
[mac:7c:01:91:25:f9:eb] Authenticating user using sources : RSPEmployee,AdminIT
icate)<o:p></o:p>
[mac:7c:01:91:25:f9:eb] [RSPEmployee] Authentication successful for helen_chen
(pf::Authentication::Source::LDAPSource::authenticate)<o:p></o:p>
[mac:7c:01:91:25:f9:eb] Authentication successful for 'helen_chen' in source
RSPEmployee (AD) (pf::authentication::authenticate)<o:p></o:p>
[mac:7c:01:91:25:f9:eb] User helen_chen has authenticated on the portal.
(Class::MOP::Class:::after)<o:p></o:p>
[mac:7c:01:91:25:f9:eb] Found source RSPEmployee in session.
(Class::MOP::Class:::around)<o:p></o:p>
[mac:7c:01:91:25:f9:eb] Successfully authenticated helen_chen
icate)<o:p></o:p>
Mar 21 03:54:53 httpd.portal(3466) WARN:
[mac:7c:01:91:25:f9:eb] Calling match with empty/invalid rule class. Defaulting to
'authentication' (pf::authentication::match)<o:p></o:p>
[mac:7c:01:91:25:f9:eb] Using sources RSPEmployee for matching
(pf::authentication::match)<o:p></o:p>
[mac:7c:01:91:25:f9:eb] Calling match with empty/invalid rule class. Defaulting to
'authentication' (pf::authentication::match)<o:p></o:p>
[mac:7c:01:91:25:f9:eb] Using sources RSPEmployee for matching
(pf::authentication::match)<o:p></o:p>
[mac:7c:01:91:25:f9:eb] Use of uninitialized value in concatenation (.) or string
at /usr/local/pf/html/captive-
portal/lib/captiveportal/PacketFence/DynamicRouting/Module/Authentication.pm line
139.<o:p></o:p>
(captiveportal::PacketFence::DynamicRouting::Module::Authenticati
on::execute_actions)<o:p></o:p>
[mac:7c:01:91:25:f9:eb] Use of uninitialized value in concatenation (.) or string
at /usr/local/pf/html/captive-
portal/lib/captiveportal/PacketFence/DynamicRouting/Module/Authentication.pm line
139.<o:p></o:p>
(captiveportal::PacketFence::DynamicRouting::Module::Authenticati
on::execute_actions)<o:p></o:p>
[mac:7c:01:91:25:f9:eb] Cannot find unregdate () or role() for user.
(captiveportal::PacketFence::DynamicRouting::Module::Authentication::execute_action
s)<o:p></o:p>
[mac:7c:01:91:25:f9:eb] Execute actions of module
default_policy+default_registration_policy+default_login_policy did not
succeed. (captiveportal::PacketFence::DynamicRouting::Module::done)<o:p></o:p>
Mar 21 03:54:53 httpd.portal(3444) INFO: [mac:unknown]
Instantiate profile RSP (pf::Portal::ProfileFactory::_from_profile)<o:p></o:p>
Authentication role:<o:p></o:p>
[Employee]<o:p></o:p>
description=Employee<o:p></o:p>
password=XXXX<o:p></o:p>
scope=sub<o:p></o:p>
binddn=CN=wirelessauth,OU=System Function Account,OU=Special
Account,DC=xxxxx0,DC=xxxxx,DC=com<o:p></o:p>
basedn=dc=xxxx0,dc=xxxx,dc=com<o:p></o:p>
email_attribute=mail<o:p></o:p>
usernameattribute=sAMAccountName<o:p></o:p>
connection_timeout=5<o:p></o:p>
stripped_user_name=no<o:p></o:p>
encryption=none<o:p></o:p>
dynamic_routing_module=AuthModule<o:p></o:p>
port=389<o:p></o:p>
type=AD<o:p></o:p>
host=x.x.x.x<o:p></o:p>
[Employee rule Employee]<o:p></o:p>
description=RSPEmployees<o:p></o:p>
class=authentication<o:p></o:p>
match=all<o:p></o:p>
action0=set_role=Employee<o:p></o:p>
action1=set_access_duration=5D<o:p></o:p>
condition0=memberOf,equals,CN=wirelessauth,OU=System Function
Account,OU=Special Account,DC=xxxxxxxx,DC=xxxxxxxx,DC=com<o:p></o:p>
[AdminIT]<o:p></o:p>
description=AdminIT<o:p></o:p>
password=xxxxx<o:p></o:p>
scope=sub<o:p></o:p>
binddn=CN=wirelessauth,OU=System Function Account,OU= Special
Account,DC=xxxxxxxx,DC=xxxxxxxx,DC=com
<o:p></o:p>
basedn=OU=IT,OU=Special
Account,DC=xxxxx0,DC=xxxxxx,DC=com<o:p></o:p>
email_attribute=mail<o:p></o:p>
usernameattribute=sAMAccountName<o:p></o:p>
connection_timeout=5<o:p></o:p>
stripped_user_name=no<o:p></o:p>
encryption=none<o:p></o:p>
port=389<o:p></o:p>
type=AD<o:p></o:p>
host=x.x.x.x<o:p></o:p>
[AdminIT rule AdminLogin]<o:p></o:p>
description=<o:p></o:p>
class=administration<o:p></o:p>
action0=mark_as_sponsor=1<o:p></o:p>
[Visitors]<o:p></o:p>
description=Visitors<o:p></o:p>
<a
href="mailto:sponsorship_cc=helen_chen@xxxxxxxx.com">sponsorship_cc=helen_chen@xxxx
xxxx.com</a><o:p></o:p>
email_activation_timeout=30m<o:p></o:p>
type=SponsorEmail<o:p></o:p>
create_local_account=yes<o:p></o:p>
allow_localdomain=yes<o:p></o:p>
[Visitors rule Visitors]<o:p></o:p>
description=Visitors<o:p></o:p>
class=authentication<o:p></o:p>
action0=set_role=guest<o:p></o:p>
action1=set_access_duration=1D<o:p></o:p>
Profile.conf<o:p></o:p>
[RSP]<o:p></o:p>
dot1x_recompute_role_from_portal=0<o:p></o:p>
filter=connection_type:Wireless-802.11-
NoEAP,connection_type:Wireless-802.11-EAP<o:p></o:p>
description=RSP_Global<o:p></o:p>
sources=Employee,AdminIT,Visitors<o:p></o:p>
#<o:p></o:p>
# Copyright (C) 2005-2017 Inverse inc.<o:p></o:p>
#<o:p></o:p>
# See the enclosed file COPYING for license information
(GPL).<o:p></o:p>
# If you did not receive this file, see<o:p></o:p>
# <a
href="http://www.fsf.org/licensing/licenses/gpl.html">http://www.fsf.org/licensing/
licenses/gpl.html</a><o:p></o:p>
Would you please help with this?<o:p></o:p>
Thank you,<o:p></o:p>
 ---<o:p></o:p>
 <o:p></o:p>
 <o:p></o:p>
<o:p></o:p>
 
