hi rafael. The last authorization is via API, not back to the portal. There are a few things to check.. you need to be sure that you have an api username / password on smartzone, and that your're either using the non-httpS (non-SSL) port for the API or that your smartzone has a valid certificate and that the api url configured in PF is using DNS with the matching the certificate.
Packetfence uses by default port 9443 so its SSL always. But it seems it ignores the certificate check. Regardless, port 9443 has to be open on your SZ and reachable from PF. Is that the case?
you can run tcpdump on your PF server to see if the api call is being made.. or change this file:
/lib/pf/Switch/Ruckus/SmartZone.pm
on this line
my $res = $ua->post("https://$controllerIp:9443/portalintf", Content => $payload, "Content-Type" => "application/json");
and change port 9443 to 9080 and then run tcpdump to capture port 9080 and see if you're getting an API error or something
tcpdump -i eth0 -vv -nn -A tcp port 9080 and host
(change eth0 to match your PF's IP)
see in your PF logs if you see anything similar to this: "Failed to contact Ruckus for deauthentication"
good luck!