Re: [PacketFence-users] pfqueue gets wedged

[Charles R. <cha...@is...>]

On 4/27/17 9:42 AM, Fabrice Durand wrote:
> Hello Charles,
> 
> api:desAssociate is when a device is in process of registration or when
> the unreg date is reached.
> 
> api:fingerbank_process is probably based on the dhcp traffic the server
> receive.
> 
> Do you have some errors in the pfqueue.log ?

I'm seeing some of the following:
Apr 27 09:32:28 pfqueue(125776) WARN: [mac:74:75:48:1a:f5:09] Use of
uninitialized value $n_status in string eq at
/usr/local/pf/lib/pf/roles.pm line 105.
 (pf::roles::getRoleForNode)
Apr 27 09:32:28 pfqueue(125776) ERROR: [mac:74:75:48:1a:f5:09] Use of
uninitialized value $n_status in string eq at
/usr/local/pf/lib/pf/roles.pm line 105.
 (pf::roles::getRoleForNode)
Apr 27 09:32:28 pfqueue(125776) WARN: [mac:74:75:48:1a:f5:09] Use of
uninitialized value $n_status in string eq at
/usr/local/pf/lib/pf/roles.pm line 105.
 (pf::roles::getRoleForNode)
Apr 27 09:32:28 pfqueue(125776) ERROR: [mac:74:75:48:1a:f5:09] Use of
uninitialized value $n_status in string eq at
/usr/local/pf/lib/pf/roles.pm line 105.
 (pf::roles::getRoleForNode)
Apr 27 09:32:28 pfqueue(125776) WARN: [mac:74:75:48:1a:f5:09] Use of
uninitialized value $mac in concatenation (.) or string at
/usr/local/pf/lib/pf/roles.pm line 134.
 (pf::roles::performRoleLookup)
Apr 27 09:32:28 pfqueue(125776) ERROR: [mac:74:75:48:1a:f5:09] Use of
uninitialized value $mac in concatenation (.) or string at
/usr/local/pf/lib/pf/roles.pm line 134.
 (pf::roles::performRoleLookup)
Apr 27 09:32:28 pfqueue(125776) WARN: [mac:74:75:48:1a:f5:09] Use of
uninitialized value in concatenation (.) or string at
/usr/local/pf/lib/pf/roles.pm line 157.
 (pf::roles::_assignRoleFromCategory)
Apr 27 09:32:28 pfqueue(125776) ERROR: [mac:74:75:48:1a:f5:09] Use of
uninitialized value in concatenation (.) or string at
/usr/local/pf/lib/pf/roles.pm line 157.
 (pf::roles::_assignRoleFromCategory)

and
Apr 27 09:43:01 pfqueue(123784) WARN: [mac:cc:44:63:0b:4d:c6] Use of
uninitialized value in numeric eq (==) at /usr/local/pf/lib/pf/iplog.pm
line 870.
 (pf::iplog::__ANON__)
Apr 27 09:43:01 pfqueue(123784) ERROR: [mac:cc:44:63:0b:4d:c6] Use of
uninitialized value in numeric eq (==) at /usr/local/pf/lib/pf/iplog.pm
line 870.
 (pf::iplog::__ANON__)

And a lot of these:

Apr 27 09:43:28 pfqueue(123784) WARN: [mac:ec:9b:f3:95:02:52] Unable to
perform a Fingerbank lookup for device with MAC address
'ec:9b:f3:95:02:52' (pf::fingerbank::__ANON__)

The only thing that I'm getting with relation to CoAs is:
Apr 27 09:26:27 pfqueue(115173) WARN: [mac:50:7a:55:5a:e8:10] Unable to
perform RADIUS Disconnect-Request. CoA-NAK received with Error-Cause:
Session-Context-Not-Found. (pf::Switch::Aruba::radiusDisconnect)

but I'd guess that this is from the pfqueue dumping the back log of CoAs
and the user no longer on the controller.



> Regards
> Fabrice
> 
> Le 2017-04-27 à 09:36, Charles Rumford a écrit :
>> This morning we put our PacketFence installation into production.
>>
>> One of the first things that I noticed was that it appears that the
>> pfqueue gets wedged with task types api:desAssociate and
>> api:fingerbank_process with ever increasing outstanding task counters.
>>
>> If I restart the pfqueue, I see radius CoAs being send for a short
>> period of time, and then nothing, until I restart the pfqueue again.
>>
>> Has anyone else seen this? If so, suggestions on how to fix it?
> 


-- 
Charles Rumford
Senior Network Engineer
ISC Tech Services
University of Pennsylvania
OpenPGP Key ID: 0xF3D8215A