Hello Nicholas,

can you verify when you reevaluate the access of the device packetfence try to do ssh ? (with tcpdump per example).

Also it looks that there is a way to trace the connection:

https://github.com/inverse-inc/packetfence/blob/maintenance/9.3/lib/pf/Switch/Juniper.pm#L134

add that:

$session->input_log(*STDOUT);

and see if you obtain some useful output.

Regards

Fabrice


Le 20-03-13 à 23 h 28, Nicholas Pier via PacketFence-users a écrit :
Hello,

Does anyone know a cli, log or other troubleshooting resource for packetfence's internal SSH client?

  * Port 22 is open between the server and the switch.
  * From the server, I can SSH into the switch with the same
    credentials I've provided packetfence in the UI.
  * I've also verified that the same SSH session is successful if I
    'su' to become the 'pf' user.


I can SSH directly from my packetfence server to the target switch and have verified my credentials. However, when packetfence as user 'pf' attempts the login, it fails with the following error message without much detail.

Mar 14 00:19:52 packetfence packetfence: ERROR pfperl-api(23844): Unable to connect to 10.2.0.140 using SSH. Failed with Login failed to remote host at /usr/local/pf/lib/pf/Switch/Juniper.pm line 135.
 (pf::Switch::Juniper::setAdminStatus)

I'm running:
[root@packetfence ~]# rpm -q packetfence
packetfence-9.3.0-20200113144930.108928498.0007.el7.x86_64


*Nicholas P. Pier*
Network Architect
CCNP R&S, PCNSE, VCIX6-DCV, VCIX6-NV, RHCE, CEHv10


_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to