Hi Chris, Help us help you.
You are not saying what you did to fix you fingerbank issue, which you also don’t explain. We need your configuration, things like your conf/pf.conf file as well as conf/switches.conf at the bare minimum. Frankly, if you need urgent support, a support package is what I would recommend. Regards, -- Louis Munro [email protected] :: www.inverse.ca +1.514.447.4918 x125 :: +1 (866) 353-6153 x125 Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) On Oct 5, 2015, at 9:30 , Chris Abel <[email protected]> wrote: > Information: > PF Version: 5.3.1 > OS Version: Debian wheezy > Switches: OpenWRT Barrier Breaker 14.07 > > This all started when I tried to fix the fingerbank and radius accounting. I > think I fixed the fingerbank. It was a permissions issue. I then restarted > the packetfence server and I think that's when all hell broke loose. Wireless > connections seem very sporadic. Sometimes they will connect, sometimes they > won't. My BYOD network doesn't seem to work. Users are never prompted for the > portal page. They will either get a message saying the password is incorrect > or that it just couldn't be joined. > > It seems like something is bogging down the server. the admin interface seems > slower now and sometimes the admin interface completely crashes and > packetfence needs a restart to get it back. > > Looking at the Top command, pfbandwidthd is using a lot of CPU which is odd > because accounting isn't even working on it. I turned off the service, but it > didn't help. CPU usage looks pretty good now although I have a ton of apache > services running. Is that normal?: > > top - 09:25:02 up 11:11, 1 user, load average: 3.31, 6.81, 7.72 > > Tasks: 148 total, 1 running, 146 sleeping, 0 stopped, 1 zombie > > %Cpu(s): 33.8 us, 5.4 sy, 0.0 ni, 59.2 id, 0.0 wa, 0.0 hi, 1.7 si, 0.0 > st > > KiB Mem: 2061300 total, 1390088 used, 671212 free, 26392 buffers > > KiB Swap: 2162684 total, 1913248 used, 249436 free, 88712 cached > > > > > > > I seem to be getting a lot of these in my logread on the openWRT APs. Not > sure if this is normal: > Mon Oct 5 13:05:18 2015 daemon.debug hostapd: wlan0: STA 00:26:b6:1a:35:e9 > RADIUS: Resending RADIUS message (id=224) > Mon Oct 5 13:05:18 2015 daemon.debug hostapd: wlan0: RADIUS Next RADIUS > client retransmit in 2 seconds > Mon Oct 5 13:05:20 2015 daemon.debug hostapd: wlan0: STA 00:26:b6:1a:35:e9 > RADIUS: Resending RADIUS message (id=219) > Mon Oct 5 13:05:20 2015 daemon.debug hostapd: wlan0: RADIUS Next RADIUS > client retransmit in 6 seconds > Mon Oct 5 13:05:22 2015 daemon.debug hostapd: wlan0: RADIUS Sending RADIUS > message to authentication server > Mon Oct 5 13:05:22 2015 daemon.debug hostapd: wlan0: RADIUS Next RADIUS > client retransmit in 3 seconds > > > > Wireless Configuration: > > config wifi-device radio0 > option type mac80211 > option channel 11 > option hwmode 11g > option path 'pci0000:00/0000:00:00.0' > option htmode HT20 > > config wifi-iface > option device 'radio0' > option mode 'ap' > option ssid 'BYOD WiFi' > option network 'lan' > option encryption 'psk2' > option key 'password' > option auth_server '10.128.0.66' > option auth_port '1812' > option auth_secret 'wifis3cr3t' > option acct_server '10.128.0.66' > option acct_port '1812' > option acct_secret 's3cr3t' > option dynamic_vlan '2' > option vlan_file '/etc/config/hostapd.vlan' > option vlan_tagged_interface 'eth0' > option dae_secret 'wifis3cr3t' > option dae_client '10.128.0.66' > option macfilter '2' > option dae_port '3799' > option nasid 'Ubiquiti' > > config wifi-iface > option device 'radio0' > option mode 'ap' > option ssid 