Re: [PacketFence-users] Question after failed upgrade from 11.0

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Steven,

The instructions mentioned are only relevant if you tried to install 
maintenance patches and not for a minor/major upgrade.

https://www.packetfence.org/doc/PacketFence_Upgrade_Guide.html#_type_of_upgrades

In your case, I supposed you are trying to upgrade from 11.0.0 to 12.2.0 so you 
need to follow:

https://www.packetfence.org/doc/PacketFence_Upgrade_Guide.html#_upgrade_to_another_version_major_or_minor

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D95E1E.0C6CD870]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D95E1E.0C6CD870] 
[cid:image003.png@01D95E1E.0C6CD870]   
[cid:image004.png@01D95E1E.0C6CD870]   
[cid:image005.png@01D95E1E.0C6CD870] 
  
[cid:image006.png@01D95E1E.0C6CD870] 
  
[cid:image007.png@01D95E1E.0C6CD870] 




___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Nodes not displaying after upgrade to 12.2

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello David,

Could you send us what you see in Web browser console for nodes/search API call 
?

Thanks.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D95355.A1251D70]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D95355.A1251D70] 
[cid:image003.png@01D95355.A1251D70]   
[cid:image004.png@01D95355.A1251D70]   
[cid:image005.png@01D95355.A1251D70] 
  
[cid:image006.png@01D95355.A1251D70] 
  
[cid:image007.png@01D95355.A1251D70] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Upgrade-Script breaks system

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Michael,

I will need full output of `do-upgrade.sh` to see if iptables.conf is seen as 
modified by dpkg.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D8E84A.20612150]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D8E84A.20612150] 
[cid:image003.png@01D8E84A.20612150]   
[cid:image004.png@01D8E84A.20612150]   
[cid:image005.png@01D8E84A.20612150] 
  
[cid:image006.png@01D8E84A.20612150] 
  
[cid:image007.png@01D8E84A.20612150] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Upgrade-Script breaks system

[Quiniou-Briand, Nicolas via PacketFence-users]

I opened following issue https://github.com/inverse-inc/packetfence/issues/7298

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D8E7C1.27AE7A40]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D8E7C1.27AE7A40] 
[cid:image003.png@01D8E7C1.27AE7A40]   
[cid:image004.png@01D8E7C1.27AE7A40]   
[cid:image005.png@01D8E7C1.27AE7A40] 
  
[cid:image006.png@01D8E7C1.27AE7A40] 
  
[cid:image007.png@01D8E7C1.27AE7A40] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Upgrade-Script breaks system

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Thanks for your feedback.

> This line is uncommented in production as we used the haproxy dashboard in 
> the past. I don't think this would break the upgrade process.

I agree but I just want to confirm something.
I think I found root cause of your issue. I will open an issue sooner and let 
you know.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D8E7BA.1AA342B0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D8E7BA.1AA342B0] 
[cid:image003.png@01D8E7BA.1AA342B0]   
[cid:image004.png@01D8E7BA.1AA342B0]   
[cid:image005.png@01D8E7BA.1AA342B0] 
  
[cid:image006.png@01D8E7BA.1AA342B0] 
  
[cid:image007.png@01D8E7BA.1AA342B0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Upgrade-Script breaks system

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Thanks.
Could you answer my second question regarding customization of iptables.conf ?

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D8E7AF.9ABD2610]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D8E7AF.9ABD2610] 
[cid:image003.png@01D8E7AF.9ABD2610]   
[cid:image004.png@01D8E7AF.9ABD2610]   
[cid:image005.png@01D8E7AF.9ABD2610] 
  
[cid:image006.png@01D8E7AF.9ABD2610] 
  
[cid:image007.png@01D8E7AF.9ABD2610] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Upgrade-Script breaks system

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Michael,

Just to clarify, I only need output of `do-upgrade.sh` script during a failed 
upgrade.
Could you answer my second question regarding customization of iptables.conf ?

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D8E788.37EA7370]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D8E788.37EA7370] 
[cid:image003.png@01D8E788.37EA7370]   
[cid:image004.png@01D8E788.37EA7370]   
[cid:image005.png@01D8E788.37EA7370] 
  
[cid:image006.png@01D8E788.37EA7370] 
  
[cid:image007.png@01D8E788.37EA7370] 




From: Michael Weber 
Sent: Monday, October 24, 2022 9:06 AM
To: Quiniou-Briand, Nicolas ; 
packetfence-users@lists.sourceforge.net
Subject: Re: Upgrade-Script breaks system

Hello,
I am not in the office today. I can provide all of these logs in ~8 hours. Even 
a remote support to collect all required logs is fine for me.

Best regards
Michael Weber

From: Quiniou-Briand, Nicolas mailto:nquin...@akamai.com>>
Sent: Monday, October 24, 2022 8:47:25 AM
To: 
packetfence-users@lists.sourceforge.net
 
mailto:packetfence-users@lists.sourceforge.net>>
Cc: Michael Weber mailto:michael.we...@crimson.de>>
Subject: RE: Upgrade-Script breaks system


Hello,



I would like to take a look on this issue.

As far as I know, the message:



#v+

chain DOCKER in table filter is incompatible, use 'nft' instead

#v-



doesn't stop upgrade and appears on all upgrades.

1. Could you provide me logs (in private) of your upgrade (using do-upgrade.sh) 
?

2. Could you tell me if you edited iptables.conf to add custom rules before 
your upgrade ?



Nicolas Quiniou-Briand
Product Support Engineer


[cid:image001.png@01D8E788.37EA7370]



Office: +33156696210


Akamai Technologies
145 Broadway
Cambridge, MA 02142



Connect with Us:


[cid:image002.jpg@01D8E788.37EA7370] 
[cid:image003.png@01D8E788.37EA7370]   
[cid:image004.png@01D8E788.37EA7370] 

  [cid:image005.png@01D8E788.37EA7370] 

  [cid:image006.png@01D8E788.37EA7370] 

  [cid:image007.png@01D8E788.37EA7370] 




___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Upgrade-Script breaks system

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

I would like to take a look on this issue.
As far as I know, the message:

#v+
chain DOCKER in table filter is incompatible, use 'nft' instead
#v-

doesn't stop upgrade and appears on all upgrades.

1. Could you provide me logs (in private) of your upgrade (using do-upgrade.sh) 
?
2. Could you tell me if you edited iptables.conf to add custom rules before 
your upgrade ?

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image003.png@01D8E785.3A6A47E0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image004.jpg@01D8E785.3A6A47E0] 
[cid:image005.png@01D8E785.3A6A47E0]   
[cid:image006.png@01D8E785.3A6A47E0]   
[cid:image007.png@01D8E785.3A6A47E0] 
  
[cid:image008.png@01D8E785.3A6A47E0] 
  
[cid:image009.png@01D8E785.3A6A47E0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Developer Guide Updates?

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Logo issue [1] has been fixed in maintenance/12.0 branch.
You can follow this procedure [2] to apply it.

[1] https://github.com/inverse-inc/packetfence/issues/7243
[2] 
https://github.com/inverse-inc/packetfence/issues/7243#issuecomment-1280836967

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D8E456.487B7340]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D8E456.487B7340] 
[cid:image003.png@01D8E456.487B7340]   
[cid:image004.png@01D8E456.487B7340]   
[cid:image005.png@01D8E456.487B7340] 
  
[cid:image006.png@01D8E456.487B7340] 
  
[cid:image007.png@01D8E456.487B7340] 


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Captive portal customizations gone after upgrade

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Logo issue [1] has been fixed in maintenance/12.0 branch.
You can follow this procedure [2] to apply it.

[1] https://github.com/inverse-inc/packetfence/issues/7243
[2] 
https://github.com/inverse-inc/packetfence/issues/7243#issuecomment-1280836967


Nicolas Quiniou-Briand
Product Support Engineer

[cid:image005.png@01D8E456.5B365F40]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image006.jpg@01D8E456.5B365F40] 
[cid:image007.png@01D8E456.5B365F40]   
[cid:image008.png@01D8E456.5B365F40]   
[cid:image009.png@01D8E456.5B365F40] 
  
[cid:image010.png@01D8E456.5B365F40] 
  
[cid:image011.png@01D8E456.5B365F40] 




___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Error installing from ISO

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

It’s mandatory. ISO will do a Debian installation from scratch so you need 
Internet access.
Can you retry with Internet access enabled ?

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D8D415.5490D810]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D8D415.5490D810] 
[cid:image003.png@01D8D415.5490D810]   
[cid:image004.png@01D8D415.5490D810]   
[cid:image005.png@01D8D415.5490D810] 
  
[cid:image006.png@01D8D415.5490D810] 
  
[cid:image007.png@01D8D415.5490D810] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Error installing from ISO

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Using Ctrl+F4, you should be able to see the reason of the failure in a console.
Can you check this and send us a screenshot ?

