Hi Nicolas,
Looked at all of them and from what I can see the IP Address is correct for the
management IP. The systemctl status is active:
● packetfence-haproxy-admin.service - PacketFence HAProxy Load Balancer for the
Admin GUI
Loaded: loaded (/lib/systemd/system/packetfence-haproxy-admin.service;
enabled; vendor preset: enabled)
Active: active (running) since Thu 2021-06-24 14:44:10 BST; 24h ago
Process: 14403 ExecStartPre=/usr/bin/perl -I/usr/local/pf/lib
-Mpf::services::manager::haproxy_admin -e
pf::services::manager::haproxy_admin->new()->generateConfig() (code=exited,
status=0/SUCCESS)
Main PID: 14464 (haproxy)
Tasks: 2 (limit: 9830)
CGroup: /packetfence.slice/packetfence-haproxy-admin.service
├─14464 /usr/sbin/haproxy -Ws -f
/usr/local/pf/var/conf/haproxy-admin.conf -p
/usr/local/pf/var/run/haproxy-admin.pid
└─14466 /usr/sbin/haproxy -Ws -f
/usr/local/pf/var/conf/haproxy-admin.conf -p
/usr/local/pf/var/run/haproxy-admin.pid
The other journal logs indicates an SSL handshake error which I would expect as
were going to the management address in the web address:
Jun 25 14:39:13 dc-pf haproxy[14466]: 172.30.0.152:51338
[25/Jun/2021:14:39:13.290] admin-https-192.168.221.71/1: SSL handshake failure
Jun 25 14:39:29 dc-pf haproxy[14466]: 172.30.0.152:52901
[25/Jun/2021:14:39:29.171] admin-https-192.168.221.71/1: SSL handshake failure
Jun 25 14:39:29 dc-pf haproxy[14466]: 172.30.0.152:57768
[25/Jun/2021:14:39:29.171] admin-https-192.168.221.71/1: SSL handshake failure
Jun 25 14:39:29 dc-pf haproxy[14466]: 172.30.0.152:51826
[25/Jun/2021:14:39:29.181] admin-https-192.168.221.71/1: SSL handshake failure
Jun 25 14:39:29 dc-pf haproxy[14466]: 172.30.0.152:64266
[25/Jun/2021:14:39:29.190] admin-https-192.168.221.71~
admin-https-192.168.221.71/<NOSRV> 0/-1/-1/-1/0 302 84 - - LR-- 1/1/0/0/0 0/0
{192.168.221.71:1443} "GET / HTTP/1.1"
Jun 25 14:39:29 dc-pf haproxy[14466]: 172.30.0.152:64266
[25/Jun/2021:14:39:29.194] admin-https-192.168.221.71~ static/<NOSRV> 0/0/0/0/0
404 252 - - ---- 1/1/0/0/0 0/0 {192.168.221.71:1443} "GET /admin HTTP/1.1"
Jun 25 14:39:29 dc-pf haproxy[14466]: 172.30.0.152:53567
[25/Jun/2021:14:39:29.306] admin-https-192.168.221.71/1: SSL handshake failure
Jun 25 14:39:29 dc-pf haproxy[14466]: 172.30.0.152:60343
[25/Jun/2021:14:39:29.310] admin-https-192.168.221.71~ static/<NOSRV> 0/0/0/0/1
404 252 - - ---- 1/1/0/0/0 0/0 {192.168.221.71:1443} "GET /favicon.ico HTTP/1.1"
Regards,
Talan
From: Quiniou-Briand, Nicolas <[email protected]>
Sent: 25 June 2021 13:39
To: Talan Westby <[email protected]>;
[email protected]
Subject: RE: Convert Cluster to Standalone
CAUTION: This email originated from outside of the organization. Do not click
links or open attachments unless you recognize the sender and know the content
is safe.
Hello Talan,
You should look at packetfence-haproxy-admin service.
