Re: [PacketFence-users] Fingerbank Hourly API limit

Hello Amish, You can disable the TCP fingerprinting by doing # systemctl edit packetfence-fingerbank-collector.service In the editor that opens, add: [Service] Environment=COLLECTOR_DISABLE_TCP_HANDLER=true Close the editor, then do: # systemctl daemon-reload # systemctl restart packetfence-f

Re: [PacketFence-users] Fingerbank Hourly API limit

Hi Ludovic, It seems to be stuck in a loop trying to fingerprint the servers ethernet interfaces, and it fails every time. Every 4 to 5 seconds there is an attempt to fingerprint the 2 interfaces. Here are some of the logs Jun 13 20:09:05 packetfence01 /usr/local/fingerbank/collector/fingerba

Re: [PacketFence-users] Fingerbank Hourly API limit

Hello Amish, You are allowed 600 request per hour for free. The fingerbank collector will try to fingerprint anything! Check the logs with : journalctl -f -u packetfence-fingerbank-collector Thanks, Ludovic Zammit Product Support Engineer Principal Lead Cell: +1.613.670.8432 Akamai Technolog

[PacketFence-users] Fingerbank Hourly API limit

Hi, I registered on the Fingerbank website last night. I added the API key on the Packetfence server and now I get an email once every hour saying "You have reached your hourly API limit". There are not devices connecting or accessing the test Packetfence server. It is completely idle. There

Re: [PacketFence-users] Fingerbank usage offline

Hello Peter, I think you can: 1. remove API key and server 2. run: ` /usr/local/pf/bin/pfcmd service fingerbank-collector updatesystemd` (it should disable fingerbank-collector service) 3. stop fingerbank-collector You should not see a lot of message in logs. A fix has been pushed in the past t

Re: [PacketFence-users] Fingerbank usage offline

A related question: What’s the right/correct/best way to disable it then? We don’t really use it, and I got tired of getting the emails about excessive usage so have tried to disable it but without an api_key in /usr/local/fingerbank/conf/fingerbank.conf you get complaints about that you shoul

Re: [PacketFence-users] Fingerbank usage offline

Hello, It’s not possible to use Fingerbank offline. Nicolas Quiniou-Briand Product Support Engineer [cid:image001.png@01D76E71.06F70210] Office: +33156696210 Akamai Technologies 145 Broadway Cambridge, MA 02142 Connect with Us: [cid:image002.jpg@01D76E71.06F70210]

[PacketFence-users] Fingerbank usage offline

Hi all, Can I use deploy fingerbank in offline network. Do we have its database available to download and use in packetfence. Right now my fingerbank is not starting and provisioning and wmi scan not now working since packetfence don't have OS info of endpoint. ___

[PacketFence-users] Fingerbank Connection Profile and PF Azure AD Integration questions

Hello PacketFence Users/Experts,I'm new to Packetfence and NAC, I'm trying to understand the architecture and the possible PF implementations. I have some question to ask: Question 1On the fingerbank Homepage I can read that fingerbank could be used to grant different network access based on the

Re: [PacketFence-users] fingerbank api calls and PC with static IP (no DHCP)

Hi Fabrice, all values are set to the default value of Cisco switches. The 5 hosts that create the problem are on the same switch along with dozens of other hosts with the same port configuration and same HOST type. What does the message "Unable to extract accounting history" mean? I manually insta

Re: [PacketFence-users] fingerbank api calls and PC with static IP (no DHCP)

Hum looks to be the accounting interim update. Check on the equipment side and raise the interim update value to something higher. Le 2021-03-10 à 08 h 50, Daniele via PacketFence-users a écrit : I noticed that there are also these logs repeated every 30 seconds in the packetfence.log ... ...

Re: [PacketFence-users] fingerbank api calls and PC with static IP (no DHCP)

I noticed that there are also these logs repeated every 30 seconds in the packetfence.log ... ... Mar 10 14:33:06 esepfn004vm packetfence_httpd.aaa: httpd.aaa(23895) WARN: [mac:c0:3f:d5:bb:b3:22] Unable to pull accounting history for device c0:3f:d5:bb:b3:22The history set doesn't exist yet. (pf::

Re: [PacketFence-users] fingerbank api calls and PC with static IP (no DHCP)

Hi Fabrice, the device c0:3f:d5:bb:b3:22 doesn't authenticate over and over. I checked the logs from the switch. PacketFence can see the DHCP requests (ip helper address on router) and it categorizes the device correctly: *Device Class: Windows OS * *Device Manufacturer: Elitegroup Computer Syst

