0001662: [Violation] Action "Send email" doesn't get executed if the violation is enabled - PacketFence

Bug Tracking System

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Tags

No tags attached.

fixed in git revision

fixed in mtn revision

Attached Files

violation.txt [^] (4,004 bytes) 2013-07-08 07:21 [Show Content] [Hide Content]

Jul 08 09:47:17 pfsetvlan(1) INFO: secureMacAddrViolation trap received on xxx.xxx.xxx.xxx ifIndex 23 for 00:08:c9:xx:xx:xx (main::handleTrap)
Use of uninitialized value in string eq at /usr/local/pf/lib/pf/node.pm line 989.
Jul 08 09:47:17 pfsetvlan(1) INFO: Will try to check on this node's previous switch if secured entry needs to be removed. Old Switch IP: xxx.xxx.xxx.xxx (main::do_port_security)
Jul 08 09:47:17 pfsetvlan(1) INFO: de-authorizing 00:08:c9:xx:xx:xx (new entry 02:00:00:00:00:15) at old location xxx.xxx.xxx.xxx ifIndex 15 (main::do_port_security)
Jul 08 09:47:18 pfsetvlan(1) INFO: node 00:08:c9:xx:xx:xx does not yet exist in PF database. Adding it now (main::node_update_PF)
Jul 08 09:47:18 pfsetvlan(1) INFO: calling '/usr/local/pf/bin/pfcmd violation add vid=4000001,mac=00:08:c9:xx:xx:xx,release_date=0' (trigger vendormac::2249) (pf::violation::violation_trigger)
Jul 08 09:47:20 pfcmd.pl(4487) INFO: pfcmd calling violation_add for 00:08:c9:xx:xx:xx (main::command_param)
Jul 08 09:47:20 pfcmd.pl(4487) INFO: grace expired on violation 4000001 for node 00:08:c9:xx:xx:xx (pf::violation::violation_add)
Jul 08 09:47:20 pfcmd.pl(4487) INFO: violation 4000001 added for 00:08:c9:xx:xx:xx (pf::violation::violation_add)
Jul 08 09:47:20 pfcmd.pl(4487) INFO: executing action 'email' on class 4000001 (pf::action::action_execute)
Jul 08 09:47:20 pfcmd.pl(4487) INFO: loading Net::MAC::Vendor cache from /usr/local/pf/conf/oui.txt (pf::util::load_oui)
Insecure dependency in connect while running with -T switch at /usr/lib/perl/5.14/IO/Socket.pm line 114.
Jul 08 09:47:23 pfsetvlan(1) WARN: Problem trying to run command: /usr/local/pf/bin/pfcmd 'violation add vid=4000001,mac=00:08:c9:xx:xx:xx,release_date="0"' called from violation_trigger. Child exited with non-zero value 29 (pf::util::pf_run)
Jul 08 09:47:23 pfsetvlan(1) INFO: MAC: 00:08:c9:xx:xx:xx is of status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Jul 08 09:47:23 pfsetvlan(1) INFO: authorizing 00:08:c9:xx:xx:xx at new location xxx.xxx.xxx.xxx ifIndex 23 (main::handleTrap)
Jul 08 09:47:23 pfsetvlan(1) INFO: finished (main::cleanupAfterThread)
Jul 08 09:47:25 pfdhcplistener(4437) INFO: violation 4000001 (trigger vendormac::2249) already exists for 00:08:c9:xx:xx:xx, not adding again (pf::violation::violation_trigger)
Jul 08 09:47:26 pfdhcplistener(4437) INFO: violation 4000001 (trigger vendormac::2249) already exists for 00:08:c9:xx:xx:xx, not adding again (pf::violation::violation_trigger)
Jul 08 09:47:26 pfdhcplistener(4437) INFO: DHCPOFFER from xxx.xxx.xxx.xxx (xx:xx:xx:xx:xx:xx) to host 00:08:c9:xx:xx:xx (xxx.xxx.xxx.xxx) (main::parse_dhcp_offer)
Jul 08 09:47:26 pfdhcplistener(4437) INFO: violation 4000001 (trigger vendormac::2249) already exists for 00:08:c9:xx:xx:xx, not adding again (pf::violation::violation_trigger)
Jul 08 09:47:26 pfdhcplistener(4437) INFO: DHCPREQUEST from 00:08:c9:xx:xx:xx (xxx.xxx.xxx.xxx) (main::parse_dhcp_request)
Jul 08 09:47:26 pfdhcplistener(4437) INFO: could not resolve xxx.xxx.xxx.xxx to mac in ARP table (pf::iplog::ip2macinarp)
Jul 08 09:47:28 pfdhcplistener(4437) INFO: could not resolve xxx.xxx.xxx.xxx to mac in ARP table (pf::iplog::ip2macinarp)
Jul 08 09:47:28 pfdhcplistener(4437) WARN: could not resolve xxx.xxx.xxx.xxx to mac (pf::iplog::ip2mac)
Jul 08 09:47:28 pfdhcplistener(4437) WARN: unable to resolve 00:08:c9:xx:xx:xx to ip (pf::iplog::mac2ip)
Jul 08 09:47:28 pfdhcplistener(4437) INFO: Unknown DHCP fingerprint: 1,3,15,28,23 (DHCP Message Type: DHCPREQUEST) (main::process_fingerprint)
Jul 08 09:47:28 pfdhcplistener(4437) INFO: 00:08:c9:xx:xx:xx requested an IP. Unknown DHCP fingerprint. Modified node with last_dhcp = 2013-07-08 09:47:28,computername = HDTV,dhcp_fingerprint = 1,3,15,28,23 (main::listen_dhcp)
Jul 08 09:47:28 pfdhcplistener(4437) INFO: violation 4000001 (trigger vendormac::2249) already exists for 00:08:c9:xx:xx:xx, not adding again (pf::violation::violation_trigger)

Relationships

Notes
(0003355) fdurand (administrator) 2013-07-31 20:01	Hello, can you edit action.pm and comment the line pfmailer(%message); You will not receive an email but it's just to see if if will have the "Insecure dependency in connect while running with -T switch at /usr/lib/perl/5.14/IO/Socket.pm line 114." error. If it works (if the role is set) it mean that it's the pfmailer function the problem so edit the file util.pm and in the pfmailer sub use the untaint_chain on somes variables like: my $smtpserver = untaint_chain($Config{'alerting'}{'smtpserver'}); .... Regards Fabrice

(0003363) fmts (reporter) 2013-08-01 07:12	Hi Fabrice, As you said, it's a pfmailer issue. With your "untaint_chain"-line it works like a charm. Thanks, Florian

(0003364) fdurand (administrator) 2013-08-01 08:10	Ok thanks, it has been fixed in devel. Fabrice

Issue History
Date Modified	Username	Field	Change
2013-07-08 07:21	fmts	New Issue
2013-07-08 07:21	fmts	File Added: violation.txt
2013-07-31 20:01	fdurand	Note Added: 0003355
2013-08-01 07:12	fmts	Note Added: 0003363
2013-08-01 08:10	fdurand	Note Added: 0003364
2013-08-01 08:10	fdurand	Status	new => resolved
2013-08-01 08:10	fdurand	Resolution	open => fixed
2013-08-01 08:10	fdurand	Assigned To	=> fdurand