Hi All,
I did see another user with the same problem around a month ago, but I couldn't 
see a resolution ( here: 
https://sourceforge.net/p/packetfence/mailman/message/37275792/ )
At present, I can't seem to get Packetfence to perform SSO updates to our Palo 
Alto firewalls. Whether I configure HTTP or Syslog mode, the error is the same.
Looking at the traffic between Packetfence and the firewall, no attempt is even 
made.
I have it set to update on DHCP request, and have tried with and without 
caching. I have made sure that I specify network scopes.

I'm running 10.3.0 on a vanilla Centos 7 server
Here are the specific errors in packetfence.log:
Jun  7 18:28:17 boc-pf pfqueue: pfqueue(14491) INFO: [mac:30:1a:28:00:b5:e3] 
Sending a firewall SSO 'Update' request for MAC '30:1a:28:00:b5:e3' and IP 
'192.168.157.218' (pf::firewallsso::do_sso)Jun  7 18:28:17 boc-pf pfqueue: 
pfqueue(14491) INFO: [mac:30:1a:28:00:b5:e3] Request to 
/api/v1/firewall_sso/update is unauthorized, will perform a login 
(pf::api::unifiedapiclient::call)Jun  7 18:28:17 boc-pf pfqueue: pfqueue(14491) 
ERROR: [mac:30:1a:28:00:b5:e3] Error handling firewallsso : malformed JSON 
string, neither tag, array, object, number, string or atom, at character offset 
0 (before "An internal error ha...") at 
/usr/local/pf/lib/pf/api/unifiedapiclient.pm line 225. 
(pf::api::can_fork::notify)
Happy to post any logs or configs as required, but I'm running out of ideas on 
this one, so any help would be appreciated!
Thanks

_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
  • [PacketFence-users] Firewall... d_s_kelly--- via PacketFence-users

Reply via email to