I was a bit premature with my report that it worked ;)
After logging into the PKI page I ended up with this error:
OperationalError at /
no such table: pki_ca
*Request Method:*
POST
*Request URL:*
https://192.168.2.25:9393/
*Django Version:*
1.8.1
*Exception Type:*
OperationalError
*Exception Value:*
no such table: pki_ca
*Exception Location:*
/usr/lib/python2.7/site-packages/django/db/backends/sqlite3/base.py in
execute, line 318
*Python Executable:*
/bin/python
*Python Version:*
2.7.5
*Python Path:*
['/usr/lib64/python27.zip',
'/usr/lib64/python2.7',
'/usr/lib64/python2.7/plat-linux2',
'/usr/lib64/python2.7/lib-tk',
'/usr/lib64/python2.7/lib-old',
'/usr/lib64/python2.7/lib-dynload',
'/usr/lib64/python2.7/site-packages',
'/usr/lib/python2.7/site-packages',
'/usr/local/packetfence-pki',
'/usr/local/packetfence-pki/inverse']
*Server time:*
Tue, 12 Dec 2017 02:53:21 +0000
And there’s a whole lot of traceback that I can show but it will make
this post unreadable
*From:*E.P. [mailto:[email protected]]
*Sent:* Monday, December 11, 2017 6:52 PM
*To:* 'Durand fabrice'; '[email protected]'
*Subject:* RE: [PacketFence-users] PKI installation
Hm…
I was stubbornly persisting on this service showing in the output of
netstat.
But now I can have the webpage for PKI come up. Strange…
But it looks like it is now working.
I REALLY appreciate your assistance, Fabrice, and the whole effort you
do to create and maintain this product.
I anticipate a pleasure after having it deployed and tuned to our
requirements
Eugene
*From:*E.P. [mailto:[email protected]]
*Sent:* Monday, December 11, 2017 6:44 PM
*To:* 'Durand fabrice'; [email protected]
<mailto:[email protected]>
*Subject:* RE: [PacketFence-users] PKI installation
Yes, Fabrice, I made sure I uncommented iptables rules for this service.
Here’s the extract from iptables.conf file:
# PacketFence-PKI
*-A input-management-if --protocol tcp --match tcp --dport 9393 --jump
ACCEPT*
-A input-management-if --protocol tcp --match tcp --dport 9292 --jump
ACCEPT
Here’s the extract from the output of “iptables –L”
Chain input-management-if (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere state NEW
tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp dpt:http
ACCEPT tcp -- anywhere anywhere tcp dpt:https
ACCEPT tcp -- anywhere anywhere tcp
dpt:ies-lm
ACCEPT tcp -- anywhere anywhere tcp dpt:websm
ACCEPT tcp -- anywhere anywhere tcp dpt:arcp
ACCEPT tcp -- anywhere anywhere tcp
dpt:sun-as-jpda
ACCEPT tcp -- anywhere anywhere tcp
dpt:marcam-lm
ACCEPT tcp -- anywhere anywhere tcp
dpt:armtechdaemon
ACCEPT tcp -- anywhere anywhere tcp
dpt:cslistener
ACCEPT tcp -- anywhere anywhere tcp
dpt:mailbox
ACCEPT tcp -- anywhere anywhere tcp
dpt:afs3-prserver
ACCEPT tcp -- anywhere anywhere tcp
dpt:radius
ACCEPT udp -- anywhere anywhere udp
dpt:radius
ACCEPT tcp -- anywhere anywhere tcp
dpt:radius-acct
ACCEPT udp -- anywhere anywhere udp
dpt:radius-acct
ACCEPT tcp -- anywhere anywhere tcp dpt:mmpft
ACCEPT udp -- anywhere anywhere udp dpt:mmpft
ACCEPT tcp -- anywhere anywhere tcp
dpt:radsec
ACCEPT udp -- anywhere anywhere udp
dpt:snmptrap
ACCEPT udp -- anywhere anywhere udp
dpt:bootps
ACCEPT tcp -- anywhere anywhere tcp
dpt:bootps
ACCEPT tcp -- anywhere anywhere tcp dpt:9392
ACCEPT tcp -- anywhere anywhere tcp dpt:8834
*ACCEPT tcp -- anywhere anywhere tcp dpt:9393*
And nothing to listen on port 9393
[root@PacketFence-ZEN conf]# netstat -antlp | grep 9393
Press any key to continue...
