Maybe I eventually found out the root cause I am on Debian 9 with PacketFence 9.3 So here is my explanation if it can help anyone else on Debian with such an issue
The important parts of the debug log is : (253) Thu Feb 20 17:21:38 2020: Debug: [packetfence-multi-domain] = fail And a few lines above there was : (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: perl_embed:: module = /usr/local/pf/raddb/mods-config/perl/packetfence-multi-domain.pm , func = authorize exit status= hash- or arrayref expected (not a simple scalar, use allow_nonref to allow this) at /usr/local/pf/lib/pfconfig/cached.pm line 182. Which seems to be a Json issue in my case: found it here : (https://stackoverflow.com/questions/33738849/strange-behavior-of-a-tied-hash-in-perl-when-asking-for-an-arrayref) >>JSON is a front-end for JSON::PP (default) or JSON::XS (if found). This is a >>problem with JSON::XS. >>A lot of XS code doesn't handle magical variables (which is what $tied{EXPR} >>returns), and while JSON::XS has handled magical values since version 1.2, it >>doesn't for the value directly passed to encode_json. >>This is an existing bug in JSON::XS that can be worked around as follows: >>encode_json(my $non_magical = $tied{data}) And as the two other members of my cluster are running without problem, I compared the Perl json lib installed I installed this one : libcpanel-json-xs-perl libcpanel-json-xs-perl 3.0225-1 amd64 module for fast and correct serialising to JSON and It solved my problem !!!! Franck R From: Franck Rakotonindrainy <[email protected]> Sent: Friday, February 21, 2020 10:44 AM To: EXTERN Nicolas Quiniou-Briand via PacketFence-users <[email protected]> Cc: Nicolas Quiniou-Briand <[email protected]> Subject: Re: [PacketFence-users] Packetfence Cluster, one member not authenticating clients The radius debug shows this log below with these two errors any indication ? ... (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/FV00ccdd.kabi.ads.fresenius.com' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:Framed-Protocol = $RAD_REQUEST{'Framed-Protocol'} -> 'PPP' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:SQL-User-Name = $RAD_REQUEST{'SQL-User-Name'} -> 'host/FV00ccdd.kabi.ads.fresenius.com' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> '40' (253) Thu Feb 20 17:21:38 2020: ERROR: packetfence-multi-domain: Failed to create pair - failed to parse time string "févr. 20 2020 17:21:38 CET" (253) Thu Feb 20 17:21:38 2020: ERROR: packetfence-multi-domain: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'févr. 20 2020 17:21:38 CET' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> '04:09:' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:PacketFence-Radius-Ip = $RAD_REQUEST{'PacketFence-Radius-Ip'} -> '10.211.x.y' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:NAS-Identifier = $RAD_REQUEST{'NAS-Identifier'} -> 'SW87-FV00aabb' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:MS-RAS-Vendor = $RAD_REQUEST{'MS-RAS-Vendor'} -> '11' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:Tunnel-Type:0 = $RAD_REQUEST{'Tunnel-Type:0'} -> 'VLAN' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:FreeRADIUS-Proxied-To = $RAD_REQUEST{'FreeRADIUS-Proxied-To'} -> '127.0.0.1' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x0208002901686f73742f46563030343636352e6b6162692e6164732e66726573656e6975732e636f6d' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x011a0000000b28' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x011a0000000b2e' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x011a0000000b30' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x011a0000000b3d' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x011a0000000b18' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x011a0000000b19' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x0138' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x013a' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x0140' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x0141' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x0151' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &control:EAP-Type = $RAD_CHECK{'EAP-Type'} -> 'MSCHAPv2' (253) Thu Feb 20 17:21:38 2020: Debug: packetfence-multi-domain: &control:PacketFence-Tenant-Id = $RAD_CHECK{'PacketFence-Tenant-Id'} -> '1' (253) Thu Feb 20 17:21:38 2020: Debug: [packetfence-multi-domain] = fail (253) Thu Feb 20 17:21:38 2020: Debug: } # authorize = fail (253) Thu Feb 20 17:21:38 2020: Debug: Using Post-Auth-Type Reject _______________________________________________ PacketFence-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/packetfence-users