Re: [PacketFence-users] fingerbank api calls and PC with static IP (no DHCP)

Hello Daniele, what i think happen is the device c0:3f:d5:bb:b3:22 authenticate over and over and each time packetfence query fingerbank. (because there is no enough information) So first you need to check why you have so much auth/acct in few period of time and fix it. Next if you can for

Re: [PacketFence-users] fingerbank api calls and PC with static IP (no DHCP)

Hello Fabrice, these are the complete logs Mar 9 07:43:58 ese fingerbank-collector: [GIN] 2021/03/09 - 07:43:58 | 200 [0m| 133.193µs | 127.0.0.1 | [0m GET /endpoint_data/c0:3f:d5:bb:b3:22 Mar 9 07:43:58 ese fingerbank_httpd.aaa: httpd.aaa(1866) WARN: [mac:c0:3f:d5:bb:b3:22] Cannot

Re: [PacketFence-users] fingerbank api calls and PC with static IP (no DHCP)

Hello Daniel, what is the process doing all that queries ? (it's at the beginning of the the lines you pasted). Thanks Regards Fabrice Le 21-03-07 à 05 h 05, Daniele via PacketFence-users a écrit : Hi all!, I have encountered a problem regarding fingerbank with some PCs with static IP un

[PacketFence-users] fingerbank api calls and PC with static IP (no DHCP)

Hi all!, I have encountered a problem regarding fingerbank with some PCs with static IP under dot1x authentication. The dot1.x authentication of these PCs is successful, but the fingerbank collector makes numerous requests to the api.fingerbank. Five PCs alone exhaust the 300 requests per hour of t

[PacketFence-users] fingerbank showing wrong device class

hi all fingerbanking sho wing wrong device class for windows system and voip. [image: image.png] these are logs file while doing refresh fingerbank. */usr/local/pf/logs/fingerbank.log* Jan 6 15:17:16 pfnac1 /usr/local/fingerbank/collector/fingerbank-collector[5423]: t=2021-01-06T15:17:16+0530 lv

Re: [PacketFence-users] fingerbank-collector doesn't start after reinstall

Alright, thanks for the answer. > On Dec 4, 2020, at 12:50 AM, Daniele wrote: > >  > Hello Ludovic, > I've resolved the issue with "yum reinstall fingerbank-collector > --enablerepo=packetfence" > > Thanks, > Daniele > > Il mer 2 dic 2020, 13:56 Ludovic Zammit ha scritto: >> Hello Daniele,

Re: [PacketFence-users] fingerbank-collector doesn't start after reinstall

Hello Daniele, Try that: /usr/local/pf/bin/pfcmd fixpermissions /usr/local/pf/bin/pfcmd pfconfig clear_backend systemctl restart packetfence-config /usr/local/pf/bin/pfcmd configreload hard systemctl restart packetfence-fingerbank-collector Thanks, Ludovic Zammit lzam...@inverse.ca

[PacketFence-users] fingerbank-collector doesn't start after reinstall

Hi all, after I reinstalled the fingerbank package with the command "yum reinstall fingerbank --enablerepo=packetfence", the service packetfence-fingerbank-collector doesn't start anymore. When I try to start fingerbank-collector from packetfence gui, I get the following errors: Dec 2 02:53:

[PacketFence-users] Fingerbank-collector communications over UDP port 1192

I’m working on setting up a new PF 10.2 environment here where I’ve set up a couple of clusters: - “development” (nix) - "pre-production” (styx) - “production” (charon) The development cluster has the management interface on their own L2 network. The pre-production & production cluster share an

Re: [PacketFence-users] Fingerbank is not starting

Hello Ludovic, Can we change how often the internal check is running, something like every 5 minutes instead of the current 10 seconds ? Sep  8 16:19:44 packetfence packetfence_httpd.portal: httpd.portal(31206) INFO: [mac:00:11:22:33:44:55] Instantiate profile default (pf::Connection::Profile

Re: [PacketFence-users] Fingerbank is not starting

Hello Andrea, It’s an internal check, your are correct. Thanks, Ludovic Zammit lzam...@inverse.ca :: +1.514.447.4918 (x145) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu ) and PacketFence (h

