Re: [PacketFence-users] PF 7.3 - Problem with Device Registration - caught exception

2017-11-10 Thread Pedersen Michel via PacketFence-users 
Hi Fabrice,

I had created a device registration profile and assigned it to my connection 
profile. What I didn't think of was that since my connection profile is 
specific for the SSID's I use it with. I had to add the device registration 
profile to the default profile as well so it would take effect on the /status 
page when accessed from the local wired network..

Works great now, thank you very much for the assistance.

Kind regards
Michel
Fra: Fabrice Durand via PacketFence-users 
[mailto:packetfence-users@lists.sourceforge.net]
Sendt: 9. november 2017 14:54
Til: packetfence-users@lists.sourceforge.net
Kopi: Fabrice Durand 
Emne: Re: [PacketFence-users] PF 7.3 - Problem with Device Registration - 
caught exception


Hello Michel,

did you define a device registration profile and did you assign it to your 
connection profile ?

In 7.3 you can create multiples connection profile and assign one of them to a 
connection profile.

Regards

Fabrice

Le 2017-11-09 à 01:20, Pedersen Michel via PacketFence-users a écrit :
Hello,

We're trying to use the self-service device registration in the portal (where 
the user logs to see his/her devices and then can manually register additional 
devices).
In PF 7.2 this worked fine but after upgrading til 7.3 this stops working with 
the following error:

Caught exception in captiveportal::Controller::DeviceRegistration->registerNode 
"Can't use an undefined value as an ARRAY reference at 
/usr/local/pf/html/captive-portal/lib/captiveportal/PacketFence/Controller/DeviceRegistration.pm
 line 221."

I've tried setting up a clean install of PF 7.3 on another server, but I get 
the same error there, so I don't think it has anything to do with the upgrade 
from 7.2 -> 7.3 but something in 7.3 itself.

Pf-maint.pl has been run to fetch any available patches but unfortunately this 
error seems to persist.

Packetfence.log throws up the following errors at the time of the manual device 
registration (146.2.193.12 is PC that is logging in to PF to do the manual 
device registration):

Nov  9 07:15:25 svvtportal01 packetfence_httpd.portal: httpd.portal(96710) 
ERROR: [mac:unknown] Can't bind : IO::Socket::INET: connect: Connection refused
(pf::ip4log::_get_lease_from_omapi)
Nov  9 07:15:25 svvtportal01 packetfence_httpd.portal: httpd.portal(96710) 
WARN: [mac:unknown] Unable to match MAC address to IP '146.2.193.12' 
(pf::ip4log::ip2mac)
Nov  9 07:15:25 svvtportal01 packetfence_httpd.portal: httpd.portal(96710) 
ERROR: [mac:unknown] Can't bind : IO::Socket::INET: connect: Connection refused
(pf::ip4log::_get_lease_from_omapi)
Nov  9 07:15:25 svvtportal01 packetfence_httpd.portal: httpd.portal(96710) 
WARN: [mac:unknown] Unable to match MAC address to IP '146.2.193.12' 
(pf::ip4log::ip2mac)
Nov  9 07:15:25 svvtportal01 packetfence_httpd.portal: httpd.portal(96710) 
ERROR: [mac:0] Can't bind : IO::Socket::INET: connect: Connection refused
(pf::ip4log::_get_lease_from_omapi)
Nov  9 07:15:25 svvtportal01 packetfence_httpd.portal: httpd.portal(96710) 
WARN: [mac:0] Unable to match MAC address to IP '146.2.193.12' 
(pf::ip4log::ip2mac)
Nov  9 07:15:25 svvtportal01 packetfence_httpd.portal: httpd.portal(96710) 
ERROR: [mac:0] Can't bind : IO::Socket::INET: connect: Connection refused
(pf::ip4log::_get_lease_from_omapi)
Nov  9 07:15:25 svvtportal01 packetfence_httpd.portal: httpd.portal(96710) 
WARN: [mac:0] Unable to match MAC address to IP '146.2.193.12' 
(pf::ip4log::ip2mac)
Nov  9 07:15:25 svvtportal01 packetfence_httpd.portal: httpd.portal(96710) 
INFO: [mac:0] Instantiate profile default 
(pf::Connection::ProfileFactory::_from_profile)
Nov  9 07:15:25 svvtportal01 packetfence_httpd.portal: httpd.portal(96710) 
ERROR: [mac:0] Caught exception in 
captiveportal::Controller::DeviceRegistration->registerNode "Can't use an 
undefined value as an ARRAY reference at /usr/local/pf
/html/captive-portal/lib/captiveportal/PacketFence/Controller/DeviceRegistration.pm
 line 221." (captiveportal::PacketFence::Controller::Root::end)
Nov  9 07:15:25 svvtportal01 pfqueue: pfqueue(96806) INFO: [mac:unknown] 
violation not added, MAC 0 is invalid! trigger internal::new_dhcp_info 
(pf::violation::violation_trigger)

I'm hoping that this is something that can be fixed easily as it's currently 
stopping me from putting PF into production.

