Heyho,
after upgrading firewalls to OPNsense 26.7.6_3-amd64, the "High Availability" sync did not work anymore. When I go to System > High Availability > Status, I immediately see the following error message highlighted in yellow:
"The backup firewall is not accessible (check user credentials)"
After a few attempts to configure it, I sent a request directly from the main firewall to the backup firewall using curl and received the following response:
root@fw01:~ # curl -k -m 15 -u 'ha:password123' -H "Content-Type: text/xml" -d '<?xml version="1.0"?><methodCall><methodName>opnsense.firmware_version</methodName><params/></methodCall>' https://fw02.ha.localnet/xmlrpc.php
Deprecated: Function xml_set_object() is deprecated since 8.4, provide a proper method callable to xml_set_*_handler() functions in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 210
Deprecated: xml_set_element_handler(): Passing non-callable strings is deprecated since 8.4 in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 211
Deprecated: xml_set_character_data_handler(): Passing non-callable strings is deprecated since 8.4 in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 212
Deprecated: Function xml_parser_free() is deprecated since 8.5, as it has no effect since PHP 8.0 in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 227
Warning: Cannot modify header information - headers already sent by (output started at /usr/local/opnsense/contrib/IXR/IXR_Library.php:210) in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 465
Warning: Cannot modify header information - headers already sent by (output started at /usr/local/opnsense/contrib/IXR/IXR_Library.php:210) in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 466
Warning: Cannot modify header information - headers already sent by (output started at /usr/local/opnsense/contrib/IXR/IXR_Library.php:210) in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 467
Warning: Cannot modify header information - headers already sent by (output started at /usr/local/opnsense/contrib/IXR/IXR_Library.php:210) in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 468
<?xml version="1.0"?>
<methodResponse>
<params>
<param>
<value>
<struct>
<member><name>base</name><value><struct>
<member><name>version</name><value><string>26.7.6</string></value></member>
</struct></value></member>
<member><name>firmware</name><value><struct>
<member><name>version</name><value><string>26.7.6_3</string></value></member>
</struct></value></member>
<member><name>kernel</name><value><struct>
<member><name>version</name><value><string>26.7.6</string></value></member>
</struct></value></member>
</struct>
</value>
</param>
</params>
</methodResponse>
Disabling php warnings both on master and backup firewall solved the problem; but this should only be a workaround. Would be great if this is fixed within one of the next upgrades :-)
Workaround:
pkg install nano
nano +30 /usr/local/opnsense/service/templates/OPNsense/WebGui/php.ini=> replace on with off
configctl webgui restart
Cheers!
Hi,
Thanks for the report. FWIW it's likely this is only reproducible when the deployment type is set to "development" in System -> Settings -> Administration, otherwise these warnings should be silenced.
Should be fixed with https://github.com/opnsense/core/commit/00afadefce308c2a701ad2c9d5baeacec668c136
# opnsense-patch 00afade
Quote from: krawum on Today at 02:27:05 PMpkg install nano
You don't need
nano because FreeBSD has
edit a.k.a.
ee by default and it's pretty much the same thing, maybe even easier than
nano for some ;)
Thank you so much for fixing it so quickly!
Actually, the firewall is set to "Development"... It's our sandbox/test cluster — who knows which colleague was messing around with it...
@nero355: Sorry, looks like I'm just more of a linux dude... ;-)
vim is love, vim is life