Hi Yan,
there is a database who is coming with the fingerbank package, so you
can probably found it in /usr/local/fingerbank/db. (yum reinstall
fingerbank if needed)
If you have it (fingerbank_Upstream.db) then you can integrate it into
mysql then the futur update will be just some interim update and not the
whole database.
Regards
Fabrice
Le 2017-10-18 ?? 10:38, Yan via PacketFence-users a ??crit?0?2:
>
> Hi Durand,
>
> I don't have any proxy configured in my server. The cert expire error
> not shows up every time. I just tried to execute wget 3 times, no
> certificate expire error any more, but 1 connection refused and 2
> connection closed during downloading. Is Fingerbank has a timeout
> setting for http connecting ? Is there any other way to download and
> update fingerbank DB ? Or how to initialize this component ?
>
> The first try:
> [root@PacketFence-ZEN ~]# wget
> https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
> --2017-10-18 22:08:35--
> ?0?2https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
> Resolving fingerbank.inverse.ca (fingerbank.inverse.ca)... 167.114.150.85
> Connecting to fingerbank.inverse.ca
> (fingerbank.inverse.ca)|167.114.150.85|:443... failed: Connection refused.
>
> The second try:
> [root@PacketFence-ZEN ~]# wget
> https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
> --2017-10-18 22:12:56--
> ?0?2https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
> Resolving fingerbank.inverse.ca (fingerbank.inverse.ca)... 167.114.150.85
> Connecting to fingerbank.inverse.ca
> (fingerbank.inverse.ca)|167.114.150.85|:443... connected.
> HTTP request sent, awaiting response... 200 OK
> Length: 2020635648 (1.9G) [application/x-sqlite3]
> Saving to: ??download?key=<my-key>??
>
> ?0?23% [=> ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2
> ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2
> ?0?2 ?0?2 ?0?2
> ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ] 70,840,939 ?0?252.1KB/s ?0?2 in 6m 55s
>
> 2017-10-18 22:19:53 (167 KB/s) - Connection closed at byte 70840939.
> Retrying.
>
> --2017-10-18 22:19:54-- ?0?2(try: 2)
> ?0?2https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
> Connecting to fingerbank.inverse.ca
> (fingerbank.inverse.ca)|167.114.150.85|:443... connected.
> HTTP request sent, awaiting response... 200 OK
> Length: 2020635648 (1.9G) [application/x-sqlite3]
> Saving to: ??download?key=<my-key>??
>
> ?0?20% [ ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2
> ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2
> ?0?2 ?0?2 ?0?2 ?0?2
> ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ] 0 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 --.-K/s ?0?2
> in 0.003s
>
>
> Cannot write to ??download?key=<my-key>?? (Success).
>
> The third time is similar to the second time.
>
>
>
> ------------------ Original ------------------
> *From:* packetfence-users <packetfence-users@lists.sourceforge.net>
> *Date:* ????,10?? 18,2017 21:18
> *To:* packetfence-users <packetfence-users@lists.sourceforge.net>
> *Cc:* Fabrice Durand <fdur...@inverse.ca>
> *Subject:* Re: [PacketFence-users] Can't download and update fingerbank DB
>
> Hello Yan,
>
> do you have a proxy between PacketFence and internet ?
>
> When i see your wget command, i can see that :?0?2 "Issued certificate
> has expired" and the fingerbank.inverse.ca certificate is not yet
> expired so there is probably something that block/filter the request.
>
> Regards
>
> Fabrice
>
>
>
> Le 2017-10-17 ?? 22:16, Yan via PacketFence-users a ??crit?0?2:
>>
>> Hi Durand,
>>
>> After "Initialize MYSQL database" the error missing, but now
>> packetfence.log keeps filling with "pfqueue: pfqueue(10132) WARN:
>> [mac:xx:bd:27:xx:xx:xx] Unable to perform a Fingerbank lookup for
>> device with MAC address 'xx:bd:27:xx:xx:xx'
>> (pf::fingerbank::__ANON__)". ?0?2And fingerbank.log is filling with
>> "fingerbank: pfqueue(10133) WARN: [mac:xx:xx:0e:cb:xx:xx] An error
>> occured while interrogating upstream Fingerbank project: 500 Can't
>> connect to fingerbank.inverse.ca:443 (fingerbank::Source::API::__ANON__)
>> Oct 18 09:59:59 PacketFence-ZEN fingerbank: pfqueue(10133) INFO:
>> [mac:xx:xx:0e:cb:xx:xx] Fingerbank API has returned an invalid
>> result, will not cache it. (fingerbank::Source::API::match)".?0?2
>>
>> And I found I can't update fingerbank DB. When I initialize "Update
>> Fingerbank DB" in Configuration--Compliance--Fingerbank
>> Profiling--General Settings--ACTION, I found the error message
>> "pfqueue: pfqueue(10324) ERROR: [mac:unknown] Couldn't update
>> Upstream database, code : 500, msg : An error occurred while updating
>> file '/usr/local/fingerbank/db/fingerbank_Upstream.db'
>> (pf::fingerbank::_update_fingerbank_component)" in packetfence.log. I
>> can manually execute wget cmd to download. Is this meant I have to
>> buy any fingerbank license ? As I noticed fingerbank official website
>> said free license has a 300 times' limit every hour. We can buy it if
>> necessary.
