I had SSO on access reevalution, accounting and DHCP all turned on. I added 10.0.0.0/8 to the networks on which to do SSO and I still received the same error. I turned off SSO on accounting and DHCP and still had same error. I then removed 10.0.0.0/8 and still had same error.
Thanks! May 6 17:18:08 packetfence packetfence_httpd.webservices: httpd.webservices(1599) INFO: [mac:5c:80:b6:f5:49:43] Request to /api/v1/firewall_sso/update is unauthorized, will perform a login (pf::api::unifiedapiclient::call) May 6 17:18:08 packetfence packetfence_httpd.webservices: httpd.webservices(1599) ERROR: [mac:5c:80:b6:f5:49:43] malformed JSON string, neither tag, array, object, number, string or atom, at character offset 0 (before "An internal error ha...") at /usr/local/pf/lib/pf/api/unifiedapiclient.pm line 225. (pf::WebAPI::JSONRPC::__ANON__) ____________________________________ Jeremy Sinicki ____________________________________ From: Zammit, Ludovic <luza...@akamai.com> Sent: Thursday, May 06, 2021 11:55 AM To: Jeremy Sinicki <jsini...@banditlites.com> Cc: packetfence-users@lists.sourceforge.net Subject: Re: [PacketFence-users] firewall_sso/update is unauthorized How do you trigger the SSO request using DHCP or Accounting ? If it’s DHCP or Accounting you have to have a network scope setup. Thanks, Ludovic Zammit Product Support Engineer Principal [https://www.akamai.com/us/en/multimedia/images/custom/2019/logo-no-tag-93x45.png] Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: [https://www.akamai.com/us/en/multimedia/images/custom/community.jpg]<https://community.akamai.com/>[https://www.akamai.com/us/en/multimedia/images/custom/rss.png]<http://blogs.akamai.com/>[https://www.akamai.com/us/en/multimedia/images/custom/twitter.png]<https://twitter.com/akamai>[https://www.akamai.com/us/en/multimedia/images/custom/fb.png]<http://www.facebook.com/AkamaiTechnologies>[https://www.akamai.com/us/en/multimedia/images/custom/in.png]<http://www.linkedin.com/company/akamai-technologies>[https://www.akamai.com/us/en/multimedia/images/custom/youtube.png]<http://www.youtube.com/user/akamaitechnologies?feature=results_main> On May 6, 2021, at 10:41 AM, Jeremy Sinicki <jsini...@banditlites.com<mailto:jsini...@banditlites.com>> wrote: 10.3.0 ZEN ____________________________________ Jeremy Sinicki Bandit Lites, Inc. Installation & Service Specialist 129 International Blvd, LaVergne, TN 37086 615.641.9000 office 989.529.5374 mobile BanditLites.com<https://urldefense.com/v3/__http:/www.banditlites.com__;!!GjvTz_vk!G-Q05VIWHCfiObuiyBLxf8QoA-EDXjRJ6Zxhmjk68iLXzx_TsWTkYhzj7uK7fw$> | BanditBuys.com<https://urldefense.com/v3/__http:/www.banditbuys.com__;!!GjvTz_vk!G-Q05VIWHCfiObuiyBLxf8QoA-EDXjRJ6Zxhmjk68iLXzx_TsWTkYhxdS58viw$> ____________________________________ From: Zammit, Ludovic <luza...@akamai.com<mailto:luza...@akamai.com>> Sent: Thursday, May 06, 2021 9:41 AM To: Jeremy Sinicki <jsini...@banditlites.com<mailto:jsini...