Re: [PacketFence-users] Fingerbank is not starting

Hi, the errors and warnings in the log were fixed in issue #5768. I still have an issue: haproxy keep trying to connect httpd.portal every few seconds (and spam info logs). We did a reboot of the system and also disabled the interfaces but connection attempt are still going, so packetfence.lo

Re: [PacketFence-users] Fingerbank is not starting

Hi, I did not configure it any Fingerbank API key, the file /usr/local/fingerbank/conf/fingerbank.conf is empty. Regards On 26/8/2020 14:07, Nicolas Quiniou-Briand via PacketFence-users wrote: Hi, Did you configure a Fingerbank API key during inital setup ? If you don't remember, take a loo

Re: [PacketFence-users] Fingerbank is not starting

Hi, Did you configure a Fingerbank API key during inital setup ? If you don't remember, take a look at /usr/local/fingerbank/conf/fingerbank.conf. -- Nicolas Quiniou-Briand n...@inverse.ca :: +1.514.447.4918 *140 :: https://inverse.ca Inverse inc. :: Leaders behind SOGo (https://sogo.nu), P

[PacketFence-users] Fingerbank is not starting

Hi, since the last reboot I start to see the following errors in the log: Aug 25 17:21:52 packetfence packetfence_httpd.portal: httpd.portal(9870) ERROR: [mac:00:11:22:33:44:55] Error while communicating with the Fingerbank collector. 500 Can't connect to 127.0.0.1:4723 (pf::fingerbank::endpoi

[PacketFence-users] Fingerbank api connection fail.

I got logs: Error while communicating with the Fingerbank API to check if device 49033 is linked to device 13005. 500 Can't connect to api.fingerbank.org:443 (certificate verify failed) It happens in 8.1.0 and 10.0.1 version. Tomasz Karczewski Administrator Sieci tkarczew...@man.

[PacketFence-users] Fingerbank and softnet_stat issues with version 9.2

Hello everyone, We upgraded from 9.0.1 to 9.2 over the Christmas holiday and are experiencing a strange issue that was not present before. I am wondering if we have something misconfigured or it could be a bug? The symptoms are that we constantly receive the Fingerbank alert email that we have

[PacketFence-users] Fingerbank failure identify Macosx Catalina...

  Dear All, from some weeks I discovered that PF can't identify a new OS from Apple. I had configured fingerbank to classify the various OS and to perform scans with OpenVas, so now this task doesn't works fine. Does anyone have seen this problem and How was it solved ? Thanks a lot Best Regards E

Re: [PacketFence-users] Fingerbank doesn't work properly

  Dear all, Can anybody tell me if the device detection works without Internet (wan) connection ? Database /usr/local/fingerbank/db/fingerbank_Local.db Database /usr/local/fingerbank/db/fingerbank_Upstream.db Are these files useful for identifying the devices that enter the network when the Pa

Re: [PacketFence-users] Fingerbank doesn't work properly

Hello Nancy, did you applied the maintenance ? /usr/local/pf/addons/pf-maint.pl Regards Fabrice Le 19-12-05 à 06 h 08, Nancy Batiste via PacketFence-users a écrit : Hi, i can't figure out how to solve this problem. When i connect a new endpoint to the network, packetfence gets DHCP fingerp

[PacketFence-users] Fingerbank doesn't work properly

Hi, i can't figure out how to solve this problem. When i connect a new endpoint to the network, packetfence gets DHCP fingerprint but the query returns an empty set. It only works with refresh fingerbank button. Thanks Nancy This is the log file. I hope this helps Fingerbank.log: PacketFence-ZEN fi

Re: [PacketFence-users] Fingerbank collector

Hello, On 02/12/2019 09:31, Liborio La Fortezza via PacketFence-users wrote: After updating to version 9.2 i found the following errors: fingerbank-collector: Failed check 969aef9d-fe83-4ba0-ba47-20187197127a fingerbank-collector: The collector doesn't seem to be running alongside PacketFence

[PacketFence-users] Fingerbank collector

Hi After updating to version 9.2 i found the following errors: fingerbank-collector: Failed check 969aef9d-fe83-4ba0-ba47-20187197127a fingerbank-collector: The collector doesn't seem to be running alongside PacketFence ___ PacketFence-users mailing lis

Re: [PacketFence-users] Fingerbank should be disabled, but it seems it is not.

Hello Fabrice, I found the documentation explaining how to restore from a backup but I don't think it applies to our case, given we are in a cluster environment: https://packetfence.org/doc/PacketFence_Installation_Guide.html#_how_to_restore_a_standalone_packetfence_server I don't know how to joi

Re: [PacketFence-users] Fingerbank should be disabled, but it seems it is not.

