Re: [PacketFence-users] Why pfsso restarts itself recently ?

Hi Semaan, My pf version is 7.3. My config file is as below. I just use syslog feature to send ip user mapping info to palo alto firewall. I don??t need to do sso via PF. /usr/local/pf/conf/firewall_sso.con [172.23.4.14] transport=syslog categories=default,employees vsys=1

Re: [PacketFence-users] Why pfsso restarts itself recently ?

Glad to hear that. Thank you so much. Waiting for your good news. -- Original -- From: Julien Semaan Date: ,12?? 21,2017 23:51 To: Yan <1136723...@qq.com>, packetfence-users Subject: Re:

Re: [PacketFence-users] Why pfsso restarts itself recently ?

Hi Yan, Turns out the issue was easier to replicate than expected and even better, the fix was easier than expected. I've uploaded a new binary with the fix here: https://support.inverse.ca/~jsemaan/pfhttpd Here is how to apply the fix: # mv /usr/local/pf/bin/pfhttpd

Re: [PacketFence-users] Why pfsso restarts itself recently ?

Hi Yan, That config confirms my theory, having user/IP mapping sent to your firewall is what we call SSO in PacketFence so you're technically doing it. I've opened the following Github issue to track this problem: https://github.com/inverse-inc/packetfence/issues/2847 I should be able to

Re: [PacketFence-users] Why pfsso restarts itself recently ?

It??s the latest version, V7.3. -- Original -- From: Julien Semaan Date: ,12?? 21,2017 23:23 To: packetfence-users Cc: Yan <1136723...@qq.com> Subject: Re: [PacketFence-users] Why pfsso restarts

Re: [PacketFence-users] Why pfsso restarts itself recently ?

I have a theory of what could be happening. Seems like the formatting of the usernames might be causing issues with multiple firewalls which you do seems to have. Could you send me your /usr/local/pf/conf/firewall_sso.conf (with obfuscated secrets obviously) Regards, -- Julien Semaan

Re: [PacketFence-users] Why pfsso restarts itself recently ?

Hi Yan, Could you provide your PacketFence version? Thanks -- Julien Semaan jsem...@inverse.ca :: +1 (866) 353-6153 *155 ::www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org) On 2017-12-21 09:56 AM, Yan via PacketFence-users wrote: Hi