PacketFence - BTS - PacketFence
View Issue Details
0000872PacketFencecorepublic2009-12-08 16:242012-02-29 10:58
obilodeau 
obilodeau 
highfeatureN/A
closedfixed 
 
2.0.0 
0000872: mac-auth, mac-bypass, 802.1x wired and 802.1x wireless are not the same and should be treated as such
Right now we do not disambiguate between mac-auth, mac-bypass (cisco), 802.1x wired and 802.1x wireless.

All these concepts are different and often require different handling to deauthenticate, etc.

For example, in Aruba, we know grab the user's nUserAuthenticationMethod to determinate how to kick him out. This should be carried with the node's metadata (locationlog maybe?) to avoid doing yet another lookup to find it out.

This will need quite some work but it has to be done if we want the architecture to stay flexible to future needs.
No tags attached.
Issue History
2009-12-08 16:24obilodeauNew Issue
2009-12-08 16:24obilodeauStatusnew => assigned
2009-12-08 16:24obilodeauAssigned To => obilodeau
2010-04-15 17:43obilodeauProjectPacketFence 1.9 => PacketFence
2010-09-29 11:56obilodeauNote Added: 0001700
2010-09-29 11:56obilodeauStatusassigned => resolved
2010-09-29 11:56obilodeauFixed in Version => trunk
2010-09-29 11:56obilodeauResolutionopen => fixed
2010-12-15 11:37obilodeauFixed in Versiontrunk => 2.0.0
2011-01-26 15:42obilodeauStatusresolved => closed
2012-02-29 10:58obilodeauCategoryfuture => core

Notes
(0001700)
obilodeau   
2010-09-29 11:56   
connection_type in trunk allows us to differentiate between all these types. flip also handles VLAN changes and deauth according to this connection_type which is stored in the locationlog.

So this is fixed. In fact, it was a long time ago but visibility of this bug was lost in the midst of many many other bugs...