Menu
▾
▴
Re: [PacketFence-users] Signup doesn't work
|
From: Andy A <and...@ho...> - 2015-07-09 22:20:48
|
Okay thanks. After it's been reworked, I believe there will be a minor version release?
Date: Tue, 7 Jul 2015 07:40:38 -0400
From: fd...@in...
To: pac...@li...
Subject: Re: [PacketFence-users] Signup doesn't work
It will probably be merge in the stable version but i have to rework
it.
Regards
Fabrice
Le 2015-07-06 14:01, Andy A a écrit :
Okay. Thanks. So when I have to redo the setup on a
different server in the future, I am assuming that I have apply
the patch, right? or is this patch going to make it to the main
code base?
Date: Mon, 6 Jul 2015 08:57:14 -0400
From: fd...@in...
To: pac...@li...
Subject: Re: [PacketFence-users] Signup doesn't work
Hi Andy,
Le 2015-07-06 08:06, Andy A a écrit :
Hi Fabrice.
After testing on all the device I can say that the
hack that you provided works.
Can you explain to me, what was the problem and
what does this hack fix so that I understand it for
future reference.
The problem in your setup is that something close the
locationlog entry of the device so packetfence don't know
what to do after the registration.
What i did in the patch is to add a new locationlog entry
just after the registration, so packetfence know that it
have to re-évaluate the access by dealing with ipset.
Regards
Fabrice
Thanks a lot for your help.
Date: Thu, 2 Jul 2015
09:48:54 -0400
From: fd...@in...
To: pac...@li...
Subject: Re: [PacketFence-users] Signup doesn't work
Hello Andy,
so can you apply this on your setup (5.2):
https://github.com/inverse-inc/packetfence/compare/feature/hybrid_mode_by_vlan_filter.diff
And in vlan_filters.conf add this:
[all]
filter = node_info
operator = match
attribute = mac
value = (.*)
[6:all]
scope = InlinePortalRegistration
role = 1
And restart pf and retry.
Regards
Fabrice
Le 2015-07-01 14:43,
Andy A a écrit :
Hey Fabrice.
Thanks. Happy Canada day.
Date: Wed, 1 Jul
2015 12:41:18 -0400
From: fd...@in...
To: pac...@li...
Subject: Re: [PacketFence-users] Signup
doesn't work
Hi Andy,
today is a day of in Canada, i will be back
to you tomorrow with a hack.
Regards
Fabrice
Le
2015-07-01 07:27, Andy A a écrit :
Anything else I can look at
to get this working?
From: and...@ho...
To: pac...@li...
Date: Tue, 30 Jun 2015 16:17:39 +0000
Subject: Re: [PacketFence-users]
Signup doesn't work
Hi Fabrice
More testing on this. I have
observed that if I connect the
device on a 'WIRED' connection to
the inline VLAN end_time appears
NULL in locationlog.
So far all the logs that I have
sent in the previous posts, are
with a wireless device connected
to the inline VLAN.
Thanks
From: and...@ho...
To: pac...@li...
Date: Tue, 30 Jun 2015 12:17:46
+0000
Subject: Re: [PacketFence-users]
Signup doesn't work
Hi Fabrice.
I have modified the code
and added the logger line to
api.pm and connected
the laptop over vlan
(haven't registered the
device yet) here's the log
httpd.webservices(19776)
WARN: 172.31.30.11,
172.31.30.11, , 0, 0,
60:03:08:a5:84:3a, no,
32, , ,,
(pf::api::synchronize_locationlog)
httpd.webservices(19776)
WARN: 172.31.30.11,
172.31.30.11, , 0, 0,
60:03:08:a5:84:3a, no,
32, , ,,
(pf::api::synchronize_locationlog)
Here's the entry in
locationlog table.
(end_time IS NOT null)
select * from
locationlog where mac
= '60:03:08:a5:84:3a';
+-------------------+--------------+------+------+-----------------+----------------+------+---------------------+---------------------+--------------+------------+--------------------+-------+------------+
| mac
| switch | port
| vlan |
connection_type |
dot1x_username | ssid
| start_time
| end_time
| switch_ip |
switch_mac |
stripped_user_name |
realm | session_id |
+-------------------+--------------+------+------+-----------------+----------------+------+---------------------+---------------------+--------------+------------+--------------------+-------+------------+
| 60:03:08:a5:84:3a
| 172.31.30.11 | 0
| 0 | Inline
| |
| 2015-06-30
13:11:42 | 2015-06-30
13:11:45 |
172.31.30.11 | NULL
| NULL
| NULL | NULL
|
+-------------------+--------------+------+------+-----------------+----------------+------+---------------------+---------------------+--------------+------------+--------------------+-------+------------+
1 row in set (0.00
sec)
Date:
Thu, 25 Jun 2015
14:00:09 -0400
From: fd...@in...
To: pac...@li...
Subject: Re:
[PacketFence-users]
Signup doesn't work
Hi
Andy,
i tried to replicate
your issue on a pf 5.2
and i can't replicate
it.