Check:
- packetfence-haproxy-admin service status and journal (systemctl status
packetfence-haproxy-admin and journalctl -u packetfence-haproxy-admin -xe)
- packetfence-haproxy-admin configuration
(/usr/local/pf/var/conf/haproxy-admin.conf)
In configuration, you should find a frontend like “frontend
admin-https-X.X.X.X” with X.X.X.X your management IP address.
Nicolas Quiniou-Briand
Product Support Engineer
[cid:[email protected]]
Office: +33156696210
Akamai Technologies
145 Broadway
Cambridge, MA 02142
Connect with Us:
[cid:[email protected]]<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcommunity.akamai.com%2F&data=04%7C01%7CTalan.Westby%40derby-college.ac.uk%7Ce956bc60b6a641268a5208d937d637be%7C7584d7479421477d8345bedc5d73bc46%7C0%7C0%7C637602215466709350%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=4rRvrTBdWzRsgRp%2FLlTaAtNny%2Bq8aE%2Fy9ipDiRmp8qE%3D&reserved=0>
[cid:[email protected]]
<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fblogs.akamai.com%2F&data=04%7C01%7CTalan.Westby%40derby-college.ac.uk%7Ce956bc60b6a641268a5208d937d637be%7C7584d7479421477d8345bedc5d73bc46%7C0%7C0%7C637602215466719347%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=9uYlfNE4rzb3CfzDjVefWsEP5Zub3VTo0UAA%2Bx8LLVA%3D&reserved=0>
[cid:[email protected]]
<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Fakamai&data=04%7C01%7CTalan.Westby%40derby-college.ac.uk%7Ce956bc60b6a641268a5208d937d637be%7C7584d7479421477d8345bedc5d73bc46%7C0%7C0%7C637602215466719347%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=XW0Kdr92H%2FvlEPpZu9Z8f4IwbQEUW6CY1qbzwUR6FKo%3D&reserved=0>
[cid:[email protected]]
<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.facebook.com%2FAkamaiTechnologies&data=04%7C01%7CTalan.Westby%40derby-college.ac.uk%7Ce956bc60b6a641268a5208d937d637be%7C7584d7479421477d8345bedc5d73bc46%7C0%7C0%7C637602215466729337%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=B%2FYOkhAoCc2icCysLBvjz%2FS7gH3SPXPr6xaJwsU87LI%3D&reserved=0>
[cid:[email protected]]
<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fakamai-technologies&data=04%7C01%7CTalan.Westby%40derby-college.ac.uk%7Ce956bc60b6a641268a5208d937d637be%7C7584d7479421477d8345bedc5d73bc46%7C0%7C0%7C637602215466729337%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=3STQRkI753z%2B1FF8zmmy%2BtdnHDUUfh4e50tTDY%2BN6ns%3D&reserved=0>
[cid:[email protected]]
<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.youtube.com%2Fuser%2Fakamaitechnologies%3Ffeature%3Dresults_main&data=04%7C01%7CTalan.Westby%40derby-college.ac.uk%7Ce956bc60b6a641268a5208d937d637be%7C7584d7479421477d8345bedc5d73bc46%7C0%7C0%7C637602215466739336%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=5pki8WMAZKu8U91m7yD5o7xi9%2BLKJ0mm9CDeeBSl%2BcQ%3D&reserved=0>
_____________________________________
This electronic message contains information from Derby College which may be
privileged and confidential.
The information is intended to be for the use of the individual(s) or entity
named above.
If you are not the intended recipient, be aware that any disclosure, copying,
distribution or use of the contents of this information is prohibited. Internet
communications are not secure and therefore Derby College does not accept legal
responsibility for the contents of this message. Any views or opinions
presented are only those of the author and not those of Derby College.
ONLY if you have received this message in error, please email
[email protected] immediately, ensuring that you copy and paste the body
of this message so that we can respond to your query.
_________________________________________
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users