From: Morris, A. <am...@ca...> - 2012-01-27 16:17:59
|
Hi Francois, Yes, the vlan gets switched on the PC with no problems, opening a new tab or window works fine. We actually get a page can't be displayed error, but that is because I don't actually have internet access on the dev network, but that is something I'm working on. However, I would still hope the redirection to work if possible. If not I'll try changing the text on the "Unable to detect network activity" page to "please close and reopen your browser to continue" type error. One odd thing I just noticed while looking through the logs is old SoH violations still occurring, even though the laptop has since been fully updated with everything the windows 7 action centre requires. The SoH part of the radius log shows that it has passed all SoH tests, but the packetfence.log shows the following: Jan 27 16:01:06 pf::WebAPI(2956) INFO: 6037 grace remaining on violation 4000001 (trigger soh::2) for node 00:24:54:42:86:04. Not adding violation. (pf::violation::violation_trigger) Jan 27 16:01:06 pf::WebAPI(2956) INFO: MAC 00:24:54:42:86:04 matched filter NoAntivirus (pf::soh::evaluate) Once the grace period is over the violation gets flagged again, despite being remedied. I've installed Microsoft antivirus and spyware, windows firewall enabled and all security updates are installed. Radius log is below: [peap] Peap state WAITING FOR SOH RESPONSE [peap] EAP type 254 [peap] SoH System-Health-ID vendor 00000137 component=0 [peap] SoH MS type-value payload [peap] SoH System-Health-ID vendor 00000137 component=128 [peap] SoH unhandled vendor-specific TLV 00000137/component=128 8 bytes payload [peap] SoH unhandled vendor-specific TLV 00000137/component=128 8 bytes payload [peap] SoH Health-Class 0 [peap] SoH Unknown TLV 10 len=36 [peap] SoH Health-Class-Status - current shid=00000137 component=128 [peap] SoH Health-Class-Status microsoft DWORD=00000007 [peap] SoH Health-Class 1 [peap] SoH Unknown TLV 10 len=60 [peap] SoH Health-Class-Status - current shid=00000137 component=128 [peap] SoH Health-Class-Status microsoft DWORD=00000003 [peap] SoH Health-Class 2 [peap] SoH Unknown TLV 10 len=60 [peap] SoH Health-Class-Status - current shid=00000137 component=128 [peap] SoH Health-Class-Status microsoft DWORD=00000003 [peap] SoH Unknown TLV 10 len=36 [peap] SoH Health-Class-Status - current shid=00000137 component=128 [peap] SoH Health-Class-Status microsoft DWORD=00000004 [peap] SoH Health-Class 3 [peap] SoH Health-Class-Status - current shid=00000137 component=128 [peap] SoH Health-Class-Status microsoft DWORD=00000004 [peap] SoH Health-Class 4 [peap] SoH Health-Class-Status - current shid=00000137 component=128 [peap] SoH Health-Class-Status microsoft DWORD=00ff0005 [peap] SoH unhandled vendor-specific TLV 00000137/component=128 8 bytes payload [peap] SoH unhandled vendor-specific TLV 00000137/component=128 5 bytes payload [peap] SoH unhandled vendor-specific TLV 00000137/component=128 8 bytes payload [peap] Setting User-Name to sm18818 [peap] Processing SoH request SoH-Supported = yes SoH-MS-Machine-OS-vendor = Microsoft SoH-MS-Machine-OS-version = 6 SoH-MS-Machine-OS-release = 1 SoH-MS-Machine-OS-build = 7601 SoH-MS-Machine-SP-version = 1 SoH-MS-Machine-SP-release = 0 SoH-MS-Machine-Processor = x86 SoH-MS-Machine-Name = "Laptop" SoH-MS-Correlation-Id = 0xd4ee70d8587d41fb953f54a30e2e14a501ccdcf80b1ea523 SoH-MS-Machine-Role = client SoH-MS-Windows-Health-Status = "firewall ok snoozed=0 microsoft=1 up2date=1 enabled=1" SoH-MS-Windows-Health-Status = "antivirus ok snoozed=0 microsoft=0 up2date=1 enabled=1" SoH-MS-Windows-Health-Status = "antispyware ok snoozed=0 microsoft=0 up2date=1 enabled=1" SoH-MS-Windows-Health-Status = "antispyware ok snoozed=0 microsoft=1 up2date=0 enabled=0" SoH-MS-Windows-Health-Status = "auto-updates ok action=install" SoH-MS-Windows-Health-Status = "security-updates ok all-installed" FreeRADIUS-Proxied-To = 127.0.0.1 User-Name = "sm18818" Service-Type = Framed-User Framed-MTU = 1500 Called-Station-Id = "00-09-E8-98-A0-02" Calling-Station-Id = "00-24-54-42-86-04" Cisco-AVPair = "audit-session-id=0A010115000000CF4CDD8970" NAS-Port-Type = Ethernet NAS-Port = 50002 NAS-Port-Id = "FastEthernet0/2" NAS-IP-Address = 10.1.1.21 [peap] server soh-server { # Executing section authorize from file /etc/raddb/sites-enabled/packetfence-soh +- entering group authorize {...