Topics

I have tried to add additional ports to the list i.e net/netatalk3, I have got a failure on the configure part saying there is an error in CONFIG ARGS used i.e kerberos. However there is no issue with the Makefile or the source this is something to do with OPNsense way of building ports why I am thinking that because of the following

1. I could compile OPNsense ports i.e /usr/ports/net/netatalk3  by using make, make install command. It works fine and installed properly.
2. When I added this to config/22.7/ports.conf I could see the build failing at a different stage. I think its mostly to with the way of PORT compile method or mostly environment issue to deal with.
3. I tried with the mainstream GIT of freebsd ports by using make, make install command. It works fine and installed properly.

Could you please throw some points how the make ports works in OPNsense how different the command are different from the one which I used.

Attached only limited logs..

* FreeBSD specific configuration
checking for ldconfig... /sbin/ldconfig
NETA_LDCONFIG = /sbin/ldconfig
no
checking whether to enable AFS support... no
checking for cracklib support... no
checking whether to enable verbose debug code... no
checking whether to enable debugging with debuggers... no
checking for libiconv... yes
checking for working iconv... yes
checking whether iconv supports UCS-2-INTERNAL... yes
checking whether or not to use Database Daemon CNID backend... yes
checking whether or not to use BDB Concurrent Data Store... no
checking whether or not to use LAST DID scheme... yes
checking whether or not to use TDB DID scheme... yes
checking MySQL library and headers... checking default DID scheme... dbd
checking whether default CNID scheme has been activated... yes
checking for main in -lrpcsvc... yes
checking rpc/rpc.h usability... yes
checking rpc/rpc.h presence... yes
checking for rpc/rpc.h... yes
checking rpc/pmap_prot.h usability... no
checking rpc/pmap_prot.h presence... yes
configure: WARNING: rpc/pmap_prot.h: present but cannot be compiled
configure: WARNING: rpc/pmap_prot.h:     check for missing prerequisite headers?
configure: WARNING: rpc/pmap_prot.h: see the Autoconf documentation
configure: WARNING: rpc/pmap_prot.h:     section "Present But Cannot Be Compiled"
configure: WARNING: rpc/pmap_prot.h: proceeding with the compiler's result
checking for rpc/pmap_prot.h... no
checking rpcsvc/rquota.h usability... yes
checking rpcsvc/rquota.h presence... yes
checking for rpcsvc/rquota.h... yes
checking for getfsquota in -lquota... no
checking pkg-config is at least version 0.9.0... yes
checking avahi-client/client.h usability... yes
checking avahi-client/client.h presence... no
configure: WARNING: avahi-client/client.h: accepted by the compiler, rejected by the preprocessor!
configure: WARNING: avahi-client/client.h: proceeding with the compiler's result
checking for avahi-client/client.h... yes
checking for avahi_client_new in -lavahi-client... yes
checking for AVAHI... yes
checking for AVAHI_TPOLL... yes
checking whether to enable Zerconf support... yes
checking whether to enable the TCP wrappers... yes
checking for PAM installation directory... no
checking for includable common PAM config... no (using defaut pam_unix.so)
checking whether to enable PAM support... no
checking shadow.h usability... no
checking shadow.h presence... no
checking for shadow.h... no
checking whether shadow support should be enabled... no
checking whether checking for a valid shell should be enabled... yes
disabling init-style support
checking for libgcrypt-config... /usr/local/bin/libgcrypt-config
checking for LIBGCRYPT - version >= 1.2.3... yes (1.9.4)
checking libgcrypt API version... okay
checking libgcrypt hast CAST5 API... yes
configure: Enabling DHX2 UAM
checking for SSL... /usr/local (enabling RANDNUM and DHX support)
checking for main in -lcrypto... yes
checking for main in -ldes... no
checking for Berkeley DB headers in /usr/local/include/db5... yes
checking /usr/local/include/db5/db.h version >= 4.6.0... yes
checking Berkeley DB library (-ldb53)... no
checking Berkeley DB library (-ldb5.3)... no
checking Berkeley DB library (-ldb-53)... no
checking Berkeley DB library (-ldb-5.3)... 5.3.28 ... yes
checking crypt.h usability... no
checking crypt.h presence... no
checking for crypt.h... no
checking for main in -lcrypt... yes
checking whether the PGP UAM should be build... no
checking whether Kerberos V UAM should be build... no
checking for Kerberos 5 (necessary for GetSrvrInfo:DirectoryNames support)... yes
checking krb5/krb5.h usability... no
checking krb5/krb5.h presence... no
checking for krb5/krb5.h... no
checking krb5.h usability... no
checking krb5.h presence... no
checking for krb5.h... no
checking kerberosv5/krb5.h usability... no
checking kerberosv5/krb5.h presence... no
checking for kerberosv5/krb5.h... no
configure: error: --with-kerberos was given, but no headers found
See `config.log' for more details
[20220907070004] ===> Script "configure" failed unexpectedly.
Please report the problem to marcus@FreeBSD.org [maintainer] and attach the

I have tried to build code base of FreeBSD 13.1 by switching the /usr/src branch to volatile/22.7.  I have cleaned the previous kernel by triggering make clean-kernel from which got it from stable/22.1.  Was able to generate the iso by doing  "make update && make SETTINGS="22.1" dvd". When I checked the uname -r from the live CD of new iso I could find the version is 13.0-STABLE and not 13.1-RELEASE. What am I missing ?.  Could you guide me how to build kernel based out of FreeBSD 13.1 codeine.

