Il 07/09/2021 12:55, Quiniou-Briand, Nicolas ha scritto:
Hello Cristian,
First of all, thanks for your feedback.
1. Regarding /oauth/access_token and
/common/network-access-detection.gif, could you re-run the export
script like this:
#v+
bash -x /usr/local/pf/addons/full-import/export.sh /tmp/export.tgz
#v-
and send **only** the output of “Computing additional files” section ?
Computing additional files that are referenced in the configuration
++ /usr/local/pf/addons/full-import/find-extra-files.pl
+ add_files='/common/network-access-detection.gif
/oauth/access_token
/usr/local/pf/html/common/logo_NAC.png
/usr/local/pf/html/common/logo_NAC.png
/usr/local/pf/html/common/logo_NAC.png
/usr/local/pf/html/common/logo_NAC.png
/usr/local/pf/raddb/certs/server.crt
/usr/local/pf/raddb/certs/ca.pem'
+ for f in '$add_files'
+ grep '^/usr/local/pf/'
+ dirname /common/network-access-detection.gif
+ echo 'Found reference to external file that is outside the PF
directory (/common/network-access-detection.gif)'
Found reference to external file that is outside the PF directory
(/common/network-access-detection.gif)
++ dirname /common/network-access-detection.gif
+ base_dir=/common
+ mkdir -p .//common
+ check_code 0
+ '[' 0 -ne 0 ']'
+ cp -a /common/network-access-detection.gif .//common/
+ check_code 0
+ '[' 0 -ne 0 ']'
+ echo /common/network-access-detection.gif
+ for f in '$add_files'
+ grep '^/usr/local/pf/'
+ dirname /oauth/access_token
+ echo 'Found reference to external file that is outside the PF
directory (/oauth/access_token)'
Found reference to external file that is outside the PF directory
(/oauth/access_token)
++ dirname /oauth/access_token
+ base_dir=/oauth
+ mkdir -p .//oauth
+ check_code 0
+ '[' 0 -ne 0 ']'
+ cp -a /oauth/access_token .//oauth/
+ check_code 0
+ '[' 0 -ne 0 ']'
+ echo /oauth/access_token
+ for f in '$add_files'
+ dirname /usr/local/pf/html/common/logo_NAC.png
+ grep '^/usr/local/pf/'
+ echo 'Found reference to external file that is in the PF directory
(/usr/local/pf/html/common/logo_NAC.png)'
Found reference to external file that is in the PF directory
(/usr/local/pf/html/common/logo_NAC.png)
+ echo /usr/local/pf/html/common/logo_NAC.png
+ for f in '$add_files'
+ grep '^/usr/local/pf/'
+ dirname /usr/local/pf/html/common/logo_NAC.png
+ echo 'Found reference to external file that is in the PF directory
(/usr/local/pf/html/common/logo_NAC.png)'
Found reference to external file that is in the PF directory
(/usr/local/pf/html/common/logo_NAC.png)
+ echo /usr/local/pf/html/common/logo_NAC.png
+ for f in '$add_files'
+ grep '^/usr/local/pf/'
+ dirname /usr/local/pf/html/common/logo_NAC.png
+ echo 'Found reference to external file that is in the PF directory
(/usr/local/pf/html/common/logo_NAC.png)'
Found reference to external file that is in the PF directory
(/usr/local/pf/html/common/logo_NAC.png)
+ echo /usr/local/pf/html/common/logo_NAC.png
+ for f in '$add_files'
+ grep '^/usr/local/pf/'
+ dirname /usr/local/pf/html/common/logo_NAC.png
+ echo 'Found reference to external file that is in the PF directory
(/usr/local/pf/html/common/logo_NAC.png)'
Found reference to external file that is in the PF directory
(/usr/local/pf/html/common/logo_NAC.png)
+ echo /usr/local/pf/html/common/logo_NAC.png
+ for f in '$add_files'
+ grep '^/usr/local/pf/'
+ dirname /usr/local/pf/raddb/certs/server.crt
+ echo 'Found reference to external file that is in the PF directory
(/usr/local/pf/raddb/certs/server.crt)'
Found reference to external file that is in the PF directory
(/usr/local/pf/raddb/certs/server.crt)
+ echo /usr/local/pf/raddb/certs/server.crt
+ for f in '$add_files'
+ grep '^/usr/local/pf/'
+ dirname /usr/local/pf/raddb/certs/ca.pem
+ echo 'Found reference to external file that is in the PF directory
(/usr/local/pf/raddb/certs/ca.pem)'
Found reference to external file that is in the PF directory
(/usr/local/pf/raddb/certs/ca.pem)
+ echo /usr/local/pf/raddb/certs/ca.pem
+ main_splitter
4. Regarding WMI scan filter, did you notice some issues if you keep
settings in place ?
