Messages

Seems to have solved itself after a couple of reboots... thanks for your help!

We have the following setup:

- root ca
- intermediate ca for services
- intermediate ca for users

If we configure EAP-TTLS in the FreeRADIUS plugin we link the radius server cert (issued by intermediate ca for services) and the root ca which is supposed to validate trusted users (intermediate ca for users).

However, the plugin always puts the server cert chain in the file ca_opn instead of the linked ca file. Probably a bug in the script.

All other logging works just fine. Where would I enable/disable just the firewall logging? Couldn't find an option for that.

No my log file is of course empty. But no new messages arrive.

Since yesterday and the upgrade to 19.1.3 my filter.log is not updated anymore. How can I get the firewall logging going again? All other logs run fine.

OK, routing works again (colleague) defined overlapping ranges on one LAN interface. Sorry for the noise.

However, firewall logging is still down. I'll open another topic for this.

I also noticed that the firewall logs seem to have stopped yesterday just before midnight (when we upgraded).

19.1.2 but then LDAPS did not work for us. So we upgraded to 19.1.3 to fix that... since then the troubles got bigger...

We upgraded to 19.1.3 yesterday and since then routing does not seem to work any more. LAN clients cannot access the Internet anymore despite of proper NAT-Outbound and Firewall-Rules. Also I cannot ping any LAN client anymore from my VPN connection (OpenVPN, all connections allowed to all networks).

What can I do to track down the cause of this? We upgraded just now to 19.1.4 but to no avail. Also all automatically generated WAN NATs seem to have disappeared.

Oh well, in the source I see that you are stripping off the @domain part. So nevermind.

However, it seems to ignore the user name setting defined, e. g. for AD it always picks sAMAccountName. I would like to use userPrincipalName instead...

OK, found it. Contrary to the docs, you need to first enable the ldap server under System > Settings > Administration > Authentication > Server. Only then the import icon will show.

I have exactly this use case: I would like to link client certificates to ldap users. But the cloud import icon mentioned in the docs is not visible! Am I missing something here?

No, there was nothing odd. We solved it by deleting the inet config using ifconfig from the interface. After that everything worked as expected. Thanks for your reply and time.

The joy was pretty short lived, we now have the following problem, when we try to add the 10G interfaces:

Interface > Assignments > New Interface > ix0 > +

Everything fine but if we additionally add the second one

Interface > Assignments > New Interface > ix1 > +

Then the firewall becomes unresponsive on all interfaces. We cannot ping, ssh or access the WebGUI anymore. Only a complete reset helps.

Please notice that the interfaces are not connected. The machine is in the lab and we are trying to preconfigure it.