} rlm_perl: Added pair NAS-Port-Type = Ethernet rlm_perl: Added pair SoH-Supported = yes rlm_perl: Added pair SoH-MS-Machine-Processor = x86 rlm_perl: Added pair Service-Type = Framed-User rlm_perl: Added pair Called-Station-Id = 00-09-E8-98-A0-02 rlm_perl: Added pair SoH-MS-Machine-Name = Laptop rlm_perl: Added pair FreeRADIUS-Proxied-To = 127.0.0.1 rlm_perl: Added pair SoH-MS-Machine-OS-version = 6 rlm_perl: Added pair SoH-MS-Machine-OS-build = 7601 rlm_perl: Added pair SoH-MS-Machine-Role = client rlm_perl: Added pair NAS-IP-Address = 10.1.1.21 rlm_perl: Added pair SoH-MS-Machine-SP-release = 0 rlm_perl: Added pair NAS-Port-Id = FastEthernet0/2 rlm_perl: Added pair SoH-MS-Correlation-Id = 0xd4ee70d8587d41fb953f54a30e2e14a501ccdcf80b1ea523 rlm_perl: Added pair SoH-MS-Windows-Health-Status = firewall ok snoozed=0 microsoft=1 up2date=1 enabled=1 rlm_perl: Added pair SoH-MS-Windows-Health-Status = antivirus ok snoozed=0 microsoft=0 up2date=1 enabled=1 rlm_perl: Added pair SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=0 up2date=1 enabled=1 rlm_perl: Added pair SoH-MS-Windows-Health-Status = antispyware ok snoozed=0 microsoft=1 up2date=0 enabled=0 rlm_perl: Added pair SoH-MS-Windows-Health-Status = auto-updates ok action=install rlm_perl: Added pair SoH-MS-Windows-Health-Status = security-updates ok all-installed rlm_perl: Added pair Calling-Station-Id = 00-24-54-42-86-04 rlm_perl: Added pair Cisco-AVPair = audit-session-id=0A010115000000CF4CDD8970 rlm_perl: Added pair SoH-MS-Machine-OS-release = 1 rlm_perl: Added pair SoH-MS-Machine-OS-vendor = Microsoft rlm_perl: Added pair User-Name = sm18818 rlm_perl: Added pair SoH-MS-Machine-SP-version = 1 rlm_perl: Added pair NAS-Port = 50002 rlm_perl: Added pair Framed-MTU = 1500 ++[packetfence-soh] returns ok ++[config] returns ok Found Auth-Type = Accept Auth-Type = Accept, accepting the user WARNING: Empty post-auth section. Using default return values. [peap] } # server soh-server [peap] Got SoH reply [peap] Setting default EAP type for tunneled EAP session. [peap] Got tunneled request EAP-Message = 0x0207000c01736d3138383138 server packetfence { [peap] Setting User-Name to sm18818 Sending tunneled request EAP-Message = 0x0207000c01736d3138383138 FreeRADIUS-Proxied-To = 127.0.0.1 User-Name = "sm18818" Service-Type = Framed-User Framed-MTU = 1500 Called-Station-Id = "00-09-E8-98-A0-02" Calling-Station-Id = "00-24-54-42-86-04" Cisco-AVPair = "audit-session-id=0A010115000000CF4CDD8970" NAS-Port-Type = Ethernet NAS-Port = 50002 NAS-Port-Id = "FastEthernet0/2" NAS-IP-Address = 10.1.1.21 -----Original Message----- From: Francois Gaudreault [mailto:fga...@in...] Sent: 26 January 2012 18:16 To: pac...@li... Subject: Re: [Packetfence-users] URL redirection not taking place Hi Andi, And you see the proper IP on the PC right? When you open a new tab, you can browse without problem? On 12-01-26 10:54 AM, Morris, Andi wrote: > Hi Francois, > Since e-mailing I have noticed that there is a bug logged about the redirection for IE. However, the two browsers I tried were IE8 and also Chrome and I don't see redirection in either. I haven't tried Firefox yet, but I will give it a go. > > Cheers, > Andi > > -----Original Message----- > From: Francois Gaudreault [mailto:fga...@in...] > Sent: 26 January 2012 14:14 > To: pac...