Hello Fabrice, It will work the same in a cluster configuration ? Guy Le 30/10/2019 à 01:42, Durand fabrice via PacketFence-users a écrit : > > Hello Guy, > > the better solution is to take a backup of the db and keep the > configuration files. > > Then install a debian 9 , apply the configur

Re: [PacketFence-users] Fingerbank should be disabled, but it seems it is not.

Hello Fabrice, It will work the same in a cluster configuration ? Guy Le 30/10/2019 à 01:42, Durand fabrice via PacketFence-users a écrit : > > Hello Guy, > > the better solution is to take a backup of the db and keep the > configuration files. > > Then install a debian 9 , apply the configura

Re: [PacketFence-users] Fingerbank should be disabled, but it seems it is not.

Hello Guy, the better solution is to take a backup of the db and keep the configuration files. Then install a debian 9 , apply the configuration, import the db then apply the change to the schema then it should work. Regards Fabrice Le 19-10-29 à 13 h 52, Guy BLAVIN via PacketFence-users

Re: [PacketFence-users] Fingerbank should be disabled, but it seems it is not.

Ok, I have been investigating further. Packetfence 9.0 is not supported on debian 8, but packetfence 8.3.0 is not available any more in debian 9 repository. I tried to do an upgrade of the os from debian 8 to 9 but packetfence doesn't work anymore (no mariadb).  Also, I can't install a fresh debi

Re: [PacketFence-users] Fingerbank should be disabled, but it seems it is not.

Hello, Any idea on this ? Guy Le 22/10/2019 à 18:00, Guy BLAVIN via PacketFence-users a écrit : > Hello Fabrice, > > I tried to do an update, but the inverse.ca repository doesn't give a > newer version (8.3.0 max on debian jessie). > > Any idea when v9.0 or v9.1 will be available in this repos

Re: [PacketFence-users] Fingerbank should be disabled, but it seems it is not.

Hello Fabrice, I tried to do an update, but the inverse.ca repository doesn't give a newer version (8.3.0 max on debian jessie). Any idea when v9.0 or v9.1 will be available in this repository ? Thank you, Guy Blavin Le 12/10/2019 à 03:01, Durand fabrice via PacketFence-users a écrit : > Hello

Re: [PacketFence-users] Fingerbank should be disabled, but it seems it is not.

Hello Guy, Le 19-10-09 à 11 h 29, Guy BLAVIN via PacketFence-users a écrit : Hello all, On a 8.3.0 packetfence cluster of three nodes on debian 8.11 I have a lot of logs about Fingerbank but I don't use it, there is no API key and I read that it means it should be disabled. On the web services

[PacketFence-users] Fingerbank should be disabled, but it seems it is not.

Hello all, On a 8.3.0 packetfence cluster of three nodes on debian 8.11 I have a lot of logs about Fingerbank but I don't use it, there is no API key and I read that it means it should be disabled. On the web services pages the service "fingerbank-collector" is grayed out. The logs that pfqueue

[PacketFence-users] Fingerbank

Dear Subscribers, I have just finished with setting up packetfence and its working perfectly. Furthermore, i am using fingerbank api which means fingerbank collects the information about company device since unknown data added to fingerbank db automatically . However, my company doesnt want to

Re: [PacketFence-users] Fingerbank

Hello, On 2019-07-26 7:44 a.m., Süleyman Gelener via PacketFence-users wrote: So what i would like to ask, is fingerbank api compulsory for packetfence system. Many thanks for your answers from now. No. If you don't need fingerbank, don't configure an API key and don't try to start this serv

[PacketFence-users] Fingerbank

Dear Subscribers, I have installed and configured packetfence a few times. However, i have never used fingerbank api and i kept having problem with fingerbank-collector service. So what i would like to ask, is fingerbank api compulsory for packetfence system. Many thanks for your answers from n

Re: [PacketFence-users] Fingerbank Node Info Refresh

Hi Fabrice, thanks for your reply. Since i ran the pf-maint.pl command today, to solve the issues with the views in the new GUI, I can finally see my PF system reaching out to the fingerbank api and also a lot of stuff in the fingerbank.log file. I will have a look on Monday morning if this wa