The only thing that
can update the
locationlog in an
inline setup is the
pfdhcplistener.
So what i want you to
do is the following:
edit api.pm and change
the function
synchronize_locationlog
with that:
--------------------
sub
synchronize_locationlog
: Public {
my ( $class,
$switch, $switch_ip,
$switch_mac, $ifIndex,
$vlan, $mac,
$voip_status,
$connection_type,
$connection_sub_type,
$user_name, $ssid
,$stripped_user_name,
$realm) = @_;
my $logger =
pf::log::get_logger();
$logger->warn(
"$switch, $switch_ip,
$switch_mac, $ifIndex,
$vlan, $mac,
$voip_status,
$connection_type,
$connection_sub_type,
$user_name, $ssid
,$stripped_user_name,
$realm");
return
(pf::locationlog::locationlog_synchronize($switch,
$switch_ip,
$switch_mac, $ifIndex,
$vlan, $mac,
$voip_status,
$connection_type,
$connection_sub_type,
$user_name, $ssid,
$stripped_user_name,
$realm));
}
--------------------
and restart
httpd.webservices
Delete the locationlog
entry
delete from
locationlog where
mac="60:03:08:a5:84:3a";
Plug the laptop on the
inline vlan and check
immediately in the
locationlog the last
entry for the
60:03:08:a5:84:3a mac
address (the end time
should be NULL).
Also check
packetfence.log like
this:
tail -f
logpacketfence.log|grep
synchronize_locationlog
And give me the
result.
Regards
Fabrice
Le 2015-06-25 12:11,
Andy A a écrit :
Here
are all the entries
+-------------------+--------------+------+------+-----------------+----------------+------+---------------------+---------------------+--------------+------------+--------------------+-------+------------+
| mac
| switch
| port |
vlan |
connection_type
| dot1x_username
| ssid |
start_time
| end_time
|
switch_ip |
switch_mac |
stripped_user_name
| realm |
session_id |
+-------------------+--------------+------+------+-----------------+----------------+------+---------------------+---------------------+--------------+------------+--------------------+-------+------------+
|
60:03:08:a5:84:3a
| 172.31.30.12 |
0 | 0 |
Inline
|
| |
2015-04-30
15:49:32 |
2015-04-30
16:23:52 |
172.31.30.12 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.12 |
0 | 0 |
Inline
|
| |
2015-04-30
16:33:53 |
2015-04-30
16:35:53 |
172.31.30.12 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-05-05
17:47:47 |
2015-05-05
17:49:20 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-05-05
18:05:05 |
2015-05-05
18:06:47 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-05-05
18:29:30 |
2015-05-05
18:41:59 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-05-06
06:39:36 |
2015-05-06
06:41:02 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-05-08
13:43:43 |
2015-05-08
13:46:11 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-05-08
17:28:52 |
2015-05-08
17:30:11 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-05-12
12:19:22 |
2015-05-12
12:36:27 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-05-12
12:51:52 |
2015-05-12
12:53:27 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-05-12
16:29:57 |
2015-05-12
16:31:28 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-05-15
13:05:27 |
2015-05-15
13:23:09 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-05-15
13:23:53 |
2015-05-15
13:25:09 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-05-15
13:25:21 |
2015-05-15
14:14:09 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-16
12:53:01 |
2015-06-16
12:54:09 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-16
16:04:48 |
2015-06-17
16:05:15 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-18
13:00:46 |
2015-06-19
12:23:24 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-19
17:17:37 |
2015-06-19
17:18:01 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-20
05:17:40 |
2015-06-20
05:18:04 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-20
17:17:40 |
2015-06-20
17:18:06 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-21
05:17:41 |
2015-06-21
05:18:07 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-21
17:17:43 |
2015-06-21
17:18:09 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-22
05:17:46 |
2015-06-22
05:18:12 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-23
14:40:07 |
2015-06-23
14:40:22 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-23
14:46:39 |
2015-06-23
14:57:55 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-23
14:58:43 |
2015-06-23
14:58:55 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-23
16:28:13 |
2015-06-23
16:40:04 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-23
16:45:41 |
2015-06-23
16:46:04 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-24
04:45:44 |
2015-06-24
04:46:07 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-24
11:52:58 |
2015-06-24
11:53:08 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-24
11:53:41 |
2015-06-24
11:54:08 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-24
12:07:56 |
2015-06-24
12:08:08 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-24
13:21:54 |
2015-06-24
13:24:55 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-24
13:26:21 |
2015-06-24
13:50:55 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-24
15:39:57 |
2015-06-24
16:01:57 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-24
16:12:20 |
2015-06-24
16:12:57 |
172.31.30.11 |
NULL |
NULL
| NULL | NULL
|
|
60:03:08:a5:84:3a
| 172.31.30.11 |
0 | 0 |
Inline
|
| |
2015-06-24
16:38:36 |
2015-06-24
16:39:01 |
172.31.30.11 |
NULL |
...
[truncated message content] |