>>
>> [root@PacketFence-ZEN logs]# wget --no-check-certificate
>> https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
>> --2017-10-18 10:09:18--
>> ?0?2https://fingerbank.inverse.ca/api/v1/download?key=<my-key>
>> Resolving fingerbank.inverse.ca (fingerbank.inverse.ca)... 167.114.150.85
>> Connecting to fingerbank.inverse.ca
>> (fingerbank.inverse.ca)|167.114.150.85|:443... connected.
>> WARNING: cannot verify fingerbank.inverse.ca's certificate, issued by
>> ??/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO
>> RSA Domain Validation Secure Server CA??:
>> ?0?2 Issued certificate has expired.
>> HTTP request sent, awaiting response... 200 OK
>> Length: 2020635648 (1.9G) [application/x-sqlite3]
>> Saving to: ??download?key=8c7619e51115bd21f186822f19320edfa528681b??
>>
>> ?0?20% [ ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2
>> ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2
>> ?0?2 ?0?2 ?0?2 ?0?2
>> ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2 ?0?2] 12,525,568 ?0?21.77MB/s
>> ?0?2eta 21m 37s
>>
>> ------------------ Original ------------------
>> *From:* packetfence-users <packetfence-users@lists.sourceforge.net>
>> *Date:* ????,10?? 17,2017 20:29
>> *To:* packetfence-users <packetfence-users@lists.sourceforge.net>
>> *Cc:* Fabrice Durand <fdur...@inverse.ca>
>> *Subject:* Re: [PacketFence-users] Can't download and update
>> fingerbank DB
>>
>> Hello Yan,
>>
>> it looks that you didn't imported fingerbank into mysql.
>>
>> Go in Configuration -> Compliance -> Fingerbank Profiling -> General
>> settings then in Action "Initialize MySQL database".
>>
>>
>> Regards
>>
>> Fabrice
>>
>>
>>
>> Le 2017-10-17 ?? 03:19, Yan via PacketFence-users a ??crit?0?2:
>>> Hi dear users,
>>>
>>> We are using PF V7.2 in our office. We want to use PF to recognize
>>> mobile devices from computers when connecting wireless ssid. It
>>> seems PF define device's type via DHCP fingerprint. Our
>>> packetfence.log keeps logging "pfqueue: pfqueue(1341) WARN:
>>> [mac:ff:ee:dd:cc:bb:aa] Unable to perform a Fingerbank lookup for
>>> device with MAC address 'ff:ee:dd:cc:bb:aa' (pf::fingerbank::__ANON__)".
>>>
>>> And after I ran the "Update Fingerbank DB" button and restart pf
>>> services, the packetfence.log is now filling with "pfqueue(6013)
>>> ERROR: [mac:04:xx:xx:cb:0f:74]
>>> DBIx::Class::Storage::DBI::_dbh_execute(): Table
>>> 'pf_fingerbank.dhcp_vendor' doesn't exist at
>>> /usr/local/pf/lib/fingerbank/Base/CRUD.pm line
>>> 416?0?2(pf::api::can_fork::notify)"
>>>
>>> How to reinstall and update fingerbank ??0?2Anyone could help ??0?2Thank
>>> you very much.
>>>
>>>
>>> ------------------------------------------------------------------------------Check
>>> out the vibrant tech community on one of the world's mostengaging tech
>>> sites, Slashdot.org! http://sdm.link/slashdot
>>>
>>>
>>> _______________________________________________PacketFence-users mailing
>>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>> -- Fabrice durandfdur...@inverse.ca :: +1.514.447.4918 (x135) ::
>> www.inverse.caInverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and
>> PacketFence (http://packetfence.org)
>>
>>
>> ------------------------------------------------------------------------------Check
>> out the vibrant tech community on one of the world's mostengaging tech
>> sites, Slashdot.org! http://sdm.link/slashdot
>>
>>
>> _______________________________________________PacketFence-users mailing
>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>
> -- Fabrice durandfdur...@inverse.ca :: +1.514.447.4918 (x135) ::
> www.inverse.caInverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and
> PacketFence (http://packetfence.org)
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
--
Fabrice Durand
fdur...@inverse.ca :: +1.514.447.4918 (x135) :: www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://packetfence.org)
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
