Hi folks,
I am having real problems figuring this out and I really need to get it sorted
soon.
My PF server (6.5) is NOT the DHCP server for the registration and user subnets.
The production DHCP server is relaying the DHCP activity to the PF server where
it is acted on
by the pf/lib/pf/dhcp/processor.pm module. For this reason the system is
configured to use MySQL
rather than OMAPI.
Everything is fine until I define a firewallSSO at which point the firewall
receives the user information
from the PF server but very rapidly the QUEUE length for the pfdhcplistener
process escalates and
keeps rising inexorably. Eventually the dhcplistener process gives up (it does
not crash but just no longer
‘sees’ any DHCP packets).
The only thing we can do is to restart the PFQUEUE and PFDHCPLISTENER processes
after deleting the firewallSSO.
I have done some TRACE logging on this but cannot see any failures in any other
processes. The dhcplistener process
just stops gradually until no more IPLOG updates are sent and people start
receiving the dreaded ‘Your device is not found in the..’
message and my telephone starts to ring!
Any ideas – I have bumped the number of listener process up to 16 but this has
not alleviated the problem.
Andrew
Andrew Torry
Senior Infrastructure Engineer
Tel: 01326 370760
Email: [email protected]
[cid:[email protected]]
[Falmouth Exeter Plus]
[cid:[email protected]]
[Twitter] <https://twitter.com/falmouthexeter> [Facebook]
<https://www.facebook.com/falmouthexeter> [Instagram]
<https://www.instagram.com/falmouthexeterplus/> [YouTube]
<https://www.youtube.com/channel/UC5-Jq4vTOhWgYoJJDYrZHWw>
[cid:[email protected]]
[Falmouth University]
Falmouth Exeter Plus is an exempt charity established by Falmouth University
and the University of Exeter to deliver their shared Higher Education services
in Cornwall.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
