[PacketFence-users] PF 7.1 remove inline mode

[Sokolowski, Darryl via PacketFence-users]

Hi all,
let me say I'm loving this product! Good work to all involved!
Thank you for all your efforts!

My question is, I built my environment first, then clustered, and found out 
that inline mode isn't supported in the clustered environment.
So I'd like to remove it from my clustered environment, but can I do that 
safely?
Can I just access the configurator again and clear the inline checkbox?

Or can I remove the references for the inline interface from the config files?
I wanted to ask before I hose my installation.

Thanks
Darryl





>>> CONFIDENTIALITY NOTICE <<<

This electronic mail (e-mail) message, including any and/or all attachments, is 
for the sole use of the intended recipient(s), and may contain confidential 
and/or privileged information, pertaining to business conducted under the 
direction and supervision of EarthColor, Inc. All e-mail messages, which may 
have been established as expressed views and/or opinions (stated either within 
the e-mail message or any of its attachments), are left to the sole 
responsibility of that of the sender, and are not necessarily attributed to 
EarthColor, Inc. Unauthorized interception, review, use, disclosure or 
distribution of any such information contained within this e-mail message 
and/or its attachment(s), is(are) strictly prohibited. If you are not the 
intended recipient, please contact the sender by replying to this e-mail 
message, along with the destruction of all copies of the original e-mail 
message (along with any attachments).
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] haproxy | mysql

[Louis Munro via PacketFence-users]

> On Jun 12, 2017, at 14:48, lists via PacketFence-users 
>  wrote:
> 
> Hi,
> 
> So, just for fun I tried a fresh install of packetfence 7.1.0 on debian 8.
> 
> As far as I know, we need to configure the OS debian to start mysql.

No, you don't.
Not anymore anyway.

Systemd will automatically start the packetfence-mariadb service if you start 
packetfence.


> 
> However, also Packetfence tries to start something on port 3306 as well 
> (haproxy) so there seems to be a conflict? Found that out, because I 
> initially had forgotten to enable the mysql systemd service.
> 

There is no conflict.
That is the expected behaviour.

> Manually starting mysql after install didn't work, because port 3306 was 
> already taken by haproxy. Is that intentional?
> 

Yes.
You are not supposed to use the mysql service.
You are expected to let systemd do the work for you.

When you run "systemctl isolate packetfence" systemd will start all the 
packetfence services, and all services required by them.

For example, the packetfence-httpd.admin.service unit files defines these 
dependencies:

Wants=packetfence-base.target packetfence-config.service

And in turn, the packetfence-base.target includes the 
packetfence-mariadb.service.

So you don't have to do anything about mysql, and in fact you are making your 
life harder by starting it.


Regards,
--
Louis Munro
lmu...@inverse.ca   ::  www.inverse.ca 
 
+1.514.447.4918 x125  :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu ) and 
PacketFence (www.packetfence.org )--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] [SPAM] Re: haproxy | mysql

[Bebbet van Dinges via PacketFence-users]

if you run netstat -tapn, can you see where the mysql instance is
listening? if its on 127.0.0.1:3306, then the haproxy can listen on the
management:3306, no problem. When a request to management:3306 gets
made, haproxy will proxy the request to the appropriate server.

(as per my understanding of haproxy-pf combo)

Bebbet

On 13-6-2017 08:52, lists via PacketFence-users wrote:
> 
> 
> On 12-6-2017 20:48, lists via PacketFence-users wrote:
>> "Project-Id-Version: 7.0.0 POT-Creation-Date: YEAR-MO-DA HO:MI+ZONE
>> PO-Revision-Date: 2017-04-19 11:56-0400 Last-Translator: Inverse inc.
>>  Language-Team: English Language: en MIME-Version:
>> 1.0 Content-Type: text/plain; charset=ASCII Content-Transfer-Encoding:
>> 8bit Plural-Forms: nplurals=2; plural=(n != 1); "
>>
>> Any idea how that could have happened..?
> Well, dropped pf database, recreated, reimported, reran all database
> upgrades, and now the nodes appear as well. :-)
> 
> Question on the haproxy config on port 3306 remains though.
> 
> MJ
> 
> --
> 
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] [SPAM] Re: VLAN Filter for MAB devices

[Bebbet van Dinges via PacketFence-users]

Hello Fabrice,

can you give an example? or point me to some documentation where it is
documented?

Bebbet

On 9-6-2017 14:26, Fabrice Durand via PacketFence-users wrote:
> Hi Hello Kehinde,
> 
> MAB is exactly what you need , also for that create a violation that
> will autoreg printer, it will be easier than vlan filters.
> 
> Regards
> 
> Fabrice
> 
> 
> 
> Le 2017-06-08 à 07:51, Akala Kehinde via PacketFence-users a écrit :
>> Hallo,
>>
>> Hallo guys,
>>
>> Want to knw if it's possible to do MAB authentication for non-manageable
>> devices like printers.
>> Don't want to do Hybrid setup, prefer OOB setup instead.
>>
>> Or is it possible to define a VLAN filter that auto-registers these
>> devices
>> and assigns them a registered role?
>>
>> Something like this:
>>
>> [hp_printers]
>> filter = node_info.mac
>> operator = regex
>> value = ^(00:04:0d|84:83:71|00:07:3b|00:09:6e).*
>> [autoreg:hp_printers]
>> scope = AutoReg
>> role = devices
>>
>> The regex values, any tool out there to match full MAC address?
>>
>> Regards,
>> Kehinde
>> Regards,
>> Kehinde
>>
>>
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>
>>
>> ___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
> 
> -- 
> Fabrice Durand
> fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
> (http://packetfence.org) 
> 
> 
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> 
> 
> 
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
> 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] haproxy | mysql

[lists via PacketFence-users]

On 12-6-2017 20:48, lists via PacketFence-users wrote:
"Project-Id-Version: 7.0.0 POT-Creation-Date: YEAR-MO-DA HO:MI+ZONE 
PO-Revision-Date: 2017-04-19 11:56-0400 Last-Translator: Inverse inc. 
 Language-Team: English Language: en MIME-Version: 1.0 
Content-Type: text/plain; charset=ASCII Content-Transfer-Encoding: 8bit 
Plural-Forms: nplurals=2; plural=(n != 1); "


Any idea how that could have happened..?
Well, dropped pf database, recreated, reimported, reran all database 
upgrades, and now the nodes appear as well. :-)


Question on the haproxy config on port 3306 remains though.

MJ

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users