Hi Yan,
once you have the file, go in the admin gui,?0?2 Configuration ->
Compliance -> General settings, verify that the mysql credentials and
database name is correct then "Action -> Initialize MySQL database"
If the access to the db is ok then you should be able to see a process
"python" running that import the db from the sqlite file.
It can take a long time.
Regards
Fabrice
Le 2017-10-18 ?? 12:19, Yan via PacketFence-users a ??crit?0?2:
> Hi Durand,
> After running "yum reinstall fingerbank --enablerepo=packetfence", I
> can find fingerbank_Upstream.db located in /usr/local/fingerbank/db
> now. But I'm not so familiar with DB operation. How to integrate it
> into mysql ? Is it something like "mysql -u username -p fingerbank <
> fingerbank_Upstream.db" ?
>
>
> ------------------ Original ------------------
> *From:* packetfence-users <packetfence-users@lists.sourceforge.net>
> *Date:* ????,10?? 18,2017 23:16
> *To:* packetfence-users <packetfence-users@lists.sourceforge.net>
> *Cc:* Fabrice Durand <fdur...@inverse.ca>
> *Subject:* Re: [PacketFence-users] Can't download and update fingerbank DB
>
> Hi Yan,
>
> there is a database who is coming with the fingerbank package, so you
> can probably found it in /usr/local/fingerbank/db. (yum reinstall
> fingerbank if needed)
>
> If you have it (fingerbank_Upstream.db) then you can integrate it into
> mysql then the futur update will be just some interim update and not
> the whole database.
>
> Regards
>
> Fabrice
>
>
> Le 2017-10-18 ?? 10:38, Yan via PacketFence-users a ??crit?0?2:
>>
>> Hi Durand,
>>
>> I don't have any proxy configured in my server. The cert expire error
>> not shows up every time. I just tried to execute wget 3 times, no
>> certificate expire error any more, but 1 connection refused and 2
>> connection closed during downloading. Is Fingerbank has a timeout
>> setting for http connecting ? Is there any other way to download and
>> update fingerbank DB ? Or how to initialize this component ?
>>
>> The first try:
>> [root@PacketFence-ZEN ~]# wget
>> https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
>> --2017-10-18 22:08:35--
>> ?0?2https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
>> Resolving fingerbank.inverse.ca (fingerbank.inverse.ca)... 167.114.150.85
>> Connecting to fingerbank.inverse.ca
>> (fingerbank.inverse.ca)|167.114.150.85|:443... failed: Connection
>> refused.
>>
>> The second try:
>> [root@PacketFence-ZEN ~]# wget
>> https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
>> --2017-10-18 22:12:56--
>> ?0?2https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
>> Resolving fingerbank.inverse.ca (fingerbank.inverse.ca)... 167.114.150.85
>> Connecting to fingerbank.inverse.ca
>> (fingerbank.inverse.ca)|167.114.150.85|:443... connected.
>> HTTP request sent, awaiting response... 200 OK
>> Length: 2020635648 (1.9G) [application/x-sqlite3]
>> Saving to: ??download?key=<my-key>??
>>
>> ?0?23% [=> ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2
>> ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2
>> ?0?2 ?0?2 ?0?2
>> ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ] 70,840,939 ?0?252.1KB/s ?0?2 in 6m 55s
>>
>> 2017-10-18 22:19:53 (167 KB/s) - Connection closed at byte 70840939.
>> Retrying.
>>
>> --2017-10-18 22:19:54-- ?0?2(try: 2)
>> ?0?2https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
>> Connecting to fingerbank.inverse.ca
>> (fingerbank.inverse.ca)|167.114.150.85|:443... connected.
>> HTTP request sent, awaiting response... 200 OK
>> Length: 2020635648 (1.9G) [application/x-sqlite3]
>> Saving to: ??download?key=<my-key>??