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D8D3D8.73374BB0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D8D3D8.73374BB0] 
[cid:image003.png@01D8D3D8.73374BB0]   
[cid:image004.png@01D8D3D8.73374BB0]   
[cid:image005.png@01D8D3D8.73374BB0] 
  
[cid:image006.png@01D8D3D8.73374BB0] 
  
[cid:image007.png@01D8D3D8.73374BB0] 




From: Armando Ramos Roche via PacketFence-users 

Sent: Wednesday, September 28, 2022 7:35 PM
To: packetfence-users@lists.sourceforge.net
Cc: Armando Ramos Roche 
Subject: [PacketFence-users] Error installing from ISO

Hello,
I'm trying to install Packet Fence from the ISO I downloaded, but it always 
gives me the same error.
I have a proxmox version 7 server, I upload the ISO for storage which verifies 
the checksum and it is correct (image1). but then it gives an error in the 
installation process. (image2)
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] PF11.0 Switch Configuration Ignoring CoA/Disconnect Port

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Ian,

I think you hit this issue [1].

Could you update GitHub issue with your post ?

[1] https://github.com/inverse-inc/packetfence/issues/4749

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7C5A5.FA4D13B0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7C5A5.FA4D13B0] 
[cid:image003.png@01D7C5A5.FA4D13B0]   
[cid:image004.png@01D7C5A5.FA4D13B0]   
[cid:image005.png@01D7C5A5.FA4D13B0] 
  
[cid:image006.png@01D7C5A5.FA4D13B0] 
  
[cid:image007.png@01D7C5A5.FA4D13B0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Upgrading from 11.0 to 11.1

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Ian,

> We ran the export / import anyways in the 11.1 and noted there was no schema 
> migration script.

There is a schema migration script but the export/import certainly doesn’t run 
it due to its name.

> Since we are 11.0 in our other environments we are okay to wait for 11.1 
> release and then upgrade this environment again. Hopefully we can just leave 
> as is and the upgrade into the release when it is ready.

Your best solution is to downgrade to latest 11.0 packages.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7B115.A7F28F40]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7B115.A7F28F40] 
[cid:image003.png@01D7B115.A7F28F40]   
[cid:image004.png@01D7B115.A7F28F40]   
[cid:image005.png@01D7B115.A7F28F40] 
  
[cid:image006.png@01D7B115.A7F28F40] 
  
[cid:image007.png@01D7B115.A7F28F40] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Upgrading from 11.0 to 11.1

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Ian,

Thanks for your message.
11.0.0 is your latest stable release, 11.1.0 is our current development release.
It seems there is some issues in version number in documentation, I will take a 
look.

Is your purpose to upgrade from 11.0.0 (stable) to 11.1.0 (dev) on the same 
machine ?


Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7B04E.5AE5DB70]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7B04E.5AE5DB70] 
[cid:image003.png@01D7B04E.5AE5DB70]   
[cid:image004.png@01D7B04E.5AE5DB70]   
[cid:image005.png@01D7B04E.5AE5DB70] 
  
[cid:image006.png@01D7B04E.5AE5DB70] 
  
[cid:image007.png@01D7B04E.5AE5DB70] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] radiusd frequent segfaults

[Quiniou-Briand, Nicolas via PacketFence-users]

Thanks Cristian.

We will test on your side.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7ABD7.E08B41A0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7ABD7.E08B41A0] 
[cid:image003.png@01D7ABD7.E08B41A0]   
[cid:image004.png@01D7ABD7.E08B41A0]   
[cid:image005.png@01D7ABD7.E08B41A0] 
  
[cid:image006.png@01D7ABD7.E08B41A0] 
  
[cid:image007.png@01D7ABD7.E08B41A0] 




___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] radiusd frequent segfaults

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Cristian,

I will let Fabrice confirm but for me, Fabrice was aware about this bug and 
rebuild FreeRADIUS with that fix.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7ABB9.52E8FFE0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7ABB9.52E8FFE0] 
[cid:image003.png@01D7ABB9.52E8FFE0]   
[cid:image004.png@01D7ABB9.52E8FFE0]   
[cid:image005.png@01D7ABB9.52E8FFE0] 
  
[cid:image006.png@01D7ABB9.52E8FFE0] 
  
[cid:image007.png@01D7ABB9.52E8FFE0] 


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Issue I noticed upgrading to v11

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Arun,

> Are you going to provide a patch for issue [2]?

Yes.

>  If yes then with v11.0 do i need to use "pf-main.pl" or follow a different 
> procedure once patch is ready.

pf-maint.pl has been deprecated, you will need to follow this procedure [1] 
once bug is fixed;

[1] 
https://www.packetfence.org/doc/PacketFence_Upgrade_Guide.html#_upgrade_to_a_patch_version_x_y_patch

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7AAC7.65A6C100]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7AAC7.65A6C100] 
[cid:image003.png@01D7AAC7.65A6C100]   
[cid:image004.png@01D7AAC7.65A6C100]   
[cid:image005.png@01D7AAC7.65A6C100] 
  
[cid:image006.png@01D7AAC7.65A6C100] 
  
[cid:image007.png@01D7AAC7.65A6C100] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] 回复：RE: v11: whether the new version contain the feature of Zero Trust or micro-segmentation

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

> Are there any plans to add these features?

No plan for now.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7AA45.76FF7F00]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7AA45.76FF7F00] 
[cid:image003.png@01D7AA45.76FF7F00]   
[cid:image004.png@01D7AA45.76FF7F00]   
[cid:image005.png@01D7AA45.76FF7F00] 
  
[cid:image006.png@01D7AA45.76FF7F00] 
  
[cid:image007.png@01D7AA45.76FF7F00] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Issue I noticed upgrading to v11

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Arun and Cristian,

Thanks for your feedback.
I opened following issue [1]
@Arun,

> On GUI I see many services are not running (pid 0) but they are showing as 
> running (green tick). Please see attached screenshot.

Certainly this issue [2]

Regarding fingerbank-collector state, it is certainly not starting because 
Fingerbank API key has not been imported due to [2].

[1] https://github.com/inverse-inc/packetfence/issues/6579
[2] https://github.com/inverse-inc/packetfence/issues/4817

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7AA45.3E7D1890]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7AA45.3E7D1890] 
[cid:image003.png@01D7AA45.3E7D1890]   
[cid:image004.png@01D7AA45.3E7D1890]   
[cid:image005.png@01D7AA45.3E7D1890] 
  
[cid:image006.png@01D7AA45.3E7D1890] 
  
[cid:image007.png@01D7AA45.3E7D1890] 


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Issue I noticed upgrading to v11

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

1. Issue has been solved by Julien in maintenance [1]

You need to reinstall latest packetfence-export package on your 10.3 
installation.

2 and 4. I updated documentation, it need to be rebuilt.
4. We will push a fix for WMI in maintenance.

[1] 
https://github.com/inverse-inc/packetfence/commit/6d502b7b9b602e5a72521c0b9729e475fed79df8


Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7A4BA.AEB3A4C0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7A4BA.AEB3A4C0] 
[cid:image003.png@01D7A4BA.AEB3A4C0]   
[cid:image004.png@01D7A4BA.AEB3A4C0]   
[cid:image005.png@01D7A4BA.AEB3A4C0] 
  
[cid:image006.png@01D7A4BA.AEB3A4C0] 
  
[cid:image007.png@01D7A4BA.AEB3A4C0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Issue I noticed upgrading to v11

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Cristian,

First of all, thanks for your feedback.

1. Regarding /oauth/access_token and /common/network-access-detection.gif, 
could you re-run the export script like this:
#v+
bash -x /usr/local/pf/addons/full-import/export.sh /tmp/export.tgz
#v-
and send **only** the output of "Computing additional files" section ?

2. Regarding AD rejoin, you are correct, I will add a note in documentation.

3. Regarding files under /usr/local/pf/conf/radiusd/*, they need to be migrated 
manually as mentioned in the documentation.

4. Regarding WMI scan filter, did you notice some issues if you keep settings 
in place ?
We didn't provide any upgrade script to remove deprecated WMI configuration or 
to ignore it. If it's a problem, we will see how we can handle that.

5. pf-maint.pl has been removed, now you can get direct updates using your 
package manager, see [2] and [3]. I will add a note in documentation too.

[2] 
https://www.packetfence.org/doc/PacketFence_Upgrade_Guide.html#_type_of_upgrades
[3] 
https://www.packetfence.org/doc/PacketFence_Upgrade_Guide.html#_upgrade_to_a_patch_version_x_y_patch


Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7A3E5.5B2FDA60]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7A3E5.5B2FDA60] 
[cid:image003.png@01D7A3E5.5B2FDA60]   
[cid:image004.png@01D7A3E5.5B2FDA60]   
[cid:image005.png@01D7A3E5.5B2FDA60] 
  
[cid:image006.png@01D7A3E5.5B2FDA60] 
  
[cid:image007.png@01D7A3E5.5B2FDA60] 



* Radius profiles (TLS, EAP, OCSP etc.) are not imported and need to be 
recreated
___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] v11: whether the new version contain the feature of Zero Trust or micro-segmentation

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

This feature has not been added in PacketFence v11.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7A3E2.13918800]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7A3E2.13918800] 
[cid:image003.png@01D7A3E2.13918800]   
[cid:image004.png@01D7A3E2.13918800]   
[cid:image005.png@01D7A3E2.13918800] 
  
[cid:image006.png@01D7A3E2.13918800] 
  
[cid:image007.png@01D7A3E2.13918800] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Ubiquiti UniFi deassociation failing

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello David,

Please open an **issue** on GitHub with your description.
We can certainly fix it but we need to test it under Debian 11 and EL8 systems 
to see how it behaves.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D79599.EAB36800]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D79599.EAB36800] 
[cid:image003.png@01D79599.EAB36800]   
[cid:image004.png@01D79599.EAB36800]   
[cid:image005.png@01D79599.EAB36800] 
  
[cid:image006.png@01D79599.EAB36800] 
  
[cid:image007.png@01D79599.EAB36800] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Feature Request - High Availability Status on Web Interface

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Could you open a feature request on GitHub [1] ?
Please use our template.

