OPNsense Command Prompt

[bimmerdriver]

Does OPNsense have a command prompt, like pfSense Diagnostics / Command Prompt?

[fabian]

yes but only via SSH / RS232 / VGA - not in the web interface

[franco]

Hi,

Was removed a long time ago due to security concerns.


Cheers,
Franco

[bimmerdriver]

I was asking because neither the console nor the ssh are working. I will revert to a previously saved checkpoint.

[fabian]

you should check if the console is correctly configured (for example VGA when using RS232)

[franco]

That's odd. What does "not working mean here" ? Console unresponsive, no login prompt, auth doesn't work?

[bimmerdriver]

That's odd. What does "not working mean here" ? Console unresponsive, no login prompt, auth doesn't work?

Auth not working on both. This was after updating OPNsense 19.7.a_272-amd64. I went back to that version using the saved checkpoint. I didn't report it, because, well, https://forum.opnsense.org/index.php?topic=11540.msg54326#msg54326.

[franco]

I'm sorry, this was frustration speaking over missing dependencies on "make upgrade" alone. New packages need to be built from the ports tree or waited for in the package repos. Functional bugs in the code should always be raised. Sorry for not being clear.

How do you "make upgrade" ? Only this one? It may be that you're missing out on newer packages. The full sequence would be:

# opnsense-update; make upgrade

Maybe before issuing try to see what version pam_opnsense is:

# pkg query %v pam_opnsense

If it's still 17.1(_1) then it may be this issue you're seeing, you need the package at 19.1 at least.


Cheers,
Franco

[bimmerdriver]

I'm sorry, this was frustration speaking over missing dependencies on "make upgrade" alone. New packages need to be built from the ports tree or waited for in the package repos. Functional bugs in the code should always be raised. Sorry for not being clear.

How do you "make upgrade" ? Only this one? It may be that you're missing out on newer packages. The full sequence would be:

# opnsense-update; make upgrade

Maybe before issuing try to see what version pam_opnsense is:

# pkg query %v pam_opnsense

If it's still 17.1(_1) then it may be this issue you're seeing, you need the package at 19.1 at least.


Cheers,
Franco

Thank you for your reply. I know you're busy and you were particularly busy with the kernel issue, so no apology necessary.

I updated by using opnsense-code core; make upgrade.

Just to see if the login issue would return, I did the same thing. It's still there. The version is OPNsense 19.7.a_347-amd64.

Using the console, the error is:
sh: /usr/local/sbin/opnsense-auth: not found
Login incorrect

Using ssh, the error is:

login as: root
Using keyboard-interactive authentication.
Password for root@OPNsense.localdomain:
Access denied

I returned to the checkpoint and tried again.

root@OPNsense:~ # pkg query %v pam_opnsense
17.1

I guess that's the problem, caused by the way I was updating.

I updated again using opnsense-update; make upgrade.

root@OPNsense:~ # pkg query %v pam_opnsense
19.1.3

The problem is fixed. Thanks very much for the help.