*From:*Durand fabrice [mailto:[email protected]]
*Sent:* Monday, December 11, 2017 6:27 PM
*To:* E.P.; [email protected]
<mailto:[email protected]>
*Subject:* Re: [PacketFence-users] PKI installation
Yes i already seen that but it listen on IPv4 port, did you updated
the file conf/iptables.conf to allow the port 9393 and restart
iptables (pfcmd service iptables restart)?
Regards
Fabrice
Le 2017-12-11 à 20:45, E.P. a écrit :
Bingo!
That made a trick. I was about to dig down to python packages
installation but really appreciate your input, Fabrice!
So, it looks like packetfence PKI was installed together with all
dependencies:
Installed:
packetfence-pki.noarch 0:1.1.1-1.el7.centos
Dependency Installed:
django-countries.noarch 0:5.0-4.1 python-ldap.x86_64
0:2.4.15-2.el7 python2-asn1crypto.noarch 0:0.22.0-2.el7.centos
python2-django-formtools.noarch 0:1.0-4.1
python2-pyasn1-modules.noarch 0:0.1.9-7.el7
Dependency Updated:
pyOpenSSL.noarch 0:17.2.0-9.1 python-django.noarch
0:1.8.1-3.1 python-django-bash-completion.noarch
0:1.8.1-3.1 python-django-tagging.noarch 0:0.3.6-5.1
Now, I started the service
[root@PacketFence-ZEN ~]# service packetfence-pki start
Reloading systemd: [ OK ]
Starting packetfence-pki (via systemctl): [ OK ]
But here hoes another challenge ;)
I see that port 9393 is open on TCP6, i.e. IPv6 stack. No idea why
it doesn’t listen on a regular IPv4 TCP port
[root@PacketFence-ZEN ~]# netstat -ntlpa | grep 9393
tcp6 0 0 :::9393 :::* LISTEN 3914/httpd
Eugene
*From:*Durand fabrice [mailto:[email protected]]
*Sent:* Monday, December 11, 2017 3:55 PM
*To:* E.P.; [email protected]
<mailto:[email protected]>
*Subject:* Re: [PacketFence-users] PKI installation
Ok what you can do now:
rpm -Uvh --force
http://inverse.ca/downloads/PacketFence/CentOS7/extra/x86_64/RPMS/python-cryptography-2.0.2-1.1.x86_64.rpm
rpm -Uvh --force
http://inverse.ca/downloads/PacketFence/CentOS7/extra/x86_64/RPMS/python-cryptography-vectors-2.0.2-1.1.noarch.rpm
and retry.