[1] 
https://github.com/inverse-inc/packetfence/issues/new?assignees==Type%3A+Feature+%2F+Enhancement=feature_request.md=

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77CB5.C850EAF0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D77CB5.C850EAF0] 
[cid:image003.png@01D77CB5.C850EAF0]   
[cid:image004.png@01D77CB5.C850EAF0]   
[cid:image005.png@01D77CB5.C850EAF0] 
  
[cid:image006.png@01D77CB5.C850EAF0] 
  
[cid:image007.png@01D77CB5.C850EAF0] 




From: Trevor Bryant via PacketFence-users 

Sent: Wednesday, July 14, 2021 5:25 PM
To: packetfence-users@lists.sourceforge.net
Cc: Trevor Bryant 
Subject: [PacketFence-users] Feature Request - High Availability Status on Web 
Interface

Hello,

I'm a new user to PacketFence and recently built my first cluster. I have a 
feature request and figure this would be the best place to share my idea.

I would like it if there were more HA status details from the web management 
page. For example, which host is primary and holding the cluster IP. Also, it 
would be helpful to see some sort of timer that displays how long that host has 
been advertizing the cluster IP and when the last failover occured.

Thank You,
Trevor

[cid:image008.png@01D77CB5.C850EAF0]
Simon - Kucher & Partners
Strategy & Marketing Consultants LLC

One Boston Place, Suite 3301
Boston, MA 02108
United States
Tel: +1 617 231 4266
trevor.bry...@simon-kucher.com
www.simon-kucher.com

Follow us on:
[cid:image009.png@01D77CB5.C850EAF0]

LinkedIn

[cid:image010.png@01D77CB5.C850EAF0]

Facebook 


[cid:image011.png@01D77CB5.C850EAF0]

Twitter 


[cid:image012.png@01D77CB5.C850EAF0]

Instagram 


[cid:image013.png@01D77CB5.C850EAF0]

Youtube 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] PacketFence for network device audit

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello John,

> Sorry for being unclear, we already have a list of all the switches on the 
> network which I actually added to PacketFence. It's the end user devices 
> we're interested in, most but not all of which use DHCP.

For devices with static IP, you can:
- send a copy of their traffic to PacketFence using SPAN or RSPAN methods
or
- enable RADIUS accounting on network devices where they are connected.

Some network vendors are able to add IP address of devices in accounting data.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77CB4.9A4B69B0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D77CB4.9A4B69B0] 
[cid:image003.png@01D77CB4.9A4B69B0]   
[cid:image004.png@01D77CB4.9A4B69B0]   
[cid:image005.png@01D77CB4.9A4B69B0] 
  
[cid:image006.png@01D77CB4.9A4B69B0] 
  
[cid:image007.png@01D77CB4.9A4B69B0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] AD User Accounts not authenticating

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

You can look at logs in packetfence.log when you are trying to authenticate 
against that domain on captive portal.
You can use "Preview" button on your connection profile to test quickly.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77CB6.708167E0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D77CB6.708167E0] 
[cid:image003.png@01D77CB6.708167E0]   
[cid:image004.png@01D77CB6.708167E0]   
[cid:image005.png@01D77CB6.708167E0] 
  
[cid:image006.png@01D77CB6.708167E0] 
  
[cid:image007.png@01D77CB6.708167E0] 


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] pftest Unable to validate credentials at the moment for domain

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

> Why does the pftest command looks like not work properly?

It could mean you are not testing exactly like when you plugged your device on 
the network.
This is certainly related to the REALM being

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77CB5.670DEE50]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D77CB5.670DEE50] 
[cid:image003.png@01D77CB5.670DEE50]   
[cid:image004.png@01D77CB5.670DEE50]   
[cid:image005.png@01D77CB5.670DEE50] 
  
[cid:image006.png@01D77CB5.670DEE50] 
  
[cid:image007.png@01D77CB5.670DEE50] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Fwd: fingerbank showing wrong device class

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Did you send DHCP traffic of this device to PacketFence ?
Try to do it, it should improve Fingerprinting. You can also send a copy 
device’s traffic to PacketFence.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77980.AB1E6670]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D77980.AB1E6670] 
[cid:image003.png@01D77980.AB1E6670]   
[cid:image004.png@01D77980.AB1E6670]   
[cid:image005.png@01D77980.AB1E6670] 
  
[cid:image006.png@01D77980.AB1E6670] 
  
[cid:image007.png@01D77980.AB1E6670] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Editing Email template

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

> Where can I find the emails-guest_sponsor_* templates?

emails-guest_sponsor_* templates mean all templates that start with 
emails-guest_sponsor_.  So you have to edited templates you mentioned in your 
last email.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7797F.D8449620]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7797F.D8449620] 
[cid:image003.png@01D7797F.D8449620]   
[cid:image004.png@01D7797F.D8449620]   
[cid:image005.png@01D7797F.D8449620] 
  
[cid:image006.png@01D7797F.D8449620] 
  
[cid:image007.png@01D7797F.D8449620] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Fwd: fingerbank showing wrong device class

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Be sure to replace correctly MAC_ADDRESS by a valid MAC ADDRESS and test again.

Example with MAC 22:22:22:22:22:22:
#v+
# curl -H "Authorization: Token `grep api_key 
/usr/local/fingerbank/conf/fingerbank.conf | awk -F '=' '{ print $2 }'`" 
https://localhost:4723/endpoint_data//details -k
#v-

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77964.72074AD0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142





___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Fwd: fingerbank showing wrong device class

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

In order to adjust Fingerprinting, we need to have (for each device):
1. Output of following command for each device
#v+
curl -H "Authorization: Token `grep api_key 
/usr/local/fingerbank/conf/fingerbank.conf | awk -F '=' '{ print $2 }'`" 
https://localhost:4723/endpoint_data/MAC_ADDRESS/details -k | python -m 
json.tool
#v-
with MAC_ADDRESS in following format: .

/!\ Don’t paste your API key here /!\

2. Actual Fingerprint
3. Expected Fingerprint

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D777EC.8FA4AC00]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D777EC.8FA4AC00] 
[cid:image003.png@01D777EC.8FA4AC00]   
[cid:image004.png@01D777EC.8FA4AC00]   
[cid:image005.png@01D777EC.8FA4AC00] 
  
[cid:image006.png@01D777EC.8FA4AC00] 
  
[cid:image007.png@01D777EC.8FA4AC00] 




___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Problem with Internet-Access and open WLAN

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Ronald,

Your configuration looks good.
Could you apply maintenance patches [1] and to restart services [2] ?

Once done and if you still have issues, take a packet capture on your 
PacketFence serve to identify where the traffic received on ens32 interface is 
forwarded.


[1] 
https://www.packetfence.org/doc/PacketFence_Installation_Guide.html#_maintenance_patches
[2] 
https://www.packetfence.org/doc/PacketFence_Upgrade_Guide.html#_restart_all_packetfence_services

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D777EE.0AAB9DE0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D777EE.0AAB9DE0] 
[cid:image003.png@01D777EE.0AAB9DE0]   
[cid:image004.png@01D777EE.0AAB9DE0]   
[cid:image005.png@01D777EE.0AAB9DE0] 
  
[cid:image006.png@01D777EE.0AAB9DE0] 
  
[cid:image007.png@01D777EE.0AAB9DE0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] PacketFence for network device audit

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello John,

When you said:

> we were hoping to get a list of all the devices currently active.

Do you speak about end-users devices or network devices (switches) ?

