Hello Fabrice,
Below are the errors:
[root@egelsbach logs]# cat error.log
[Fri Jul 28 18:07:29.264524 2017] [core:notice] [pid 20062] AH00094:
Command line: '/usr/sbin/httpd -f
/usr/local/packetfence-pki/conf/httpd.conf'
[Tue Aug 01 16:41:41.019143 2017] [mpm_prefork:notice] [pid 20062] AH00169:
caught SIGTERM, shutting down
[Tue Aug 01 16:41:41.864859 2017] [ssl:warn] [pid 25456] AH01873: Init:
Session Cache is not configured [hint: SSLSessionCache]
[Tue Aug 01 16:41:41.869440 2017] [mpm_prefork:notice] [pid 25456] AH00163:
Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_wsgi/3.4 Python/2.7.5
configured -- resuming normal operations
[Tue Aug 01 16:41:41.869478 2017] [core:notice] [pid 25456] AH00094:
Command line: '/usr/sbin/httpd -f
/usr/local/packetfence-pki/conf/httpd.conf'
[root@egelsbach logs]#
[root@egelsbach logs]# cat packetfence_pki.error.log
[Tue Aug 01 16:41:41.856657 2017] [ssl:warn] [pid 25455] AH01909: RSA
certificate configured for pki:443 does NOT include an ID which matches the
server name
[Tue Aug 01 16:41:41.865622 2017] [ssl:warn] [pid 25456] AH01909: RSA
certificate configured for pki:443 does NOT include an ID which matches the
server name
[root@egelsbach logs]#
[root@egelsbach logs]# cat packetfence_pki.access.log
172.16.100.2 - - [01/Aug/2017:16:43:17 +0200] "GET / HTTP/1.1" 400 26 "-"
"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/59.0.3071.115 Safari/537.36"
172.16.100.2 - - [01/Aug/2017:16:43:17 +0200] "GET /favicon.ico HTTP/1.1"
200 102067 "https://172.16.100.2:9393/"; "Mozilla/5.0 (X11; Linux x86_64)
AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36"
[root@egelsbach logs]#
Regards,
Kehinde
On Fri, Jul 28, 2017 at 8:18 PM, Fabrice Durand via PacketFence-users <
[email protected]> wrote:
> Hello Akala,
>
> can you check what you have in the packetfence pki logs ?
>
> /usr/local/packetfence-pki/logs
>
> Regards
>
> Fabrice
>
>
>
> Le 2017-07-28 à 11:51, Akala Kehinde via PacketFence-users a écrit :
>
> Hello Antoine,
>
> I still get the error even though the output below looks good:
>
> [root@egelsbach conf]# iptables -S | grep 9393
> -A input-management-if -p tcp -m tcp --dport 9393 -j ACCEPT
> [root@egelsbach conf]# ps -edf | grep packetfence-pki
> root 6108 1 0 12:36 ? 00:00:00 /usr/sbin/httpd -f
> /usr/local/packetfence-pki/conf/httpd.conf
> pf 6111 6108 0 12:36 ? 00:00:00 /usr/sbin/httpd -f
> /usr/local/packetfence-pki/conf/httpd.conf
> pf 6113 6108 0 12:36 ? 00:00:00 /usr/sbin/httpd -f
> /usr/local/packetfence-pki/conf/httpd.conf
> pf 6114 6108 0 12:36 ? 00:00:00 /usr/sbin/httpd -f
> /usr/local/packetfence-pki/conf/httpd.conf
> pf 6116 6108 0 12:36 ? 00:00:00 /usr/sbin/httpd -f
> /usr/local/packetfence-pki/conf/httpd.conf
> pf 6117 6108 0 12:36 ? 00:00:00 /usr/sbin/httpd -f
> /usr/local/packetfence-pki/conf/httpd.conf
> pf 6118 6108 0 12:36 ? 00:00:00 /usr/sbin/httpd -f
> /usr/local/packetfence-pki/conf/httpd.conf
> pf 6120 6108 0 12:36 ? 00:00:00 /usr/sbin/httpd -f
> /usr/local/packetfence-pki/conf/httpd.conf
> pf 6121 6108 0 12:36 ? 00:00:00 /usr/sbin/httpd -f
> /usr/local/packetfence-pki/conf/httpd.conf
> pf 6122 6108 0 12:36 ? 00:00:00 /usr/sbin/httpd -f
> /usr/local/packetfence-pki/conf/httpd.conf
> pf 7132 6108 0 12:43 ? 00:00:00 /usr/sbin/httpd -f
> /usr/local/packetfence-pki/conf/httpd.conf
> root 19256 13884 0 17:49 pts/9 00:00:00 grep --color=auto
> packetfence-pki
> [root@egelsbach conf]# iptables -S | grep 9393
> -A input-management-if -p tcp -m tcp --dport 9393 -j ACCEPT
> [root@egelsbach conf]#
> [root@egelsbach conf]# netstat -nlp | grep 9393
> tcp6 0 0 :::9393 :::* LISTEN
> 6108/httpd
> [root@egelsbach conf]#
>
>
> Regards,
> Kehinde
>
> On Fri, Jul 28, 2017 at 5:50 PM, Akala Kehinde <[email protected]>
> wrote:
>
>> Hello Antoine,
>>
>> I still get the error even though the output below looooks good:
>>
>>
>>
>>
>> Regards,
>> Kehinde
>>
>> On Fri, Jul 28, 2017 at 3:59 PM, Antoine Amacher via PacketFence-users <
>> [email protected]> wrote:
>>
>>> Hi,
>>>
>>> Can you make sure the pki is properly started,
>>>
>>> ps -edf | grep packetfence-pki
>>>
>>> netstat -nlp | grep 9393
>>>
>>> and that iptables is allowing it:
>>>
>>> iptables -S | grep 9393
>>>
>>> Thanks
>>>
>>> On 07/28/2017 06:53 AM, Akala Kehinde via PacketFence-users wrote:
>>>
>>> Hello Guys,
>>>
>>> I get a Bad Request 400 when I try accessing https://172.16.100.2:9393/
>>> i.e. the PKI server interface on PF 7.2.
>>>
>>> Any idea what might be wrong?
>>>
>>> Regards,
>>> Kehinde
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>>
>>>
>>>
>>> _______________________________________________
>>> PacketFence-users mailing
>>> [email protected]https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>>
>>>
>>> --
>>> Antoine [email protected] :: www.inverse.ca +1.514.447.4918 x130
>>> <%28514%29%20447-4918> :: +1 (866) 353-6153 x130 <%28866%29%20353-6153>
>>> Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence
>>> (www.packetfence.org)
>>>
>>>
>>> ------------------------------------------------------------
>>> ------------------
>>> Check out the vibrant tech community on one of the world's most
>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>> _______________________________________________
>>> PacketFence-users mailing list
>>> [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>>
>>>
>>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
>
> _______________________________________________
> PacketFence-users mailing
> [email protected]https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
> --
> Fabrice [email protected] :: +1.514.447.4918 <(514)%20447-4918>
> (x135) :: www.inverse.ca
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
> (http://packetfence.org)
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> PacketFence-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
