Hi Fabrice,
After I initialized mysql DB, I still couldn't issue "Update Fingerbank DB",
the error was the same as before. But since we have one more PF server (v7.3)
configured for production, and the "Update Fingerbank DB" action can
successfully be issued on it. So I copy the updated fingerbank_Upstream.db file
to the old server and re-initialized mysql DB. It turned out to be okay and PF
can figure out the correct device type now.
So grateful for your help. We wrote a vlan flter rule to control mobile
devices' access with the fingerbank mobile attribute. So it is important to
check out correct device type with fingerbank. Thanks again. Now I know how to
manually import fingerbank_Upstream.db if it can't be completed by GUI. Thanks
again.
------------------ Original ------------------
From: packetfence-users <packetfence-users@lists.sourceforge.net>
Date: ????,10?? 19,2017 22:45
To: packetfence-users <packetfence-users@lists.sourceforge.net>
Cc: Fabrice Durand <fdur...@inverse.ca>
Subject: Re: [PacketFence-users] Can't download and update fingerbank DB
Hello Yan,
it mean that it worked, the importation can be long, there is 5M
combinations in the database.
Regards
Fabrice
Le 2017-10-18 ?? 22:17, Yan via PacketFence-users a ??crit :
Oh 2 more tables, "dhcp_vendor" and "user_agent" appeared
lately. And there is corresponding data in these table. Does that mean
the importation is working ? Should I just ignore the warning ?
------------------ Original ------------------
From: Yan <1136723...@qq.com>
Date: ????,10?? 19,2017 10:12
To: packetfence-users
<packetfence-users@lists.sourceforge.net>
Subject: Re: [PacketFence-users] Can't download and
update fingerbank DB
Hi Durand
After I issue "Initialize MySQL database" under
ACTION menu, I found the fingerbank DB in mysql only has one
table--"combination" table left. The others are all missing. Is that
Okay ? In the mean time fingerbank.log is filling with below
warnings. How could I make sure the upstream DB is successfully
imported to mariadb ?
Oct 19 10:07:34 PacketFence-ZEN fingerbank:
pfqueue(21315) WARN: [mac:xx:3a:xx:cb:xx:f0] An error occured
while interrogating upstream Fingerbank project: 403 Forbidden
(fingerbank::Source::API::__ANON__)
Oct 19 10:07:34 PacketFence-ZEN fingerbank:
pfqueue(21315) INFO: [mac:xx:3a:xx:cb:xx:f0] Fingerbank API has
returned an invalid result, will not cache it.
(fingerbank::Source::API::match)
Oct 19 10:07:35 PacketFence-ZEN fingerbank:
pfqueue(21339) WARN: [mac:xx:bd:xx:c4:xx:b6] Cannot find any
combination ID in any schemas
(fingerbank::Source::LocalDB::_getCombinationID)
Oct 19 10:07:35 PacketFence-ZEN fingerbank:
pfqueue(21339) INFO: [mac:xx:bd:xx:c4:xx:b6] Upstream is
configured and unable to fullfil an exact match locally. Will
ignore result from local database
(fingerbank::Source::LocalDB::match)
Oct 19 10:07:36 PacketFence-ZEN fingerbank:
pfqueue(21317) INFO: [mac:xx:bd:xx:cb:xx:0a] Found combination ID
'405014' in schema 'Upstream' but combination does not contain a
device ID (fingerbank::Source::LocalDB::_getCombinationID)
Oct 19 10:07:36 PacketFence-ZEN fingerbank:
pfqueue(21317) INFO: [mac:xx:bd:xx:cb:xx:0a] Upstream is
configured and unable to fullfil an exact match locally. Will
ignore result from local database
(fingerbank::Source::LocalDB::match)
------------------
Original ------------------
From: packetfence-users
<packetfence-users@lists.sourceforge.net>
Date: ????,10?? 19,2017 01:11
To: packetfence-users
<packetfence-users@lists.sourceforge.net>
Cc: Fabrice Durand <fdur...@inverse.ca>
Subject: Re: [PacketFence-users] Can't
download and update fingerbank DB
Hi Yan,
once you have the file, go in the admin gui, Configuration ->
Compliance -> General settings, verify that the mysql
credentials and database name is correct then "Action ->
Initialize MySQL database"
If the access to the db is ok then you should be able to see a
process "python" running that import the db from the sqlite file.
It can take a long time.
Regards
Fabrice
Le 2017-10-18 ?? 12:19, Yan via PacketFence-users
a ??crit :
Hi
Durand,
After running "yum reinstall
fingerbank --enablerepo=packetfence", I can find
fingerbank_Upstream.db located in
/usr/local/fingerbank/db now. But I'm not so familiar with
DB operation. How to integrate it into mysql ? Is it
something like "mysql -u username -p fingerbank <
fingerbank_Upstream.db" ?
