Hello Jason, Try that:
radnsiff -x -p 1813 Disconnect and reconnect. Do you see the accounting start packet with the Session Id? Thanks, Ludovic Zammit Product Support Engineer Principal Lead Cell: +1.613.670.8432 Akamai Technologies - Inverse 145 Broadway Cambridge, MA 02142 Connect with Us: <https://community.akamai.com/> <http://blogs.akamai.com/> <https://twitter.com/akamai> <http://www.facebook.com/AkamaiTechnologies> <http://www.linkedin.com/company/akamai-technologies> <http://www.youtube.com/user/akamaitechnologies?feature=results_main> > On Sep 12, 2025, at 12:14 PM, Jason Maxfield via PacketFence-users > <packetfence-users@lists.sourceforge.net> wrote: > > This Message Is From an External Sender > This message came from outside your organization. > I realize now that I'm not getting Acct-Session-Id. Anyone have any insight > on this? > > This is what shows up in RADIUS Audit Logs: > <Screenshot_20250912-090220.png> > > I'm getting online/offline status of nodes so accounting is working. I feel > like there's a config setting somewhere that I'm missing. > > On Wed, Jul 9, 2025, 1:56 PM Jason Maxfield <thejasonmaxfi...@gmail.com > <mailto:thejasonmaxfi...@gmail.com>> wrote: >> PF version: 14.1 >> SmartZone version: 6.1.2 >> >> >> >> I can't figure out why PF isn't sending the deauth to SmartZone. >> >> Here is the log during a successful authentication: >> >> 2025-07-09T09:57:40.411141-07:00 packetfence >> httpd.portal-docker-wrapper[3640743]: httpd.portal(16) INFO: >> [mac:b6:28:df:72:70:17] User test has authenticated on the portal. >> (captiveportal::PacketFence::DynamicRouting::Module::_username_set) >> 2025-07-09T09:57:40.422941-07:00 packetfence >> httpd.portal-docker-wrapper[3640743]: httpd.portal(16) INFO: >> [mac:b6:28:df:72:70:17] security_event 1300003 force-closed for >> b6:28:df:72:70:17 (pf::security_event::security_event_force_close) >> 2025-07-09T09:57:40.427742-07:00 packetfence >> httpd.portal-docker-wrapper[3640743]: httpd.portal(16) INFO: >> [mac:b6:28:df:72:70:17] Instantiate profile Wireless >> (pf::Connection::ProfileFactory::_from_profile) >> 2025-07-09T09:57:40.557972-07:00 packetfence >> httpd.portal-docker-wrapper[3640743]: httpd.portal(14) INFO: >> [mac:b6:28:df:72:70:17] Instantiate profile Wireless >> (pf::Connection::ProfileFactory::_from_profile) >> 2025-07-09T09:57:40.558489-07:00 packetfence >> httpd.portal-docker-wrapper[3640743]: httpd.portal(14) WARN: >> [mac:b6:28:df:72:70:17] locale from the URL is not supported >> (captiveportal::PacketFence::Controller::Root::getLanguages) >> 2025-07-09T09:57:40.569495-07:00 packetfence >> httpd.portal-docker-wrapper[3640743]: httpd.portal(14) INFO: >> [mac:b6:28:df:72:70:17] Releasing device >> (captiveportal::PacketFence::DynamicRouting::Module::Root::release) >> 2025-07-09T09:57:40.581710-07:00 packetfence >> httpd.portal-docker-wrapper[3640743]: httpd.portal(14) INFO: >> [mac:b6:28:df:72:70:17] re-evaluating access (manage_register called) >> (pf::enforcement::reevaluate_access) >> 2025-07-09T09:57:40.592158-07:00 packetfence >> httpd.portal-docker-wrapper[3640743]: httpd.portal(14) INFO: >> [mac:b6:28:df:72:70:17] Instantiate profile Wireless >> (pf::Connection::ProfileFactory::_from_profile) >> 2025-07-09T09:57:40.592478-07:00 packetfence >> httpd.portal-docker-wrapper[3640743]: httpd.portal(14) INFO: >> [mac:b6:28:df:72:70:17] VLAN reassignment is forced. >> (pf::enforcement::_should_we_reassign_vlan) >> 2025-07-09T09:57:40.592478-07:00 packetfence >> httpd.portal-docker-wrapper[3640743]: httpd.portal(14) INFO: >> [mac:b6:28:df:72:70:17] switch port is (172.17.1.6) ifIndex 0connection >> type: WiFi MAC Auth (pf::enforcement::_vlan_reevaluation) >> 2025-07-09T09:57:41.712067-07:00 packetfence pfqueue-backend[3698633]: >> pfqueue(3698633) INFO: [mac:b6:28:df:72:70:17] [b6:28:df:72:70:17] >> DesAssociating mac on switch (172.17.1.6) (pf::api::desAssociate) >> 2025-07-09T09:57:41.716073-07:00 packetfence pfqueue-backend[3698633]: >> pfqueue(3698633) ERROR: [mac:b6:28:df:72:70:17] Error handling desAssociate >> : must specify key at /usr/local/pf/lib/pf/accounting.pm >> <https://urldefense.com/v3/__http://accounting.pm/__;!!GjvTz_vk!QHNi8l-XARQZocBjU-SwsD7cboLke1x1Xp-NyQsIyBRTxLI9FmR3Rqp-UrsBfYRKQXwbwqWSbviJtHHFfWEGgfgruxpdtX22aah2Cg$> >> line 262. >> >> >> As you can see something is getting hung when trying to get the session from >> accounting. The line in question leads me to believe it's not sending the >> MAC properly? >> >> if(my $entry = pf::accounting->cache->get($mac)){ >> >> >> >> Here is my switches.conf: >> >> [172.17.1.6] >> FacultyVlan=1 >> group=Wireless >> radiusSecret=PF_ENC[data:xxxx,tag:xxxx,iv:xxxx,ad:] >> defaultVlan=1 >> >> [group Wireless] >> description=Wireless Controllers >> isolationVlan=107 >> defaultVlan=3 >> registrationVlan=105 >> type=Ruckus::SmartZone >> >> I've tried clearing accounting cache: pmcmd cache accounting clear > _______________________________________________ > PacketFence-users mailing list > PacketFence-users@lists.sourceforge.net > <mailto:PacketFence-users@lists.sourceforge.net> > https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!QHNi8l-XARQZocBjU-SwsD7cboLke1x1Xp-NyQsIyBRTxLI9FmR3Rqp-UrsBfYRKQXwbwqWSbviJtHHFfWEGgfgruxpdtX3eAzxp-w$
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ PacketFence-users mailing list PacketFence-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/packetfence-users
