Hello.
I am testing new release of PF.
I am continuously facing out with tho errors on captive portal.
1. You computer was not found in database. I see correct IP address and MAC:0
on portal-page
this is packetfence.log
May 05 23:58:39 httpd.aaa(1704) INFO: [mac:58:a2:b5:7e:7f:37] handling radius
autz request: from switch_ip => (10.40.64.56), connection_type =>
Wireless-802.11-NoEAP,switch_mac => (cc:d8:c1:3b:9d:10), mac =>
[58:a2:b5:7e:7f:37], port => 13, username => "58a2b57e7f37", ssid => test
(pf::radius::authorize)
May 05 23:58:39 httpd.aaa(1704) INFO: [mac:58:a2:b5:7e:7f:37] is of status
unreg; belongs into registration VLAN (pf::role::getRegistrationRole)
May 05 23:58:39 httpd.aaa(1704) INFO: [mac:58:a2:b5:7e:7f:37] (10.40.64.56)
Added VLAN 667 to the returned RADIUS Access-Accept
(pf::Switch::returnRadiusAccessAccept)
May 05 23:58:39 httpd.aaa(1704) INFO: [mac:58:a2:b5:7e:7f:37] (10.40.64.56)
Added role ACL_Permit_All to the returned RADIUS Access-Accept
(pf::Switch::returnRadiusAccessAccept)
May 05 23:58:40 httpd.aaa(1704) INFO: [mac:58:a2:b5:7e:7f:37] Adding web
authentication redirection to reply using role : registration and URL :
http://10.40.26.6/cep5d3110. (pf::Switch::Cisco::WLC::returnRadiusAccessAccept)
May 05 23:58:40 httpd.aaa(1704) INFO: [mac:58:a2:b5:7e:7f:37] Updating
locationlog from accounting request (pf::api::handle_accounting_metadata)
May 05 23:58:40 httpd.portal(2371) INFO: [mac:[undef]] Dealing with a endpoint
/ browser with captive-portal detection capabilities while having a self-signed
SSL certificate. Using HTTP instead of HTTPS (pf::web::dispatcher::handler)
May 05 23:58:40 httpd.portal(2371) INFO: [mac:[undef]] Instantiate a new
iptables modification method. pf::ipset (pf::inline::get_technique)
May 05 23:58:41 httpd.portal(2217) INFO: [mac:0] Dealing with a endpoint /
browser with captive-portal detection capabilities while having a self-signed
SSL certificate. Using HTTP instead of HTTPS (pf::web::dispatcher::handler)
May 05 23:58:41 httpd.portal(2217) INFO: [mac:0] Instantiate a new iptables
modification method. pf::ipset (pf::inline::get_technique)
May 05 23:58:41 httpd.portal(2370) INFO: [mac:[undef]] Memory configuration is
not valid anymore for key config::Pf in local cached_hash
(pfconfig::cached::is_valid)
May 05 23:58:41 httpd.portal(2370) INFO: [mac:[undef]] Dealing with a endpoint
/ browser with captive-portal detection capabilities while having a self-signed
SSL certificate. Using HTTP instead of HTTPS (pf::web::dispatcher::handler)
May 05 23:58:41 httpd.portal(2370) INFO: [mac:[undef]] Instantiate a new
iptables modification method. pf::ipset (pf::inline::get_technique)
May 05 23:58:43 httpd.portal(2347) INFO: [mac:[undef]] Dealing with a endpoint
/ browser with captive-portal detection capabilities while having a self-signed
SSL certificate. Using HTTP instead of HTTPS (pf::web::dispatcher::handler)
May 05 23:58:43 httpd.portal(2347) INFO: [mac:[undef]] Instantiate a new
iptables modification method. pf::ipset (pf::inline::get_technique)
May 05 23:58:44 httpd.portal(2369) INFO: [mac:[undef]] Memory configuration is
not valid anymore for key config::Pf in local cached_hash
(pfconfig::cached::is_valid)
May 05 23:58:44 httpd.portal(2369) INFO: [mac:[undef]] Instantiate a new
iptables modification method. pf::ipset (pf::inline::get_technique)
May 05 23:58:44 httpd.portal(1968) INFO: [mac:0] Instantiate a new iptables
modification method. pf::ipset (pf::inline::get_technique)
May 05 23:58:44 httpd.portal(2347) INFO: [mac:unknown] Memory configuration is
not valid anymore for key resource::stats_levels in local cached_hash
(pfconfig::cached::is_valid)
May 05 23:58:44 httpd.portal(2347) WARN: [mac:unknown] Unable to match MAC
address to IP '192.168.67.14' (pf::iplog::ip2mac)
May 05 23:58:44 httpd.portal(2347) INFO: [mac:unknown] Instantiate profile
default (pf::Portal::ProfileFactory::_from_profile)