Best regards
Michel Pedersen

Norwegian Public Roads Administration
Postal address: Statens vegvesen Vegdirektoratet, Postboks 8142 Dep, 0033 OSLO
Office address: Brynsengfaret 6A, OSLO
Mobile: +47 99117502  e-mail/Lync: 
michel.peder...@vegvesen.no
www.vegvesen.no  e-mail: 
firmap...@vegvesen.no

Please consider the environment before printing this e-mail





--

Check out the vibrant tech community on one of the world's most

engaging tech sites, Slashdot.org!

[PacketFence-users] R: R: R: R: R: R: R: Radius Project Reloaded

2017-11-10 Thread Alessandro Canella via PacketFence-users 
Yep, sorry I’ve lost radius.log file in logs ☺

I’ve partially solved, now I check other issue


Da: gonzaguedambrico...@gmail.com [mailto:gonzaguedambrico...@gmail.com] Per 
conto di Gonzague Dambricourt
Inviato: giovedì 9 novembre 2017 21.59
A: packetfence-users@lists.sourceforge.net
Cc: Fabrice Durand ; Alessandro Canella 

Oggetto: Re: [PacketFence-users] R: R: R: R: R: R: Radius Project Reloaded

Hi Alessandro

For the logs check /usr/local/pf/logs  .. :)

For the preshared key of Radius => go into the editing section for switches and 
then edit your switch then go to the Radius tab and enter the key you wanna use

On Thu, Nov 9, 2017 at 9:36 PM, Alessandro Canella via PacketFence-users 
>
 wrote:
Hi All,

seems ok, but still not authenticate my switches. I will test Firewalls 
tomoorow, but where I can find Radius auth log?

2nd question, preshared key for radius where is ? to check typo.

thanks

Da: Fabrice Durand [mailto:fdur...@inverse.ca]
Inviato: martedì 7 novembre 2017 22.16
A: Alessandro Canella 
>; 
packetfence-users@lists.sourceforge.net
Oggetto: Re: R: R: [PacketFence-users] R: R: R: Radius Project Reloaded


So in radius_chilf.pm replace all:

foreach my $interface ( @radius_ints ) {

with

foreach my $interface ( uniq @radius_ints ) {
and retry

Regards
Fabrice
Le 2017-11-07 à 08:43, Alessandro Canella a écrit :
Here we are!



Da: Fabrice Durand [mailto:fdur...@inverse.ca]
Inviato: lunedì 6 novembre 2017 14.23
A: Alessandro Canella 
; 
packetfence-users@lists.sourceforge.net
Oggetto: Re: R: [PacketFence-users] R: R: R: Radius Project Reloaded


Hello Alessandro,

can you give me your radiusd_child.pm, pf.conf and 
conf/radius/auth.conf file ?

Regards

Fabrice



Le 2017-11-03 à 06:48, Alessandro Canella a écrit :
Seems all ok, but patch was unapplied (or not correct)

Nov  3 10:45:47 PacketFence-ZEN auth[3901]: Failed binding to auth address 
192.168.0.72 port 1812 bound to server packetfence: Address already in use
Nov  3 10:45:47 PacketFence-ZEN auth[3901]: /usr/local/pf/raddb/auth.conf[23]: 
Error binding to port for 192.168.0.72 port 1812


Da: Alessandro Canella via PacketFence-users 
[mailto:packetfence-users@lists.sourceforge.net]
Inviato: giovedì 2 novembre 2017 16.33
A: Fabrice Durand ; 
packetfence-users@lists.sourceforge.net
Cc: Alessandro Canella 

Oggetto: [PacketFence-users] R: R: R: Radius Project Reloaded

Means checkup?

[root@PacketFence-ZEN bin]# ./pfcmd checkup
Array found where operator expected at 
/usr/local/pf/lib/pf/services/manager/rad
iusd_child.pm line 570, at end of line
(Do you need to predeclare uniq?)
"my" variable $cluster_ip masks earlier declaration in same scope at 
/usr/local/
pf/lib/pf/services/manager/radiusd_child.pm line 572.
"my" variable $interface masks earlier declaration in same scope at 
/usr/local/p
f/lib/pf/services/manager/radiusd_child.pm line 572.
"my" variable %tags masks earlier declaration in same scope at 
/usr/local/pf/lib
/pf/services/manager/radiusd_child.pm line 573.
"my" variable $cluster_ip masks earlier declaration in same statement at 
/usr/lo
cal/pf/lib/pf/services/manager/radiusd_child.pm line 
573.
"my" variable $cluster_ip masks earlier declaration in same statement at 
/usr/lo
cal/pf/lib/pf/services/manager/radiusd_child.pm line 
573.
"my" variable $cluster_ip masks earlier declaration in same statement at 
/usr/lo
cal/pf/lib/pf/services/manager/radiusd_child.pm line 
573.
Couldn't require pf::services::manager::radiusd : Global symbol "%tags" 
requires explicit package name at 
/usr/local/pf/lib/pf/services/manager/radiusd_child.pm 
line 603.
Global symbol "%tags" requires explicit package name at 
/usr/local/pf/lib/pf/ser
vices/manager/radiusd_child.pm line 608.
Global symbol "%tags" requires explicit package name at 
/usr/local/pf/lib/pf/ser
vices/manager/radiusd_child.pm line 618.
Global symbol "%tags" requires explicit package name at 
/usr/local/pf/lib/pf/ser
vices/manager/radiusd_child.pm line 621.
Global symbol "%tags" requires explicit package name at 
/usr/local/pf/lib/pf/ser

