IP and Computer Names shows up as N/A

[sinankizar]

Describe the bug

We have set up and running v14.0 with Ad source and it checks only username and password. We want to check both Computername and Username exist in AD with domain credentials of the user. I have fingerbank integrated too, but the computer names and IPs in audit screen shows up as N/A. I tried to everytinh in mailing list and on the internet, hell, I even tried chatgpt to solve this. Any thoughts on this? And please don't lead me to mailinglist because same issue is available there and no one knows how to solve this.

Screenshots
If applicable, add screenshots to help explain your problem.

[E-ThanG]

I'm also building up a new PacketFence 14.0 server. I see the same thing.

I haven't gotten to the point where I need those attributes yet, but I believe that those are populated by DHCP. Is PacketFence receiving DHCP traffic directly or from a forwarder? Is the DHCP listener enabled? I'm planning on installing their forwarding agent on our DHCP servers.

[sinankizar]

Hello Thank you for your input. I use fortigates as dhcp server and didn’t setup a DHCP listener. I only have one interface on Packetfence which was setup as management. If you point me out how to make DHCP listener active i will be appreciated it. Thanks in advance

…

________________________________ From: E-ThanG ***@***.***> Sent: Monday, November 25, 2024 3:24:31 AM To: inverse-inc/packetfence ***@***.***> Cc: sinankizar ***@***.***>; Author ***@***.***> Subject: Re: [inverse-inc/packetfence] IP and Computer Names shows up as N/A (Issue #8398) I'm also building up a new PacketFence 14.0 server. I see the same thing. I haven't gotten to the point where I needs those attributes yet, but I believe that those are populated by DHCP. Is PacketFence receiving DHCP traffic directly or from a forwarder? Is the DHCP listener enabled? I'm planning on installing their forwarding agent on our DHCP servers. — Reply to this email directly, view it on GitHub<#8398 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AGXFBCOFQJZ7LBHMV74B64D2CJU37AVCNFSM6AAAAABSMBFCHGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDIOJWGQ2DQMZYGA>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[E-ThanG]

https://www.packetfence.org/doc/14.0.0/PacketFence_Installation_Guide.html#_dhcp_remote_sensor and
https://www.packetfence.org/doc/14.0.0/PacketFence_Installation_Guide.html#_production_dhcp_access

Having said that, I'm not sure how realistic it is to use that information for authentication. A device doesn't have to complete DHCP to authenticate, that usually comes later. It depends on how you have your network configured and the vendor's configuration details. Do you really want to delay authentication until after DHCP completes?

If you are using EAP-TLS, the cert contains trusted information. That can be used for authentication.

[sinankizar]

Will try this asap and get back to you👍🏼

…

________________________________ From: E-ThanG ***@***.***> Sent: Monday, November 25, 2024 6:42:09 AM To: inverse-inc/packetfence ***@***.***> Cc: sinankizar ***@***.***>; Author ***@***.***> Subject: Re: [inverse-inc/packetfence] IP and Computer Names shows up as N/A (Issue #8398) https://www.packetfence.org/doc/14.0.0/PacketFence_Installation_Guide.html#_dhcp_remote_sensor — Reply to this email directly, view it on GitHub<#8398 (comment)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AGXFBCP4GGG5X7SWYAWZ53D2CKMBDAVCNFSM6AAAAABSMBFCHGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDIOJWGYYTIMJVGI>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[sinankizar]

I have installed DHCP forwarder somehow but i really can't say if it is working. No restarts has been made both on pfence and DHCP listener machines. My actual goal is:

Check username/password authentication on AD AND check computername if it is exist in active directory and then give permission to connect on our corporate wifi.