Re: [PacketFence-users] Fingerbank Node Info Refresh

Hello Shirley, what you can try is to configure a security event with a trigger based on fingerbank and it's suppose to do the lookup for each devices. Regards Fabrice Le 19-07-09 à 06 h 24, Shirley, Benjamin via PacketFence-users a écrit : Hi, it’s not clear to us when Packetfence shoul

[PacketFence-users] Fingerbank Node Info Refresh

Hi, it’s not clear to us when Packetfence should trigger a fingerbank lookup for a device. It does generally work, but only if we trigger a manual “Refresh Fingerbank” in t the Web-Gui. In order to detect MAC address spoofing it’s required to happen automatically and ideally every time a device

[PacketFence-users] Fingerbank problems

Hi all, since a few days I get some strange errors regarding fingerbank. The packetfence web ui shows under "Configuration -> Compliance -> Fingerbank Profiling -> General Settings" the following error: Impossible to fetch Fingerbank account information: Can't connect to api.fingerbank.org:4

Re: [PacketFence-users] fingerbank

Il 23/04/2019 13:51, Nicolas Quiniou-Briand via PacketFence-users ha scritto: Hello Enrico, On 2019-04-19 8:41 a.m., Enrico Becchetti via PacketFence-users wrote: If I need how can I add devices to fingerbank ? You can go here (you need a GitHub login): https://api.fingerbank.org/combination

Re: [PacketFence-users] fingerbank

Hello Enrico, On 2019-04-19 8:41 a.m., Enrico Becchetti via PacketFence-users wrote: If I need how can I add devices to fingerbank ? You can go here (you need a GitHub login): https://api.fingerbank.org/combinations/new How long you have to wait to see it online ? Time for us to check yo

Re: [PacketFence-users] fingerbank

Il 19/04/2019 08:41, Enrico Becchetti via PacketFence-users ha scritto: Dear all, After some weeks my PF 8.3.0 is working fine. I've got some profile authentication source and so on. I also have openvas integration but I realized that it hasn't been working for a month. All the devices that con

[PacketFence-users] fingerbank

Dear all, After some weeks my PF 8.3.0 is working fine. I've got some profile authentication source and so on. I also have openvas integration but I realized that it hasn't been working for a month. All the devices that connect are not identified and therefore the scan does not start. fingerba

[PacketFence-users] Fingerbank Request doesn't work

Hi everyone, I am trying to configure the Fingerbank connection on our Packetfence Server (v. 8.3). API Key integration and Fingerbank database Update is done successfully. When I try to refresh the Profiling on my test device, I get the following failure message: "Error! Couldn't refresh de

Re: [PacketFence-users] Fingerbank: High CPU Usage - no local db entries?

Hello, we had the same problem too since upgrade to version 8.1 Cheers, Hubert Am 18.12.18 um 12:27 schrieb Dan Poltawski via PacketFence-users: Hello, We've found on Packetfence 8.2.1 fingerbank-collector is constantly using the majority of cpu time so I am wondering if something untoward

Re: [PacketFence-users] Fingerbank: High CPU Usage - no local db entries?

Hi, We had the same problem here in our environment: fingerbank.log was really heavy, CPU usage was high and I was tired of receiving API Usage limit e-mails (ok, the last one I can blame on myself). At the end, we just disabled Fingerbank service temporally. Regards, Murilo Calegari de Souza Es

[PacketFence-users] Fingerbank: High CPU Usage - no local db entries?

Hello, We've found on Packetfence 8.2.1 fingerbank-collector is constantly using the majority of cpu time so I am wondering if something untoward is happening There are quite a lot of entries in the fingerbank.log saying problems with the local db, so I am wondering if packetfence is failing to

[PacketFence-users] fingerbank problem

Why fingerbank_Upstream.db file size is 1.5G on packetfence-7.3.0, and 64M on packetfence-7.3.0,I found out because of this db file the CPU of the server is usually 100% when authenticated. What should I do to solve this problem on packetfence-7.3.0, ___

Re: [PacketFence-users] fingerbank-coll High load

r 11, 2018 6:52 AM To: packetfence-users@lists.sourceforge.net Cc: Nicolas Quiniou-Briand Subject: Re: [PacketFence-users] fingerbank-coll High load Hello Thomas, On 2018-09-05 04:20 PM, Thomas, Gregory A via PacketFence-users wrote: > Any clues on where to look next or what I can do to reduce the loa