>>
>> ?0?20% [ ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2
>> ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2
>> ?0?2 ?0?2 ?0?2 ?0?2
>> ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ] 0 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 --.-K/s ?0?2
>> in 0.003s
>>
>>
>> Cannot write to ??download?key=<my-key>?? (Success).
>>
>> The third time is similar to the second time.
>>
>>
>>
>> ------------------ Original ------------------
>> *From:* packetfence-users <packetfence-users@lists.sourceforge.net>
>> *Date:* ????,10?? 18,2017 21:18
>> *To:* packetfence-users <packetfence-users@lists.sourceforge.net>
>> *Cc:* Fabrice Durand <fdur...@inverse.ca>
>> *Subject:* Re: [PacketFence-users] Can't download and update
>> fingerbank DB
>>
>> Hello Yan,
>>
>> do you have a proxy between PacketFence and internet ?
>>
>> When i see your wget command, i can see that :?0?2 "Issued certificate
>> has expired" and the fingerbank.inverse.ca certificate is not yet
>> expired so there is probably something that block/filter the request.
>>
>> Regards
>>
>> Fabrice
>>
>>
>>
>> Le 2017-10-17 ?? 22:16, Yan via PacketFence-users a ??crit?0?2:
>>>
>>> Hi Durand,
>>>
>>> After "Initialize MYSQL database" the error missing, but now
>>> packetfence.log keeps filling with "pfqueue: pfqueue(10132) WARN:
>>> [mac:xx:bd:27:xx:xx:xx] Unable to perform a Fingerbank lookup for
>>> device with MAC address 'xx:bd:27:xx:xx:xx'
>>> (pf::fingerbank::__ANON__)". ?0?2And fingerbank.log is filling with
>>> "fingerbank: pfqueue(10133) WARN: [mac:xx:xx:0e:cb:xx:xx] An error
>>> occured while interrogating upstream Fingerbank project: 500 Can't
>>> connect to fingerbank.inverse.ca:443 (fingerbank::Source::API::__ANON__)
>>> Oct 18 09:59:59 PacketFence-ZEN fingerbank: pfqueue(10133) INFO:
>>> [mac:xx:xx:0e:cb:xx:xx] Fingerbank API has returned an invalid
>>> result, will not cache it. (fingerbank::Source::API::match)".?0?2
>>>
>>> And I found I can't update fingerbank DB. When I initialize "Update
>>> Fingerbank DB" in Configuration--Compliance--Fingerbank
>>> Profiling--General Settings--ACTION, I found the error message
>>> "pfqueue: pfqueue(10324) ERROR: [mac:unknown] Couldn't update
>>> Upstream database, code : 500, msg : An error occurred while
>>> updating file '/usr/local/fingerbank/db/fingerbank_Upstream.db'
>>> (pf::fingerbank::_update_fingerbank_component)" in packetfence.log.
>>> I can manually execute wget cmd to download. Is this meant I have to
>>> buy any fingerbank license ? As I noticed fingerbank official
>>> website said free license has a 300 times' limit every hour. We can
>>> buy it if necessary.
>>>
>>> [root@PacketFence-ZEN logs]# wget --no-check-certificate
>>> https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
>>> --2017-10-18 10:09:18--
>>> ?0?2https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
>>> Resolving fingerbank.inverse.ca (fingerbank.inverse.ca)...
>>> 167.114.150.85
>>> Connecting to fingerbank.inverse.ca
>>> (fingerbank.inverse.ca)|167.114.150.85|:443... connected.
>>> WARNING: cannot verify fingerbank.inverse.ca's certificate, issued
>>> by ??/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA
>>> Limited/CN=COMODO RSA Domain Validation Secure Server CA??:
>>> ?0?2 Issued certificate has expired.
>>> HTTP request sent, awaiting response... 200 OK
>>> Length: 2020635648 (1.9G) [application/x-sqlite3]
>>> Saving to: ??download?key=8c7619e51115bd21f186822f19320edfa528681b??
