Re: [PacketFence-users] Packetfence-PKI / Setup Wizard Error

2017-11-14 Thread Durand fabrice via PacketFence-users
Hello Jason, i did a try and i am not able to reproduce the error. So it can be an issue with the keyUsage value or an issue with pyopenssl. What did you define for keyUsage and can you give me the version of pyopenssl you use ? rpm -qa|grep -i openssl Regards Fabrice Le 2017-11-14 à

Re: [PacketFence-users] auth request from wrong switch

2017-11-14 Thread Sokolowski, Darryl via PacketFence-users
This is happening to a few ports, but not all ports, I counted 12 so far. I got some of the debug output, and looking thru it. I set the ip radius source-interface on the 2 switches that seems to be crossing each other. Thanks Darryl From: Jason Sloan [mailto:jason.a.sl...@gmail.com] Sent:

[PacketFence-users] Packetfence-PKI / Setup Wizard Error

2017-11-14 Thread Jason Sloan via PacketFence-users
Error: Environment: Centos 7 - Clean Install Steps to reproduce: Install Packetfence-PKI Browse to PKI Admin site & login. Complete all 4 steps of initial setup wizard & Submit Error condition occurs. Looks like a bad variable type, probably also related to the newer django version? Error

Re: [PacketFence-users] Bandwidth statistics make no sense (Cisco 2960x)

2017-11-14 Thread Fabrice Durand via PacketFence-users
Hello Cristian, when PacketFence receive a accounting request, there are mysql procedures that will update/insert in the radacct table. When pf receive a start we log in radacct_log and insert a new entry in radacct, when it's an interim update we update the entry in the radacct table and when

Re: [PacketFence-users] auth request from wrong switch

2017-11-14 Thread Jason Sloan via PacketFence-users
Depends on how the authentication request is sent. Is this happening for one client/port on the switch or the entire switch? Try setting the source interface: conf t ip radius source-interface X (in your case you like Since your switches are not under heavy load you can flip on some debugs and

Re: [PacketFence-users] auth request from wrong switch

2017-11-14 Thread Sokolowski, Darryl via PacketFence-users
Oh, ok. Since we have a ring, all interfaces comprising the ring are forwarding except one. All switches are trunked to each other over the ring. I am certain there are no extra errant extra uplinks, since we are just beginning to use the switches and not much plugged into them yet. How could

Re: [PacketFence-users] auth request from wrong switch

2017-11-14 Thread Jason Sloan via PacketFence-users
show spanning-tree vlan X (in your case vlan 1) Check and see if all ports are in a forwarding state, or at least the ones you expect to be in a forwarding state are forwarding. If left to its own devices, sometimes spanning tree can make the wrong decision during an election. You can manually

Re: [PacketFence-users] auth request from wrong switch

2017-11-14 Thread Sokolowski, Darryl via PacketFence-users
Hi Fabrice, Thanks for the response. Weird, I’m not seeing the machine in raddebug. Today, I have a similar situation with multiple machines, but all these are on the same switch, just reporting incorrect ports. Port 5/2 is the correct port, which after multiple attempts to restart the

Re: [PacketFence-users] auth request from wrong switch

2017-11-14 Thread Sokolowski, Darryl via PacketFence-users
Hi thanks for the response. Sorry, I should have offered more detail on environment. All switches are Cisco 3560E. 172.16.0.196 is a switch, all vlans exist on all switches, all switches use vlan1 for management, they are trunked via 10GB ring. I did not set radius source interface. No NATs.

Re: [PacketFence-users] Question about device-registration page

2017-11-14 Thread Marcus Lauer via PacketFence-users
Maybe I should explain what I am envisioning in more detail. The short version is this: If the admin assigns two or more Roles to a Device Registration then the user should be given a choice of Role. Obviously more admins will assign one Role per Device Registration and this will not be an

Re: [PacketFence-users] Recommended Distribution / Version

2017-11-14 Thread Fabrice Durand via PacketFence-users
Ok let me fix that. Btw you can remove the file initial_data.json and do a python manage.py syncdb. Le 2017-11-14 à 04:12, Jason Sloan a écrit : > Looks like there's 2 more dependencies > python-ipaddress > python-idna > > Then it looks like I'm bombing out on an initial data load of some

Re: [PacketFence-users] Recommended Distribution / Version

2017-11-14 Thread Jason Sloan via PacketFence-users
Fabrice, Thanks for the quick response. I just did a clean install on CentOS 7 and Received errors when installing packetfence-pki. Base install. yum update install packetfence repo. yum install --enablerepo=packetfence,packetfence-extra python-cryptography (this is because if packetfence is

Re: [PacketFence-users] Recommended Distribution / Version

2017-11-14 Thread Jason Sloan via PacketFence-users
Looks like there's 2 more dependencies python-ipaddress python-idna Then it looks like I'm bombing out on an initial data load of some sort. Based on the output it looks like the syncdb command is being issued, but the table doesn't exist in the database. Full output: Running transaction