Sure, both are printed below. In the logs, the 10.1.28.123 address is my wired workstation I’m using to configure PF and view the portal, not a wireless client or AP. Also sanitized our domain to domain.com.
SWITCH: [10.1.252.80] description=Ubqiuiti WiFi Controller group=default uplink_dynamic=0 wsPwd=REMOVED controllerIp=10.1.252.80 deauthMethod=HTTPS disconnectPort=0 type=Ubiquiti::Unifi wsUser=REMOVED wsTransport=https registrationVlan=28 registrationUrl=https://nac-pf01.domain.com/guest/s/94mbh3bf/ UrlMap=Y WiNet_UsersUrl=https://nac-pf01.domain.com/guest/s/94mbh3bf/ WiNet_UsersVlan=28 guestUrl=https://nac-pf01.domain.com/guest/s/94mbh3bf/ WiNet_GeneralVlan=28 guestVlan=28 voiceUrl=https://nac-pf01.domain.com/guest/s/94mbh3bf/ isolationUrl=https://nac-pf01.domain.com/guest/s/94mbh3bf/ WiNet_GeneralUrl=https://nac-pf01.domain.com/guest/s/94mbh3bf/ gamingUrl=https://nac-pf01.domain.com/guest/s/94mbh3bf/ inlineUrl=https://nac-pf01.domain.com/guest/s/94mbh3bf/ defaultUrl=https://nac-pf01.domain.com/guest/s/94mbh3bf/ REJECTUrl=https://nac-pf01.domain.com/guest/s/94mbh3bf/ -------------------------------------------------------------------------------------- LOG: Oct 2 03:43:30 packetfence packetfence_httpd.portal: httpd.portal(1971) WARN: [mac:unknown] Unable to match MAC address to IP '10.1.28.123' (pf::ip4log::ip2mac) Oct 2 03:43:30 packetfence packetfence_httpd.portal: httpd.portal(1971) WARN: [mac:00:11:22:33:44:55] Unable to match MAC address to IP '10.1.28.123' (pf::ip4log::ip2mac) Oct 2 03:43:30 packetfence packetfence_httpd.portal: httpd.portal(1971) ERROR: [mac:00:11:22:33:44:55] Error while communicating with the Fingerbank collector. 500 Can't connect to 127.0.0.1:4723 (pf::fingerbank::endpoint_attributes) Oct 2 03:43:30 packetfence packetfence_httpd.portal: httpd.portal(1971) WARN: [mac:00:11:22:33:44:55] Use of uninitialized value in string ne at /usr/local/pf/lib/captiveportal/PacketFence/DynamicRouting/Application.pm line 140. (captiveportal::PacketFence::DynamicRouting::Application::process_fingerbank) Oct 2 03:43:30 packetfence packetfence_httpd.portal: httpd.portal(1971) ERROR: [mac:00:11:22:33:44:55] Error while communicating with the Fingerbank collector. 500 Can't connect to 127.0.0.1:4723 (pf::fingerbank::update_collector_endpoint_data) Oct 2 03:44:00 packetfence packetfence_httpd.portal: httpd.portal(2260) WARN: [mac:unknown] Unable to match MAC address to IP '10.1.28.123' (pf::ip4log::ip2mac) Oct 2 03:44:00 packetfence packetfence_httpd.portal: httpd.portal(2260) WARN: [mac:00:11:22:33:44:55] Unable to match MAC address to IP '10.1.28.123' (pf::ip4log::ip2mac) Oct 2 03:44:00 packetfence packetfence_httpd.portal: httpd.portal(2260) ERROR: [mac:00:11:22:33:44:55] Error while communicating with the Fingerbank collector. 500 Can't connect to 127.0.0.1:4723 (pf::fingerbank::endpoint_attributes) Oct 2 03:44:00 packetfence packetfence_httpd.portal: httpd.portal(2260) WARN: [mac:00:11:22:33:44:55] Use of uninitialized value in string ne at /usr/local/pf/lib/captiveportal/PacketFence/DynamicRouting/Application.pm line 140. (captiveportal::PacketFence::DynamicRouting::Application::process_fingerbank) Oct 2 03:44:00 packetfence packetfence_httpd.portal: httpd.portal(2260) ERROR: [mac:00:11:22:33:44:55] Error while communicating with the Fingerbank collector. 500 Can't connect to 127.0.0.1:4723 (pf::fingerbank::update_collector_endpoint_data) Oct 2 03:44:30 packetfence packetfence_httpd.portal: httpd.portal(875) WARN: [mac:unknown] Unable to match MAC address to IP '10.1.28.123' (pf::ip4log::ip2mac) Oct 2 03:44:30 packetfence packetfence_httpd.portal: httpd.portal(875) WARN: [mac:00:11:22:33:44:55] Unable to match MAC address to IP '10.1.28.123' (pf::ip4log::ip2mac) Oct 2 03:44:30 packetfence packetfence_httpd.portal: httpd.portal(875) ERROR: [mac:00:11:22:33:44:55] Error while communicating with the Fingerbank collector. 500 Can't connect to 127.0.0.1:4723 (pf::fingerbank::endpoint_attributes) Oct 2 03:44:30 packetfence packetfence_httpd.portal: httpd.portal(875) WARN: [mac:00:11:22:33:44:55] Use of uninitialized value in string ne at /usr/local/pf/lib/captiveportal/PacketFence/DynamicRouting/Application.pm line 140. (captiveportal::PacketFence::DynamicRouting::Application::process_fingerbank) Oct 2 03:44:30 packetfence packetfence_httpd.portal: httpd.portal(875) ERROR: [mac:00:11:22:33:44:55] Error while communicating with the Fingerbank collector. 500 Can't connect to 127.0.0.1:4723 (pf::fingerbank::update_collector_endpoint_data) Oct 2 03:45:01 packetfence packetfence_httpd.portal: httpd.portal(1971) WARN: [mac:unknown] Unable to match MAC address to IP '10.1.28.123' (pf::ip4log::ip2mac) Oct 2 03:45:01 packetfence packetfence_httpd.portal: httpd.portal(1971) WARN: [mac:00:11:22:33:44:55] Unable to match MAC address to IP '10.1.28.123' (pf::ip4log::ip2mac) Oct 2 03:45:01 packetfence packetfence_httpd.portal: httpd.portal(1971) ERROR: [mac:00:11:22:33:44:55] Error while communicating with the Fingerbank collector. 