Regards
Fabrice
Le 2017-12-11 à 16:40, E.P. a écrit :
Well that helped to some extent to do one more step ahead but
didn’t move me closer to packetfence PKI successful
installation ;)
Here’s what I did:
/[root@PacketFence-ZEN ~]# yum install
python-django-rest-framework python-django-bootstrap3
--enablerepo=packetfence,packetfence-extra/
//
/Dependencies Resolved/
//
/============================================================================================================================================================================/
/Package Arch Version Repository Size/
/============================================================================================================================================================================/
/Installing:/
/python-django-bootstrap3 noarch 5.1.0-4.1
packetfence 45 k/
/python-django-rest-framework noarch 3.1.1-16.1
packetfence 420 k/
//
/Transaction Summary/
/============================================================================================================================================================================/
/Install 2 Packages/
//
/Total download size: 466 k/
/Installed size: 1.7 M/
/Is this ok [y/d/N]: y/
/Downloading packages:/
/(1/2): python-django-bootstrap3-5.1.0-4.1.noarch.rpm | 45
kB 00:00:00 /
/(2/2): python-django-rest-framework-3.1.1-16.1.noarch.rpm |
420 kB 00:00:01 /
/----------------------------------------------------------------------------------------------------------------------------------------------------------------------------/
/Total 345 kB/s | 466 kB 00:00:01 /
/Running transaction check/
/Running transaction test/
/Transaction test succeeded/
/Running transaction/
/Installing : python-django-rest-framework-3.1.1-16.1.noarch 1/2 /
/ Installing : python-django-bootstrap3-5.1.0-4.1.noarch 2/2 /
/ Verifying : python-django-bootstrap3-5.1.0-4.1.noarch
1/2
/
/ Verifying : python-django-rest-framework-3.1.1-16.1.noarch
2/2 /
//
/Installed:/
/python-django-bootstrap3.noarch 0:5.1.0-4.1
python-django-rest-framework.noarch 0:3.1.1-16.1 /
//
/Complete!/
Then on my attempt to install packetfence PKI I was presented
with something more promising:
/[root@PacketFence-ZEN ~]# yum install packetfence-pki
--enablerepo=packetfence-extra, packetfence/
/<snip>/
/Dependencies Resolved/
//
/============================================================================================================================================================================/
/Package Arch Version Repository
Size/
/============================================================================================================================================================================/
/Installing:/
/packetfence-pki noarch 1.1.1-1.el7.centos
packetfence-extra 552 k/
/Installing for dependencies:/
/django-countries noarch 5.0-4.1
packetfence-extra 433 k/
/python-cryptography x86_64 2.0.2-1.1
packetfence-extra 500 k/
/python-ldap x86_64 2.4.15-2.el7
base 159 k/
/python2-asn1crypto noarch 0.22.0-2.el7.centos
packetfence-extra 170 k/
/python2-django-formtools noarch 1.0-4.1
packetfence-extra 87 k/
/python2-pyasn1-modules noarch 0.1.9-7.el7
base 59 k/
/Updating for dependencies:/
/pyOpenSSL noarch 17.2.0-9.1
packetfence-extra 89 k/
/python-django noarch 1.8.1-3.1
packetfence-extra 3.5 M/
/python-django-bash-completion noarch 1.8.1-3.1
packetfence-extra 17 k/
/python-django-tagging noarch 0.3.6-5.1
packetfence-extra 61 k/
//
/Transaction Summary/
/============================================================================================================================================================================/
/Install 1 Package (+6 Dependent packages)/
/Upgrade ( 4 Dependent packages)/
//
/Total download size: 5.6 M/
/Is this ok [y/d/N]: y/
/Downloading packages:/
/No Presto metadata available for packetfence-extra/
/(1/11): django-countries-5.0-4.1.noarch.rpm
| 433 kB 00:00:01 /
/(2/11): pyOpenSSL-17.2.0-9.1.noarch.rpm | 89 kB 00:00:00 /
/(3/11): packetfence-pki-1.1.1-1.el7.centos.noarch.rpm | 552
kB 00:00:01 /
/(4/11): python-cryptography-2.0.2-1.1.x86_64.rpm | 500 kB
00:00:02 /
/(5/11): python-django-bash-completion-1.8.1-3.1.noarch.rpm
|
17 kB 00:00:00 /