@banditlites.com>> Cc: packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net> Subject: Re: [PacketFence-users] firewall_sso/update is unauthorized Wich PacketFence version are you using ? Thanks, Ludovic Zammit Product Support Engineer Principal [https://www.akamai.com/us/en/multimedia/images/custom/2019/logo-no-tag-93x45.png] Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: [https://www.akamai.com/us/en/multimedia/images/custom/community.jpg]<https://community.akamai.com/>[https://www.akamai.com/us/en/multimedia/images/custom/rss.png]<http://blogs.akamai.com/>[https://www.akamai.com/us/en/multimedia/images/custom/twitter.png]<https://urldefense.com/v3/__https:/twitter.com/akamai__;!!GjvTz_vk!G-Q05VIWHCfiObuiyBLxf8QoA-EDXjRJ6Zxhmjk68iLXzx_TsWTkYhwFdO47mw$>[https://www.akamai.com/us/en/multimedia/images/custom/fb.png]<https://urldefense.com/v3/__http:/www.facebook.com/AkamaiTechnologies__;!!GjvTz_vk!G-Q05VIWHCfiObuiyBLxf8QoA-EDXjRJ6Zxhmjk68iLXzx_TsWTkYhwUJaml6Q$>[https://www.akamai.com/us/en/multimedia/images/custom/in.png]<https://urldefense.com/v3/__http:/www.linkedin.com/company/akamai-technologies__;!!GjvTz_vk!G-Q05VIWHCfiObuiyBLxf8QoA-EDXjRJ6Zxhmjk68iLXzx_TsWTkYhzpj8Rf4Q$>[https://www.akamai.com/us/en/multimedia/images/custom/youtube.png]<https://urldefense.com/v3/__http:/www.youtube.com/user/akamaitechnologies?feature=results_main__;!!GjvTz_vk!G-Q05VIWHCfiObuiyBLxf8QoA-EDXjRJ6Zxhmjk68iLXzx_TsWTkYhyRj4Tvmw$> On May 6, 2021, at 9:46 AM, Jeremy Sinicki <jsini...@banditlites.com<mailto:jsini...@banditlites.com>> wrote: Hello, Here is the output. Thanks for the help. cat /usr/local/pf/conf/firewall_sso.conf [10.13.0.1] categories=default port=1813 cache_updates=0 password=*********** username_format=$pf_username type=FortiGate # Copyright (C) Inverse inc. #[192.168.1.254] #type=FortiGate #password=s3cr3t #port=1813 #[192.168.1.253] #type=PaloAlto #key= # Specific to the PaloAlto firewall , you must use a username and password to fetch the key to use (see PaloAlto documentation). ____________________________________ Jeremy Sinicki ____________________________________ From: Zammit, Ludovic via PacketFence-users <packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>> Sent: Thursday, May 06, 2021 7:17 AM To: packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net> Cc: Zammit, Ludovic <luza...@akamai.com<mailto:luza...@akamai.com>> Subject: Re: [PacketFence-users] firewall_sso/update is unauthorized Hello, The key of your issue is right there. May 4 22:23:18 packetfence pfqueue: pfqueue(5507) ERROR: [mac:5c:80:b6:f5:49:43] Error handling firewallsso : malformed JSON string, neither tag, array, object, number, string or atom, at character offset 0 (before "An internal error ha...") at /usr/local/pf/lib/pf/api/unifiedapiclient.pm line 225. (pf::api::can_fork::notify) If you understand why it does that you probably fix it. To me, it looks like it’s configuration related. You you show me the content of cat /usr/local/pf/conf/firewall_sso.conf (remove your password) Thanks, Ludovic Zammit Product Support Engineer Principal [https://www.akamai.com/us/en/multimedia/images/custom/2019/logo-no-tag-93x45.png] Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: [https://www.akamai.com/us/en/multimedia/images/custom/community.jpg]<https://urldefense.com/v3/__https:/nam12.safelinks.protection.outlook.com/?url=https*3A*2F*2Fcommunity.akamai.com*2F&data=04*7C01*7Cjsinicki*40banditlites.com*7C249494df0ecf4b78faf808d91089eb77*7Cf97b79b3c52f412c8e2f461c9271bf2c*7C0*7C0*7C637559006833904267*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C1000&sdata=Nt30JcXFZiFqah*2BOFIOWQHBt7vDrJ6LsNvun0Rkm66A*3D&reserved=0__;JSUlJSUlJSUlJSUlJSUlJSUl!!GjvTz_vk!H9KVBPrvt21aZQ-stkN5c_tx6DzPo5Fpt9V7k5jN-QzdG-_sexYl0