Re: [PacketFence-users] fingerbank-coll High load

Hello Thomas, On 2018-09-05 04:20 PM, Thomas, Gregory A via PacketFence-users wrote: Any clues on where to look next or what I can do to reduce the load? Check packetfence.log and the dashboard to see some unexpected behaviors. -- Nicolas Quiniou-Briand n...@inverse.ca :: +1.514.447.4918 *14

Re: [PacketFence-users] fingerbank-coll High load

orge.net<mailto:packetfence-users@lists.sourceforge.net> Cc: Truax, Peter mailto:ptr...@stmartin.edu>> Subject: Re: [PacketFence-users] fingerbank-coll High load Gregory, The fingerbank.conf file is in /usr/local/fingerbank/ Not sure about your performance problem. I will tell you abo

Re: [PacketFence-users] fingerbank-coll High load

Olsztynie Uniwersytet Warmińsko-Mazurski w Olsztynie From: Truax, Peter via PacketFence-users Sent: Wednesday, September 5, 2018 6:33 PM To: packetfence-users@lists.sourceforge.net Cc: Truax, Peter Subject: Re: [PacketFence-users] fingerbank-coll High load Gregory, The fingerbank.conf

Re: [PacketFence-users] fingerbank-coll High load

From: "Truax, Peter via PacketFence-users" Reply-To: "packetfence-users@lists.sourceforge.net" Date: Thursday, September 6, 2018 at 12:18 PM To: "packetfence-users@lists.sourceforge.net" Cc: "Truax, Peter" Subject: Re: [PacketFence-users]

Re: [PacketFence-users] fingerbank-coll High load

om: Thomas, Gregory A via PacketFence-users Sent: Wednesday, September 5, 2018 7:21 AM To: packetfence-users@lists.sourceforge.net Cc: Thomas, Gregory A Subject: [PacketFence-users] fingerbank-coll High load I just started the semester, so there are a ton of new devices on the network and I exp

[PacketFence-users] fingerbank-coll High load

I just started the semester, so there are a ton of new devices on the network and I expect there to be more load then when I first implemented the upgrade. Yesterday when there were reports of some lag, I took a look at the load and it was hovering around 15. The server has 4 virtual processors

Re: [PacketFence-users] Fingerbank accuracy

Hi Max, The sad thing is, Fingerbank is limited in the sense that when devices don't exhibit behaviors that seperate them from other devices, then its hard to accurately profile a device. On top of this, the manufacturer (MAC vendor) who created the device is keeping its privacy, that makes

[PacketFence-users] Fingerbank accuracy

Hi all - I have a student trying to register a device via the /device-registration page, but is unable to. The device is showing up as 'Hardware Manufacturer' for its class and 'Private' for its type: [image: image.png] This is clearly not very accurate. For the time being I have allowed 'Hard

[PacketFence-users] Fingerbank API hourly limit

We are getting constant emails about exceeding the Fingerbank API hourly limit. Our server is not yet in production use, and at the moment is not even being tested. If it's doing a query on every MAC address it sees, I would have thought it would have done everyone of them many, many times over

Re: [PacketFence-users] Fingerbank gives 401 unauthorized in packetfence.log

Thank you for your response... this error has stopped a few days ago, and I'm not completely certain why. I'll keep the command below handy in case it happens again. On 6/11/2018 11:13 PM, Durand fabrice via PacketFence-users wrote: Hello Steve, can you try that: pfcmd cache fingerbank expir

[PacketFence-users] Fingerbank Error 500 Can't connect to api.fingerbank.org:443 (fingerbank::API::test_key)

When i try to check my key from fingerbank in pf the log file always says this: Jun 12 09:10:43 PacketFence-801 fingerbank_httpd.admin: httpd.admin(1628) ERROR: [mac:unknown] Error while testing API key "xxxmyKeyxxx". Error was: 500 Can't connect to api.fingerbank.org:443 (fingerbank::API::test_

Re: [PacketFence-users] Fingerbank gives 401 unauthorized in packetfence.log

Hello Steve, can you try that: pfcmd cache fingerbank expire Regards Fabrice Le 2018-06-08 à 11:55, Steve Pfister via PacketFence-users a écrit : We are evaluating PacketFence for use in our organization. The setup of Fingerbank has been quite a problem, but I think I've finally got it se

[PacketFence-users] Fingerbank gives 401 unauthorized in packetfence.log

We are evaluating PacketFence for use in our organization. The setup of Fingerbank has been quite a problem, but I think I've finally got it set up sort of the way its supposed to be. I'm still getting lines in the  packetfence.log several times a second that look like: Jun  8 15:48:05 PacketF

