Hello Lennart,

There is a good chance it’s because you don’t have the VIP in place ?

Did you do that :

3.1.2. sysctl.conf 
<https://www.packetfence.org/doc/PacketFence_Clustering_Guide.html#_sysctl_conf>
You will need to configure each server so the services can bind on IP addresses 
they don’t currently have configured. This allows faster failover of the 
services.

You also need to disable IPv6.

On all your servers, add following lines in /etc/sysctl.conf:

net.ipv4.ip_nonlocal_bind = 1
net.ipv6.conf.all.disable_ipv6 = 1
and run:

sysctl -p
reboot

You can check if your server owns the VIP:

ip a| grep 32

Thanks,

Ludovic Zammit
Product Support Engineer Principal Lead

Cell: +1.613.670.8432
Akamai Technologies - Inverse
145 Broadway
Cambridge, MA 02142
Connect with Us:         <https://community.akamai.com/>  
<http://blogs.akamai.com/>  <https://twitter.com/akamai>  
<http://www.facebook.com/AkamaiTechnologies>  
<http://www.linkedin.com/company/akamai-technologies>  
<http://www.youtube.com/user/akamaitechnologies?feature=results_main>

> On May 12, 2025, at 10:47 AM, Lennart.Volz--- via PacketFence-users 
> <packetfence-users@lists.sourceforge.net> wrote:
> 
> !-------------------------------------------------------------------|
>  This Message Is From an External Sender
>  This message came from outside your organization.
> |-------------------------------------------------------------------!
> 
> Hey everyone,
> 
> I need help with my cluster configuration, which should be RADIUS only. 
> When I restart the pf-services with /usr/local/pf/bin/pfcmd service pf 
> restart, the service packetfence-haproxy-db.service does not start (I guess 
> because i use proxysql), and the service 
> packetfence-radiusd-load_balancer.service does not start. 
> 
> Error Message from journalctl:
> Error: Failed binding to auth address 10.164.48.122 port 1812 bound to server 
> pf.cluster: Address already in use
> 16:32:06 2025 : Error: /usr/local/pf/raddb/load_balancer.conf[29]: Error 
> binding to port for 10.164.48.122 port 1812
> 
> But the port 1812 is not occuped at all: 
> 
> root@pf1:~# sudo netstat -tulnp | grep 1812
> udp        0      0 127.0.0.1:18121         0.0.0.0:*                         
>   483896/freeradius
> 
> This is my current cluster.conf file: 
> [general]
> multi_zone=enabled
> [CLUSTER]
> management_ip=10.164.48.122
> [CLUSTER interface ens192]
> ip=10.164.48.122
> [pf1]
> management_ip=10.164.48.122
> [pf1 interface ens192]
> ip=10.164.48.122
> [pf2]
> management_ip=10.164.48.160
> [pf2 interface ens192]
> ip=10.164.48.160
> [pf3]
> management_ip=10.164.48.161
> [pf3 interface ens192]
> ip=10.164.48.161
> 
> This is my pfconfig file:
> [mysql]
> db=pf
> user=pf
> pass=xxxx
> [mysql]
> host=100.64.0.1
> port=6033
> 
> And this the pf.conf:
> [general]
> domain=xx
> hostname=pf1
> timezone=Europe/Berlin
> [database]
> db=pf
> user=pf
> pass=xxx
> configurator=disabled
> openid_attributes=
> [interface ens192]
> type=management,high-availability
> mask=255.255.255.0
> ip=10.164.48.122
> [database]
> host=100.64.0.1
> port=6033
> [active_active]
> galera_replication_username=pfcluster
> galera_replication_password=xxx
> [webservices]
> user=packet
> pass=xx
> #[advanced]
> #configurator=disabled
> [services]
> galera-autofix=disabled
> 
> Any ideas?
> 
> Thanks for your help!
> 
> Lennart
> 
> 
> 
> 
> 
> _______________________________________________
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://urldefense.com/v3/__https://lists.sourceforge.net/lists/listinfo/packetfence-users__;!!GjvTz_vk!RWqTvX_8tI2fyODY5kFa9tvFHky9fuAAb-7-4GYlgnUoDVMAaCj1rW1OKJh8fspSMtCyaKCtMhRN3Sot96xzJy4Yd7oItUvsaVluRg$
>  

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to