/(6/11): python-django-tagging-0.3.6-5.1.noarch.rpm | 61 kB
00:00:00 /
/(7/11): python-ldap-2.4.15-2.el7.x86_64.rpm | 159 kB 00:00:00 /
/(8/11): python2-asn1crypto-0.22.0-2.el7.centos.noarch.rpm
|
170 kB 00:00:00 /
/(9/11): python2-pyasn1-modules-0.1.9-7.el7.noarch.rpm | 59
kB 00:00:00 /
/(10/11): python2-django-formtools-1.0-4.1.noarch.rpm | 87
kB 00:00:00 /
/(11/11): python-django-1.8.1-3.1.noarch.rpm
|
3.5 MB 00:00:10 /
/----------------------------------------------------------------------------------------------------------------------------------------------------------------------------/
/Total 437 kB/s | 5.6 MB 00:00:13 /
/Running transaction check/
/Running transaction test/
And here another can of worms about python opens up ;)
I’m only quoting couple of first lines, as the output of
errors is very long:
/Transaction check error:/
/ file
/usr/lib64/python2.7/site-packages/cryptography/__about__.py
from install of python-cryptography-2.0.2-1.1.x86_64 conflicts
with file from package python2-cryptography-1.7.2-1.el7.x86_64/
/ file
/usr/lib64/python2.7/site-packages/cryptography/__about__.pyc
from install of python-cryptography-2.0.2-1.1.x86_64 conflicts
with file from package python2-cryptography-1.7.2-1.el7.x86_64/
Eugene
*From:*Fabrice Durand [mailto:[email protected]]
*Sent:* Monday, December 11, 2017 1:27 PM
*To:* E.P.; [email protected]
<mailto:[email protected]>
*Subject:* Re: [PacketFence-users] PKI installation
Ok so can you try that:
yum install python-django-rest-framework
python-django-bootstrap3
--enablerepo=packetfence,packetfence-extra
Le 2017-12-11 à 16:25, E.P. a écrit :
Thank you, Fabrice !
I found this advice earlier, built the cache, no luck,
same results:
[root@PacketFence-ZEN ~]# yum makecache
--enablerepo=packetfence,packetfence-extra
<snip>
Metadata Cache Created
[root@PacketFence-ZEN ~]# yum install packetfence-pki
--enablerepo=packetfence-extra, packetfence
<snip>
--> Finished Dependency Resolution
Error: Package: packetfence-pki-1.1.1-1.el7.centos.noarch
(packetfence-extra)
Requires: python-django-rest-framework
Error: Package: packetfence-pki-1.1.1-1.el7.centos.noarch
(packetfence-extra)
Requires: python-django-bootstrap3
Eugene
*From:*Fabrice Durand via PacketFence-users
[mailto:[email protected]]
*Sent:* Monday, December 11, 2017 1:21 PM
*To:* [email protected]
<mailto:[email protected]>
*Cc:* Fabrice Durand
*Subject:* Re: [PacketFence-users] PKI installation
Hello Eugene,
can you try:
yum makecache --enablerepo=packetfence,packetfence-extra
yum install packetfence-pki
--enablerepo=packetfence-extra, packetfence
Regards
Fabrice
Le 2017-12-11 à 16:03, E.P. via PacketFence-users a écrit :
Hi guys,
I’m trying to follow the guide published here:
https://packetfence.org/doc/PacketFence_PKI_Quick_Install_Guide.html
My setup is based on ZEN virtual appliance and I
understand it runs CentOS 7 Linux.
Now when I’m trying to install packetfence-pki package
as in step 3.1.6 of the above guide I end up with
dependency error, e.g.
[root@PacketFence-ZEN ~]# yum install packetfence-pki
--enablerepo=packetfence-extra, packetfence
<snip>
--> Finished Dependency Resolution
Error: Package:
packetfence-pki-1.1.1-1.el7.centos.noarch
(packetfence-extra)
Requires: python-django-rest-framework
Error: Package:
packetfence-pki-1.1.1-1.el7.centos.noarch
(packetfence-extra)
Requires: python-django-bootstrap3
I tried to look for any solution of this error in the
mail archive but can’t see anything meaningful or helpful.
Anyone please advise, will very much appreciate it!
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org!http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
[email protected]
<mailto:[email protected]>
https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Fabrice Durand
[email protected] <mailto:[email protected]> :: +1.514.447.4918
(x135) ::www.inverse.ca <http://www.inverse.ca>
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and
PacketFence (http://packetfence.org)
--
Fabrice Durand
[email protected] <mailto:[email protected]> :: +1.514.447.4918 (x135)
::www.inverse.ca <http://www.inverse.ca>
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and
PacketFence (http://packetfence.org)
