Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - krawum

#1
Thank you so much for fixing it so quickly!
Actually, the firewall is set to "Development"... It's our sandbox/test cluster — who knows which colleague was messing around with it...

@nero355: Sorry, looks like I'm just more of a linux dude... ;-)
#2
Heyho,

after upgrading firewalls to OPNsense 26.7.6_3-amd64, the "High Availability" sync did not work anymore. When I go to System > High Availability > Status, I immediately see the following error message highlighted in yellow:
"The backup firewall is not accessible (check user credentials)"

After a few attempts to configure it, I sent a request directly from the main firewall to the backup firewall using curl and received the following response:

root@fw01:~ # curl -k -m 15 -u 'ha:password123' -H "Content-Type: text/xml" -d '<?xml version="1.0"?><methodCall><methodName>opnsense.firmware_version</methodName><params/></methodCall>' https://fw02.ha.localnet/xmlrpc.php

Deprecated: Function xml_set_object() is deprecated since 8.4, provide a proper method callable to xml_set_*_handler() functions in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 210

Deprecated: xml_set_element_handler(): Passing non-callable strings is deprecated since 8.4 in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 211

Deprecated: xml_set_character_data_handler(): Passing non-callable strings is deprecated since 8.4 in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 212

Deprecated: Function xml_parser_free() is deprecated since 8.5, as it has no effect since PHP 8.0 in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 227

Warning: Cannot modify header information - headers already sent by (output started at /usr/local/opnsense/contrib/IXR/IXR_Library.php:210) in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 465

Warning: Cannot modify header information - headers already sent by (output started at /usr/local/opnsense/contrib/IXR/IXR_Library.php:210) in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 466

Warning: Cannot modify header information - headers already sent by (output started at /usr/local/opnsense/contrib/IXR/IXR_Library.php:210) in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 467

Warning: Cannot modify header information - headers already sent by (output started at /usr/local/opnsense/contrib/IXR/IXR_Library.php:210) in /usr/local/opnsense/contrib/IXR/IXR_Library.php on line 468
<?xml version="1.0"?>
<methodResponse>
  <params>
    <param>
      <value>
      <struct>
  <member><name>base</name><value><struct>
  <member><name>version</name><value><string>26.7.6</string></value></member>
</struct></value></member>
  <member><name>firmware</name><value><struct>
  <member><name>version</name><value><string>26.7.6_3</string></value></member>
</struct></value></member>
  <member><name>kernel</name><value><struct>
  <member><name>version</name><value><string>26.7.6</string></value></member>
</struct></value></member>
</struct>
      </value>
    </param>
  </params>
</methodResponse>


Disabling php warnings both on master and backup firewall solved the problem; but this should only be a workaround. Would be great if this is fixed within one of the next upgrades :-)

Workaround:
pkg install nano
nano +30 /usr/local/opnsense/service/templates/OPNsense/WebGui/php.ini
=> replace on with off
configctl webgui restart
Cheers!