Stuff

If authentication is successful, it proceeds with authorization (e.g. assigning a VLAN, an ACL or role).

Authentication path

1. Connection Profile (filters determine which one will be used)
2. Authentication Source(s) will be queried
3. Authentication Source applies “authentication rules” (Condition -> Action (Role))
4. Roles do nothing by themselves but Switches can associate a VLAN to a Role

Folders

Configuration

/usr/local/pf/conf

Logs

/usr/local/pf/logs

sudo tail -f /usr/local/pf/logs/radius.log

sudo tail -f /usr/local/pf/logs/packetfence.log

sudo tail -f /usr/local/pf/logs/ntlm-auth-api.log

/usr/local/pf/conf/log.conf.d

Unclassified

Machine account test ok

Means that the test of the AD machine account against the AD Server was successful (there is no “test” machine set up anywhere, it is “‘Machine account’ test ok”).

Documentation

https://www.packetfence.org/doc/PacketFence_Installation_Guide.html

https://www.packetfence.org/doc/PacketFence_Network_Devices_Configuration_Guide.html