------------------
Original ------------------
From: packetfence-users
<packetfence-users@lists.sourceforge.net>
Date: ????,10?? 18,2017 23:16
To: packetfence-users
<packetfence-users@lists.sourceforge.net>
Cc: Fabrice Durand <fdur...@inverse.ca>
Subject: Re: [PacketFence-users]
Can't download and update fingerbank DB
Hi Yan,
there is a database who is coming with the fingerbank
package, so you can probably found it in
/usr/local/fingerbank/db. (yum reinstall fingerbank if
needed)
If you have it (fingerbank_Upstream.db) then you can
integrate it into mysql then the futur update will be
just some interim update and not the whole database.
Regards
Fabrice
Le 2017-10-18 ?? 10:38, Yan via
PacketFence-users a ??crit :
Hi
Durand,
I don't have any
proxy configured in my server. The cert expire
error not shows up every time. I just tried to
execute wget 3 times, no certificate expire
error any more, but 1 connection refused
and 2 connection closed during
downloading. Is Fingerbank has a timeout setting
for http connecting ? Is there any other way to
download and update fingerbank DB ? Or how to
initialize this component ?
The first try:
[root@PacketFence-ZEN
~]# wget https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
--2017-10-18
22:08:35-- https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
Resolving
fingerbank.inverse.ca
(fingerbank.inverse.ca)... 167.114.150.85
Connecting to
fingerbank.inverse.ca
(fingerbank.inverse.ca)|167.114.150.85|:443...
failed: Connection refused.
The second try:
[root@PacketFence-ZEN
~]# wget https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
--2017-10-18
22:12:56-- https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
Resolving
fingerbank.inverse.ca
(fingerbank.inverse.ca)... 167.114.150.85
Connecting to
fingerbank.inverse.ca
(fingerbank.inverse.ca)|167.114.150.85|:443...
connected.
HTTP request sent,
awaiting response... 200 OK
Length: 2020635648
(1.9G) [application/x-sqlite3]
Saving to:
??download?key=<my-key>??
3% [=>
] 70,840,939 52.1KB/s
in 6m 55s
2017-10-18 22:19:53
(167 KB/s) - Connection closed at byte
70840939. Retrying.
--2017-10-18
22:19:54-- (try: 2) https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
Connecting to
fingerbank.inverse.ca
(fingerbank.inverse.ca)|167.114.150.85|:443...
connected.
HTTP request sent,
awaiting response... 200 OK
Length: 2020635648
(1.9G) [application/x-sqlite3]
Saving to:
??download?key=<my-key>??
0% [
] 0 --.-K/s in
0.003s
Cannot write to
??download?key=<my-key>?? (Success).
The third time is
similar to the second time.
------------------ Original ------------------
From:
packetfence-users <packetfence-users@lists.sourceforge.net>
Date: ????,10?? 18,2017 21:18
To: packetfence-users
<packetfence-users@lists.sourceforge.net>
Cc: Fabrice Durand <fdur...@inverse.ca>
Subject: Re:
[PacketFence-users] Can't download and
update fingerbank DB
Hello Yan,
do you have a proxy between PacketFence and
internet ?
When i see your wget command, i can see that :
"Issued certificate has expired" and the
fingerbank.inverse.ca certificate is not yet
expired so there is probably something that
block/filter the request.
Regards
Fabrice
Le 2017-10-17 ??
22:16, Yan via PacketFence-users a ??crit :
Hi
Durand,
After
"Initialize MYSQL database" the error
missing, but now packetfence.log keeps
filling with "pfqueue:
pfqueue(10132) WARN:
[mac:xx:bd:27:xx:xx:xx] Unable to
perform a Fingerbank lookup for device
with MAC address 'xx:bd:27:xx:xx:xx'
(pf::fingerbank::__ANON__)".
And fingerbank.log is filling
with "fingerbank:
pfqueue(10133) WARN:
[mac:xx:xx:0e:cb:xx:xx] An error
occured while interrogating upstream
Fingerbank project: 500 Can't
connect to
fingerbank.inverse.ca:443
(fingerbank::Source::API::__ANON__)
Oct 18
09:59:59 PacketFence-ZEN
fingerbank: pfqueue(10133) INFO:
[mac:xx:xx:0e:cb:xx:xx] Fingerbank API
has returned an invalid result, will
not cache it.
(fingerbank::Source::API::match)".
And I
found I can't update fingerbank DB.
When I initialize "Update Fingerbank DB"
in Configuration--Compliance--Fingerbank
Profiling--General
Settings--ACTION, I found the
error message "pfqueue:
pfqueue(10324) ERROR: [mac:unknown]
Couldn't update Upstream database,
code : 500, msg : An error occurred
while updating
file'/usr/local/fingerbank/db/fingerbank_Upstream.db'(pf::fingerbank::_update_fingerbank_component)"
in packetfence.log. I can
manually execute wget cmd to
download. Is this meant I have
to buy any fingerbank license ? As I
noticed fingerbank official website said
free license has a 300 times' limit
every hour. We can buy it if necessary.
