Hi Guys, Currently running into a weird issue with PF and our new Ruckus Smartzone controller.
We have setup the system based on the guides provided by Inverse and users are able to enrol via the portal however, once they have enrolled they are not forwarded onto the network and they are not put into an authorized state, they are still set to Unauthoized. If they reconnect after the enrolment, they are immediately forwarded to PF as the Ruckus Controller believes they are not authorized. Can anyone shed some light as to whether this is a bug or a configuration issue in version 9. Please see logs below from packetfence.log of a test device: Aug 23 10:22:50 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) ERROR: [mac:88:6b:6e:51:93:a2] Error while setting locale to en_US.utf8. Is the locale generated on your system? (pf::Portal::Session::_initializeI18n) Aug 23 10:22:50 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) INFO: [mac:88:6b:6e:51:93:a2] External captive portal detected ! (captiveportal::PacketFence::Model::Portal::Session::_build_dispatcherSession) Aug 23 10:22:50 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) INFO: [mac:88:6b:6e:51:93:a2] Detected external portal client. Using the IP 172.28.66.149 address in it's session. (captiveportal::PacketFence::Model::Portal::Session::_build_clientIP) Aug 23 10:22:50 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) INFO: [mac:88:6b:6e:51:93:a2] Instantiate profile Ruckus-Test (pf::Connection::ProfileFactory::_from_profile) Aug 23 10:22:50 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) ERROR: [mac:88:6b:6e:51:93:a2] Error while setting locale to en_US.utf8. Is the locale generated on your system? (captiveportal::PacketFence::Controller::Root::setupLanguage) Aug 23 10:22:50 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) INFO: [mac:88:6b:6e:51:93:a2] User default has authenticated on the portal. (Class::MOP::Class:::after) Aug 23 10:22:50 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) ERROR: [mac:88:6b:6e:51:93:a2] Error while setting locale to en_US.utf8. Is the locale generated on your system? (pf::Portal::Session::_initializeI18n) Aug 23 10:22:50 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) INFO: [mac:88:6b:6e:51:93:a2] Reevaluating access of device. (captiveportal::PacketFence::DynamicRouting::Module::Root::unknown_state) Aug 23 10:22:50 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) INFO: [mac:88:6b:6e:51:93:a2] re-evaluating access (manage_register called) (pf::enforcement::reevaluate_access) Aug 23 10:22:50 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) INFO: [mac:88:6b:6e:51:93:a2] VLAN reassignment is forced. (pf::enforcement::_should_we_reassign_vlan) Aug 23 10:22:50 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) INFO: [mac:88:6b:6e:51:93:a2] switch port is (192.168.221.30) ifIndex unknown connection type: Wifi Web Auth (pf::enforcement::_vlan_reevaluation) Aug 23 10:22:50 dc-packetfence packetfence_httpd.webservices: httpd.webservices(1091) INFO: [mac:88:6b:6e:51:93:a2] Sending a firewall SSO 'Update' request for MAC '88:6b:6e:51:93:a2' and IP '172.28.66.149' (pf::firewallsso::do_sso) Aug 23 10:22:50 dc-packetfence packetfence_httpd.webservices: httpd.webservices(1091) INFO: [mac:88:6b:6e:51:93:a2] Request to /api/v1/firewall_sso/update is unauthorized, will perform a login (pf::api::unifiedapiclient::call) Aug 23 10:22:51 dc-packetfence packetfence_httpd.portal: httpd.portal(48020) ERROR: [mac:88:6b:6e:51:93:a2] Error while setting locale to en_US.utf8. Is the locale generated on your system? (pf::Portal::Session::_initializeI18n) Aug 23 10:22:51 dc-packetfence packetfence_httpd.portal: httpd.portal(48020) INFO: [mac:88:6b:6e:51:93:a2] External captive portal detected ! (captiveportal::PacketFence::Model::Portal::Session::_build_dispatcherSession) Aug 23 10:22:51 dc-packetfence packetfence_httpd.portal: httpd.portal(48020) INFO: [mac:88:6b:6e:51:93:a2] Detected external portal client. Using the IP 172.28.66.149 address in it's session. (captiveportal::PacketFence::Model::Portal::Session::_build_clientIP) Aug 23 10:22:51 dc-packetfence packetfence_httpd.portal: httpd.portal(48020) INFO: [mac:88:6b:6e:51:93:a2] Instantiate profile Ruckus-Test (pf::Connection::ProfileFactory::_from_profile) Aug 23 10:22:51 dc-packetfence packetfence_httpd.portal: httpd.portal(48020) ERROR: [mac:88:6b:6e:51:93:a2] Error while setting locale to en_US.utf8. Is the locale generated on your system? (captiveportal::PacketFence::Controller::Root::setupLanguage) Aug 23 10:22:52 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) INFO: [mac:88:6b:6e:51:93:a2] URI '/Cisco::WLC/sid0b06a6' is detected as an external captive portal URI (pf::web::externalportal::handle) Aug 23 10:22:52 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) INFO: [mac:88:6b:6e:51:93:a2] Instantiate profile Roundhouse-Guest (pf::Connection::ProfileFactory::_from_profile) Aug 23 10:22:52 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) ERROR: [mac:88:6b:6e:51:93:a2] Error while setting locale to en_US.utf8. Is the locale generated on your system? (pf::Portal::Session::_initializeI18n) Aug 