@li... > Subject: Re: [Packetfence-users] URL redirection not taking place > > Hi Andi, > > Did you use IE as the browser? The Javascript redirection is not working well with IE. Did you try with another browser (like Chrome)? > > On 12-01-25 11:38 AM, Morris, Andi wrote: >> Hi again all, >> I have since noticed that although the vlan switch is working properly now, the progress bar still times out and the user is presented with "Unable to detect network activity". If they manually open a new window then access does as it should, suggesting that the redirection is not working. I've tried in IE and Chrome and see the same issue. >> >> I have the following lines in my pf.conf - I've just used www.google.co.uk for testing purposes, I will change this to a student portal when it is up and running. >> redirecturl=http://www.google.co.uk/ >> always_use_redirecturl=enabled >> >> I can't see anything in the packetfence.log to suggest any error going on with redirection there. >> >> Cheers, >> Andi >> ________________________________ >> >>> From 1st November 2011 UWIC changed its title to Cardiff >>> Metropolitan University. From the 6th December, as part of this >>> change, all email addresses which included @uwic.ac.uk have changed >>> to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan >>> University will now be sent from the new @cardiffmet.ac.uk address. >>> Please could you ensure that all of your contact records and >>> databases are updated to reflect this change. Further information >>> can be found on the website >>> here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.asp >>> x >>>> >> >> --------------------------------------------------------------------- >> - >> -------- Keep Your Developer Skills Current with LearnDevNow! >> The most comprehensive online learning library for Microsoft >> developers is just $99.99! Visual Studio, SharePoint, SQL - plus >> HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! >> http://p.sf.net/sfu/learndevnow-d2d >> _______________________________________________ >> Packetfence-users mailing list >> Pac...@li... >> https://lists.sourceforge.net/lists/listinfo/packetfence-users >> > > > -- > Francois Gaudreault, ing. jr > fga...@in... :: +1.514.447.4918 (x130) :: www.inverse.ca > Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence > (www.packetfence.org) > > ---------------------------------------------------------------------- > -------- Keep Your Developer Skills Current with LearnDevNow! > The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! > http://p.sf.net/sfu/learndevnow-d2d > _______________________________________________ > Packetfence-users mailing list > Pac...@li... > https://lists.sourceforge.net/lists/listinfo/packetfence-users > ________________________________ > >> From 1st November 2011 UWIC changed its title to Cardiff Metropolitan >> University. From the 6th December, as part of this change, all email >> addresses which included @uwic.ac.uk have changed to >> @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan >> University will now be sent from the new @cardiffmet.ac.uk address. >> Please could you ensure that all of your contact records and >> databases are updated to reflect this change. Further information can >> be found on the website >> here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx >> > > > ---------------------------------------------------------------------- > -------- Keep Your Developer Skills Current with LearnDevNow! > The most comprehensive online learning library for Microsoft > developers is just $99.99! Visual Studio, SharePoint, SQL - plus > HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! > http://p.sf.net/sfu/learndevnow-d2d > _______________________________________________ > Packetfence-users mailing list > Pac...@li... > https://lists.sourceforge.net/lists/listinfo/packetfence-users > -- Francois Gaudreault, ing. jr fga...@in... :: +1.514.447.4918 (x130) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) ------------------------------------------------------------------------------ Keep Your Developer Skills Current with LearnDevNow! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-d2d _______________________________________________ Packetfence-users mailing list Pac...@li... https://lists.sourceforge.net/lists/listinfo/packetfence-users ________________________________ >From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. Please could you ensure that all of your contact records and databases are updated to reflect this change. Further information can be found on the website here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx> |