[SOLVED] Captive Portal isn't working after Upgrade to 17.7.9

[yogo]

Hi,

after upgrading from 17.7.8 to 17.7.9_8 and/or 17.7.9_9 my Captive Portal isn't working anymore.
Behavior: User connects to CP, after a while connection timed out. No Authentication Window. Setup was fully working for month. Used this Guide: https://wiki.opnsense.org/manual/how-tos/guestnet.html

It seems to me like lighttpd doesn't work correctly.

I can't see any errors in System-Log.

Greets, Yogo.

[franco]

Hi there,

Known issue, try this for now:

# opnsense-revert -r 17.7.8 lighttpd

And restart your CP services.


Cheers,
Franco

[gothbert]

Well, there is the answer before I asked the question  ;D

Downgrade works for me.

[yogo]

Downgrade helped me too.
I just read the Issue #1990: https://github.com/opnsense/core/issues/1990

I can confirm this error:

Code Select Expand

/usr/local/sbin/lighttpd  -f /var/etc/lighttpd-cp-zone-0.conf
daemonized server failed to start; check error log for details

Thanks for your fast help.

[franco]

Thanks for the report!

The bottom of this is: lighttpd 1.4.45 was used until 17.7.8, then FreeBSD updated to 1.4.48 which shows this odd behaviour. The behaviour, however, dates back as far as 1.4.46 and seems to be caused by devfs not being mounted properly inside the chroot directory, where lighttpd tries to find /dev/null but fails, which wasn't the case on versions lower than 1.4.46.

Very hard to debug within the code as logging is apparently off and the daemon uses a pipe to pass information up and down the (grand)child running in the chroot directory...  :o

We'll have this fixed in 17.7.10 for sure.


Cheers,
Franco

[jon.alf]

This is good to know. I was beginning to wonder if it was caused, in my case, by a witches' brew of MultiWAN, VLANs, VMs, and a dash of proxmox

[franco]

Sorry, it was quite late...  :)

[franco]

So here is the commit and all help to confirm this for swift 17.7.10 inclusion this week is appreciated! :)

https://github.com/opnsense/core/commit/ac6a1ef8c

# opnsense-revert lighttpd
# opnsense-patch ac6a1ef

And apply from the captive portal page.


Cheers,
Franco

[gothbert]

Hi,

I found it is working after executing the commands and button click you listed. I found that it keeps functioning after a reboot.

Thank you for making it work again!

Kind regards
Boris

[franco]

Hi Boris,

Splendid, many thanks for the quick feedback!


Cheers,
Franco

[yogo]

Hi Franco,

# opnsense-revert lighttpd
# opnsense-patch ac6a1ef

And apply from the captive portal page.
Reboot (like Boris wrote)

=> Clean Start of lighttpd!

Works!

Kind regards
Jörg

[franco]

Hi Jörg et al,

Thanks again, we've added this fix for 17.7.10 tomorrow. :)


Cheers,
Franco