 
 
 
 
<pre>------------------------------------------------------------------------------
<o:p></o:p></pre>
<pre>Check out the vibrant tech community on one of the world's
most<o:p></o:p></pre>
<pre>engaging tech sites, Slashdot.org! <a
href="http://sdm.link/slashdot">http://sdm.link/slashdot</a><o:p></o:p></pre>
 
 
 
 
 
<pre>_______________________________________________<o:p></o:p></pre>
<pre>PacketFence-users mailing list<o:p></o:p></pre>
<pre><a href="mailto:PacketFence-users@lists.sourceforge.net">PacketFence-
users@lists.sourceforge.net</a><o:p></o:p></pre>
<pre><a href="https://lists.sourceforge.net/lists/listinfo/packetfence-
users">https://lists.sourceforge.net/lists/listinfo/packetfence-
users</a><o:p></o:p></pre>
</blockquote>
 <o:p></o:p>
Roman , serif","serif""> 
 
 
 
<pre>------------------------------------------------------------------------------
<o:p></o:p></pre>
Roman , serif","serif""> 
 
 
 
<pre>_______________________________________________<o:p></o:p></pre>
</blockquote>
Roman , serif","serif""> <o:p></o:p>
Roman","serif""> 
 
 
<pre>------------------------------------------------------------------------------
<o:p></o:p></pre>
Roman","serif""> 
 
 
<pre>_______________________________________________<o:p></o:p></pre>
</blockquote>
Roman","serif""><o:p> </o:p>
</div>
</body>
</html>

JFKBSDKJBFSJKDFSKDJ

Încărcat de

Informații document

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

JFKBSDKJBFSJKDFSKDJ

Încărcat de

Drepturi de autor:

Formate disponibile

<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-

S-ar putea să vă placă și