Good Morning Fabrice

After a little more testing I have found the following additional information.

The error is more tied to the user account.  If this is also deleted the error 
occurs.  But the strange thing is given time (not sure how long but it is at 
least hours) the error self rectifies.  This suggests a clean up action solves 
the problem or it is a cache that is not getting correctly cleared.

Any ideas?

Kind Regards

Simon



Royal HaskoningDHV - Internal Use Only
From: Simon Sutcliffe
Sent: 24 January 2022 15:18
To: Fabrice Durand <oeufd...@gmail.com>
Cc: packetfence-users@lists.sourceforge.net; Raghuram Kuricheti 
<raghuram.kurich...@rhdhv.com>
Subject: Challenge with a machine that has been provisioned.


Good Morning Fabrice



I hope you had a good weekend.  We continue our adventures in the lab and I 
would like to see if you can assist with a bug that I have logged in the Github


I made the mistake and deleted another node again that had been put though the 
DPSK provisioner.  This is part two of the provisioner bug mentioned below I 
filed on GitHub

https://github.com/inverse-inc/packetfence/issues/6780<https://urldefense.com/v3/__https:/github.com/inverse-inc/packetfence/issues/6780__;!!GjvTz_vk!A6UD74lDRaf4R6EcBoshhPF3ydf_ii5J04tYrklaDzwvpQQb9cRpGgZoURQ6dWA$>

Now every time it attaches to the captive portal we get the following error and 
the node is unusable.