May 05 23:58:44 httpd.portal(2347) WARN: [mac:unknown] Unable to match MAC
address to IP '192.168.67.14' (pf::iplog::ip2mac)
May 05 23:58:44 httpd.portal(2347) WARN: [mac:0] Unable to match MAC address to
IP '192.168.67.14' (pf::iplog::ip2mac)
May 05 23:58:44 httpd.portal(2347) INFO: [mac:0] Instantiate profile default
(pf::Portal::ProfileFactory::_from_profile)
May 05 23:58:44 httpd.portal(2347) WARN: [mac:0] Unable to match MAC address to
IP '192.168.67.14' (pf::iplog::ip2mac)
May 05 23:58:44 httpd.portal(2347) INFO: [mac:0] Instantiate profile default
(pf::Portal::ProfileFactory::_from_profile)
May 05 23:58:44 httpd.portal(2347) INFO: [mac:0] Updating node user_agent with
useragent: 'Mozilla/5.0 (Linux; Android 5.0.2; LG-D802 Build/LRX22G)
AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile
Safari/537.36'
(captiveportal::PacketFence::DynamicRouting::Application::process_user_agent)
May 05 23:58:44 httpd.portal(2347) INFO: [mac:0] database query failed with:
Duplicate entry '0' for key 'PRIMARY' (errno: 1062) (pf::db::db_query_execute)
May 05 23:58:44 httpd.portal(2347) INFO: [mac:0] Static User-Agent lookup data
initialized (pf::useragent::_init)
May 05 23:58:44 httpd.portal(2347) INFO: [mac:0] violation not added, MAC 0 is
invalid! trigger useragent::105 (pf::violation::violation_trigger)
May 05 23:58:44 httpd.portal(2347) INFO: [mac:0] violation not added, MAC 0 is
invalid! trigger useragent::4 (pf::violation::violation_trigger)
May 05 23:58:44 httpd.portal(2347) INFO: [mac:0] violation not added, MAC 0 is
invalid! trigger useragent::404 (pf::violation::violation_trigger)
May 05 23:58:44 httpd.portal(2347) INFO: [mac:0] violation not added, MAC 0 is
invalid! trigger useragent::300 (pf::violation::violation_trigger)
May 05 23:58:44 httpd.portal(2347) INFO: [mac:0] violation not added, MAC 0 is
invalid! trigger useragent::403 (pf::violation::violation_trigger)
May 05 23:58:44 httpd.portal(2347) INFO: [mac:0] violation not added, MAC 0 is
invalid! trigger useragent::100 (pf::violation::violation_trigger)
May 05 23:58:49 httpd.aaa(1704) INFO: [mac:00:23:14:82:3f:34] Updating
locationlog from accounting request (pf::api::handle_accounting_metadata)
#
May 05 23:59:40 httpd.aaa(1704) INFO: [mac:58:a2:b5:7e:7f:37] handling radius
autz request: from switch_ip => (10.40.64.56), connection_type =>
Wireless-802.11-NoEAP,switch_mac => (cc:d8:c1:3b:9d:10), mac =>
[58:a2:b5:7e:7f:37], port => 13, username => "58a2b57e7f37", ssid => test
(pf::radius::authorize)
May 05 23:59:40 httpd.aaa(1704) INFO: [mac:58:a2:b5:7e:7f:37] is of status
unreg; belongs into registration VLAN (pf::role::getRegistrationRole)
May 05 23:59:40 httpd.aaa(1704) INFO: [mac:58:a2:b5:7e:7f:37] (10.40.64.56)
Added VLAN 667 to the returned RADIUS Access-Accept
(pf::Switch::returnRadiusAccessAccept)
May 05 23:59:40 httpd.aaa(1704) INFO: [mac:58:a2:b5:7e:7f:37] (10.40.64.56)
Added role ACL_Permit_All to the returned RADIUS Access-Accept
(pf::Switch::returnRadiusAccessAccept)
May 05 23:59:40 httpd.aaa(1704) INFO: [mac:58:a2:b5:7e:7f:37] Adding web
authentication redirection to reply using role : registration and URL :
http://10.40.26.6/cep3d541c. (pf::Switch::Cisco::WLC::returnRadiusAccessAccept)
May 05 23:59:42 httpd.portal(2371) INFO: [mac:[undef]] Dealing with a endpoint
/ browser with captive-portal detection capabilities while having a self-signed
SSL certificate. Using HTTP instead of HTTPS (pf::web::dispatcher::handler)
May 05 23:59:42 httpd.portal(2371) INFO: [mac:[undef]] Instantiate a new
iptables modification method. pf::ipset (pf::inline::get_technique)
May 05 23:59:44 httpd.portal(2342) INFO: [mac:0] Dealing with a endpoint /
browser with captive-portal detection capabilities while having a self-signed
SSL certificate. Using HTTP instead of HTTPS (pf::web::dispatcher::handler)
May 05 23:59:44 httpd.portal(2342) INFO: [mac:0] Instantiate a new iptables
modification method. pf::ipset (pf::inline::get_technique)
