Log from offline node, packetfence.log:
....
May 30 14:38:52 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:2c:4d:54:3a:c9:eb] handling radius autz request: from switch_ip =>
(10.21.0.1), connection_type => Wireless-802.11-EAP,switch_mac =>
(6c:dd:30:49:dc:e0), mac => [2c:4d:54:3a:c9:eb], port => 1, username =>
"USERNAME@domain", ssid => dot1x (pf::radius::authorize)
May 30 14:38:52 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:2c:4d:54:3a:c9:eb] Instantiate profile dot1x
(pf::Connection::ProfileFactory::_from_profile)
May 30 14:38:52 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:2c:4d:54:3a:c9:eb] Found authentication source(s) : 'RADIUS-AAI'
for realm 'default' (pf::config::util::filter_authentication_sources)
May 30 14:38:52 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) WARN:
[mac:2c:4d:54:3a:c9:eb] Calling match with empty/invalid rule class.
Defaulting to 'authentication' (pf::authentication::match2)
May 30 14:38:52 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:2c:4d:54:3a:c9:eb] Using sources RADIUS-AAI for matching
(pf::authentication::match2)
May 30 14:38:52 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:2c:4d:54:3a:c9:eb] Matched rule (catchall) in source RADIUS-AAI,
returning actions. (pf::Authentication::Source::match_rule)
May 30 14:38:52 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:2c:4d:54:3a:c9:eb] Matched rule (catchall) in source RADIUS-AAI,
returning actions. (pf::Authentication::Source::match)
May 30 14:38:53 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:2c:4d:54:3a:c9:eb] Role has already been computed and we don't want
to recompute it. Getting role from node_info (pf::role::getRegisteredRole)
May 30 14:38:53 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:2c:4d:54:3a:c9:eb] Username was defined "USERNAME@domain" returning
role 'default' (pf::role::getRegisteredRole)
May 30 14:38:53 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:2c:4d:54:3a:c9:eb] PID: "USERNAME@domain", Status: reg Returned
VLAN: (undefined), Role: default (pf::role::fetchRoleForNode)
May 30 14:38:53 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:2c:4d:54:3a:c9:eb] (10.21.0.1) Added VLAN 26 to the returned RADIUS
Access-Accept (pf::Switch::returnRadiusAccessAccept)
May 30 14:38:53 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:2c:4d:54:3a:c9:eb] violation 1300003 force-closed for
2c:4d:54:3a:c9:eb (pf::violation::violation_force_close)
May 30 14:38:53 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:2c:4d:54:3a:c9:eb] Instantiate profile dot1x
(pf::Connection::ProfileFactory::_from_profile)
May 30 14:38:53 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:[undef]] oldmac (2c:4d:54:3a:c9:eb) and newmac (0) are different
for 10.26.1.1 - closing ip4log entry (pf::api::update_ip4log)
May 30 14:38:58 pfsrv pfqueue: pfqueue(21490) INFO:
[mac:2c:4d:54:3a:c9:eb] trigger_run_scan EB 0 (pf::api::trigger_scan)
May 30 14:38:58 pfsrv pfqueue: pfqueue(21490) INFO:
[mac:2c:4d:54:3a:c9:eb] Instantiate profile dot1x
(pf::Connection::ProfileFactory::_from_profile)
May 30 14:38:58 pfsrv pfqueue: pfqueue(21490) INFO:
[mac:2c:4d:54:3a:c9:eb] trigger_run_scan EB 1 (pf::api::trigger_scan)
May 30 14:38:58 pfsrv pfqueue: pfqueue(21490) WARN:
[mac:2c:4d:54:3a:c9:eb] Use of uninitialized value $added in
concatenation (.) or string at /usr/local/pf/lib/pf/api.pm line 989.
May 30 14:38:58 pfsrv pfqueue: pfqueue(21490) INFO:
[mac:2c:4d:54:3a:c9:eb] trigger_run_scan EB 0,added (pf::api::trigger_scan)
May 30 14:38:58 pfsrv pfqueue: pfqueue(21490) WARN:
[mac:2c:4d:54:3a:c9:eb] Use of uninitialized value $added in numeric eq
(==) at /usr/local/pf/lib/pf/api.pm line 990.
May 30 14:41:01 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:2c:4d:54:3a:c9:eb] Updating iplog from accounting request
(pf::api::handle_accounting_metadata)
May 30 14:41:01 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) WARN:
[mac:2c:4d:54:3a:c9:eb] Trying to match IP address with an invalid MAC
address '0' (pf::ip4log::mac2ip)
May 30 14:41:01 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) WARN:
[mac:2c:4d:54:3a:c9:eb] Unable to match MAC address to IP '10.26.1.33'
(pf::ip4log::ip2mac)
May 30 14:41:01 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) WARN:
[mac:2c:4d:54:3a:c9:eb] Trying to open an 'ip4log' table entry with an
invalid MAC address '0' (pf::ip4log::open)
May 30 14:41:01 pfsrv packetfence_httpd.aaa: httpd.aaa(20753) INFO:
[mac:2c:4d:54:3a:c9:eb] Unable to extract MAC from Called-Station-Id:
10.21.0.1 (pf::radius::extractApMacFromRadiusRequest)
..
Enrico
Il 30/05/2019 14:27, Enrico Becchetti ha scritto:
Il 30/05/2019 14:08, Nicolas Quiniou-Briand via PacketFence-users ha
scritto:
Hello Enrico,
On 2019-05-30 1:37 p.m., Enrico Becchetti via PacketFence-users wrote:
but why is it not online ?
See
https://packetfence.org/doc/PacketFence_Installation_Guide.html#_radius_accounting
Dear all,
I enabled "/Update the iplog using the accounting/setting from/System
configuration → Main configuration → Advanced/."
Do I restart PF after this change ?
Thank you so much !
Best Reards
Enrico
--
_______________________________________________________________________
Enrico Becchetti Servizio di Calcolo e Reti
Istituto Nazionale di Fisica Nucleare - Sezione di Perugia
Via Pascoli,c/o Dipartimento di Fisica 06123 Perugia (ITALY)
Phone:+39 075 5852777 Mail: Enrico.Becchetti<at>pg.infn.it
______________________________________________________________________
--
_______________________________________________________________________
Enrico Becchetti Servizio di Calcolo e Reti
Istituto Nazionale di Fisica Nucleare - Sezione di Perugia
Via Pascoli,c/o Dipartimento di Fisica 06123 Perugia (ITALY)
Phone:+39 075 5852777 Mail: Enrico.Becchetti<at>pg.infn.it
______________________________________________________________________
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
