Hello Louis,
logs/httpd.aaa.error is full of this:
Use of uninitialized value $content_type in string at
/usr/local/pf/lib/pf/WebAPI.pm line 59.
Use of uninitialized value $content_type in string eq at
/usr/local/pf/lib/pf/WebAPI.pm line 60.
Use of uninitialized value $_[0] in exists at
/usr/local/pf/lib/pf/WebAPI/JSONRPC.pm line 42.
Use of uninitialized value $_[0] in exists at
/usr/local/pf/lib/pf/WebAPI/REST.pm line 35.
and also
[Fri Apr 22 14:09:29 2016] [warn] RSA server certificate CommonName (CN)
`127.0.0.1' does NOT match server name!?
[Fri Apr 22 14:09:34 2016] [warn] RSA server certificate CommonName (CN)
`127.0.0.1' does NOT match server name!?
I guess this message will always be there for 127.0.0.1...
About rest: Yes, its connecting with SSL:
connect_uri = "https://127.0.0.1:7070/";
But I changed this lines:
check_cert = no
check_cert_cn = no
I will switch back Web API to http:// and check if it works then...
Cheers,
Till
On 04/26/2016 11:31 PM, Louis Munro wrote:
> This looks to me like radius is trying to connect to the httpd.aaa
> process and failing.
> The underlying issue does indeed seem related to TLS.
>
> Check your rest.conf.
> Is it trying to connect to an https url?
> If all else fails, restore the original rest.conf.example over rest.conf.
>
> --
> Louis Munro
> [email protected] <mailto:[email protected]> :: www.inverse.ca
> <http://www.inverse.ca>
> +1.514.447.4918 x125 :: +1 (866) 353-6153 x125
> Inverse inc. :: Leaders behind SOGo (www.sogo.nu <http://www.sogo.nu>)
> and PacketFence (www.packetfence.org <http://www.packetfence.org>)
>
>> On Apr 26, 2016, at 17:16 , [email protected]
>> <mailto:[email protected]> wrote:
>>
>> Hi there,
>>
>> since my last reboot, radius daemon won't start any more. In it's
>> logfile there are these lines:
>>
>> Tue Apr 26 20:21:35 2016 : Warning: WARNING: Ignoring "response_window =
>> 20.000000", forcing to "response_window = 10.000000"
>> Tue Apr 26 20:21:35 2016 : Info: Debugger not attached
>> Tue Apr 26 20:21:35 2016 : Info: rlm_sql (sql): Driver rlm_sql_mysql
>> (module rlm_sql_mysql) loaded and linked
>> Tue Apr 26 20:21:35 2016 : Info: rlm_sql (pfguest): Driver rlm_sql_mysql
>> (module rlm_sql_mysql) loaded and linked
>> Tue Apr 26 20:21:35 2016 : Info: rlm_sql (pfsponsor): Driver
>> rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
>> Tue Apr 26 20:21:35 2016 : Info: rlm_sql (pfsms): Driver rlm_sql_mysql
>> (module rlm_sql_mysql) loaded and linked
>> Tue Apr 26 20:21:35 2016 : Info: rlm_sql (pflocal): Driver rlm_sql_mysql
>> (module rlm_sql_mysql) loaded and linked
>> Tue Apr 26 20:21:35 2016 : Info: rlm_sql (sql_reject): Driver
>> rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
>> Tue Apr 26 20:21:35 2016 : Info: rlm_redis: libhiredis version: 0.10.1
>> Tue Apr 26 20:21:35 2016 : Info: rlm_redis (redis): Opening additional
>> connection (0), 1 of 64 pending slots used
>> Tue Apr 26 20:21:35 2016 : Info: rlm_redis (redis): Opening additional
>> connection (1), 1 of 63 pending slots used
>> Tue Apr 26 20:21:35 2016 : Info: rlm_redis (redis): Opening additional
>> connection (2), 1 of 62 pending slots used
>> Tue Apr 26 20:21:35 2016 : Info: rlm_redis (redis): Opening additional
>> connection (3), 1 of 61 pending slots used
>> Tue Apr 26 20:21:35 2016 : Info: rlm_redis (redis): Opening additional
>> connection (4), 1 of 60 pending slots used
>> Tue Apr 26 20:21:35 2016 : Info: rlm_rest: libcurl version:
>> libcurl/7.26.0 OpenSSL/1.0.1e zlib/1.2.7 libidn/1.25 libssh2/1.4.2
>> librtmp/2.3
>> Tue Apr 26 20:21:35 2016 : Info: rlm_rest (rest): Opening additional
>> connection (0), 1 of 64 pending slots used
>> Tue Apr 26 20:21:35 2016 : Error: rlm_rest (rest): Connection failed: 35
>> - SSL connect error
>> Tue Apr 26 20:21:35 2016 : Error: rlm_rest (rest): Opening connection
>> failed (0)
>> Tue Apr 26 20:21:35 2016 : Error:
>> /usr/local/pf/raddb//mods-enabled/rest[4]: Instantiation failed for
>> module "rest"
>>
>> Sadly I cannot tell what I changed last before the reboot.
>> Some time before I did install the latest Debian 7 security updates, and
>> I also did change the domain name in pf.conf and networks.conf at a
>> certain point.
>>
>> Because I was thinking that maybe there is a problem with the
>> certificate, I changed a few lines in /radiusd/rest.conf to disable
>> certifcate checks. But this did not do the trick.
>>
>> It is PF 6 in inline mode on Debian Wheezy.
>>
>> Any idea where this error comes from?
>>
>> Cheers,
>> Till
>>
>> ------------------------------------------------------------------------------
>> Find and fix application performance issues faster with Applications
>> Manager
>> Applications Manager provides deep performance insights into multiple
>> tiers of
>> your business applications. It resolves application problems quickly and
>> reduces your MTTR. Get your free trial!
>> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
>> _______________________________________________
>> PacketFence-users mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
>
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
>
>
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
