Hi All, We recently upgraded to 9.1 but since then we are unable to connect the packetfence.log has changed for us to be mostly around IPTables which we have never needed to use before see below:
Sep 30 09:27:51 dc-packetfence packetfence: WARN -e(19637): Problem trying to run command: LANG=C sudo /sbin/iptables -S | grep input-management-if called from manager::iptables::isAlive. Child exited with non-zero value 1 (pf::util::pf_run) Sep 30 09:27:51 dc-packetfence packetfence: WARN -e(19637): Problem trying to run command: LANG=C sudo /sbin/iptables -S | grep input-management-if called from manager::iptables::isAlive. Child exited with non-zero value 1 (pf::util::pf_run) Sep 30 09:27:51 dc-packetfence packetfence: INFO -e(19637): saving existing iptables to /usr/local/pf/var/iptables.bak (pf::iptables::iptables_save) Sep 30 09:27:51 dc-packetfence packetfence: WARN -e(19637): We are using IPSET (pf::ipset::iptables_generate) Sep 30 09:27:51 dc-packetfence packetfence: INFO -e(19637): flushing iptables (pf::ipset::iptables_flush_mangle) Sep 30 09:27:51 dc-packetfence packetfence: INFO -e(19637): Adding Forward rules to allow connections to the OAuth2 Providers and passthrough. (pf::iptables::generate_passthrough_rules) Sep 30 09:27:51 dc-packetfence packetfence: INFO -e(19637): Adding IP based passthrough for connectivitycheck.gstatic.com (pf::iptables::generate_passthrough_rules) Sep 30 09:27:51 dc-packetfence packetfence: INFO -e(19637): Adding NAT Masquerade statement. (pf::iptables::generate_passthrough_rules) Sep 30 09:27:51 dc-packetfence packetfence: INFO -e(19637): restoring iptables from /usr/local/pf/var/conf/iptables.conf (pf::iptables::iptables_restore) Sep 30 09:27:51 dc-packetfence packetfence: WARN -e(19637): Problem trying to run command: LANG=C /sbin/iptables-restore < /usr/local/pf/var/conf/iptables.conf called from iptables_restore. Child exited with non-zero value 2 (pf::util::pf_run) If I turn off IPTables we get something similar to what I would expect on the packetfence log file as below even though this doesn't work: Sep 30 09:28:15 dc-packetfence packetfence_httpd.aaa: httpd.aaa(48244) WARN: [mac:[undef]] Use of uninitialized value $content_type in string at /usr/local/pf/lib/pf/WebAPI.pm line 59. (pf::WebAPI::handler) Sep 30 09:28:15 dc-packetfence packetfence_httpd.aaa: httpd.aaa(48244) WARN: [mac:[undef]] Use of uninitialized value $content_type in string eq at /usr/local/pf/lib/pf/WebAPI.pm line 60. (pf::WebAPI::handler) Sep 30 09:28:15 dc-packetfence packetfence_httpd.aaa: httpd.aaa(48244) WARN: [mac:[undef]] Use of uninitialized value $_[0] in exists at /usr/local/pf/lib/pf/WebAPI/JSONRPC.pm line 43. (pf::WebAPI::JSONRPC::allowed) Sep 30 09:28:15 dc-packetfence packetfence_httpd.aaa: httpd.aaa(48244) WARN: [mac:[undef]] Use of uninitialized value $_[0] in exists at /usr/local/pf/lib/pf/WebAPI/REST.pm line 36. (pf::WebAPI::REST::allowed) Sep 30 09:28:15 dc-packetfence packetfence_httpd.webservices: httpd.webservices(48238) WARN: [mac:[undef]] Use of uninitialized value $content_type in string at /usr/local/pf/lib/pf/WebAPI.pm line 59. (pf::WebAPI::handler) Sep 30 09:28:15 dc-packetfence packetfence_httpd.webservices: httpd.webservices(48238) WARN: [mac:[undef]] Use of uninitialized value $content_type in string eq at /usr/local/pf/lib/pf/WebAPI.pm line 60. (pf::WebAPI::handler) Sep 30 09:28:15 dc-packetfence packetfence_httpd.webservices: httpd.webservices(48238) WARN: [mac:[undef]] Use of uninitialized value $_[0] in exists at /usr/local/pf/lib/pf/WebAPI/JSONRPC.pm line 43. (pf::WebAPI::JSONRPC::allowed) Sep 30 09:28:15 dc-packetfence packetfence_httpd.webservices: httpd.webservices(48238) WARN: [mac:[undef]] Use of uninitialized value $_[0] in exists at /usr/local/pf/lib/pf/WebAPI/REST.pm line 36. (pf::WebAPI::REST::allowed) I have then noticed that IPTables is restarted automatically which according to the system is now required to operate. We currently operate in WebAuth Mode with Cisco WLCs. Any help on this would be appreciated as it's affecting our users at current. Kind Regards, Talan Westby Networks & Security Services Co-Ordinator Derby College, Ilkeston Campus, 2 Pimlico, Ilkeston, Derbyshire, DE7 5JS _____________________________________ This electronic message contains information from Derby College which may be privileged and confidential. The information is intended to be for the use of the individual(s) or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. Internet communications are not secure and therefore Derby College does not accept legal responsibility for the contents of this message. Any views or opinions presented are only those of the author and not those of Derby College. If you have received this message in error, please reply to this message and include [email protected] immediately. _________________________________________
_______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