May 05 23:59:44 httpd.portal(2356) INFO: [mac:[undef]] Dealing with a endpoint
/ browser with captive-portal detection capabilities while having a self-signed
SSL certificate. Using HTTP instead of HTTPS (pf::web::dispatcher::handler)
May 05 23:59:44 httpd.portal(2356) INFO: [mac:[undef]] Instantiate a new
iptables modification method. pf::ipset (pf::inline::get_technique)
May 06 00:00:00 httpd.portal(2370) INFO: [mac:[undef]] Instantiate a new
iptables modification method. pf::ipset (pf::inline::get_technique)
May 06 00:00:00 httpd.portal(2369) INFO: [mac:unknown] Memory configuration is
not valid anymore for key resource::stats_levels in local cached_hash
(pfconfig::cached::is_valid)
May 06 00:00:00 httpd.portal(2369) INFO: [mac:unknown] Instantiate profile
default (pf::Portal::ProfileFactory::_from_profile)
May 06 00:00:00 httpd.portal(2369) INFO: [mac:58:a2:b5:7e:7f:37] Instantiate
profile default (pf::Portal::ProfileFactory::_from_profile)
May 06 00:00:00 httpd.portal(2369) INFO: [mac:58:a2:b5:7e:7f:37] Instantiate
profile default (pf::Portal::ProfileFactory::_from_profile)
May 06 00:00:00 httpd.portal(2369) INFO: [mac:58:a2:b5:7e:7f:37] Updating node
user_agent with useragent: 'Mozilla/5.0 (Linux; Android 5.0.2; LG-D802
Build/LRX22G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile
Safari/537.36'
(captiveportal::PacketFence::DynamicRouting::Application::process_user_agent)
May 06 00:00:00 httpd.portal(2369) INFO: [mac:58:a2:b5:7e:7f:37] Static
User-Agent lookup data initialized (pf::useragent::_init)
May 06 00:00:00 httpd.portal(2369) INFO: [mac:58:a2:b5:7e:7f:37] Found source
AD-Users in session. (Class::MOP::Class:::around)
May 06 00:00:00 httpd.portal(2369) INFO: [mac:58:a2:b5:7e:7f:37] Found source
AD-Users in session. (Class::MOP::Class:::around)
May 06 00:00:00 httpd.portal(2369) INFO: [mac:58:a2:b5:7e:7f:37] Found source
AD-Users in session. (Class::MOP::Class:::around)
May 06 00:00:00 httpd.portal(2369) INFO: [mac:58:a2:b5:7e:7f:37] Found source
AD-Users in session. (Class::MOP::Class:::around)
May 06 00:00:00 httpd.portal(2369) INFO: [mac:58:a2:b5:7e:7f:37] Found source
AD-Users in session. (Class::MOP::Class:::around)
May 06 00:00:00 httpd.portal(2369) INFO: [mac:58:a2:b5:7e:7f:37] Found source
AD-Users in session. (Class::MOP::Class:::around)
May 06 00:00:28 httpd.portal(2346) INFO: [mac:unknown] Memory configuration is
not valid anymore for key resource::stats_levels in local cached_hash
(pfconfig::cached::is_valid)
May 06 00:00:28 httpd.portal(2346) WARN: [mac:unknown] Unable to match MAC
address to IP '192.168.67.19' (pf::iplog::ip2mac)
May 06 00:00:28 httpd.portal(2346) INFO: [mac:unknown] Instantiate profile
default (pf::Portal::ProfileFactory::_from_profile)
May 06 00:00:28 httpd.portal(2346) WARN: [mac:unknown] Unable to match MAC
address to IP '192.168.67.19' (pf::iplog::ip2mac)
May 06 00:00:28 httpd.portal(2346) WARN: [mac:0] Unable to match MAC address to
IP '192.168.67.19' (pf::iplog::ip2mac)
May 06 00:00:28 httpd.portal(2346) INFO: [mac:0] Instantiate profile default
(pf::Portal::ProfileFactory::_from_profile)
May 06 00:00:28 httpd.portal(2346) WARN: [mac:0] Unable to match MAC address to
IP '192.168.67.19' (pf::iplog::ip2mac)
May 06 00:00:28 httpd.portal(2346) INFO: [mac:0] Instantiate profile default
(pf::Portal::ProfileFactory::_from_profile)
#
May 06 00:00:45 httpd.portal(2370) INFO: [mac:[undef]] Dealing with a endpoint
/ browser with captive-portal detection capabilities while having a self-signed
SSL certificate. Using HTTP instead of HTTPS (pf::web::dispatcher::handler)
May 06 00:00:45 httpd.portal(2370) INFO: [mac:[undef]] Instantiate a new
iptables modification method. pf::ipset (pf::inline::get_technique)
2. You dont have permission to register device with this username
What could be reason of such behaviour?
I am not sure if PF6 is ready for production.
--
Andrey Vorobyev
------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