If you want PacketFence to display a list of end-users devices, you can install 
a DHCP sensor [1] on your DHCP server and forward traffic to PacketFence.
PacketFence will create nodes in its database with IP addresses.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D777EB.FD03BEE0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D777EB.FD03BEE0] 
[cid:image003.png@01D777EB.FD03BEE0]   
[cid:image004.png@01D777EB.FD03BEE0]   
[cid:image005.png@01D777EB.FD03BEE0] 
  
[cid:image006.png@01D777EB.FD03BEE0] 
  
[cid:image007.png@01D777EB.FD03BEE0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] saved searches and export to json problem

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Giacinto,

I’m able to replicate two issues you reported.
I will check with my coworkers and provide you a feedback.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image002.png@01D777EF.1422E800]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image003.jpg@01D777EF.1422E800] 
[cid:image004.png@01D777EF.1422E800]   
[cid:image005.png@01D777EF.1422E800]   
[cid:image006.png@01D777EF.1422E800] 
  
[cid:image007.png@01D777EF.1422E800] 
  
[cid:image008.png@01D777EF.1422E800] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] mysql cluster always lock table

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

I never seen that before.
Your cluster is certainly in a bad state.
Take a look at following section in our Cluster Guide [1]

[1] 
https://www.packetfence.org/doc/PacketFence_Clustering_Guide.html#_troubleshooting_a_cluster

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image002.png@01D777ED.008EC4F0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image003.jpg@01D777ED.008EC4F0] 
[cid:image004.png@01D777ED.008EC4F0]   
[cid:image005.png@01D777ED.008EC4F0]   
[cid:image006.png@01D777ED.008EC4F0] 
  
[cid:image007.png@01D777ED.008EC4F0] 
  
[cid:image008.png@01D777ED.008EC4F0] 




___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] no Disconnect-ACK auth status

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

What do you want exactly ?
If you want to see Disconnect-ACK, you need to deauthenticate using RADIUS if 
your network device supports it.
If you want to deauthenticate using SNMP, you will never see any messages in 
Audit menu related to deauthentication. You will need to look directly in logs.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7772F.F62A8930]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7772F.F62A8930] 
[cid:image003.png@01D7772F.F62A8930]   
[cid:image004.png@01D7772F.F62A8930]   
[cid:image005.png@01D7772F.F62A8930] 
  
[cid:image006.png@01D7772F.F62A8930] 
  
[cid:image007.png@01D7772F.F62A8930] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] no Disconnect-ACK auth status

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

In that case, you will not see Disconnect-ACK messages because you need to use 
RADIUS to deauthenticate.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7772B.AB3FE770]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7772B.AB3FE770] 
[cid:image003.png@01D7772B.AB3FE770]   
[cid:image004.png@01D7772B.AB3FE770]   
[cid:image005.png@01D7772B.AB3FE770] 
  
[cid:image006.png@01D7772B.AB3FE770] 
  
[cid:image007.png@01D7772B.AB3FE770] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] R: R: R: Login invalid, local user create from sposor access

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Stefano,

> After the access by approve from sponsor, the guest user receive a e-mail 
> whit the account create after the login, but this account whit the e-mail 
> address of the guest user doesn't work

I understand that you want to use account created at this step but you didn’t 
answer my previous question:

Once your guest has received an email, you want him to connect on 
SAT-WIFI_Guest using 802.1X ?

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77717.839B5FB0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D77717.839B5FB0] 
[cid:image003.png@01D77717.839B5FB0]   
[cid:image004.png@01D77717.839B5FB0]   
[cid:image005.png@01D77717.839B5FB0] 
  
[cid:image006.png@01D77717.839B5FB0] 
  
[cid:image007.png@01D77717.839B5FB0] 





___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] VLAN Enforcement with MAC address authentication

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Thapeli,

According to radius.log, it looks like you have a SSL issue.
Your node needs to have CA certificate that signed PacketFence RADIUS 
certificate in its certificate store or directly PacketFence RADIUS certificate.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77710.2615BD60]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D77710.2615BD60] 
[cid:image003.png@01D77710.2615BD60]   
[cid:image004.png@01D77710.2615BD60]   
[cid:image005.png@01D77710.2615BD60] 
  
[cid:image006.png@01D77710.2615BD60] 
  
[cid:image007.png@01D77710.2615BD60] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Editing Email template

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

The template you are editing is not used during a sponsor workflow.
You need to edit emails-guest_sponsor_* templates.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77712.577D8700]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D77712.577D8700] 
[cid:image003.png@01D77712.577D8700]   
[cid:image004.png@01D77712.577D8700]   
[cid:image005.png@01D77712.577D8700] 
  
[cid:image006.png@01D77712.577D8700] 
  
[cid:image007.png@01D77712.577D8700] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] no Disconnect-ACK auth status

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

PacketFence is trying to use SNMP to deregister your device because it seems 
that:
1. you don’t define a Deauthentication method different than SNMP in your 
PacketFence switch configuration
or
2. switch module used only support deauthentication using SNMP

If 1 is true, you need to configure correctly SNMP on switch and PacketFence 
side. PacketFence will need a community write to deauthenticate.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77713.195EDBD0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D77713.195EDBD0] 
[cid:image003.png@01D77713.195EDBD0]   
[cid:image004.png@01D77713.195EDBD0]   
[cid:image005.png@01D77713.195EDBD0] 
  
[cid:image006.png@01D77713.195EDBD0] 
  
[cid:image007.png@01D77713.195EDBD0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Errors on PacketFence

[Quiniou-Briand, Nicolas via PacketFence-users]

> I currently just run an instance of Packetfence not yet a cluster.

In that case, you should not have any warning in dashboard related to 
haproxy-db because this service is not used on a standalone instance.
You probably enable this service at some point.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77711.09BD9DD0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D77711.09BD9DD0] 
[cid:image003.png@01D77711.09BD9DD0]   
[cid:image004.png@01D77711.09BD9DD0]   
[cid:image005.png@01D77711.09BD9DD0] 
  
[cid:image006.png@01D77711.09BD9DD0] 
  
[cid:image007.png@01D77711.09BD9DD0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] VLAN Enforcement with MAC address authentication

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

In packetfence.log you provided, I didn’t see any RADIUS request processed.
Are you sure your PacketFence server received traffic from your switch ?

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image002.png@01D774D1.CA2CCEC0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image003.jpg@01D774D1.CA2CCEC0] 
[cid:image004.png@01D774D1.CA2CCEC0]   
[cid:image005.png@01D774D1.CA2CCEC0]   
[cid:image006.png@01D774D1.CA2CCEC0] 
  
[cid:image007.png@01D774D1.CA2CCEC0] 
  
[cid:image008.png@01D774D1.CA2CCEC0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Trouble with PXE boot trying to disable PacketFence for one port

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Do you want to do 802.1X or MAC authentication on your switch port ?
If you configure your switchport to fallback to do 802.1X and fallback to MAC 
authentication, device should be able to do PXE if:
- device is registered in PacketFence DB
- fallback doesn’t exceed PXE timeout

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D774D2.909691E0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D774D2.909691E0] 
[cid:image003.png@01D774D2.909691E0]   
[cid:image004.png@01D774D2.909691E0]   
[cid:image005.png@01D774D2.909691E0] 
  
[cid:image006.png@01D774D2.909691E0] 
  
[cid:image007.png@01D774D2.909691E0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] return custom RADIUS attributes

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

You should be able to return HW-Exec-Privilege after you add it in 
/usr/share/freeradius/dictionary.huawei
Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D774D1.FC999730]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D774D1.FC999730] 
[cid:image003.png@01D774D1.FC999730]   
[cid:image004.png@01D774D1.FC999730]   
[cid:image005.png@01D774D1.FC999730] 
  
[cid:image006.png@01D774D1.FC999730] 
  
[cid:image007.png@01D774D1.FC999730] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] return custom RADIUS attributes

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Did you test with current RADIUS attribute (Huawei-Exec-Privilege = 1) ?

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D774B6.FF005240]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D774B6.FF005240] 
[cid:image003.png@01D774B6.FF005240]   
[cid:image004.png@01D774B6.FF005240]   
[cid:image005.png@01D774B6.FF005240] 
  
[cid:image006.png@01D774B6.FF005240] 
  
[cid:image007.png@01D774B6.FF005240] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] inline captive-portal

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

I don't think you need to add "portal" daemon to an inline interface. This is 
implicit.
You should be able to reach captive portal when you are on an inline network.
Be sure to restart following services after you configured your inline 
interface:
- packetfence-pfacct
- packetfence-haproxy-portal
- packetfence-iptables
- packetfence-pfdhcp
- packetfence-pfdns
- packetfence-pfdhcp-listener

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D774B1.EC014AA0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D774B1.EC014AA0] 
[cid:image003.png@01D774B1.EC014AA0]   
[cid:image004.png@01D774B1.EC014AA0]   
[cid:image005.png@01D774B1.EC014AA0] 
  
[cid:image006.png@01D774B1.EC014AA0] 
  
[cid:image007.png@01D774B1.EC014AA0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Tenant drop down show in web interface after upgrade from 8.1. 10.3

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

> No both web interface and api users are admin but the password is not 'admin'

1. What do you mean by web interface and API users ?
2. Did you define a webservice user and password in `pf.conf` under 
[webservices] section ? If yes, are these credentials identical to admin 
credentials to login on web admin ? If yes, you need to change password for 
admin user used to reach web admin and it will solve your issue.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D774B3.13DF2C80]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D774B3.13DF2C80] 
[cid:image003.png@01D774B3.13DF2C80]   
[cid:image004.png@01D774B3.13DF2C80]   
[cid:image005.png@01D774B3.13DF2C80] 
  
[cid:image006.png@01D774B3.13DF2C80] 
  
[cid:image007.png@01D774B3.13DF2C80] 


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Tenant drop down show in web interface after upgrade from 8.1. 10.3

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Cristian,

It could be related to [1].
Is it possible that you use default admin password: 'admin' ?