[PacketFence-users] Fingerbank DB will not initialize

Hello, We are running current v7.4 on Debian 8. On one of our servers, it seems the fingerbank db will not initialize properly. In our logs, we see similar to below: Mar 4 14:51:08 pf2 packetfence_httpd.aaa: httpd.aaa(1142) ERROR: [mac:fc:c2:de:9e:7e:3b] Unable to compute Fingerbank device inf

Re: [PacketFence-users] Fingerbank API daily limit

bject: [PacketFence-users] Fingerbank API daily limit Hi all, I've started getting an email that I've reached my hourly limit of access to the Fingerbank API. The email says to consider using the local SQLite database. I thought that packetfence does use the local copy to cut down on upstream

[PacketFence-users] Fingerbank API daily limit

Hi all, I've started getting an email that I've reached my hourly limit of access to the Fingerbank API. The email says to consider using the local SQLite database. I thought that packetfence does use the local copy to cut down on upstream calls? Maybe I have a misconfiguration? When I go to the

[PacketFence-users] fingerbank

Hello, my logfiles are exploding with these messages: May 11 08:25:00 networklogon fingerbank: pfqueue(2769) WARN: [mac:00:00:48:73:f0:fe] Cannot find any combination ID in any schemas (fingerbank::Source::LocalDB::_getCombinationID) May 11 08:25:00 networklogon fingerbank: pfqueue(2769) INFO: [m

[PacketFence-users] fingerbank Proxy configuration

Hello Packetfence Users, I did a fresh install of 6.5.1 ZEN a few days ago, but there were some more before. We are experiencing this problem since we started with packetfence. We have to use a proxy for fingerbank downloads but the never worked for us. Message in pfqueue: pfqueue(26086) ERROR:

[PacketFence-users] Fingerbank integration - how?

Hey guys, I have created a portal profile for adding printers to a printer role. I have added a provisioner to the profile based on that OS should be Printers/Scanners found in fingerbank. In Fingerbank MAC Vendors, I can see that 0021b7 is Lexmark How do I get my packetfence to match Mac Vendo

Re: [PacketFence-users] Fingerbank SQLite error

Thanks Fabrice, Since then i've upgraded to 6.3.0 and that also fixed the problem, sparks new ones, but fixed this! Bebbet On 12-10-2016 00:33, Durand fabrice wrote: > Hello Bebbet, > > you local fingerbank db is corrupted. > > Try to download it to fix the issue. > > Regards > > Fabrice >

Re: [PacketFence-users] Fingerbank SQLite error

Hello Bebbet, you local fingerbank db is corrupted. Try to download it to fix the issue. Regards Fabrice Le 2016-10-10 à 04:57, Bebbet van Dinges a écrit : > Hello All, > > i've got a pfqueue.log full of fingerbank errors, we also get mails > about the hourly limit of fingerbank api, can som

[PacketFence-users] Fingerbank SQLite error

Hello All, i've got a pfqueue.log full of fingerbank errors, we also get mails about the hourly limit of fingerbank api, can someone shed some light on this? Yours sincerely, Bebbet Oct 10 10:53:50 pfqueue(2664) ERROR: [mac:64:6c:b2:6c:18:85] DBIx::Class::Storage::DBI::_prepare_sth(): DBI Excep

Re: [PacketFence-users] Fingerbank API key not working

For the local combination it is normal that it is empty , unless you created some. On 09/15/2016 06:03 PM, Jason 'XenoPhage' Frisvold wrote: On 9/15/16 16:33, Antoine Amacher wrote: Jason, You can check your fingerbank local db: sqlite3 /usr/local/fingerbank/db/fingerbank_Local.db .schema

Re: [PacketFence-users] Fingerbank API key not working

On 9/15/16 16:33, Antoine Amacher wrote: > Jason, > > You can check your fingerbank local db: > > sqlite3 /usr/local/fingerbank/db/fingerbank_Local.db > .schema > > If the result is not promising you can re-instantiate your local db by > doing: > make init-db-local > (from the folder /usr/local/

Re: [PacketFence-users] Fingerbank API key not working

Jason, You can check your fingerbank local db: sqlite3 /usr/local/fingerbank/db/fingerbank_Local.db .schema If the result is not promising you can re-instantiate your local db by doing: make init-db-local (from the folder /usr/local/fingerbank/) Let us know if that's help. Thanks On 09/15/

