Messages

1

24.7 Production Series / 24.7.1 audit errors

« on: August 09, 2024, 07:05:28 pm »

***GOT REQUEST TO AUDIT CONNECTIVITY***
Currently running OPNsense 24.7.1 at Fri Aug  9 12:49:38 EDT 2024
Checking connectivity for host: pkg.opnsense.org -> 89.149.222.99
PING 89.149.222.99 (89.149.222.99): 1500 data bytes
1508 bytes from 89.149.222.99: icmp_seq=0 ttl=51 time=105.736 ms
1508 bytes from 89.149.222.99: icmp_seq=1 ttl=51 time=107.117 ms
1508 bytes from 89.149.222.99: icmp_seq=2 ttl=51 time=107.185 ms
1508 bytes from 89.149.222.99: icmp_seq=3 ttl=51 time=105.891 ms

--- 89.149.222.99 ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 105.736/106.482/107.185/0.671 ms
Checking connectivity for repository (IPv4): https://pkg.opnsense.org/FreeBSD:14:amd64/24.7
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 838 packages processed.
Updating SunnyValley repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: ......... done
Processing entries: ..... done
SunnyValley repository update completed. 66 packages processed.
All repositories are up to date.
Checking connectivity for host: pkg.opnsense.org -> 2001:1af8:5300:a010:1::1
ping: UDP connect: No route to host
Checking connectivity for repository (IPv6): https://pkg.opnsense.org/FreeBSD:14:amd64/24.7
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/meta.txz: No route to host
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.pkg: No route to host
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.txz: No route to host
Unable to update repository OPNsense
Updating SunnyValley repository catalogue...
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:14:amd64/24.7/${SUBSCRIPTION}/meta.txz: No route to host
repository SunnyValley has no meta file, using default settings
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:14:amd64/24.7/${SUBSCRIPTION}/packagesite.pkg: No route to host
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:14:amd64/24.7/${SUBSCRIPTION}/packagesite.txz: No route to host
Unable to update repository SunnyValley
Error updating repositories!
Checking server certificate for host: pkg.opnsense.org
depth=2 OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
verify return:1
depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign GCC R3 DV TLS CA 2020
verify return:1
depth=0 CN = pkg.opnsense.org
verify return:1
DONE
***DONE***


***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 24.7.1 at Fri Aug  9 12:51:08 EDT 2024
>>> Root file system: /dev/gpt/rootfs
>>> Check installed kernel version
Version 24.7.1 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 24.7.1 is correct.
>>> Check for missing or altered base files
Error 2 occurred.
etc/sysctl.conf:
   size (299, 364)
   sha256digest (0x45f469e7a9b4eef887bab7b55397305043fe101e1d6ce6f7e23d758e72f56dc6, 0x69344d6e7acbd6e60e93c10865e489c54293af7143ef5cc58127aa67175d0dd2)
>>> Check installed repositories
OPNsense
SunnyValley
>>> Check installed plugins
os-sensei 1.17.6
os-sensei-updater 1.17
os-sunnyvalley 1.4_3
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" has 68 dependencies to check.
Checking packages: ..................................................................... done
***DONE***

2

24.1 Legacy Series / LDAP + TOTP issue with 24.1

« on: February 06, 2024, 08:34:29 pm »

Since upgrading to 24.1 this morning I get calls about VPN connection issues using the LDAP + TOTP. This was working prior with 23.7.12. I am using google authenticator for TOTP. When using the System\Access\Tester I can verify the accounts works with the google authenticator. When I test using my laptop and hotspot I get the same issue on my accounts as the users when attempting to connect on the VPN. I am using OpenVPN and I have to toggle the backend authentication to get just LDAP to work. Since working on this issue I have seen that 24.1.1 has come out and I applied those updates but still not resolved the issue.

Thanks
Steve