[root@PacketFence-ZEN
logs]# wget
--no-check-certificate
https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
--2017-10-18
10:09:18--
https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
Resolving
fingerbank.inverse.ca
(fingerbank.inverse.ca)...
167.114.150.85
Connecting to
fingerbank.inverse.ca
(fingerbank.inverse.ca)|167.114.150.85|:443...
connected.
WARNING:
cannot verify
fingerbank.inverse.ca's certificate,
issued by ??/C=GB/ST=Greater
Manchester/L=Salford/O=COMODO
CA Limited/CN=COMODO RSA
Domain Validation Secure
Server CA??:
Issued
certificate has expired.
HTTP request
sent, awaiting response... 200
OK
Length:
2020635648 (1.9G)
[application/x-sqlite3]
Saving to:
??download?key=8c7619e51115bd21f186822f19320edfa528681b??
0% [
] 12,525,568 1.77MB/s eta
21m 37s
------------------ Original
------------------
From: packetfence-users
<packetfence-users@lists.sourceforge.net>
Date: ????,10??
17,2017 20:29
To:
packetfence-users <packetfence-users@lists.sourceforge.net>
Cc: Fabrice Durand
<fdur...@inverse.ca>
Subject: Re:
[PacketFence-users] Can't
download and update
fingerbank DB
Hello Yan,
it looks that you didn't imported
fingerbank into mysql.
Go in Configuration -> Compliance ->
Fingerbank Profiling -> General settings
then in Action "Initialize MySQL
database".
Regards
Fabrice
Le
2017-10-17 ?? 03:19, Yan via
PacketFence-users a ??crit :
Hi dear users,
We
are using PF V7.2 in our
office. We want to use PF
to recognize mobile devices from
computers when connecting
wireless ssid. It seems PF
define device's type via DHCP
fingerprint. Our
packetfence.log keeps
logging "pfqueue:
pfqueue(1341) WARN:
[mac:ff:ee:dd:cc:bb:aa] Unable
to perform a Fingerbank lookup
for device with MAC
address
'ff:ee:dd:cc:bb:aa'
(pf::fingerbank::__ANON__)".
And
after I ran the "Update
Fingerbank DB" button and
restart pf services, the
packetfence.log is now filling
with "pfqueue(6013) ERROR:
[mac:04:xx:xx:cb:0f:74]DBIx::Class::Storage::DBI::_dbh_execute(): Table
'pf_fingerbank.dhcp_vendor'
doesn't exist at
/usr/local/pf/lib/fingerbank/Base/CRUD.pm
line 416 (pf::api::can_fork::notify)"
How
to reinstall and update
fingerbank ? Anyone could
help ? Thank you very much.
------------------------------------------------------------------------------Check
out the vibrant tech community on one of the world's mostengaging tech sites,
Slashdot.org! http://sdm.link/slashdot
_______________________________________________PacketFence-users mailing
listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
-- Fabrice durandfdur...@inverse.ca
:: +1.514.447.4918 (x135) :: www.inverse.caInverse inc. :: Leaders behind
SOGo (http://www.sogo.nu) and PacketFence (http://packetfence.org)
------------------------------------------------------------------------------Check
out the vibrant tech community on one of the world's mostengaging tech sites,
Slashdot.org! http://sdm.link/slashdot
_______________________________________________PacketFence-users mailing
listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
-- Fabrice durandfdur...@inverse.ca ::
+1.514.447.4918 (x135) :: www.inverse.caInverse inc. :: Leaders behind SOGo
(http://www.sogo.nu) and PacketFence (http://packetfence.org)
------------------------------------------------------------------------------Check
out the vibrant tech community on one of the world's mostengaging tech sites,
Slashdot.org! http://sdm.link/slashdot
_______________________________________________PacketFence-users mailing
listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
-- Fabrice durandfdur...@inverse.ca ::
+1.514.447.4918 (x135) :: www.inverse.caInverse inc. :: Leaders behind SOGo
(http://www.sogo.nu) and PacketFence (http://packetfence.org)
------------------------------------------------------------------------------Check
out the vibrant tech community on one of the world's mostengaging tech sites,
Slashdot.org! http://sdm.link/slashdot
_______________________________________________PacketFence-users mailing
listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
-- Fabrice durandfdur...@inverse.ca :: +1.514.447.4918
(x135) :: www.inverse.caInverse inc. :: Leaders behind SOGo
(http://www.sogo.nu) and PacketFence (http://packetfence.org)
------------------------------------------------------------------------------Check
out the vibrant tech community on one of the world's mostengaging tech sites,
Slashdot.org! http://sdm.link/slashdot
_______________________________________________PacketFence-users mailing
listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
-- Fabrice durandfdur...@inverse.ca :: +1.514.447.4918 (x135) ::
www.inverse.caInverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and
PacketFence (http://packetfence.org)------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