[PacketFence-users] Switch Compatibility

2017-11-10 Thread Alessandro Canella via PacketFence-users 
Hello all,

I solved everything (thanks to all..) ando now I0m investigating about this:



Nov 10 13:37:03 PacketFence-ZEN packetfence_httpd.aaa: httpd.aaa(2711) INFO: 
[mac:[undef]] Authentication successful for newuser in source file1 (Htpasswd) 
(pf::authentication::authenticate)
Nov 10 13:37:03 PacketFence-ZEN packetfence_httpd.aaa: httpd.aaa(2711) INFO: 
[mac:[undef]] Using sources file1 for matching (pf::authentication::match2)
Nov 10 13:37:03 PacketFence-ZEN packetfence_httpd.aaa: httpd.aaa(2711) INFO: 
[mac:[undef]] Matched rule (admins) in source file1, returning actions. 
(pf::Authentication::Source::match)
Nov 10 13:37:03 PacketFence-ZEN packetfence_httpd.aaa: httpd.aaa(2711) INFO: 
[mac:[undef]] PacketFence does not support this switch for read/write access 
login (pf::Switch::returnAuthorizeWrite)


I've configured switch according to brand guidelines (based on freeradius) and 
I'm trying to enable PF Radius for CLI / HTTPS login.


Switch is configured in PF Switch webpage, I've configured SNMP and SSH too

Alessandro Canella
[Descrizione: Descrizione: Descrizione: Descrizione: Cattura]
  Via Gurzone 77 - 45030
  Occhiobello (RO) - Italy
  t. ++39 0532 1916333
  f. ++34 0532 1911433
  m. ++39 348 4433733
  email : alessandro.cane...@itcare.it
  skype : alessandro.canella
P please consider the environment before printing this email





--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] Switch Compatibility

2017-11-10 Thread Fabrice Durand via PacketFence-users 
Hello Alessandro,

what is the type of the switch ?

Regards

Fabrice



Le 2017-11-10 à 09:44, Alessandro Canella via PacketFence-users a écrit :
>
> Hello all,
>
>  
>
> I solved everything (thanks to all..) ando now I0m investigating about
> this:
>
>  
>
>  
>
>  
>
> Nov 10 13:37:03 PacketFence-ZEN packetfence_httpd.aaa: httpd.aaa(2711)
> INFO: [mac:[undef]] Authentication successful for newuser in source
> file1 (Htpasswd) (pf::authentication::authenticate)
>
> Nov 10 13:37:03 PacketFence-ZEN packetfence_httpd.aaa: httpd.aaa(2711)
> INFO: [mac:[undef]] Using sources file1 for matching
> (pf::authentication::match2)
>
> Nov 10 13:37:03 PacketFence-ZEN packetfence_httpd.aaa: httpd.aaa(2711)
> INFO: [mac:[undef]] Matched rule (admins) in source file1, returning
> actions. (pf::Authentication::Source::match)
>
> Nov 10 13:37:03 PacketFence-ZEN packetfence_httpd.aaa: httpd.aaa(2711)
> INFO: [mac:[undef]] PacketFence does not support this switch for
> read/write access login (pf::Switch::returnAuthorizeWrite)
>
>  
>
>  
>
> I’ve configured switch according to brand guidelines (based on
> freeradius) and I’m trying to enable PF Radius for CLI / HTTPS login.
>
>  
>
>  
>
> Switch is configured in PF Switch webpage, I’ve configured SNMP and
> SSH too
>
>  
>
> *Alessandro Canella*
>
> Descrizione: Descrizione: Descrizione: Descrizione: Cattura*/
> /*  Via Gurzone 77 – 45030
>   Occhiobello (RO) – Italy
>   t. ++39 0532 1916333
>   f. ++34 0532 1911433
> *  m. ++39 348 **4433733***
>
> *  email : alessandro.cane...@itcare.it
> 
>   skype : alessandro.canella ***
>
> /P// //please consider the environment before printing this email/
>
>  
>
>  
>
>  
>
>  
>
>  
>
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

-- 
Fabrice Durand
fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org) 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users