Hi All,
I just set up a new PF server yesterday, everything went fine and I could
start the service and access the GUI.
The server is set up in VLAN enforcement mode so when a new device is
connected to the switch, PF changes the VLAN (MAC detection) to the
registration VLAN and when the client opens the web browser it comes up the
classic "Certificate Error" in Internet Explorer but when I click the link
to ignore the message it just hangs and the reg page doesn´t
I can see PF knows the client is trying to access to the Internet as I see
this in the access_log
192.168.2.10 - - [01/Dec/2011:10:50:30 +0100] "GET
/captive-portal?destination_url=http://www.google.com/ HTTP/1.1" 200 7093
"-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET
CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR
1.1.4322; InfoPath.2)"
Having a look at the logs I see nothing strange but this on the error_log
[Thu Dec 01 10:36:37 2011] [notice] caught SIGTERM, shutting down
[Thu Dec 01 10:38:12 2011] [warn] RSA server certificate is a CA
certificate (BasicConstraints: CA == TRUE !?)
[Thu Dec 01 10:38:12 2011] [warn] RSA server certificate CommonName (CN)
`packetfence' does NOT match server name!?
[Thu Dec 01 10:38:12 2011] [warn] RSA server certificate is a CA
certificate (BasicConstraints: CA == TRUE !?)
[Thu Dec 01 10:38:12 2011] [warn] RSA server certificate CommonName (CN)
`packetfence' does NOT match server name!?
[Thu Dec 01 10:38:13 2011] [warn] RSA server certificate is a CA
certificate (BasicConstraints: CA == TRUE !?)
[Thu Dec 01 10:38:13 2011] [warn] RSA server certificate CommonName (CN)
`packetfence' does NOT match server name!?
[Thu Dec 01 10:38:13 2011] [warn] RSA server certificate is a CA
certificate (BasicConstraints: CA == TRUE !?)
[Thu Dec 01 10:38:13 2011] [warn] RSA server certificate CommonName (CN)
`packetfence' does NOT match server name!?
[Thu Dec 01 10:38:18 2011] [notice] Apache/2.2.15 (Unix) mod_ssl/2.2.15
OpenSSL/1.0.0-fips PHP/5.3.2 mod_perl/2.0.4 Perl/v5.10.1 configured --
resuming normal operations
Any advice?
Thanks in advance
clf
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure
contains a definitive record of customers, application performance,
security threats, fraudulent activity, and more. Splunk takes this
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d
_______________________________________________
Packetfence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
