|
From: Adrian D. <adr...@no...> - 2019-02-05 10:18:53
|
Hi
Tanks for your help
I've found the solution to it. It seems like he don't like when there is wrong timezone, I configured the same on both server and it work !
It show up in green and troubleshooting command work !
For this squetch, I only need packetfence has Radius service.
After doing the remaining configuration, I've tested the radius service.
BUT, I have the following error in radius.log
(51) rest: ERROR: {"control:PacketFence-Authorization-Status":"allow","Reply-Message":"CLI Access is not allowed by PacketFence on this switch"}
Feb 5 11:01:05 pfcen7 auth[11140]: Need 2 more connections to reach min connections (3)
Feb 5 11:01:05 pfcen7 auth[11140]: rlm_rest (rest): Opening additional connection (4), 1 of 63 pending slots used
Feb 5 11:01:05 pfcen7 auth[11140]: (51) Rejected in post-auth: [NOVAYS\pfadmin] (from client 192.168.1.201 port 0 cli 4???I? via TLS tunnel)
Feb 5 11:01:05 pfcen7 auth[11140]: (51) Login incorrect (rest: Server returned:): [NOVAYS\pfadmin] (from client 192.168.1.201 port 0 cli 4???I? via TLS tunnel)
Feb 5 11:01:05 pfcen7 auth[11140]: [mac:4▒▒I▒] Rejected user: NOVAYS\pfadmin
Feb 5 11:01:05 pfcen7 auth[11140]: (52) Login incorrect (eap_peap: The users session was previously rejected: returning reject (again.)): [NOVAYS\pfadmin] (from client 192.168.1.201 port 0 cli 4???I?)
I've tested many user like:
NOVASYS\administrateur
NOVASYS\pfadmin
administrateur
pfadmin
I always get the same error. I've search in the documentation about CLI configuration. In 26.3 Switch Login Access (page 229) I've added an Admin Role in "Configuration-> System Configuration -> Admin access"
witch "Action : Switch CLI - Read"
Still have the same probleme
Is the CLI configuration faulty or do I use a wrong syntaxe in the authentication prompt ?
Btw I restart radius service on each configuration change.
Adrian
_______________________________________________
PacketFence-users mailing list
Pac...@li...
https://lists.sourceforge.net/lists/listinfo/packetfence-users
|