*Information:*
PF Version: 5.3.1
OS Version: Debian wheezy
Switches: OpenWRT Barrier Breaker 14.07
This all started when I tried to fix the fingerbank and radius accounting.
I think I fixed the fingerbank. It was a permissions issue. I then
restarted the packetfence server and I think that's when all hell broke
loose. Wireless connections seem very sporadic. Sometimes they will
connect, sometimes they won't. My BYOD network doesn't seem to work. Users
are never prompted for the portal page. They will either get a message
saying the password is incorrect or that it just couldn't be joined.
It seems like something is bogging down the server. the admin interface
seems slower now and sometimes the admin interface completely crashes and
packetfence needs a restart to get it back.
Looking at the Top command, pfbandwidthd is using a lot of CPU which is odd
because accounting isn't even working on it. I turned off the service, but
it didn't help. CPU usage looks pretty good now although I have a ton of
apache services running. Is that normal?:
top - 09:25:02 up 11:11, 1 user, load average: 3.31, 6.81, 7.72
Tasks:* 148 *total,* 1 *running,* 146 *sleeping,* 0 *stopped,* 1 *
zombie
%Cpu(s):* 33.8 *us,* 5.4 *sy,* 0.0 *ni,* 59.2 *id,* 0.0 *wa,* 0.0 *hi,*
1.7 *si,* 0.0 *st
KiB Mem: * 2061300 *total,* 1390088 *used,* 671212 *free,* 26392 *
buffers
KiB Swap:* 2162684 *total,* 1913248 *used,* 249436 *free,* 88712 *
cached
I seem to be getting a lot of these in my logread on the openWRT APs. Not
sure if this is normal:
Mon Oct 5 13:05:18 2015 daemon.debug hostapd: wlan0: STA 00:26:b6:1a:35:e9
RADIUS: Resending RADIUS message (id=224)
Mon Oct 5 13:05:18 2015 daemon.debug hostapd: wlan0: RADIUS Next RADIUS
client retransmit in 2 seconds
Mon Oct 5 13:05:20 2015 daemon.debug hostapd: wlan0: STA 00:26:b6:1a:35:e9
RADIUS: Resending RADIUS message (id=219)
Mon Oct 5 13:05:20 2015 daemon.debug hostapd: wlan0: RADIUS Next RADIUS
client retransmit in 6 seconds
Mon Oct 5 13:05:22 2015 daemon.debug hostapd: wlan0: RADIUS Sending RADIUS
message to authentication server
Mon Oct 5 13:05:22 2015 daemon.debug hostapd: wlan0: RADIUS Next RADIUS
client retransmit in 3 seconds
Wireless Configuration:
config wifi-device radio0
option type mac80211
option channel 11
option hwmode 11g
option path 'pci0000:00/0000:00:00.0'
option htmode HT20
config wifi-iface
option device 'radio0'
option mode 'ap'
option ssid 'BYOD WiFi'
option network 'lan'
option encryption 'psk2'
option key 'password'
option auth_server '10.128.0.66'
option auth_port '1812'
option auth_secret 'wifis3cr3t'
option acct_server '10.128.0.66'
option acct_port '1812'
option acct_secret 's3cr3t'
option dynamic_vlan '2'
option vlan_file '/etc/config/hostapd.vlan'
option vlan_tagged_interface 'eth0'
option dae_secret 'wifis3cr3t'
option dae_client '10.128.0.66'
option macfilter '2'
option dae_port '3799'
option nasid 'Ubiquiti'
config wifi-iface
option device 'radio0'
option mode 'ap'
option ssid 'Internal'
option network 'lan'
option encryption 'psk2'
option key 'password'
option hidden '1'
option auth_server '10.128.0.66'
option auth_port '1812'
option auth_secret 's3cr3t'
option acct_server '10.128.0.66'
option acct_port '1812'
option acct_secret 'wifis3cr3t'
option dynamic_vlan '2'
option vlan_file '/etc/config/hostapd.vlan'
option vlan_tagged_interface 'eth0'
option macfilter '2'
option nasid 'Ubiquiti'
My packetfence log looks like this:
Oct 05 09:23:03 httpd.webservices(7790) INFO: oldip (10.131.11.11) and
newip (10.131.5.149) are different for d0:e1:40:96:5c:36 - closing iplog
entry (pf::api::update_iplog)
Oct 05 09:23:03 httpd.webservices(7790) INFO: oldip (10.131.11.11) and
newip (10.131.5.149) are different for d0:e1:40:96:5c:36 - closing iplog
entry (pf::api::update_iplog)
Oct 05 09:26:48 httpd.portal(7786) INFO: Matched IP '10.128.100.68' to MAC
address '00:23:12:25:f7:7e' using OMAPI (pf::iplog::ip2mac)
Oct 05 09:26:48 httpd.portal(7786) INFO: Matched IP '10.128.100.68' to MAC
address '00:23:12:25:f7:7e' using OMAPI (pf::iplog::ip2mac)
Oct 05 09:26:48 httpd.portal(7786) INFO: [00:23:12:25:f7:7e] Updating node
user_agent with useragent: 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8)
AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.90 Safari/537.1'
(captiveportal::PacketFence::Controller::CaptivePortal::nodeRecordUserAgent)
Oct 05 09:26:49 httpd.portal(7786) INFO: Static User-Agent lookup data
initialized (pf::useragent::_init)
Oct 05 09:26:49 httpd.portal(7782) INFO: Matched IP '10.128.100.68' to MAC
address '00:23:12:25:f7:7e' using OMAPI (pf::iplog::ip2mac)
Oct 05 09:26:49 httpd.portal(7783) INFO: Matched IP '10.128.100.68' to MAC
address '00:23:12:25:f7:7e' using OMAPI (pf::iplog::ip2mac)
Oct 05 09:26:50 httpd.portal(7782) INFO: Matched IP '10.128.100.68' to MAC
address '00:23:12:25:f7:7e' using OMAPI (pf::iplog::ip2mac)
Oct 05 09:26:50 httpd.portal(7783) INFO: Matched IP '10.128.100.68' to MAC
address '00:23:12:25:f7:7e' using OMAPI (pf::iplog::ip2mac)
Oct 05 09:26:54 httpd.portal(7786) INFO: [00:23:12:25:f7:7e] redirected to
authentication page on portal
(captiveportal::PacketFence::Controller::CaptivePortal::checkIfNeedsToRegister)
Oct 05 09:26:54 httpd.portal(7782) INFO: [00:23:12:25:f7:7e] redirected to
authentication page on portal
(captiveportal::PacketFence::Controller::CaptivePortal::checkIfNeedsToRegister)
Oct 05 09:26:54 httpd.portal(7783) INFO: [00:23:12:25:f7:7e] redirected to
authentication page on portal
(captiveportal::PacketFence::Controller::CaptivePortal::checkIfNeedsToRegister)
Any other logs I can look at? Any help is much appreciated. I am currently
being screamed at for all my wireless users.
--
IMPORTANT NOTICE: This message and any attachments are solely for the
intended recipient and may contain confidential information, which is, or
may be, legally privileged or otherwise protected by law from further
disclosure. If you are not the intended recipient, any disclosure, copying,
use, or distribution of the information included in this email and any
attachments is prohibited. If you have received this communication in
error, please notify the sender by reply email and immediately and
permanently delete this email and any attachments.
------------------------------------------------------------------------------
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