500 Can't connect to 127.0.0.1:4723 (pf::fingerbank::endpoint_attributes) Oct 2 03:45:01 packetfence packetfence_httpd.portal: httpd.portal(1971) WARN: [mac:00:11:22:33:44:55] Use of uninitialized value in string ne at /usr/local/pf/lib/captiveportal/PacketFence/DynamicRouting/Application.pm line 140. (captiveportal::PacketFence::DynamicRouting::Application::process_fingerbank) Oct 2 03:45:01 packetfence packetfence_httpd.portal: httpd.portal(1971) ERROR: [mac:00:11:22:33:44:55] Error while communicating with the Fingerbank collector. 500 Can't connect to 127.0.0.1:4723 (pf::fingerbank::update_collector_endpoint_data) Oct 2 03:45:28 packetfence pfipset[1481]: t=2020-10-02T03:45:28-0400 lvl=info msg="No Inline Network bypass ipsets reload" pid=1481 Oct 2 03:45:31 packetfence packetfence_httpd.portal: httpd.portal(2260) WARN: [mac:unknown] Unable to match MAC address to IP '10.1.28.123' (pf::ip4log::ip2mac) Oct 2 03:45:31 packetfence packetfence_httpd.portal: httpd.portal(2260) WARN: [mac:00:11:22:33:44:55] Unable to match MAC address to IP '10.1.28.123' (pf::ip4log::ip2mac) Oct 2 03:45:31 packetfence packetfence_httpd.portal: httpd.portal(2260) ERROR: [mac:00:11:22:33:44:55] Error while communicating with the Fingerbank collector. 500 Can't connect to 127.0.0.1:4723 (pf::fingerbank::endpoint_attributes) From: Durand fabrice via PacketFence-users <packetfence-users@lists.sourceforge.net> Sent: Thursday, October 1, 2020 7:21 PM To: packetfence-users@lists.sourceforge.net Cc: Durand fabrice <fdur...@inverse.ca> Subject: Re: [PacketFence-users] Can't load Captive Portal with Ubiquiti Wireless - GET not supported Hello Ronald, can you provide the switches.conf and the packetfence.log file ? Regards Fabrice Le 20-10-01 à 16 h 19, Oley, Ronald via PacketFence-users a écrit : Unfortunately we’ve already run that command. It does build the AP list properly, but it doesn’t resolve my issue. Can I ask how you configured the Roles for unifi switch in PF? From: Graham Prentice <gprent...@rocketmail.com><mailto:gprent...@rocketmail.com> Sent: Thursday, October 1, 2020 3:06 PM To: packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net> Cc: Oley, Ronald <ronaldo...@kings.edu><mailto:ronaldo...@kings.edu> Subject: Re: [PacketFence-users] Can't load Captive Portal with Ubiquiti Wireless - GET not supported Had the same error on a Unifi AP. Was fixed by running: /usr/local/pf/bin/pfcmd pfmon ubiquiti_ap_mac_to_ip Graham On Thursday, October 1, 2020, 02:28:40 PM EDT, Oley, Ronald via PacketFence-users <packetfence-users@lists.sourceforge.net<mailto:packetfence-users@lists.sourceforge.net>> wrote: Running the latest version of Unifi controller and PacketFence. Followed the PF setup guide exactly for the Ubiquiti setup (but some confusion on how to handle Roles config for the Unifi Switch). When users connect to Unifi instead of getting the captive poral page they get the error ""Not Implemented - GET to /guest/s/94mbh3bf/ not supported" from PacketFence. I did run the command per the guide to list out all the APs after they were pulled in from the controller as a Switch, and the AP MAC is in the list. I'm guessing the issue is somewhere in the Role config for the switch. We aren't doing any VLAN flipping; I'm fine if they keep the same VLAN since Unifi will trap them until they auth through the portal. So I tried no VLAN config, as well as filling in the current VLAN for the registration and authed user Roles. I also tried Web Auth URL with the URL Ubiquiti is trying to access. No luck. Anybody have this working with a Unifi controller? _______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net> https://lists.sourceforge.net/lists/listinfo/packetfence-users<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fpacketfence-users&data=02%7C01%7Cronaldoley%40kings.edu%7Cf3dbf44276394e5c9f2208d86660dc66%7C93faac0947da4186be23130043bb3418%7C0%7C1%7C637371913510876405&sdata=5UZNJSDxbN5P0P7RaVMOEIE2KP6bUrkNiJSVOwQKCxQ%3D&reserved=0> _______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net<mailto:PacketFence-users@lists.sourceforge.net> https://lists.sourceforge.net/lists/listinfo/packetfence-users<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.sourceforge.net%2Flists%2Flistinfo%2Fpacketfence-users&data=02%7C01%7Cronaldoley%40kings.edu%7Cf3dbf44276394e5c9f2208d86660dc66%7C93faac0947da4186be23130043bb3418%7C0%7C1%7C637371913510876405&sdata=5UZNJSDxbN5P0P7RaVMOEIE2KP6bUrkNiJSVOwQKCxQ%3D&reserved=0>
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