[1] https://github.com/inverse-inc/packetfence/issues/5545

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77499.5A77FBF0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D77499.5A77FBF0] 
[cid:image003.png@01D77499.5A77FBF0]   
[cid:image004.png@01D77499.5A77FBF0]   
[cid:image005.png@01D77499.5A77FBF0] 
  
[cid:image006.png@01D77499.5A77FBF0] 
  
[cid:image007.png@01D77499.5A77FBF0] 


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Tenant drop down show in web interface after upgrade from 8.1. 10.3

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Cristian,

There is something wrong in the return of the API call.
On a 10.3 setup, you should have:
#v+
tenant: {name: "default", portal_domain_name: "", domain_name: "", id: 1}
domain_name: ""
id: 1
name: "default"
portal_domain_name: ""
username: "admin"
#v-

Could you provide output of following commands:
#v+
rpm -qa|grep packetfence
ls -rtl /usr/local/pf/.patches/
ls -rtl /usr/local/pf/html/pfappserver/root/
ls -rtl /usr/local/pf/html/pfappserver/root/dist/js
#v-

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7734E.9A275030]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7734E.9A275030] 
[cid:image003.png@01D7734E.9A275030]   
[cid:image004.png@01D7734E.9A275030]   
[cid:image005.png@01D7734E.9A275030] 
  
[cid:image006.png@01D7734E.9A275030] 
  
[cid:image007.png@01D7734E.9A275030] 


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Backup failed when MariaDB-Backup application is used

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

I opened following issue [1] and fixed it in [2].

Fix will be available through maintenance patches when following pipeline 
finished [3].

You will also have to apply manually new privileges manually to ‘pf’ user using 
following instructions [4].

Good luck!

[1] https://github.com/inverse-inc/packetfence/issues/6424
[2] https://github.com/inverse-inc/packetfence/pull/6425
[3] https://gitlab.com/inverse-inc/packetfence/-/pipelines/333081831
[4] 
https://github.com/inverse-inc/packetfence/blob/668c4c65ab29fc75c69c2e506fa7eacca5548dc6/docs/installation/performance_optimizations.asciidoc#using-mariadb-backup

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77324.C42A4380]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D77324.C42A4380] 
[cid:image003.png@01D77324.C42A4380]   
[cid:image004.png@01D77324.C42A4380]   
[cid:image005.png@01D77324.C42A4380] 
  
[cid:image006.png@01D77324.C42A4380] 
  
[cid:image007.png@01D77324.C42A4380] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Backup failed when MariaDB-Backup application is used

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

I’m able to replicate issue.
I’m preparing a fix for that.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77320.4699EF00]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D77320.4699EF00] 
[cid:image003.png@01D77320.4699EF00]   
[cid:image004.png@01D77320.4699EF00]   
[cid:image005.png@01D77320.4699EF00] 
  
[cid:image006.png@01D77320.4699EF00] 
  
[cid:image007.png@01D77320.4699EF00] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Tenant drop down show in web interface after upgrade from 8.1. 10.3

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Cristian,

We don't have this issue on 10.3 with maintenance patches and you said you 
don't have this issue in a similar upgrade.
So I think there is something specific for this instance.

1. Did you manage tenants on this instance ?
2. Could you paste here results of following commands:

#v+
mysql -u $(perl -I/usr/local/pf/lib -Mpf::db -e 'print 
$pf::db::DB_Config->{user}') -p$(perl -I/usr/local/pf/lib -Mpf::db -e 'print 
$pf::db::DB_Config->{pass}') -h $(perl -I/usr/local/pf/lib -Mpf::db -e 'print 
$pf::db::DB_Config->{host}') pf
select tenant_id from password where pid='admin';
select * from tenant;
#v-

Please compare with your similar upgrade if you see some differences.

Also you can look at web browser console when you login on PacketFence webadmin 
to check response body of /api/v1/token_info call.
You should see which tenant has been assigned.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7731D.C171DE70]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7731D.C171DE70] 
[cid:image003.png@01D7731D.C171DE70]   
[cid:image004.png@01D7731D.C171DE70]   
[cid:image005.png@01D7731D.C171DE70] 
  
[cid:image006.png@01D7731D.C171DE70] 
  
[cid:image007.png@01D7731D.C171DE70] 


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Tenant drop down show in web interface after upgrade from 8.1. 10.3

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Cristian,

Could you try to clear your cache or with another browser ? I suspect a cache 
issue because the file dygraph.min.js.map doesn't exist on 10.3.
Also using web browser console, you should be able to see which files your web 
browser is calling using "Network" tab under wbe browser console.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D77325.920A1F00]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D77325.920A1F00] 
[cid:image003.png@01D77325.920A1F00]   
[cid:image004.png@01D77325.920A1F00]   
[cid:image005.png@01D77325.920A1F00] 
  
[cid:image006.png@01D77325.920A1F00] 
  
[cid:image007.png@01D77325.920A1F00] 


___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Backup failed when MariaDB-Backup application is used

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Arun,

How are you doing your backup with MariaDB-backup ?
Please provide a Minimal, Complete and Verifiable example [1]

[1] https://stackoverflow.com/help/minimal-reproducible-example

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7723A.21655E40]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7723A.21655E40] 
[cid:image003.png@01D7723A.21655E40]   
[cid:image004.png@01D7723A.21655E40]   
[cid:image005.png@01D7723A.21655E40] 
  
[cid:image006.png@01D7723A.21655E40] 
  
[cid:image007.png@01D7723A.21655E40] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Convert Cluster to Standalone

[Quiniou-Briand, Nicolas via PacketFence-users]

On a fresh Debian 9 running 10.3, I don't have this issue.

> I'm wondering if that pf-release file is likely because we copied /conf 
> folder across from our old environment.

I think that is the root cause of your issue. This is certainly also the reason 
why httpadmindispatcher.conf is incorrect too.

I suggest you to copy only configuration files you modified.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D771B4.307A1C80]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D771B4.307A1C80] 
[cid:image003.png@01D771B4.307A1C80]   
[cid:image004.png@01D771B4.307A1C80]   
[cid:image005.png@01D771B4.307A1C80] 
  
[cid:image006.png@01D771B4.307A1C80] 
  
[cid:image007.png@01D771B4.307A1C80] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Convert Cluster to Standalone

[Quiniou-Briand, Nicolas via PacketFence-users]

If you can copy output of following commands here:
1. cat /usr/local/pf/conf/pf-release
2. dpkg -l | grep packetfence

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D771B3.5AFE2A10]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D771B3.5AFE2A10] 
[cid:image003.png@01D771B3.5AFE2A10]   
[cid:image004.png@01D771B3.5AFE2A10]   
[cid:image005.png@01D771B3.5AFE2A10] 
  
[cid:image006.png@01D771B3.5AFE2A10] 
  
[cid:image007.png@01D771B3.5AFE2A10] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Convert Cluster to Standalone

[Quiniou-Briand, Nicolas via PacketFence-users]

Hi Talan,

Your HTTP admin dispatcher is not the one provided with 10.3 version. You 
should have something like [1].
Are you sure you are running 10.3 ?

[1] 
https://github.com/inverse-inc/packetfence/blob/8fb1c23017b626992f8bb1bad71ea13aba012928/conf/caddy-services/httpadmindispatcher.conf.example

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D771B2.170D6470]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D771B2.170D6470] 
[cid:image003.png@01D771B2.170D6470]   
[cid:image004.png@01D771B2.170D6470]   
[cid:image005.png@01D771B2.170D6470] 
  
[cid:image006.png@01D771B2.170D6470] 
  
[cid:image007.png@01D771B2.170D6470] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Errors on PacketFence

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

You should look at state of packetfence-haproxy-db service on all your nodes 
using `systemctl status packetfence-haproxy-db`.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D771AB.BF9CF580]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D771AB.BF9CF580] 
[cid:image003.png@01D771AB.BF9CF580]   
[cid:image004.png@01D771AB.BF9CF580]   
[cid:image005.png@01D771AB.BF9CF580] 
  
[cid:image006.png@01D771AB.BF9CF580] 
  
[cid:image007.png@01D771AB.BF9CF580] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Fingerbank usage offline

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Peter,

I think you can:
1. remove API key and server
2. run: ` /usr/local/pf/bin/pfcmd service fingerbank-collector updatesystemd` 
(it should disable fingerbank-collector service)
3. stop fingerbank-collector

You should not see a lot of message in logs. A fix has been pushed in the past 
to avoid this.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D771A8.814FE420]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D771A8.814FE420] 
[cid:image003.png@01D771A8.814FE420]   
[cid:image004.png@01D771A8.814FE420]   
[cid:image005.png@01D771A8.814FE420] 
  
[cid:image006.png@01D771A8.814FE420] 
  
[cid:image007.png@01D771A8.814FE420] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Tenant drop down show in web interface after upgrade from 8.1. 10.3

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Cristian,

Could you confirm that you applied latest maintenance patches and restarted all 
services on your updated installation ?

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D771AB.EA8351E0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D771AB.EA8351E0] 
[cid:image003.png@01D771AB.EA8351E0]   
[cid:image004.png@01D771AB.EA8351E0]   
[cid:image005.png@01D771AB.EA8351E0] 
  
[cid:image006.png@01D771AB.EA8351E0] 
  
[cid:image007.png@01D771AB.EA8351E0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Convert Cluster to Standalone

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Talan,

Could you:
0. packetfence version
1. send me your packetfence-haproxy-admin configuration 
(/usr/local/pf/var/conf/haproxy-admin.conf)
2. send me your httpadmindispatcher configuration (/usr/local/pf/ 
conf/caddy-services/httpadmindispatcher.conf)
3. output of:
* ls -l /usr/local/pf/html/pfappserver/root
* ls -l /usr/local/pf/html/pfappserver/root/dist/

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D771AB.0CB19570]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D771AB.0CB19570] 
[cid:image003.png@01D771AB.0CB19570]   
[cid:image004.png@01D771AB.0CB19570]   
[cid:image005.png@01D771AB.0CB19570] 
  
[cid:image006.png@01D771AB.0CB19570] 
  
[cid:image007.png@01D771AB.0CB19570] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] endpoint remain unreg

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

I’m not able to understand your issue description.