'Internal' > option network 'lan' > option encryption 'psk2' > option key 'password' > option hidden '1' > option auth_server '10.128.0.66' > option auth_port '1812' > option auth_secret 's3cr3t' > option acct_server '10.128.0.66' > option acct_port '1812' > option acct_secret 'wifis3cr3t' > option dynamic_vlan '2' > option vlan_file '/etc/config/hostapd.vlan' > option vlan_tagged_interface 'eth0' > option macfilter '2' > option nasid 'Ubiquiti' > > > > My packetfence log looks like this: > > Oct 05 09:23:03 httpd.webservices(7790) INFO: oldip (10.131.11.11) and newip > (10.131.5.149) are different for d0:e1:40:96:5c:36 - closing iplog entry > (pf::api::update_iplog) > Oct 05 09:23:03 httpd.webservices(7790) INFO: oldip (10.131.11.11) and newip > (10.131.5.149) are different for d0:e1:40:96:5c:36 - closing iplog entry > (pf::api::update_iplog) > Oct 05 09:26:48 httpd.portal(7786) INFO: Matched IP '10.128.100.68' to MAC > address '00:23:12:25:f7:7e' using OMAPI (pf::iplog::ip2mac) > Oct 05 09:26:48 httpd.portal(7786) INFO: Matched IP '10.128.100.68' to MAC > address '00:23:12:25:f7:7e' using OMAPI (pf::iplog::ip2mac) > Oct 05 09:26:48 httpd.portal(7786) INFO: [00:23:12:25:f7:7e] Updating node > user_agent with useragent: 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_5_8) > AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.90 Safari/537.1' > (captiveportal::PacketFence::Controller::CaptivePortal::nodeRecordUserAgent) > Oct 05 09:26:49 httpd.portal(7786) INFO: Static User-Agent lookup data > initialized (pf::useragent::_init) > Oct 05 09:26:49 httpd.portal(7782) INFO: Matched IP '10.128.100.68' to MAC > address '00:23:12:25:f7:7e' using OMAPI (pf::iplog::ip2mac) > Oct 05 09:26:49 httpd.portal(7783) INFO: Matched IP '10.128.100.68' to MAC > address '00:23:12:25:f7:7e' using OMAPI (pf::iplog::ip2mac) > Oct 05 09:26:50 httpd.portal(7782) INFO: Matched IP '10.128.100.68' to MAC > address '00:23:12:25:f7:7e' using OMAPI (pf::iplog::ip2mac) > Oct 05 09:26:50 httpd.portal(7783) INFO: Matched IP '10.128.100.68' to MAC > address '00:23:12:25:f7:7e' using OMAPI (pf::iplog::ip2mac) > Oct 05 09:26:54 httpd.portal(7786) INFO: [00:23:12:25:f7:7e] redirected to > authentication page on portal > (captiveportal::PacketFence::Controller::CaptivePortal::checkIfNeedsToRegister) > Oct 05 09:26:54 httpd.portal(7782) INFO: [00:23:12:25:f7:7e] redirected to > authentication page on portal > (captiveportal::PacketFence::Controller::CaptivePortal::checkIfNeedsToRegister) > Oct 05 09:26:54 httpd.portal(7783) INFO: [00:23:12:25:f7:7e] redirected to > authentication page on portal > (captiveportal::PacketFence::Controller::CaptivePortal::checkIfNeedsToRegister) > > > Any other logs I can look at? Any help is much appreciated. I am currently > being screamed at for all my wireless users. > > > > > IMPORTANT NOTICE: This message and any attachments are solely for the > intended recipient and may contain confidential information, which is, or may > be, legally privileged or otherwise protected by law from further disclosure. > If you are not the intended recipient, any disclosure, copying, use, or > distribution of the information included in this email and any attachments is > prohibited. If you have received this communication in error, please notify > the sender by reply email and immediately and permanently delete this email > and any > attachments.------------------------------------------------------------------------------ > _______________________________________________ > PacketFence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
_______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
