On 4/27/17 9:42 AM, Fabrice Durand wrote: > Hello Charles, > > api:desAssociate is when a device is in process of registration or when > the unreg date is reached. > > api:fingerbank_process is probably based on the dhcp traffic the server > receive. > > Do you have some errors in the pfqueue.log ?
I'm seeing some of the following: Apr 27 09:32:28 pfqueue(125776) WARN: [mac:74:75:48:1a:f5:09] Use of uninitialized value $n_status in string eq at /usr/local/pf/lib/pf/roles.pm line 105. (pf::roles::getRoleForNode) Apr 27 09:32:28 pfqueue(125776) ERROR: [mac:74:75:48:1a:f5:09] Use of uninitialized value $n_status in string eq at /usr/local/pf/lib/pf/roles.pm line 105. (pf::roles::getRoleForNode) Apr 27 09:32:28 pfqueue(125776) WARN: [mac:74:75:48:1a:f5:09] Use of uninitialized value $n_status in string eq at /usr/local/pf/lib/pf/roles.pm line 105. (pf::roles::getRoleForNode) Apr 27 09:32:28 pfqueue(125776) ERROR: [mac:74:75:48:1a:f5:09] Use of uninitialized value $n_status in string eq at /usr/local/pf/lib/pf/roles.pm line 105. (pf::roles::getRoleForNode) Apr 27 09:32:28 pfqueue(125776) WARN: [mac:74:75:48:1a:f5:09] Use of uninitialized value $mac in concatenation (.) or string at /usr/local/pf/lib/pf/roles.pm line 134. (pf::roles::performRoleLookup) Apr 27 09:32:28 pfqueue(125776) ERROR: [mac:74:75:48:1a:f5:09] Use of uninitialized value $mac in concatenation (.) or string at /usr/local/pf/lib/pf/roles.pm line 134. (pf::roles::performRoleLookup) Apr 27 09:32:28 pfqueue(125776) WARN: [mac:74:75:48:1a:f5:09] Use of uninitialized value in concatenation (.) or string at /usr/local/pf/lib/pf/roles.pm line 157. (pf::roles::_assignRoleFromCategory) Apr 27 09:32:28 pfqueue(125776) ERROR: [mac:74:75:48:1a:f5:09] Use of uninitialized value in concatenation (.) or string at /usr/local/pf/lib/pf/roles.pm line 157. (pf::roles::_assignRoleFromCategory) and Apr 27 09:43:01 pfqueue(123784) WARN: [mac:cc:44:63:0b:4d:c6] Use of uninitialized value in numeric eq (==) at /usr/local/pf/lib/pf/iplog.pm line 870. (pf::iplog::__ANON__) Apr 27 09:43:01 pfqueue(123784) ERROR: [mac:cc:44:63:0b:4d:c6] Use of uninitialized value in numeric eq (==) at /usr/local/pf/lib/pf/iplog.pm line 870. (pf::iplog::__ANON__) And a lot of these: Apr 27 09:43:28 pfqueue(123784) WARN: [mac:ec:9b:f3:95:02:52] Unable to perform a Fingerbank lookup for device with MAC address 'ec:9b:f3:95:02:52' (pf::fingerbank::__ANON__) The only thing that I'm getting with relation to CoAs is: Apr 27 09:26:27 pfqueue(115173) WARN: [mac:50:7a:55:5a:e8:10] Unable to perform RADIUS Disconnect-Request. CoA-NAK received with Error-Cause: Session-Context-Not-Found. (pf::Switch::Aruba::radiusDisconnect) but I'd guess that this is from the pfqueue dumping the back log of CoAs and the user no longer on the controller. > Regards > Fabrice > > Le 2017-04-27 à 09:36, Charles Rumford a écrit : >> This morning we put our PacketFence installation into production. >> >> One of the first things that I noticed was that it appears that the >> pfqueue gets wedged with task types api:desAssociate and >> api:fingerbank_process with ever increasing outstanding task counters. >> >> If I restart the pfqueue, I see radius CoAs being send for a short >> period of time, and then nothing, until I restart the pfqueue again. >> >> Has anyone else seen this? If so, suggestions on how to fix it? > -- Charles Rumford Senior Network Engineer ISC Tech Services University of Pennsylvania OpenPGP Key ID: 0xF3D8215A ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