Could you try to rephrase by using two dedicated sections:
- current behavior
- expected behavior

?

Also check /usr/local/pf/logs/packetfence.log for a specific MAC, it will help 
you understand what’s going on.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76E6F.EB3A2300]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76E6F.EB3A2300] 
[cid:image003.png@01D76E6F.EB3A2300]   
[cid:image004.png@01D76E6F.EB3A2300]   
[cid:image005.png@01D76E6F.EB3A2300] 
  
[cid:image006.png@01D76E6F.EB3A2300] 
  
[cid:image007.png@01D76E6F.EB3A2300] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Fingerbank usage offline

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

It’s not possible to use Fingerbank offline.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76E71.06F70210]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76E71.06F70210] 
[cid:image003.png@01D76E71.06F70210]   
[cid:image004.png@01D76E71.06F70210]   
[cid:image005.png@01D76E71.06F70210] 
  
[cid:image006.png@01D76E71.06F70210] 
  
[cid:image007.png@01D76E71.06F70210] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] R: R: R: Login invalid, local user create from sposor access

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Thanks for configuration files.
First of all, you send authentication.conf files with passwords inside it. Not 
sure it was expected.

The way you configure connection profiles is diffcult to understand.
Once your guest has received an email, you want him to connect on 
SAT-WIFI_Guest using 802.1X ?
If yes, you need:
- to remove “network:172.25.255.0/24" on your connection profile filter
- to enable PacketFence local authentication for 802.1X (see [1])

If no, please give more details on what you want to achieve.

[1] 
https://www.packetfence.org/doc/PacketFence_Installation_Guide.html#_eap_local_user_authentication

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76E6F.2704A500]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76E6F.2704A500] 
[cid:image003.png@01D76E6F.2704A500]   
[cid:image004.png@01D76E6F.2704A500]   
[cid:image005.png@01D76E6F.2704A500] 
  
[cid:image006.png@01D76E6F.2704A500] 
  
[cid:image007.png@01D76E6F.2704A500] 




From: Stefano Motti 
Sent: Tuesday, June 29, 2021 2:22 PM
To: Quiniou-Briand, Nicolas ; Zammit, Ludovic 

Cc: packetfence-users@lists.sourceforge.net
Subject: R: [PacketFence-users] R: R: R: Login invalid, local user create from 
sposor access


>What do you mean here ? Where do you try to connect using account created ?
I Try to connect to the network, PF managed, whit the user created by Packet 
fence system when I login on sponsor mode. received the e-mail whit the 
credential, but this credential whit “@” don’t work.

Attach the config file you require.

Da: Quiniou-Briand, Nicolas mailto:nquin...@akamai.com>>
Inviato: lunedì 28 giugno 2021 14:01
A: 
packetfence-users@lists.sourceforge.net;
 Zammit, Ludovic mailto:luza...@akamai.com>>
Cc: Stefano Motti mailto:stefano.mo...@dastech.biz>>
Oggetto: RE: [PacketFence-users] R: R: R: Login invalid, local user create from 
sposor access

Hello Stefano,

> if I try to connect give me an error

What do you mean here ? Where do you try to connect using account created ?
Please provide:
- profiles.conf
- pf.conf
- authentication.conf

Be sure to remove all secrets from these files.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76E6F.2704A500]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76E6F.2704A500]
 [cid:image003.png@01D76E6F.2704A500] 

  [cid:image004.png@01D76E6F.2704A500] 

  [cid:image005.png@01D76E6F.2704A500] 

  [cid:image006.png@01D76E6F.2704A500] 

  [cid:image007.png@01D76E6F.2704A500] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Voip online/ offline status

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

If your device is shown as offline, it certainly mean an Accounting-Stop 
message has been send.

You can look in bandwidth_accounting table to see current state of records:
#v+
SELECT * from bandwidth_accounting where mac='PUT_YOUR_MAC_HERE '\G;
#v-

Also look in bandwidth_accounting_history.

Last seen field on node can also provide you some informations.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76E70.AA1A45C0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76E70.AA1A45C0] 
[cid:image003.png@01D76E70.AA1A45C0]   
[cid:image004.png@01D76E70.AA1A45C0]   
[cid:image005.png@01D76E70.AA1A45C0] 
  
[cid:image006.png@01D76E70.AA1A45C0] 
  
[cid:image007.png@01D76E70.AA1A45C0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Mysql error

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,



Be sure to apply maintenance patches [1] after package upgrades and before 
schema update.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76DB9.57B05430]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76DB9.57B05430] 
[cid:image003.png@01D76DB9.57B05430]   
[cid:image004.png@01D76DB9.57B05430]   
[cid:image005.png@01D76DB9.57B05430] 
  
[cid:image006.png@01D76DB9.57B05430] 
  
[cid:image007.png@01D76DB9.57B05430] 




___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Azure AD - MFA at registration

[Quiniou-Briand, Nicolas via PacketFence-users]

Issue fixed in maintenance/10.3

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76D7F.C0AA7630]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76D7F.C0AA7630] 
[cid:image003.png@01D76D7F.C0AA7630]   
[cid:image004.png@01D76D7F.C0AA7630]   
[cid:image005.png@01D76D7F.C0AA7630] 
  
[cid:image006.png@01D76D7F.C0AA7630] 
  
[cid:image007.png@01D76D7F.C0AA7630] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] 802.1x - You do not have permission to register a device with this username

[Quiniou-Briand, Nicolas via PacketFence-users]

I was able to replicate this issue: 
https://github.com/inverse-inc/packetfence/issues/6416

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76CF5.A63CAAA0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76CF5.A63CAAA0] 
[cid:image003.png@01D76CF5.A63CAAA0]   
[cid:image004.png@01D76CF5.A63CAAA0]   
[cid:image005.png@01D76CF5.A63CAAA0] 
  
[cid:image006.png@01D76CF5.A63CAAA0] 
  
[cid:image007.png@01D76CF5.A63CAAA0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Sponsor bases role setting for a guest

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Arun,

I don’t think we support this use case.

> Any alternate solution is welcome.

What you can do is to define several rules on your sponsor source OR define 
several sources which are used by specific portal modules depending on guests.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76C25.95AA8890]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76C25.95AA8890] 
[cid:image003.png@01D76C25.95AA8890]   
[cid:image004.png@01D76C25.95AA8890]   
[cid:image005.png@01D76C25.95AA8890] 
  
[cid:image006.png@01D76C25.95AA8890] 
  
[cid:image007.png@01D76C25.95AA8890] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Azure AD - MFA at registration

[Quiniou-Briand, Nicolas via PacketFence-users]

I opened following issue: https://github.com/inverse-inc/packetfence/issues/6410

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image004.png@01D76C29.2E55C1B0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image005.jpg@01D76C29.2E55C1B0] 
[cid:image006.png@01D76C29.2E55C1B0]   
[cid:image007.png@01D76C29.2E55C1B0]   
[cid:image008.png@01D76C29.2E55C1B0] 
  
[cid:image009.png@01D76C29.2E55C1B0] 
  
[cid:image010.png@01D76C29.2E55C1B0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] 802.1x - You do not have permission to register a device with this username

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello David,

> We would really like to get devices to unregister regularly, so that 
> fingerprinting is more accurate as they interact with the web server

You can also send a copy of traffic of these devices to Fingerbank collector 
using Span or RSpan method to avoid this.

I will try to replicate issue with "reuse_dot1x_credentials".

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76C26.AAB589A0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76C26.AAB589A0] 
[cid:image003.png@01D76C26.AAB589A0]   
[cid:image004.png@01D76C26.AAB589A0]   
[cid:image005.png@01D76C26.AAB589A0] 
  
[cid:image006.png@01D76C26.AAB589A0] 
  
[cid:image007.png@01D76C26.AAB589A0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Convert Cluster to Standalone

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Talan,

Could you try to apply latest maintenance patches [1] and restart all services ?