nARUJbLng$>[https://www.akamai.com/us/en/multimedia/images/custom/rss.png]<https://urldefense.com/v3/__https:/nam12.safelinks.protection.outlook.com/?url=http*3A*2F*2Fblogs.akamai.com*2F&data=04*7C01*7Cjsinicki*40banditlites.com*7C249494df0ecf4b78faf808d91089eb77*7Cf97b79b3c52f412c8e2f461c9271bf2c*7C0*7C0*7C637559006833904267*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C1000&sdata=QKiOciZLnTXNa*2B75uW2cWAm*2FErVBvjSppvEpjPdRwQ0*3D&reserved=0__;JSUlJSUlJSUlJSUlJSUlJSUlJQ!!GjvTz_vk!H9KVBPrvt21aZQ-stkN5c_tx6DzPo5Fpt9V7k5jN-QzdG-_sexYl0nAhFWepbg$>[https://www.akamai.com/us/en/multimedia/images/custom/twitter.png]<https://urldefense.com/v3/__https:/nam12.safelinks.protection.outlook.com/?url=https*3A*2F*2Ftwitter.com*2Fakamai&data=04*7C01*7Cjsinicki*40banditlites.com*7C249494df0ecf4b78faf808d91089eb77*7Cf97b79b3c52f412c8e2f461c9271bf2c*7C0*7C0*7C637559006833914225*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C1000&sdata=hPY2TIKuJCwSyvWBbNUQNNirHyb8myYtL*2F1go6vLCBY*3D&reserved=0__;JSUlJSUlJSUlJSUlJSUlJSUl!!GjvTz_vk!H9KVBPrvt21aZQ-stkN5c_tx6DzPo5Fpt9V7k5jN-QzdG-_sexYl0nAc981YXQ$>[https://www.akamai.com/us/en/multimedia/images/custom/fb.png]<https://urldefense.com/v3/__https:/nam12.safelinks.protection.outlook.com/?url=http*3A*2F*2Fwww.facebook.com*2FAkamaiTechnologies&data=04*7C01*7Cjsinicki*40banditlites.com*7C249494df0ecf4b78faf808d91089eb77*7Cf97b79b3c52f412c8e2f461c9271bf2c*7C0*7C0*7C637559006833914225*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C1000&sdata=xEy0mN9r*2BH5M*2BvoxnwCIb80dbEI7nBdk*2Fbn5h9EBWeY*3D&reserved=0__;JSUlJSUlJSUlJSUlJSUlJSUlJSU!!GjvTz_vk!H9KVBPrvt21aZQ-stkN5c_tx6DzPo5Fpt9V7k5jN-QzdG-_sexYl0nAWRDCnHQ$>[https://www.akamai.com/us/en/multimedia/images/custom/in.png]<https://urldefense.com/v3/__https:/nam12.safelinks.protection.outlook.com/?url=http*3A*2F*2Fwww.linkedin.com*2Fcompany*2Fakamai-technologies&data=04*7C01*7Cjsinicki*40banditlites.com*7C249494df0ecf4b78faf808d91089eb77*7Cf97b79b3c52f412c8e2f461c9271bf2c*7C0*7C0*7C637559006833924187*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C1000&sdata=ALfqduBCShDbzezqA7nWNNQAoIBLLKo6LQaf2YlwnOI*3D&reserved=0__;JSUlJSUlJSUlJSUlJSUlJSUl!!GjvTz_vk!H9KVBPrvt21aZQ-stkN5c_tx6DzPo5Fpt9V7k5jN-QzdG-_sexYl0nCE7IAkhg$>[https://www.akamai.com/us/en/multimedia/images/custom/youtube.png]<https://urldefense.com/v3/__https:/nam12.safelinks.protection.outlook.com/?url=http*3A*2F*2Fwww.youtube.com*2Fuser*2Fakamaitechnologies*3Ffeature*3Dresults_main&data=04*7C01*7Cjsinicki*40banditlites.com*7C249494df0ecf4b78faf808d91089eb77*7Cf97b79b3c52f412c8e2f461c9271bf2c*7C0*7C0*7C637559006833924187*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C1000&sdata=l8IVr2ek9tVUYL3p2solbplZgjZ8ydyl4sWkO7zcjvY*3D&reserved=0__;JSUlJSUlJSUlJSUlJSUlJSUlJSU!!GjvTz_vk!H9KVBPrvt21aZQ-stkN5c_tx6DzPo5Fpt9V7k5jN-QzdG-_sexYl0nCYL-up3A$> On May 5, 2021, at 9:47 AM, Jeremy Sinicki via PacketFence-users <packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>> wrote: May 4 22:23:18 packetfence pfqueue: pfqueue(5507) ERROR: [mac:5c:80:b6:f5:49:43] Error handling firewallsso : malformed JSON string, neither tag, array, object, number, string or atom, at character offset 0 (before "An internal error ha...") at /usr/local/pf/lib/pf/api/unifiedapiclient.pm line 225. (pf::api::can_fork::notify)
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users