PacketFence
Bug Tracking System

View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0001028PacketFenceconfigurationpublic2010-07-08 10:462011-01-26 15:42
Reporterobilodeau 
Assigned Toobilodeau 
PrioritynormalSeverityfeatureReproducibilityN/A
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version 
Target Version2.0.0Fixed in Version2.0.0 
Summary0001028: adding radius clients needs to be performed from the command line
DescriptionIn a 802.1x, Mac Authentication or Mac Address Bypass context, the switches that communicates with PacketFence need to be added to a freeradius clients (or user don't remember) flat file.

This should be automatically done based on what is in switches.conf and a new radius shared secret parameter should be added in switches.conf.
TagsNo tags attached.
fixed in git revision
fixed in mtn revision5ccf483d9ddf63a82285dcd6ed8b6dc50a471be2
Attached Files

- Relationships
related to 0001051closedobilodeau radiusd restarted by PacketFence 
child of 0001027closedfgaudreault freeradius needs to be configured manually 

-  Notes
(0001632)
obilodeau (reporter)
2010-08-25 16:22

We will take an approach where the clients settings are stored in the database. We decided to store them internally inside the pf schema and not in an external database because it is less complex (no new db, new db user, etc. to handle).

For info check:
http://github.com/alandekok/freeradius-server/blob/v2.1.x/raddb/sql.conf [^]
http://old.nabble.com/NAS-list-with-MySQL-td14971644.html [^]

Tasks:
Test
- Try out the SQL module in the lab as a PoC, if it works with only nas client activated that's great!

Integration:
- Integrate the schema in pf's schema. change the name to radius_nas instead of nas
- Add a new param in switches.conf: radius_shared_secret or something similar
- On PF startup, at the config check phase (where we generate the templates) populate the NAS table in the database based on the switches IPs and shared secrets
- Do not forget that this will then require freeradius2 packages to be installed. Minimally: freeradius2, freeradius2-perl and freeradius2-mysql
(0001721)
obilodeau (reporter)
2010-10-07 16:56

Successfully got the SQL module to use a nas table. Changes required:

- install freeradius2-mysql
- add table to database
- in radiusd.conf:
 - uncomment $INCLUDE sql.conf under modules { ... }
 - add sql under instantiate { ... }
- in sql.conf
 - setup login, password, hostname, database name
 - uncomment readclients = yes
 - set nas_table (if not default)
(0001723)
obilodeau (reporter)
2010-10-12 12:09

New radiusSecret parameter in switches.conf and pf::freeradius module are created. However nothing is done by default. See addons/freeradius-integration/README on help to enable that feature.

This will probably change in the future but for now, until we can fully control FreeRADIUS (config, start/stop/restart, etc.) from within PacketFence, it was preferred to keep things simple (avoiding everyone the need to change their config when upgrading). When things will be more integrated this will likely change.

- Issue History
Date Modified Username Field Change
2010-07-08 10:46 obilodeau New Issue
2010-07-08 10:46 obilodeau Status new => assigned
2010-07-08 10:46 obilodeau Assigned To => obilodeau
2010-07-08 10:46 obilodeau Relationship added child of 0001027
2010-08-25 16:22 obilodeau Note Added: 0001632
2010-08-25 16:28 obilodeau Relationship added related to 0001051
2010-10-07 16:56 obilodeau Note Added: 0001721
2010-10-12 12:09 obilodeau mtn revision => 5ccf483d9ddf63a82285dcd6ed8b6dc50a471be2
2010-10-12 12:09 obilodeau Note Added: 0001723
2010-10-12 12:09 obilodeau Status assigned => resolved
2010-10-12 12:09 obilodeau Fixed in Version => 1.9.2
2010-10-12 12:09 obilodeau Resolution open => fixed
2010-11-19 14:23 obilodeau Fixed in Version 1.9.2 => trunk
2010-11-19 14:25 obilodeau Target Version 1.10.0 => 2.0.0
2010-12-15 11:37 obilodeau Fixed in Version trunk => 2.0.0
2011-01-26 15:42 obilodeau Status resolved => closed


Copyright © 2000 - 2012 MantisBT Group
Powered by Mantis Bugtracker