Jan 24 15:52:52 packetfence packetfence_httpd.aaa[2087]: httpd.aaa(1446) INFO: 
[mac:1c:4d:70:eb:2f:12] handling radius autz request: from switch_ip => 
(10.7.239.241), connection_type => Wireless-802.11-NoEAP,switch_mac => 
(dc:8c:37:8c:2e:a0), mac => [1c:4d:70:eb:2f:12], port => 1, username => 
"1c4d70eb2f12", ssid => RHDHV-OPEN (pf::radius::authorize)
Jan 24 15:52:52 packetfence packetfence_httpd.aaa[2087]: httpd.aaa(1446) INFO: 
[mac:1c:4d:70:eb:2f:12] Instantiate profile RHDHV-OPEN 
(pf::Connection::ProfileFactory::_from_profile)
Jan 24 15:52:52 packetfence packetfence_httpd.aaa[2087]: httpd.aaa(1446) INFO: 
[mac:1c:4d:70:eb:2f:12] is of status unreg; belongs into registration VLAN 
(pf::role::getRegistrationRole)
Jan 24 15:52:52 packetfence packetfence_httpd.aaa[2087]: httpd.aaa(1446) INFO: 
[mac:1c:4d:70:eb:2f:12] (10.7.239.241) Added VLAN 7 to the returned RADIUS 
Access-Accept (pf::Switch::returnRadiusAccessAccept)
Jan 24 15:52:52 packetfence packetfence_httpd.aaa[2087]: httpd.aaa(1446) INFO: 
[mac:1c:4d:70:eb:2f:12] (10.7.239.241) Added role Pre-Auth-For-Registration to 
the returned RADIUS Access-Accept (pf::Switch::returnRadiusAccessAccept)
Jan 24 15:52:52 packetfence packetfence_httpd.aaa[2087]: httpd.aaa(1446) INFO: 
[mac:1c:4d:70:eb:2f:12] handling radius autz request: from switch_ip => 
(10.7.239.241), connection_type => Wireless-802.11-NoEAP,switch_mac => 
(dc:8c:37:8c:2e:a0), mac => [1c:4d:70:eb:2f:12], port => 1, username => 
"1c4d70eb2f12", ssid => RHDHV-OPEN (pf::radius::authorize)
Jan 24 15:52:52 packetfence packetfence_httpd.aaa[2087]: httpd.aaa(1446) INFO: 
[mac:1c:4d:70:eb:2f:12] Instantiate profile RHDHV-OPEN 
(pf::Connection::ProfileFactory::_from_profile)
Jan 24 15:52:52 packetfence packetfence_httpd.aaa[2087]: httpd.aaa(1446) INFO: 
[mac:1c:4d:70:eb:2f:12] is of status unreg; belongs into registration VLAN 
(pf::role::getRegistrationRole)
Jan 24 15:52:52 packetfence packetfence_httpd.aaa[2087]: httpd.aaa(1446) INFO: 
[mac:1c:4d:70:eb:2f:12] (10.7.239.241) Added VLAN 7 to the returned RADIUS 
Access-Accept (pf::Switch::returnRadiusAccessAccept)
Jan 24 15:52:52 packetfence packetfence_httpd.aaa[2087]: httpd.aaa(1446) INFO: 
[mac:1c:4d:70:eb:2f:12] (10.7.239.241) Added role Pre-Auth-For-Registration to 
the returned RADIUS Access-Accept (pf::Switch::returnRadiusAccessAccept)
Jan 24 15:52:54 packetfence packetfence_httpd.aaa[3054]: httpd.aaa(1446) INFO: 
[mac:1c:4d:70:eb:2f:12] Updating locationlog from accounting request 
(pf::api::handle_accounting_metadata)
Jan 24 15:52:54 packetfence packetfence_httpd.aaa[3054]: httpd.aaa(1446) WARN: 
[mac:1c:4d:70:eb:2f:12] Unable to pull accounting history for device 
1c:4d:70:eb:2f:12. The history set doesn't exist yet. 
(pf::accounting_events_history::latest_mac_history)
Jan 24 15:52:55 packetfence pfqueue[4727]: pfqueue(4727) INFO: 
[mac:1c:4d:70:eb:2f:12] Sending a firewall SSO 'Update' request for MAC 
'1c:4d:70:eb:2f:12' and IP '10.207.129.227' (pf::firewallsso::do_sso)
Jan 24 15:52:55 packetfence pfqueue[4727]: pfqueue(4727) INFO: 
[mac:1c:4d:70:eb:2f:12] Request to /api/v1/firewall_sso/update is unauthorized, 
will perform a login (pf::api::unifiedapiclient::call)
Jan 24 15:52:55 packetfence pfqueue[5419]: pfqueue(5419) INFO: 
[mac:1c:4d:70:eb:2f:12] Instantiate profile RHDHV-OPEN 
(pf::Connection::ProfileFactory::_from_profile)
Jan 24 15:52:55 packetfence pfqueue[4790]: pfqueue(4790) WARN: 
[mac:1c:4d:70:eb:2f:12] Unable to pull accounting history for device 
1c:4d:70:eb:2f:12. The history set doesn't exist yet. 
(pf::accounting_events_history::latest_mac_history)
Jan 24 15:52:55 packetfence pfqueue[4790]: pfqueue(4790) WARN: 
[mac:1c:4d:70:eb:2f:12] Unable to pull accounting history for device 
1c:4d:70:eb:2f:12. The history set doesn't exist yet. 
(pf::accounting_events_history::latest_mac_history)
Jan 24 15:53:01 packetfence packetfence_httpd.portal[4460]: httpd.portal(4460) 
INFO: [mac:1c:4d:70:eb:2f:12] Instantiate profile RHDHV-OPEN 
(pf::Connection::ProfileFactory::_from_profile)
Jan 24 15:53:02 packetfence packetfence_httpd.portal[4460]: httpd.portal(4460) 
ERROR: [mac:1c:4d:70:eb:2f:12] Database query failed with non retryable error: 
Cannot add or update a child row: a foreign key constraint fails (`pf`.`node`, 
CONSTRAINT `0_57` FOREIGN KEY (`tenant_id`, `pid`) REFERENCES `person` 
(`tenant_id`, `pid`) ON DELETE CASCADE ON UPDATE CASCADE) (errno: 1452) [INSERT 
INTO `node` ( `autoreg`, `bandwidth_balance`, `bypass_role_id`, `bypass_vlan`, 
`category_id`, `computername`, `detect_date`, `device_class`, 
`device_manufacturer`, `device_score`, `device_type`, `device_version`, 
`dhcp6_enterprise`, `dhcp6_fingerprint`, `dhcp_fingerprint`, `dhcp_vendor`, 
`last_arp`, `last_dhcp`, `last_seen`, `lastskip`, `mac`, `machine_account`, 
`notes`, `pid`, `regdate`, `sessionid`, `status`, `tenant_id`, `time_balance`, 
`unregdate`, `user_agent`, `voip`) VALUES ( ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 
?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ? ) ON DUPLICATE KEY 
UPDATE `category_id` = ?, `pid` = ?, `tenant_id` = ?, `unregdate` = ?]{no, 
NULL, NULL, NULL, 16, Corporate-05614, 2022-01-24 15:27:07, Windows OS, Intel 
Corporate, 90, Microsoft Windows Kernel 10.0, 10, , , 
1,3,6,15,31,33,43,44,46,47,119,121,249,252, MSFT 5.0, 0000-00-00 00:00:00, 
2022-01-24 15:52:55, 2022-01-24 15:53:02, 0000-00-00 00:00:00, 
1c:4d:70:eb:2f:12, NULL, NULL, 
simon.sutcli...@rhdhv.com<mailto:simon.sutcli...@rhdhv.com>, 0000-00-00 
00:00:00, 0a07eff10000009161eebdb9, unreg, 1, NULL, 2022-01-24 15:28:46, 
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like 
Gecko) Chrome/96.0.4664.55 Safari/537.36 Edg/96.0.1054.43, no, 16, 
simon.sutcli...@rhdhv.com<mailto:simon.sutcli...@rhdhv.com>, 1, 2022-01-24 
15:28:46} (pf::dal::db_execute)
Jan 24 15:53:02 packetfence packetfence_httpd.portal[4460]: httpd.portal(4460) 
ERROR: [mac:1c:4d:70:eb:2f:12] Unable to modify node '1c:4d:70:eb:2f:12 
(pf::node::node_modify)
Jan 24 15:53:02 packetfence packetfence_httpd.portal[4460]: httpd.portal(4460) 
INFO: [mac:1c:4d:70:eb:2f:12] Found provisioner Staff-DPSK for 
1c:4d:70:eb:2f:12 
(captiveportal::PacketFence::DynamicRouting::Module::Provisioning::execute_child)
Jan 24 15:53:02 packetfence packetfence_httpd.portal[4460]: httpd.portal(4460) 
ERROR: [mac:1c:4d:70:eb:2f:12] Caught exception in 
captiveportal::Controller::Root->dynamic_application "Can't use string ("0") as 
a HASH ref while "strict refs" in use at 
/usr/local/pf/lib/pf/provisioner/mobileconfig.pm line 342." 
(captiveportal::PacketFence::Controller::Root::end)

I have removed everything I can from the GUI so it must be something lingering 
in the DB.

Any ideas?

Kind Regards

Simon





Royal HaskoningDHV - Internal Use Only

This email and any attachments are intended solely for the use of the 
addressee(s); disclosure or copying by others than the intended person(s) is 
strictly prohibited. If you have received this email in error, please treat 
this email as confidential, notify the sender and delete all copies of the 
email immediately
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to