We didn’t provide any upgrade script to remove deprecated WMI
configuration or to ignore it. If it’s a problem, we will see how we
can handle that.
Connection profiles didn't work untile I removed the reference
Sep 6 15:38:42 srvpf packetfence_httpd.aaa[2706]: httpd.aaa(2010) INFO:
[mac:00:04:13:25:47:9a] Found authentication source(s) :
'apra-user-auth-dc01' for realm 'null'
(pf::config::util::filter_authentication_sources)
Sep 6 15:38:42 srvpf packetfence_httpd.aaa[2706]: httpd.aaa(2010) INFO:
[mac:00:04:13:25:47:9a] security_event 1300003 force-closed for
00:04:13:25:47:9a (pf::security_event::security_event_force_close)
Sep 6 15:38:42 srvpf packetfence_httpd.aaa[2706]: httpd.aaa(2010) INFO:
[mac:00:04:13:25:47:9a] Instantiate profile apra-wired-portal
(pf::Connection::ProfileFactory::_from_profile)
Sep 6 15:38:42 srvpf packetfence_httpd.aaa[2706]: httpd.aaa(2010) WARN:
[mac:00:04:13:25:47:9a] Use of uninitialized value $type in
concatenation (.) or string at /usr/local/pf/lib/pf/factory/scan.pm line 50.
(pf::factory::scan::getModuleName)
Sep 6 15:38:42 srvpf packetfence_httpd.aaa[2706]: httpd.aaa(2010)
ERROR: [mac:00:04:13:25:47:9a] *radius authorize failed with error: type
is not defined for wmi_scan at /usr/local/pf/lib/pf/factory/scan.pm line
51.*
(pf::api::radius_authorize)
Sep 6 15:38:42 srvpf packetfence_httpd.aaa[2706]: httpd.aaa(2010) WARN:
[mac:00:04:13:25:47:9a] Use of uninitialized value $radius_return in
numeric eq (==) at /usr/local/pf/lib/pf/radius/rest.pm line 48.
(pf::radius::rest::format_response)
Sep 6 15:38:42 srvpf packetfence_httpd.aaa[2706]: httpd.aaa(2010) WARN:
[mac:00:04:13:25:47:9a] Use of uninitialized value $radius_return in
numeric eq (==) at /usr/local/pf/lib/pf/radius/rest.pm line 53.
(pf::radius::rest::format_response)
Sep 6 15:38:42 srvpf packetfence_httpd.aaa[2706]: httpd.aaa(2010) WARN:
[mac:00:04:13:25:47:9a] Use of uninitialized value $radius_return in
numeric eq (==) at /usr/local/pf/lib/pf/radius/rest.pm line 53.
(pf::radius::rest::format_response)
Sep 6 15:38:42 srvpf packetfence_httpd.aaa[2706]: httpd.aaa(2010) WARN:
[mac:00:04:13:25:47:9a] Use of uninitialized value $radius_return in
numeric eq (==) at /usr/local/pf/lib/pf/radius/rest.pm line 53.
(pf::radius::rest::format_response)
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
