search

inverse-inc / packetfence

PacketFence is a fully supported, trusted, Free and Open Source network access control (NAC) solution. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, powerful BYOD management options, 802.1X support, layer-2 isolation of problematic devices; PacketFence can be used to effectively secure networks small to very large heterogeneous networks.
https://packetfence.org
GNU General Public License v2.0
1.37k stars 287 forks source link

Sponsor registration #1328

Closed lzammit closed 8 years ago

lzammit commented 8 years ago

When I validate the activation it doesn't work:

does not have permission to sponsor a user

Apr 05 16:03:37 httpd.portal(5672) INFO: [mac:0] database query failed with: Duplicate entry '0' for key 'PRIMARY' (errno: 1062) (pf::db::db_query_execute) Apr 05 16:03:37 httpd.portal(5672) INFO: [mac:0] violation not added, MAC 0 is invalid! trigger useragent::401 (pf::violation::violation_trigger) Apr 05 16:03:37 httpd.portal(5672) INFO: [mac:0] violation not added, MAC 0 is invalid! trigger useragent::600 (pf::violation::violation_trigger) Apr 05 16:03:37 httpd.portal(5672) INFO: [mac:0] violation not added, MAC 0 is invalid! trigger useragent::5 (pf::violation::violation_trigger) Apr 05 16:03:37 httpd.webservices(5685) INFO: [mac:unknown] violation not added, MAC 0 is invalid! trigger internal::new_dhcp_info (pf::violation::violation_trigger) Apr 05 16:03:37 httpd.portal(5672) INFO: [mac:0] [94:db:c9:38:8f:0b] Activation code sent to email email2@inverse.ca from email1@gmail.com successfully verified. for activation type: sponsor (pf::activation::validate_code) Apr 05 16:03:37 httpd.portal(5672) ERROR: [mac:0] unable to read password file '/usr/local/pf/conf/admin.conf' (pf::Authentication::Source::HtpasswdSource::authenticate) Apr 05 16:03:37 httpd.portal(5672) INFO: [mac:0] [Inverse-AD] Authentication successful for lzammit (pf::Authentication::Source::LDAPSource::authenticate) Apr 05 16:03:37 httpd.portal(5672) INFO: [mac:0] Authentication successful for 'lzammit' in source Inverse-AD (AD) (pf::authentication::authenticate) Apr 05 16:03:37 httpd.portal(5672) INFO: [mac:0] Successfully authenticated lzammit/172.20.20.247/0 (captiveportal::PacketFence::Controller::Authenticate::authenticationLogin)

julsemaan commented 8 years ago

It doesn't say that it matches a rule.

Do you have an 'administration' rules that marks the user as sponsor ?

lzammit commented 8 years ago

Yes:

Authenticating against Inverse-AD Authentication FAILED against Inverse-AD (Invalid login or password) Matched against Inverse-AD for 'authentication' rules set_access_duration : 1h set_role : default Matched against Inverse-AD for 'administration' rules mark_as_sponsor : 1

julsemaan commented 8 years ago

fixed via 17640f1de4535b24ae1aa79b1345f0fd859421d0