Hello, I hope I can get an answer this time. Am creating a very simple security event: ---------- [3000009] access_duration=12h desc=osostest target_category=User priority=1 actions=autoreg,role trigger=mac::00:11:22:33:44:55 enabled=Y ---------- I restarted the security event module using the command “/usr/local/pf/bin/pfcmd reload security_events”. Am receiving the below logs on packetfence.log: ---------- Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] Found authentication source(s) : 'testldap' for realm 'null' (pf::config::util::filter_authentication_sources) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] MFA Pre Authentication (pf::radius::mfa_pre_auth) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] Found authentication source(s) : 'testldap' for realm 'null' (pf::config::util::filter_authentication_sources) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] Using sources testldap for matching (pf::authentication::match2) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] Matched rule (ahmed) in source testldap, returning actions. (pf::Authentication::Source::match) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] [testldap] Authentication successful for alex (pf::Authentication::Source::LDAPSource::authenticate) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] Authentication successful for alex in source testldap (LDAP) (pf::authentication::authenticate) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] MFA Post Authentication (pf::radius::mfa_post_auth) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] Using sources testldap for matching (pf::authentication::match2) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] Matched rule (ahmed) in source testldap, returning actions. (pf::Authentication::Source::match) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] Using sources testldap for matching (pf::authentication::match2) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] Matched rule (ahmed) in source testldap, returning actions. (pf::Authentication::Source::match) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] Using sources testldap for matching (pf::authentication::match2) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] Matched rule (ah) in source testldap, returning actions. (pf::Authentication::Source::match) Jul 30 08:04:13 packetfence httpd.aaa-docker-wrapper[2019]: httpd.aaa(8) INFO: [mac:00:11:22:33:44:55] User alex logged in 10.254.0.15 for probe test (pf::Switch::returnAuthorizeProbe) Jul 30 08:04:17 packetfence httpd.portal-docker-wrapper[4403]: httpd.portal(24) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Jul 30 08:04:27 packetfence httpd.portal-docker-wrapper[4403]: httpd.portal(25) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Jul 30 08:04:37 packetfence httpd.portal-docker-wrapper[4403]: httpd.portal(23) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Jul 30 08:04:47 packetfence httpd.portal-docker-wrapper[4403]: httpd.portal(24) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) Jul 30 08:04:57 packetfence httpd.portal-docker-wrapper[4403]: httpd.portal(25) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::ProfileFactory::_from_profile) ---------- The security event never gets energized. Am I missing something or anything wrong, any help on that please .
Regards, Ahmed Ossama Network Engineer CCIE#26611
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