23 10:23:19 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) INFO: [mac:88:6b:6e:51:93:a2] URI '/RuckusSmartZone' is detected as an external captive portal URI (pf::web::externalportal::handle) Aug 23 10:23:20 dc-packetfence packetfence_httpd.portal: httpd.portal(49027) ERROR: [mac:88:6b:6e:51:93:a2] Error while setting locale to en_US.utf8. Is the locale generated on your system? (pf::Portal::Session::_initializeI18n) Aug 23 10:30:56 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) ERROR: [mac:88:6b:6e:51:93:a2] Error while setting locale to en_US.utf8. Is the locale generated on your system? (pf::Portal::Session::_initializeI18n) Aug 23 10:30:56 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) INFO: [mac:88:6b:6e:51:93:a2] External captive portal detected ! (captiveportal::PacketFence::Model::Portal::Session::_build_dispatcherSession) Aug 23 10:30:56 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) INFO: [mac:88:6b:6e:51:93:a2] Detected external portal client. Using the IP 172.28.66.149 address in it's session. (captiveportal::PacketFence::Model::Portal::Session::_build_clientIP) Aug 23 10:30:56 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) INFO: [mac:88:6b:6e:51:93:a2] Instantiate profile Ruckus-Test (pf::Connection::ProfileFactory::_from_profile) Aug 23 10:30:56 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) ERROR: [mac:88:6b:6e:51:93:a2] Error while setting locale to en_US.utf8. Is the locale generated on your system? (captiveportal::PacketFence::Controller::Root::setupLanguage) Aug 23 10:30:56 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) INFO: [mac:88:6b:6e:51:93:a2] User default has authenticated on the portal. (Class::MOP::Class:::after) Aug 23 10:30:56 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) ERROR: [mac:88:6b:6e:51:93:a2] Error while setting locale to en_US.utf8. Is the locale generated on your system? (pf::Portal::Session::_initializeI18n) Aug 23 10:30:56 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) INFO: [mac:88:6b:6e:51:93:a2] Reevaluating access of device. (captiveportal::PacketFence::DynamicRouting::Module::Root::unknown_state) Aug 23 10:30:56 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) INFO: [mac:88:6b:6e:51:93:a2] re-evaluating access (manage_register called) (pf::enforcement::reevaluate_access) Aug 23 10:30:56 dc-packetfence packetfence_httpd.webservices: httpd.webservices(1091) INFO: [mac:88:6b:6e:51:93:a2] Sending a firewall SSO 'Update' request for MAC '88:6b:6e:51:93:a2' and IP '172.28.66.149' (pf::firewallsso::do_sso) Aug 23 10:30:56 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) INFO: [mac:88:6b:6e:51:93:a2] VLAN reassignment is forced. (pf::enforcement::_should_we_reassign_vlan) Aug 23 10:30:56 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) INFO: [mac:88:6b:6e:51:93:a2] switch port is (192.168.221.30) ifIndex unknown connection type: Wifi Web Auth (pf::enforcement::_vlan_reevaluation) Aug 23 10:30:56 dc-packetfence packetfence_httpd.webservices: httpd.webservices(1091) INFO: [mac:88:6b:6e:51:93:a2] Request to /api/v1/firewall_sso/update is unauthorized, will perform a login (pf::api::unifiedapiclient::call) Aug 23 10:30:57 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) ERROR: [mac:88:6b:6e:51:93:a2] Error while setting locale to en_US.utf8. Is the locale generated on your system? (pf::Portal::Session::_initializeI18n) Aug 23 10:30:57 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) INFO: [mac:88:6b:6e:51:93:a2] External captive portal detected ! (captiveportal::PacketFence::Model::Portal::Session::_build_dispatcherSession) Aug 23 10:30:57 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) INFO: [mac:88:6b:6e:51:93:a2] Detected external portal client. Using the IP 172.28.66.149 address in it's session. (captiveportal::PacketFence::Model::Portal::Session::_build_clientIP) Aug 23 10:30:57 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) INFO: [mac:88:6b:6e:51:93:a2] Instantiate profile Ruckus-Test (pf::Connection::ProfileFactory::_from_profile) Aug 23 10:30:57 dc-packetfence packetfence_httpd.portal: httpd.portal(59664) ERROR: [mac:88:6b:6e:51:93:a2] Error while setting locale to en_US.utf8. Is the locale generated on your system? (captiveportal::PacketFence::Controller::Root::setupLanguage) Kind Regards, Talan Westby Networks & Security Services Co-Ordinator Derby College, Ilkeston Campus, 2 Pimlico, Ilkeston, Derbyshire, DE7 5JS _____________________________________ This electronic message contains information from Derby College which may be privileged and confidential. The information is intended to be for the use of the individual(s) or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. Internet communications are not secure and therefore Derby College does not accept legal responsibility for the contents of this message. Any views or opinions presented are only those of the author and not those of Derby College. If you have received this message in error, please reply to this message and include [email protected] immediately. _________________________________________
_______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
