Hello guys,
I wish someone can explain me something that I don’t understand. Just recently
found time to get back to this installation.
It looks like it was installed and the initial installation script completed.
During the setup I changed the IP address that PF acquired via DHCP
(172.16.2.134 ) and set it manually to be 172.16.0.222 and set a management
role for this IP
I now can access its Web GUI via this IP. But why does the appliance keeps the
initial IP address it received and shows that it is still bound to its eth0
interface.
And I can access PF using this IP too.
[root@PacketFence-ZEN ~]# ifconfig
OPTIONSAD-b: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 169.254.0.2 netmask 255.255.255.252 broadcast 169.254.0.3
inet6 fe80::8890:aeff:fe57:1cfc prefixlen 64 scopeid 0x20<link>
ether 8a:90:ae:57:1c:fc txqueuelen 1000 (Ethernet)
RX packets 69 bytes 12680 (12.3 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 67 bytes 13778 (13.4 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 172.16.2.134 netmask 255.255.252.0 broadcast 172.16.3.255
inet6 fe80::20c:29ff:febc:4c26 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:bc:4c:26 txqueuelen 1000 (Ethernet)
RX packets 9625242 bytes 831835734 (793.3 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 68530 bytes 60794099 (57.9 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1 (Local Loopback)
RX packets 309453434 bytes 59723935332 (55.6 GiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 309453434 bytes 59723935332 (55.6 GiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
Also, what is the significance of the new interface, i.e. OPTIONSAD-b ? I
created an active directory domain by this name. Why create an interface for it
?
And finally, still trying to understand, if I’m going to use PF only for out of
band RADIUS/dot1x authentication do I need any other roles ?
I’m not going to use VLAN enforcement at least for now.
Eugene
From: Sajawal Ghani via PacketFence-users
<packetfence-users@lists.sourceforge.net>
Sent: Tuesday, June 11, 2019 6:32 AM
To: packetfence-users@lists.sourceforge.net
Cc: Sajawal Ghani <sajawal.gh...@gmail.com>
Subject: Re: [PacketFence-users] PF 9.0.1 initial setup is stuck on database
page
Hello,
Indeed it is making it to the users-list. Otherwise, I wouldn't receive this
email.
What’s the point of setting it to management type?
The IP address with which you access the web portal of PacketFence would appear
by default in the second screen (After you select the enforcement). There you
must set it as management 'because Packetfence has to know which address would
you use to access PF web portal.
Secondly, I used VLAN enforcement for my PF environment and later I also use
built-in radius services for authentication of end devices. For me it was also
difficult is the beginning but now everything seems to work. if there is no
particular reason for choosing radius enforcement, perhaps try with VLAN
enforcement. This guide might be useful to you:
http://www.packetfence.org/downloads/PacketFence/doc/PacketFence_Out-of-Band_Deployment_Quick_Guide_ZEN-5.4.0.pdf
On Tue, Jun 11, 2019 at 2:20 PM E.P. via PacketFence-users
<packetfence-users@lists.sourceforge.net
<mailto:packetfence-users@lists.sourceforge.net> > wrote:
Hi Nicholas and Sajawal,
Thank you for attempting to help.
Apparently I missed the type of the interface, which should have been assigned
to management.
This is a bit misleading and confusing. The IP address assigned to the
appliance without all roles is for management purposes indeed. What’s the point
of setting it to management type ?
Also, I selected RADIUS role at the first page because without any roles the
installation script doesn’t allow me to go ahead. Would it mean that RADIUS
daemon will use the same IP address as was assigned to the appliance management
?
Eugene
From: Nicholas Pier <09np...@gmail.com <mailto:09np...@gmail.com> >
Sent: Sunday, June 9, 2019 8:34 AM
To: E.P. <ype...@gmail.com <mailto:ype...@gmail.com> >
Cc: packetfence-users@lists.sourceforge.net
<mailto:packetfence-users@lists.sourceforge.net>
Subject: Re: [PacketFence-users] PF 9.0.1 initial setup is stuck on database
page
Eugene,
I don't know exactly where the setup logs to. Perhaps packetfence.log ? It
might be worthwhile to watch the file sizes of the /usr/local/pf/logs directory
to see which file's sizes are growing during installation or just "tail" them.
Perhaps one can lead you towards a cause? That said, have you tried
re-deploying with a fresh appliance? I don't think this is typical behaviour.
tcp/1443 should be the ssl-protected webpage where you're doing setup currently
and ultimately administration of the solution. Packetfence doesn't start most
of its processes until the final setup of setup. So, I wouldn't expect to see
radius, https on 443 and other ports yet.
Nicholas P. Pier
Network & Virtualization Engineer
CCNP RS, PCSNSE7, VCIX6-DCV, VCIX6-NV
On Sun, Jun 9, 2019 at 12:18 AM E.P. <ype...@gmail.com
<mailto:ype...@gmail.com> > wrote:
Moreover, after few minutes the page stopped responding entirely. I would
assume that if something goes wrong with database parameters setup it is not a
condition of the initial setup script to make PF not to respond. I see port
1443 is open in the system while running “netstat” and it is used by httpd
process.
Any logs that would be indicative and useful to understand what makes it not
complete the setup ?
Eugene
From: Nicholas Pier <09np...@gmail.com <mailto:09np...@gmail.com> >
Sent: Saturday, June 08, 2019 5:53 PM
To: packetfence-users@lists.sourceforge.net
<mailto:packetfence-users@lists.sourceforge.net>
Cc: E.P. <ype...@gmail.com <mailto:ype...@gmail.com> >
Subject: Re: [PacketFence-users] PF 9.0.1 initial setup is stuck on database
page
Hey Eugene,
Yes, your email is making the users mailing list.
I haven't been able to reproduce your problem in any recent installations of
the Zen appliance. Can you confirm that you set the root password, created the
pf database tables, and set the pf user credentials before proceeding? In the
past, I've been stuck by not re-entering the root user's password after setting
it to something other than the default "blank" password. This prevented me from
completing the following steps.
Could you provide some insight as to what OS, and browser you're using? Context
would be helpful.
Nicholas P. Pier
Network & Virtualization Engineer
CCNP RS, PCSNSE7, VCIX6-DCV, VCIX6-NV
On Sat, Jun 8, 2019 at 7:45 PM E.P. via PacketFence-users
<packetfence-users@lists.sourceforge.net
<mailto:packetfence-users@lists.sourceforge.net> > wrote:
I would appreciate if anyone reply and confirm that this email is making it to
packetfence users list
Eugene
From: E.P. <ype...@gmail.com <mailto:ype...@gmail.com> >
Sent: Saturday, June 08, 2019 12:11 PM
To: packetfence-users@lists.sourceforge.net
<mailto:packetfence-users@lists.sourceforge.net>
Subject: PF 9.0.1 initial setup is stuck on database page
Hey guys,
Maybe I’m special or it is a bad witchcraft on me.
After a long time I got back to Packetfence as we still need to secure Ubiquiti
Unifi WiFi with dot1x via RADIUS
Well, trying to install zero effort appliance and stuck at the initial pages
after creating database user.
Clicking on “Continue” button doesn’t move it ahead. Opening the same page,
namely https://172.16.0.223:1443/configurator/database in the other browser
window doesn’t even fetch the page.
The VM seems to be online and I can access it via SSH.
What is wrong ?
Eugene
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
<mailto:PacketFence-users@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/packetfence-users
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
<mailto:PacketFence-users@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/packetfence-users
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