[1] 
https://www.packetfence.org/doc/PacketFence_Installation_Guide.html#_maintenance_patches

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76C27.2E7605D0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76C27.2E7605D0] 
[cid:image003.png@01D76C27.2E7605D0]   
[cid:image004.png@01D76C27.2E7605D0]   
[cid:image005.png@01D76C27.2E7605D0] 
  
[cid:image006.png@01D76C27.2E7605D0] 
  
[cid:image007.png@01D76C27.2E7605D0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] R: R: R: Login invalid, local user create from sposor access

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Stefano,

> if I try to connect give me an error

What do you mean here ? Where do you try to connect using account created ?
Please provide:
- profiles.conf
- pf.conf
- authentication.conf

Be sure to remove all secrets from these files.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76C26.1160C2B0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76C26.1160C2B0] 
[cid:image003.png@01D76C26.1160C2B0]   
[cid:image004.png@01D76C26.1160C2B0]   
[cid:image005.png@01D76C26.1160C2B0] 
  
[cid:image006.png@01D76C26.1160C2B0] 
  
[cid:image007.png@01D76C26.1160C2B0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] STUCK WITH HUB

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

We don’t recommend you to use hubs behind ports managed by PacketFence.
It could work but you will have unexpected behavior.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D769D0.6EC1FD00]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D769D0.6EC1FD00] 
[cid:image003.png@01D769D0.6EC1FD00]   
[cid:image004.png@01D769D0.6EC1FD00]   
[cid:image005.png@01D769D0.6EC1FD00] 
  
[cid:image006.png@01D769D0.6EC1FD00] 
  
[cid:image007.png@01D769D0.6EC1FD00] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Convert Cluster to Standalone

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Talan,

You should look at packetfence-haproxy-admin service.
Check:
- packetfence-haproxy-admin service status and journal (systemctl status 
packetfence-haproxy-admin and journalctl -u packetfence-haproxy-admin -xe)
- packetfence-haproxy-admin configuration 
(/usr/local/pf/var/conf/haproxy-admin.conf)

In configuration, you should find a frontend like "frontend 
admin-https-X.X.X.X" with X.X.X.X your management IP address.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D769CF.A812CC70]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D769CF.A812CC70] 
[cid:image003.png@01D769CF.A812CC70]   
[cid:image004.png@01D769CF.A812CC70]   
[cid:image005.png@01D769CF.A812CC70] 
  
[cid:image006.png@01D769CF.A812CC70] 
  
[cid:image007.png@01D769CF.A812CC70] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Multiple active-active HA EC2 instances + RDS DB backend

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Steve,

To modify Ludovic’s answer slightly: we don’t officially support external 
databases but its possible to do it when done meticulously by someone who is 
comfortable with Linux system administration

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D769CD.BC5AFA10]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D769CD.BC5AFA10] 
[cid:image003.png@01D769CD.BC5AFA10]   
[cid:image004.png@01D769CD.BC5AFA10]   
[cid:image005.png@01D769CD.BC5AFA10] 
  
[cid:image006.png@01D769CD.BC5AFA10] 
  
[cid:image007.png@01D769CD.BC5AFA10] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] 802.1x - You do not have permission to register a device with this username

[Quiniou-Briand, Nicolas via PacketFence-users]

Hi David,

1. Based on latest emails, it looks like issue is not present when doing MAC 
authentication ?
2. Could you make a new test on 802.1X profile with reuse_dot1x_credentials 
setting disabled and autoregister setting enabled ?

Important: with autoregister setting enabled, if authentication and 
authorization steps succeeded, nodes will be automatically registered. In your 
case, it means that users will not have to go on captive portal, they will be 
directly move on correct VLAN.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D769CF.2D11D890]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D769CF.2D11D890] 
[cid:image003.png@01D769CF.2D11D890]   
[cid:image004.png@01D769CF.2D11D890]   
[cid:image005.png@01D769CF.2D11D890] 
  
[cid:image006.png@01D769CF.2D11D890] 
  
[cid:image007.png@01D769CF.2D11D890] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] (no subject)

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

> It is not help

I disagree, error is different now.

New error means you don’t have a valid locationlog. Try to reauthenticate your 
device, you should see your locationlog in “Location” tab of your device.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76905.9051EC80]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76905.9051EC80] 
[cid:image003.png@01D76905.9051EC80]   
[cid:image004.png@01D76905.9051EC80]   
[cid:image005.png@01D76905.9051EC80] 
  
[cid:image006.png@01D76905.9051EC80] 
  
[cid:image007.png@01D76905.9051EC80] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] 802.1x - You do not have permission to register a device with this username

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello David,

To solve this issue, I suggest we focus on a simple use case like a user doing 
Mac authentication which try to register a device on captive portal.
You can easily test using "Preview" on one of your connection profile from web 
admin: it will try to register a test device.

Could you try to register on captive portal with an AD account which is **not** 
present in `person` table ? Then provide packetfence.log during registration 
process.


Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76903.01AE0880]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76903.01AE0880] 
[cid:image003.png@01D76903.01AE0880]   
[cid:image004.png@01D76903.01AE0880]   
[cid:image005.png@01D76903.01AE0880] 
  
[cid:image006.png@01D76903.01AE0880] 
  
[cid:image007.png@01D76903.01AE0880] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] (no subject)

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Everything looks ok from DB side.
1. Do you see some specific logs for packetfence-pfperl-api service using 
`journalctl -xe -u packetfence-pfperl-api` ?
2. Could you try to restart this service and see if it’s better ?

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76901.BB172920]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76901.BB172920] 
[cid:image003.png@01D76901.BB172920]   
[cid:image004.png@01D76901.BB172920]   
[cid:image005.png@01D76901.BB172920] 
  
[cid:image006.png@01D76901.BB172920] 
  
[cid:image007.png@01D76901.BB172920] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Firewall SSO failure

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

> I made the changes you suggested, but I noticed that it made no attempt to 
> update the firewall when I left the network fields empty

1. Did you ensure that you received a DHCP request for your network ? Could you 
check using tcpdump that PacketFence see DHCP traffic ?
2. I see in logs provided that you are doing inline enforcement. Did you try to 
enable Firewall SSO on a production network (not controlled by PacketFence) ?

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7682D.5BB38E30]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7682D.5BB38E30] 
[cid:image003.png@01D7682D.5BB38E30]   
[cid:image004.png@01D7682D.5BB38E30]   
[cid:image005.png@01D7682D.5BB38E30] 
  
[cid:image006.png@01D7682D.5BB38E30] 
  
[cid:image007.png@01D7682D.5BB38E30] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] (no subject)

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

1. Could run following commands in CLI (you need MariaDB **root** password):

#v+
mysql -u root -p -e "show variables where Variable_name='version';"
mysql -u root -p -e "select User,Password,Host from mysql.user; "
journalctl -u packetfence-mariadb -xe
#v-
and paste output here ?

2. Which PacketFence version are you using?

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76838.91344C60]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76838.91344C60] 
[cid:image003.png@01D76838.91344C60]   
[cid:image004.png@01D76838.91344C60]   
[cid:image005.png@01D76838.91344C60] 
  
[cid:image006.png@01D76838.91344C60] 
  
[cid:image007.png@01D76838.91344C60] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Convert Cluster to Standalone

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

The best option is to:
1. install a new standalone PacketFence (10.3.0) server without going through 
configurator
2. create database using schema of your **current** PacketFence installation
3. apply schema updates until 10.3.0 version
4. import your current configuration to your new server
5. apply all configuration migration between two versions
6. move VIP of you current cluster to your new server
7. start services

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image002.png@01D766A6.861B9D80]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image003.jpg@01D766A6.861B9D80] 
[cid:image004.png@01D766A6.861B9D80]   
[cid:image005.png@01D766A6.861B9D80]   
[cid:image006.png@01D766A6.861B9D80] 
  
[cid:image007.png@01D766A6.861B9D80] 
  
[cid:image008.png@01D766A6.861B9D80] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] (no subject)

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

All services looks started.
Could you run this command:

#v+
mysql -u $(perl -I/usr/local/pf/lib -Mpf::db -e 'print 
$pf::db::DB_Config->{user}') -p$(perl -I/usr/local/pf/lib -Mpf::db -e 'print 
$pf::db::DB_Config->{pass}') -h $(perl -I/usr/local/pf/lib -Mpf::db -e 'print 
$pf::db::DB_Config->{host}') pf
#v-

It should connect you to MariaDB using login and password used by PacketFence.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D766A1.4266CC40]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D766A1.4266CC40] 
[cid:image003.png@01D766A1.4266CC40]   
[cid:image004.png@01D766A1.4266CC40]   
[cid:image005.png@01D766A1.4266CC40] 
  
[cid:image006.png@01D766A1.4266CC40] 
  
[cid:image007.png@01D766A1.4266CC40] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] HTTP API - Get all Nodes with Role

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Using /api/v1/nodes, you can get role of nodes in `category_id` in the form of:

#v+
"category_id": "2",
#v-

Then you can get mapping using /api/v1/node_categories:

#v+
  {
[..]
"category_id": "2",
   "name": "guest",
[..]
},
#v-

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D766A2.6D4766D0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D766A2.6D4766D0] 
[cid:image003.png@01D766A2.6D4766D0]   
[cid:image004.png@01D766A2.6D4766D0]   
[cid:image005.png@01D766A2.6D4766D0] 
  
[cid:image006.png@01D766A2.6D4766D0] 
  
[cid:image007.png@01D766A2.6D4766D0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Firewall SSO failure

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

I did another test today with a basic configuration.
I’m able to send firewall SSO updates using pfsso if my PacketFence server 
received a DHCP request.

I think your initial issue is with pfqueue and doesn’t reach pfsso.