>>>
>>> ?0?20% [ ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2
>>> ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2
>>> ?0?2 ?0?2 ?0?2
>>> ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2] 12,525,568 ?0?21.77MB/s
>>> ?0?2eta 21m 37s
>>>
>>> ------------------ Original ------------------
>>> *From:* packetfence-users <packetfence-users@lists.sourceforge.net>
>>> *Date:* ????,10?? 17,2017 20:29
>>> *To:* packetfence-users <packetfence-users@lists.sourceforge.net>
>>> *Cc:* Fabrice Durand <fdur...@inverse.ca>
>>> *Subject:* Re: [PacketFence-users] Can't download and update
>>> fingerbank DB
>>>
>>> Hello Yan,
>>>
>>> it looks that you didn't imported fingerbank into mysql.
>>>
>>> Go in Configuration -> Compliance -> Fingerbank Profiling -> General
>>> settings then in Action "Initialize MySQL database".
>>>
>>>
>>> Regards
>>>
>>> Fabrice
>>>
>>>
>>>
>>> Le 2017-10-17 ?? 03:19, Yan via PacketFence-users a ??crit?0?2:
>>>> Hi dear users,
>>>>
>>>> We are using PF V7.2 in our office. We want to use PF to recognize
>>>> mobile devices from computers when connecting wireless ssid. It
>>>> seems PF define device's type via DHCP fingerprint. Our
>>>> packetfence.log keeps logging "pfqueue: pfqueue(1341) WARN:
>>>> [mac:ff:ee:dd:cc:bb:aa] Unable to perform a Fingerbank lookup for
>>>> device with MAC address 'ff:ee:dd:cc:bb:aa'
>>>> (pf::fingerbank::__ANON__)".
>>>>
>>>> And after I ran the "Update Fingerbank DB" button and restart pf
>>>> services, the packetfence.log is now filling with "pfqueue(6013)
>>>> ERROR: [mac:04:xx:xx:cb:0f:74]
>>>> DBIx::Class::Storage::DBI::_dbh_execute(): Table
>>>> 'pf_fingerbank.dhcp_vendor' doesn't exist at
>>>> /usr/local/pf/lib/fingerbank/Base/CRUD.pm line
>>>> 416?0?2(pf::api::can_fork::notify)"
>>>>
>>>> How to reinstall and update fingerbank ??0?2Anyone could help ??0?2Thank
>>>> you very much.
>>>>
>>>>
>>>> ------------------------------------------------------------------------------Check
>>>> out the vibrant tech community on one of the world's mostengaging tech
>>>> sites, Slashdot.org! http://sdm.link/slashdot
>>>>
>>>>
>>>> _______________________________________________PacketFence-users mailing
>>>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>>>
>>> -- Fabrice durandfdur...@inverse.ca :: +1.514.447.4918 (x135) ::
>>> www.inverse.caInverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and
>>> PacketFence (http://packetfence.org)
>>>
>>>
>>> ------------------------------------------------------------------------------Check
>>> out the vibrant tech community on one of the world's mostengaging tech
>>> sites, Slashdot.org! http://sdm.link/slashdot
>>>
>>>
>>> _______________________________________________PacketFence-users mailing
>>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>> -- Fabrice durandfdur...@inverse.ca :: +1.514.447.4918 (x135) ::
>> www.inverse.caInverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and
>> PacketFence (http://packetfence.org)
>>
>>
>> ------------------------------------------------------------------------------Check
>> out the vibrant tech community on one of the world's mostengaging tech
>> sites, Slashdot.org! http://sdm.link/slashdot
>>
>>
>> _______________________________________________PacketFence-users mailing
>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>
> -- Fabrice durandfdur...@inverse.ca :: +1.514.447.4918 (x135) ::
> www.inverse.caInverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and
> PacketFence (http://packetfence.org)
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Fabrice Durand
fdur...@inverse.ca :: +1.514.447.4918 (x135) :: www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://packetfence.org)
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
