Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - SMiTTY

#1
Is something lacking or not updating in the business edition? We manage a number of them and the GeoIP database is from 2024-11-22T18:41:22.  On my personal FW, it is 2025-02-07T11:43:20
#2
24.7, 24.10 Legacy Series / Re: Better 2FA Login
January 23, 2025, 10:28:06 PM
PR created ... Hope this finally gets some traction.

https://github.com/opnsense/core/pull/8241
#3
24.7, 24.10 Legacy Series / Better 2FA Login
January 23, 2025, 05:46:35 PM
Hey all,

I submitted the following Issue/Feature request. If you would also find this helpful and a better solution than what we have, please respond and let the Devs know you are interested :)

https://github.com/opnsense/core/issues/8239

The current setup of 2FA is a bit janky....Does it work, sure, but prepending/appending is a hassle when using a password manager.

#4
Seems you can set the following in /usr/local/etc/rc.d/snmpd to have it run as root.
Just curious why Business vs Community causes this break.

snmpd_sugid="NO"

#5
We have a number of Business editions rolled out and noticing that we can't query services.

When running with the following we only get back the snmpd service

snmpd  47456   0.0  0.2   38816 26476  -  S    08:01       0:00.01 /usr/local/sbin/snmpd -p /var/run/net_snmpd.pid -u snmpd -g snmpd

zabbix:~$ snmpwalk -v2c -cExample foo.bar.com .1.3.6.1.2.1.25.4.2.1.2
iso.3.6.1.2.1.25.4.2.1.2.47456 = STRING: "snmpd"

If I kill the process and start as root, we get the full list.

root   93943   0.0  0.2   38816 26296  -  S    08:02       0:00.01 /usr/local/sbin/snmpd -p /var/run/net_snmpd.pid

zabbix:~$ snmpwalk -v2c -cExample foo.bar.com .1.3.6.1.2.1.25.4.2.1.2
iso.3.6.1.2.1.25.4.2.1.2.20 = STRING: "lighttpd"
iso.3.6.1.2.1.25.4.2.1.2.315 = STRING: "python3.11"
iso.3.6.1.2.1.25.4.2.1.2.317 = STRING: "python3.11"
iso.3.6.1.2.1.25.4.2.1.2.563 = STRING: "devd"
iso.3.6.1.2.1.25.4.2.1.2.8724 = STRING: "ntpd"
iso.3.6.1.2.1.25.4.2.1.2.12072 = STRING: "dpinger"
iso.3.6.1.2.1.25.4.2.1.2.12829 = STRING: "daemon"
iso.3.6.1.2.1.25.4.2.1.2.13264 = STRING: "php"
iso.3.6.1.2.1.25.4.2.1.2.13324 = STRING: "syslog-ng"
iso.3.6.1.2.1.25.4.2.1.2.13761 = STRING: "syslog-ng"
iso.3.6.1.2.1.25.4.2.1.2.21025 = STRING: "csh"
iso.3.6.1.2.1.25.4.2.1.2.25394 = STRING: "daemon"

I don't see this issue with the non Business edition. It always seems to start as root and not the snmpd user.
#6
Is there any way to sync only certain Aliases?

For most of our clients, this works great. However we have a couple clients that have additional aliases for Cameras and the likes.
With those clients, it does sync our global Alias for access, but Provisioning always shows it is out of sync.

Would be great if we could select which aliases we want to be part of the sync.

Thanks,
Mike