OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • Can't Create Users or Groups - No Permissions
« previous next »
  • Print
Pages: [1]

Author Topic: Can't Create Users or Groups - No Permissions  (Read 3208 times)

mestafin

  • Newbie
  • *
  • Posts: 45
  • Karma: 2
    • View Profile
Can't Create Users or Groups - No Permissions
« on: November 15, 2018, 02:57:00 pm »
I am running version 18.7.7 in HA cluster

We use the local database for authentication of users

When logged in as root on the primary fw, it is not possible to create a new User or a new User Group.

The error message is:

You do not have permission to perform this action.

What am I missing here?
Logged

mestafin

  • Newbie
  • *
  • Posts: 45
  • Karma: 2
    • View Profile
Re: Can't Create Users or Groups - No Permissions
« Reply #1 on: November 16, 2018, 09:56:48 am »
Anybody with any help or advice?

Where can I search for log files or other help to debug this problem?
Logged

mestafin

  • Newbie
  • *
  • Posts: 45
  • Karma: 2
    • View Profile
Re: Can't Create Users or Groups - No Permissions
« Reply #2 on: November 16, 2018, 01:18:58 pm »
I think I have a bigger problem with the permissions.

When logged in as root,  I can create a Backup, but I can't restore a backup configuration

Any help on where to look?
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13988
  • Karma: 1211
    • View Profile
Re: Can't Create Users or Groups - No Permissions
« Reply #3 on: November 16, 2018, 06:32:25 pm »
Sure, this is a security fix of 18.7.7 in action:

https://github.com/opnsense/changelog/blob/master/doc/18.7/18.7.7#L5-L11

Your root user, for one reason or another, has the "deny-config-write" privilege which prevents you from doing these things.

If you have another admin, simply remove that from the root user or the offending group...


Cheers,
Franco
Logged

mestafin

  • Newbie
  • *
  • Posts: 45
  • Karma: 2
    • View Profile
Re: Can't Create Users or Groups - No Permissions
« Reply #4 on: November 17, 2018, 10:09:25 am »
I don't have another admin user.

How and where do I remove the "deny-config-write" privilege to be able to add more users and user groups?
Logged

mestafin

  • Newbie
  • *
  • Posts: 45
  • Karma: 2
    • View Profile
Re: Can't Create Users or Groups - No Permissions
« Reply #5 on: November 19, 2018, 06:32:24 pm »
Gentlemen,

I desperately need to fix this issue to allow me to add users and user groups.

The suggested solution does not help me at all.

I have no idea where and how to remove the "deny-config-write" privilege.

Can someone please explain to me how to do this, given that I don't have another user with admin privileges?
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13988
  • Karma: 1211
    • View Profile
Re: Can't Create Users or Groups - No Permissions
« Reply #6 on: November 20, 2018, 06:17:19 am »
Do you have SSH access?
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • Can't Create Users or Groups - No Permissions
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2