About this error on squid logs 1540373104.535 0 10.1.1.131 TCP_DENIED/403 3423 CONNECT SERVER_IP:2379 - HIER_NONE/- text/html
Why fingerbank is sending a connect to the local server through the proxy ? I also stumble upon this: https://github.com/inverse-inc/packetfence/issues/3579 Apparently there's a bug, but it doesn't show the solution But I'm using the latest packages in CentOS and have the same problem. On Tue, Oct 23, 2018 at 12:15 PM Leandro . via PacketFence-users < [email protected]> wrote: > First problem I encountered was that fingerbank proxy settings was > accessible (/admin/configuration#configuration/profiling/general) only > "Api Key" was shown. So I had to connect a temporary lte router to the > server enter the api key and -Then- all the other settings including proxy > settings showed up. > > The proxy it's a regular no auth squid http/s proxy > > After fixing that problem, I got this message in packefence: > > Impossible to fetch Fingerbank account information: Can't connect to > api.fingerbank.org:443 Name or service not known at > /usr/share/perl5/vendor_perl/LWP/Protocol/http.pm line 41. > > In squid log I get: > 40226909.809 1 SERVER_IP TCP_DENIED/403 3423 CONNECT SERVER_IP :2379 > - HIER_NONE/- text/html > > The main problem I think its it tries to resolves dns using the server dns > (only local network) and dns request doesn't go though the proxy. > > I tried adding to /etc/hosts file: > 35.196.72.95 api.fingerbank.com > 35.196.72.95 api-ss.fingerbank.org > > And I get this error in packetfence: > > "Error! An error occured while contacting the server. Please try again > later." > > And in squid log: > 1540230173.774 51878 SERVER_IP X TCP_MISS/200 3524 CONNECT > api-ss.fingerbank.org:443 - HIER_DIRECT/35.196.72.95 > > Anyone has experience with proxy settings? > _______________________________________________ > PacketFence-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/packetfence-users
_______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