Could you try:
- to remove cache_updates setting
- to specify a valid role
- to leave network fields empty

Also, could you enable debug mode in pfqueue by replacing following line in 
/usr/local/pf/conf/log.conf.d/pfqueue.conf:

#v+
log4perl.rootLogger = INFO, QUEUE_SYSLOG
#v-

with:

#v+
log4perl.rootLogger = DEBUG, QUEUE_SYSLOG
#v-

You should see more interesting informations in packetfence.log

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76692.03D8B0B0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76692.03D8B0B0] 
[cid:image003.png@01D76692.03D8B0B0]   
[cid:image004.png@01D76692.03D8B0B0]   
[cid:image005.png@01D76692.03D8B0B0] 
  
[cid:image006.png@01D76692.03D8B0B0] 
  
[cid:image007.png@01D76692.03D8B0B0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] (no subject)

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

It looks like you have an issue with your database.
pfperl-api is not able to connect to database.

Check PacketFence general status using following command: 
/usr/local/pf/bin/pfcmd service pf status

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76685.960D3350]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76685.960D3350] 
[cid:image003.png@01D76685.960D3350]   
[cid:image004.png@01D76685.960D3350]   
[cid:image005.png@01D76685.960D3350] 
  
[cid:image006.png@01D76685.960D3350] 
  
[cid:image007.png@01D76685.960D3350] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Ad-Join in CLI

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Lucas,



Are you trying to join your PacketFence server directly to domain ?

FYI, when using PacketFence web admin, we create chroot for each domain. Domain 
join is done inside chroot.

I'm not sure joining domain like this will work because all codebase related to 
domain management rely on chroots.

I see some options like:

- active_directory_os_join_check_bypass

- disable_pf_domain_auth



in pf.conf.defaults but I'm not sure it will work.

Otherwise, if you want to join domain using CLI, you can use:
#v+
net ads join -s /etc/samba/domain.conf -U user:password
#v-

Regarding IRC support, as mentioned on PacketFence website, we recommend you to 
use mailing-list.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76686.99DE6A20]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76686.99DE6A20] 
[cid:image003.png@01D76686.99DE6A20]   
[cid:image004.png@01D76686.99DE6A20]   
[cid:image005.png@01D76686.99DE6A20] 
  
[cid:image006.png@01D76686.99DE6A20] 
  
[cid:image007.png@01D76686.99DE6A20] 






___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] 802.1x Authentication produces REST-API Timeout

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Issue is caused by:

> Jun 14 15:40:07 packetfence packetfence_httpd.aaa: httpd.aaa(2311) ERROR: 
> [mac:f8:ca:b8:32:c7:fe] error creating SNMP v2c read connection to : 
> No response from remote host "" (pf::Switch::connectRead)

SNMP needs to work between PacketFence cluster (each physical IP) and your 
network devices.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D761B7.35465470]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D761B7.35465470] 
[cid:image003.png@01D761B7.35465470]   
[cid:image004.png@01D761B7.35465470]   
[cid:image005.png@01D761B7.35465470] 
  
[cid:image006.png@01D761B7.35465470] 
  
[cid:image007.png@01D761B7.35465470] 




___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] How to set switch-port filer in connection profile

[Quiniou-Briand, Nicolas via PacketFence-users]

Be careful with filter on “Port”.
It should match what you have in packetfence.log on line “handling radius autz 
request [..] port => ” for your RADIUS request.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D7613B.665525E0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D7613B.665525E0] 
[cid:image003.png@01D7613B.665525E0]   
[cid:image004.png@01D7613B.665525E0]   
[cid:image005.png@01D7613B.665525E0] 
  
[cid:image006.png@01D7613B.665525E0] 
  
[cid:image007.png@01D7613B.665525E0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] How to set switch-port filer in connection profile

[Quiniou-Briand, Nicolas via PacketFence-users]

> So I wanted to know which option should be used in 10.3.0?

It should be “Port”.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76137.0A90DB40]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76137.0A90DB40] 
[cid:image003.png@01D76137.0A90DB40]   
[cid:image004.png@01D76137.0A90DB40]   
[cid:image005.png@01D76137.0A90DB40] 
  
[cid:image006.png@01D76137.0A90DB40] 
  
[cid:image007.png@01D76137.0A90DB40] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] How to set switch-port filer in connection profile

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Arun,

1. Which PacketFence version are you using ?

Be sure to apply maintenance patches [1] because several bugs have been 
identified related to this usage:
a. https://github.com/inverse-inc/packetfence/issues/5632
b. https://github.com/inverse-inc/packetfence/issues/6065

b. has been fixed for 10.3. You can look at example in the issue.

[1] 
https://www.packetfence.org/doc/PacketFence_Installation_Guide.html#_maintenance_patches

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76126.64462890]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76126.64462890] 
[cid:image003.png@01D76126.64462890]   
[cid:image004.png@01D76126.64462890]   
[cid:image005.png@01D76126.64462890] 
  
[cid:image006.png@01D76126.64462890] 
  
[cid:image007.png@01D76126.64462890] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Question regarding CLI Access for Avaya/Nortel/Extreme ERS switches

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello Chris,

> My question is about how I would add it?

You normally just need to add two functions in your .pm file:
- returnAuthorizeWrite (to handle read/write access)
- returnAuthorizeRead (to handle read-only access)

See Generic switch module [1] as an example.

[1] 
https://github.com/inverse-inc/packetfence/blob/268dd8ce5812e0daf8e83e3fcddd502b1037665a/lib/pf/Switch/Generic.pm

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image005.png@01D76125.BDC864B0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image006.jpg@01D76125.BDC864B0] 
[cid:image007.png@01D76125.BDC864B0]   
[cid:image008.png@01D76125.BDC864B0]   
[cid:image009.png@01D76125.BDC864B0] 
  
[cid:image010.png@01D76125.BDC864B0] 
  
[cid:image011.png@01D76125.BDC864B0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] PF 10.0.2 / Issues with 802.1x Certificate revocation needs reboot of PF for blocking access

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,



> - Once a Client has been supplied with certificate, it get registered on the 
> NW without problems but when we try to revoke the certificate, the access 
> persists until the PacketFence Server reboots (which is not a viable solution 
> for revoking access). We've also tried to restart Radius and PKI services, 
> without success



1. Did you apply maintenance patches [1] on your setup ?

2. Could you post here content of /usr/local/pf/conf/radiusd/ocsp.conf ?



> - When a Client without a certificate plugs into the access port at the 
> switch, it stays in mode "authenticating" without the administrator seeing 
> any indication of an access request (no log entry with flag "rejected" in 
> Auditing tab)



3. What do you see on switch side ? What do you see in 
/usr/local/pf/logs/radius.log ?

[1] 
https://www.packetfence.org/doc/PacketFence_Installation_Guide.html#_maintenance_patches

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D76103.1508BF90]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D76103.1508BF90] 
[cid:image003.png@01D76103.1508BF90]   
[cid:image004.png@01D76103.1508BF90]   
[cid:image005.png@01D76103.1508BF90] 
  
[cid:image006.png@01D76103.1508BF90] 
  
[cid:image007.png@01D76103.1508BF90] 




___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Firewall SSO failure

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

You can try to:
* remove any networks defined: all networks will match
* add a network which matched DHCP subnet of UoC-Guest users

If you specify something and it doesn’t match, PacketFence will not send SSO 
update.

Could you also to try to switch log level from INFO to DEBUG in 
/usr/local/pf/conf/caddy-services/pfsso.conf ? Once done, restart 
packetfence-pfsso service.


Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D75DFF.06520080]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D75DFF.06520080] 
[cid:image003.png@01D75DFF.06520080]   
[cid:image004.png@01D75DFF.06520080]   
[cid:image005.png@01D75DFF.06520080] 
  
[cid:image006.png@01D75DFF.06520080] 
  
[cid:image007.png@01D75DFF.06520080] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Firewall SSO failure

[Quiniou-Briand, Nicolas via PacketFence-users]

You should specify a valid “networks” option.

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D75D3C.61E88BD0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D75D3C.61E88BD0] 
[cid:image003.png@01D75D3C.61E88BD0]   
[cid:image004.png@01D75D3C.61E88BD0]   
[cid:image005.png@01D75D3C.61E88BD0] 
  
[cid:image006.png@01D75D3C.61E88BD0] 
  
[cid:image007.png@01D75D3C.61E88BD0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] 1024 Lets-Encrypt key

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

Could you tell us how we can replicate this issue ?

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D75D3B.86186BC0]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D75D3B.86186BC0] 
[cid:image003.png@01D75D3B.86186BC0]   
[cid:image004.png@01D75D3B.86186BC0]   
[cid:image005.png@01D75D3B.86186BC0] 
  
[cid:image006.png@01D75D3B.86186BC0] 
  
[cid:image007.png@01D75D3B.86186BC0] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Firewall SSO failure

[Quiniou-Briand, Nicolas via PacketFence-users]

Hello,

1. Could you provide content of firewall_sso.conf with credentials redacted ?
2. What is your Palo Alto firewall and version ?

Nicolas Quiniou-Briand
Product Support Engineer

[cid:image001.png@01D75D3A.A6B7F900]


Office: +33156696210

Akamai Technologies
145 Broadway
Cambridge, MA 02142


Connect with Us:

[cid:image002.jpg@01D75D3A.A6B7F900] 
[cid:image003.png@01D75D3A.A6B7F900]   
[cid:image004.png@01D75D3A.A6B7F900]   
[cid:image005.png@01D75D3A.A6B7F900] 
  
[cid:image006.png@01D75D3A.A6B7F900] 
  
[cid:image007.png@01D75D3A.A6B7F900] 



___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users