Re: [PacketFence-users] Fingerbank API key not working

On 9/15/16 12:56, Antoine Amacher wrote: > The permissions on Fingerbank config file are the one expected. > > You could always run: "/usr/local/pf/bin/pfcmd fixpermissions" to ensure > permissions are rights everywhere. > > Additionally, when I try to hit other links, I'm getting an error that >

Re: [PacketFence-users] Fingerbank API key not working

The permissions on Fingerbank config file are the one expected. You could always run: "/usr/local/pf/bin/pfcmd fixpermissions" to ensure permissions are rights everywhere. Additionally, when I try to hit other links, I'm getting an error that the server isn't running.. Is that something I nee

Re: [PacketFence-users] Fingerbank API key not working

On 9/15/16 11:53, Antoine Amacher wrote: > Hello Jason, > > This is a bug: https://github.com/inverse-inc/packetfence/issues/1519 > You would need to update your fingerbank package to a version superior > of 2.2.0. > You can verify with: rpm -qa | grep fingerbank Hrm... [root@packetfence0 logs]#

Re: [PacketFence-users] Fingerbank API key not working

Hello Jason, This is a bug: https://github.com/inverse-inc/packetfence/issues/1519 You would need to update your fingerbank package to a version superior of 2.2.0. You can verify with: rpm -qa | grep fingerbank In case you want a manual fix with no update package you can edit the file /usr/lo

[PacketFence-users] Fingerbank API key not working

Hi! I'm trying to set up the Fingerbank config on our packetfence instance, but I'm running into a problem. I've registered on the website as requested and obtained my key. However, when I add the key to packetfence and click onboard, it submits as expected and reloads the page with no k

[PacketFence-users] Fingerbank

Has anyone had any issues with Fingerbank updating since the 6.2.1 update? I cannot get a successful email on updating RedisDB. The p0f and upstreamDB updates with confirmation email. Are there any cli tools to troubleshoot this? Thanks, Jason Guntharp Network Administrator Itawamba Community

Re: [PacketFence-users] Fingerbank

Hello Jason, > I noticed it changed the fingerbank.conf file owner from fingerbank to pf > after the change. It is normal since the httpd.admin (PacketFence process that runs the web admin) is runned by the ‘pf’ user. As long as the group is ‘fingerbank’ and rights are 0664, you are OK :) Chee

Re: [PacketFence-users] Fingerbank

Thanks! It worked immediately. I noticed it changed the fingerbank.conf file owner from fingerbank to pf after the change. Should this be changed back to the original owner with the 664? Jason Sent from my iPhone On May 6, 2016, at 7:06 PM, ?? mailto:vor...@mail.ru>> wrote: Wor

Re: [PacketFence-users] Fingerbank

Workaround:       cd /usr/local/fingerbank/conf       chmod 664 fingerbank.conf       OR       cd /usr/local/fingerbank/conf       cp fingerbank.conf.defaults fingerbank.conf       chmod 664 fingerbank.conf       vi fingerbank.conf         Enter API_KEY        systemctl stop packetfence-config.se

Re: [PacketFence-users] Fingerbank

Workaround:       cd /usr/local/fingerbank/conf       chmod 664 fingerbank.conf       OR       cd /usr/local/fingerbank/conf       cp fingerbank.conf.defaults fingerbank.conf       chmod 664 fingerbank.conf       vim fingerbank.conf       Enter API_KEY        systemctl stop packetfence-config.s

[PacketFence-users] Fingerbank

New Centos7x64 install with PF6: The fingerbank config section will not accept API. It will accept any string value, but will not make any changes after using submit button. This result is across multiple browsers. Is there a fix or manual file workaround? Thanks, Jason Guntharp Network Admin

Re: [PacketFence-users] Fingerbank Hourly API Limit

So, I don't know why I didn't check before... but I was wrong about a previous assumption. It looks like each of our PacketFence servers is sending a query to the fingerbank database 1k-3k times a day. Is this normal? Thanks, Joshua Nathan Level 3 IT Support and Development Black Forest Academy

[PacketFence-users] Fingerbank Hourly API Limit

Hello, Due to site location deficiencies, we're currently running multiple PacketFence servers. Lately, we've started getting a lot of emails saying that we've reached our "hourly API limit" for Fingerbank. My understanding is that PacketFence stores a local copy that it periodically tries to up

  1   2   >