I would like to build the beta code line 22.x. Kindly share the steps to follow. I have tried the existing method using FreeBSD 13.0 the build failed at make base itself. Any inputs are most welcome.

Hi All,
I am testing Opnsene 19.2 have enabled Captive Portal and Transparent proxy for HTTP/HTTPS. My problem is that when i check the Squid Log i could only see the client logged IP address and mac but not the username. Is that as per design ? Do we have a way to get it working by tweaking configuration/patch ? Or What should be the best approach?  if I have to write a script to append authenticated username via Captive Portal  in Squid access log along with IP address, mac and username suggest me where to start with.

Thanks

I have two WAN links

WAN1: PPPoE (default) 4Mbps
WAN2: Static IP (~4Mbps to 11Mbps)

MULTIWANGRP = WAN1 (Tier1)+WAN2 (Tier1) & Trigger=PacketLoss

I have setup everything as per how-to document. DNS rule , Firewall RULE for ipv Gateway to MULTIWANGRP. The issue as follows

When my firewall boots up the the Internet start working  from WAN2 for my LAN. After the PPPoE comes up on WAN1 the Internet bandwidth is still not aggregated as speed always stay to 4Mbps.  Looks like the second WAN2 is not getting any traffic load shared.

My ethernet is EM interfaces i have fixed the kmod Intel-driver. Searching  Forum reported isues very closer as follows
https://forum.opnsense.org/index.php?topic=3560.msg13148#msg13148

Was thinking to go to 16.1 (legacy) but there also some issues reported w.r.t WAN PPPoE
https://github.com/opnsense/core/issues/850

Not sure what is blocking MULTI WAN to work. Any help

I have setup Squid proxy with Transparent HTTPS, however i am unable to get the proxy to work with user authentication. When the clients behind firewall could get access  to internet without any authentication (local user) . Kindly help me to fix this.

I have validated the following.

1. Local user has been created
2. Firewall authentication has been set to Local Database .

I tired to check out the master and compiled how ever the latest dev branch was able to build only OPNsense 16.7.a. Where should i checkout the latest code for OPNsense 16.7.b_78-amd64 release?

Hi,

I have compiled master branch and my ISO gets generated successfully. While trying to install using quick mode the installer failed . Let me know what should be looked into to get rid of this error .

I am interested in building arm/powerpc / mips kernel. Can build "make everything" generates arm/powerpc /mips iso/img files ? 

Any help ?

I am trying to build custom Opnsense from the main.

--My configuration as follows--
  ===================
1. VM BSD10.3 with 4G RAM and 2 core processor.
2. Free Space of mounted drive  is more than 50%.
3. Fresh git checkout as per https://github.com/opnsense/tools/blob/master/README.md

I tired to do "make everything" and it ran into issues as follows
=======================================================
/usr/src/lib/libc/iconv/citrus_stdenc.c:44:3: error: use of undeclared identifier '_citrus_NONE_stdenc_ops'; did you mean '_citrus_stdenc_open'?
        &_citrus_NONE_stdenc_ops,       /* ce_ops */
         ^~~~~~~~~~~~~~~~~~~~~~~
         _citrus_stdenc_open
/usr/src/lib/libc/iconv/citrus_stdenc.h:56:6: note: '_citrus_stdenc_open' declared here
int      _citrus_stdenc_open(struct _citrus_stdenc * __restrict * __restrict,
         ^
/usr/src/lib/libc/iconv/citrus_stdenc.c:47:3: error: use of undeclared identifier '_citrus_NONE_stdenc_traits'
        &_citrus_NONE_stdenc_traits,    /* ce_traits */
         ^
1625 warnings and 2 errors generated.
--- citrus_stdenc.So ---
*** [citrus_stdenc.So] Error code 1

make[4]: stopped in /usr/src/lib/libc
1 error

make[4]: stopped in /usr/src/lib/libc
--- lib/libc__L ---
*** [lib/libc__L] Error code 2

make[3]: stopped in /usr/src
1 error

make[3]: stopped in /usr/src
--- libraries ---
*** [libraries] Error code 2

make[2]: stopped in /usr/src
1 error

make[2]: stopped in /usr/src
--- _libraries ---
*** [_libraries] Error code 2

make[1]: stopped in /usr/src
1 error

make[1]: stopped in /usr/src
--- buildworld ---
*** [buildworld] Error code 2

make: stopped in /usr/src
1 error

make: stopped in /usr/src
*** Error code 2

Stop.
make: stopped in /usr/tools
root@fbsd10dot3:/usr/tools #
===========================================

Any help ?

Thanks