Hello,

I have been having a strange issue for some time with 802.1x auth on a 
Packetfence instance (v8.1.0 on debian 8.11).

The symptom is, clients that have been authenticated at least one time in the 
past, succeed in authenticating themselves with their computer account in the 
AD domain. But new computers, recently installed and joined to the domain, 
can't. The workaround for now has been to register their mac address.

It had been working Ok for a long time. I don't know why I get now this error :

Mar 10 08:06:52 myserver14 packetfence_httpd.aaa: httpd.aaa(23113) ERROR: 
[mac:48:2a:e3:a5:1a:b1] auto-registration of node failed max nodes per pid met 
or exceeded (pf::radius::authorize)

Could it be related to a database problem ? There has been a problem with 
storage in the datacenter hosting this VM ; when i do a mysqlcheck I get the 
following type of errors (full log attached in mysqlcheck.log) :

mysql.gtid_slave_pos
Error    : Table 'mysql.gtid_slave_pos' doesn't exist in engine
status   : Operation failed

It seems it mostly happens when there has been a problem upgrading mariadb. I 
believe a way to correct this would be to dump the packetfence db, then stop 
mariadb, delete all in /var/lib/mysql, then restart mariadb, set it up and then 
restore the pf db. What do you think ? (no problem is reported when dumping 
packetfence db, only when trying to dump system tables).

Cordialement,
________________________________

[ASTREL]<http://www.astrel.fr/>

Guy BLAVIN
30 Chemin de Revaison
69800 SAINT PRIEST

Email : supp...@astrel.fr<mailto:supp...@astrel.fr>
Web : http://www.astrel.fr<http://www.astrel.fr/>

Tél: 07 68 59 24 12
Fax: 04 72 45 08 19



Attachment: extract-packetfence.log
Description: extract-packetfence.log

Attachment: extract-packetfence.log
Description: extract-packetfence.log

Attachment: mysqlcheck.log
Description: mysqlcheck.log

_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to