25.1.10 to 25.1.11 : chown: wwwonly: illegal user name

[XabiX]

Hello,

Is there anything to be concerned with this error message?

Message from opnsense-25.1.11:

--
What are you looking at?
Checking integrity... done (0 conflicting)
Nothing to do.
Checking all packages: .......... done
The following package files will be deleted:
        /var/cache/pkg/py311-sqlite3-3.11.13_10~e55e642030.pkg
        /var/cache/pkg/py311-cryptography-44.0.3_2,1.pkg
        /var/cache/pkg/py311-sqlite3-3.11.13_10.pkg
        /var/cache/pkg/py311-cryptography-44.0.3_2,1~969d40165f.pkg
        /var/cache/pkg/php83-filter-8.3.23~fba05b5d19.pkg
        /var/cache/pkg/opnsense-update-25.1.11.pkg
        /var/cache/pkg/php83-filter-8.3.23.pkg
        /var/cache/pkg/pciids-20250621~2b974b2fdf.pkg
        /var/cache/pkg/pciids-20250621.pkg
        /var/cache/pkg/opnsense-update-25.1.11~3ff2b4bed0.pkg
        /var/cache/pkg/php83-curl-8.3.23~2fe168c2a4.pkg
        /var/cache/pkg/nettle-3.10.2.pkg
        /var/cache/pkg/lua54-5.4.8~631a2a4a2e.pkg
        /var/cache/pkg/php83-curl-8.3.23.pkg
        /var/cache/pkg/openssl-3.0.17,1~7d343ba685.pkg
        /var/cache/pkg/openssl-3.0.17,1.pkg
        /var/cache/pkg/boost-libs-1.88.0_1~28d1f11855.pkg
        /var/cache/pkg/boost-libs-1.88.0_1.pkg
        /var/cache/pkg/nettle-3.10.2~168866b0ea.pkg
        /var/cache/pkg/lua54-5.4.8.pkg
        /var/cache/pkg/nss-3.113.1~5c9fcf40a1.pkg
        /var/cache/pkg/nss-3.113.1.pkg
        /var/cache/pkg/php83-ldap-8.3.23~ef79a6bfd4.pkg
        /var/cache/pkg/libxml2-2.14.4_1~8f5dbb43be.pkg
        /var/cache/pkg/php83-ldap-8.3.23.pkg
        /var/cache/pkg/dnsmasq-2.91_1,1~bd2e8615b1.pkg
        /var/cache/pkg/libxml2-2.14.4_1.pkg
        /var/cache/pkg/php83-simplexml-8.3.23.pkg
        /var/cache/pkg/dnsmasq-2.91_1,1.pkg
        /var/cache/pkg/php83-simplexml-8.3.23~118de9a413.pkg
        /var/cache/pkg/php83-pdo-8.3.23~1ef0a047bd.pkg
        /var/cache/pkg/php83-sockets-8.3.23.pkg
        /var/cache/pkg/php83-pdo-8.3.23.pkg
        /var/cache/pkg/rrdtool-1.9.0_1~3813cd6934.pkg
        /var/cache/pkg/rrdtool-1.9.0_1.pkg
        /var/cache/pkg/syslog-ng-4.8.2_3~7c6db2c1cb.pkg
        /var/cache/pkg/syslog-ng-4.8.2_3.pkg
        /var/cache/pkg/php83-sockets-8.3.23~ac8ff1ddcb.pkg
        /var/cache/pkg/php83-pcntl-8.3.23~1a3ef7ca12.pkg
        /var/cache/pkg/php83-sqlite3-8.3.23.pkg
        /var/cache/pkg/php83-pcntl-8.3.23.pkg
        /var/cache/pkg/php83-sqlite3-8.3.23~88758a2c99.pkg
        /var/cache/pkg/libinotify-20240724_2~f90a1639a3.pkg
        /var/cache/pkg/libinotify-20240724_2.pkg
        /var/cache/pkg/py311-trio-0.30.0~623ab61933.pkg
        /var/cache/pkg/py311-trio-0.30.0.pkg
        /var/cache/pkg/php83-session-8.3.23~e92e0ed18a.pkg
        /var/cache/pkg/php83-session-8.3.23.pkg
        /var/cache/pkg/php83-mbstring-8.3.23~57b6149796.pkg
        /var/cache/pkg/php83-mbstring-8.3.23.pkg
        /var/cache/pkg/php83-gettext-8.3.23~194dfa91f7.pkg
        /var/cache/pkg/php83-zlib-8.3.23.pkg
        /var/cache/pkg/php83-gettext-8.3.23.pkg
        /var/cache/pkg/php83-zlib-8.3.23~61309bbc93.pkg
        /var/cache/pkg/php83-ctype-8.3.23~dbf759c1bd.pkg
        /var/cache/pkg/php83-ctype-8.3.23.pkg
        /var/cache/pkg/libpci-3.14.0~a550842735.pkg
        /var/cache/pkg/libpci-3.14.0.pkg
        /var/cache/pkg/libuuid-2.41.1_1~3ec093e7b1.pkg
        /var/cache/pkg/php83-8.3.23~a0bd64d8d2.pkg
        /var/cache/pkg/libuuid-2.41.1_1.pkg
        /var/cache/pkg/php83-8.3.23.pkg
        /var/cache/pkg/php83-xml-8.3.23~9622255030.pkg
        /var/cache/pkg/php83-xml-8.3.23.pkg
        /var/cache/pkg/suricata-7.0.11~af75313314.pkg
        /var/cache/pkg/php83-dom-8.3.23~667ef35b31.pkg
        /var/cache/pkg/suricata-7.0.11.pkg
        /var/cache/pkg/php83-dom-8.3.23.pkg
        /var/cache/pkg/sqlite3-3.50.2,1~b9a9061860.pkg
        /var/cache/pkg/sqlite3-3.50.2,1.pkg
        /var/cache/pkg/glib-2.84.1_3,2~f565985c8e.pkg
        /var/cache/pkg/glib-2.84.1_3,2.pkg
        /var/cache/pkg/libucl-0.9.2_1~471f0706ad.pkg
        /var/cache/pkg/libucl-0.9.2_1.pkg
        /var/cache/pkg/opnsense-25.1.11~8f7e8f74f8.pkg
        /var/cache/pkg/opnsense-25.1.11.pkg
        /var/cache/pkg/sudo-1.9.17p1~ff6e51f730.pkg
        /var/cache/pkg/sudo-1.9.17p1.pkg
        /var/cache/pkg/opnsense-lang-25.1.11~6bebbf0519.pkg
        /var/cache/pkg/opnsense-lang-25.1.11.pkg
The cleanup will free 49 MiB
Deleting files: .......... done
All done
Nothing to do.
Starting web GUI...chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
chown: wwwonly: illegal user name
done.
Fetching base-25.1.11-amd64.txz: ................ done
Fetching kernel-25.1.11-amd64.txz: ...... done
!!!!!!!!!!!! ATTENTION !!!!!!!!!!!!!!!
! A critical upgrade is in progress. !
! Please do not turn off the system. !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Installing kernel-25.1.11-amd64.txz... done
Installing base-25.1.11-amd64.txz... done
Cleaning obsolete files... done
Please reboot.
>>> Invoking stop script 'beep'
>>> Invoking stop script 'freebsd'
>>> Invoking stop script 'backup'
>>> Invoking backup script 'captiveportal'
>>> Invoking backup script 'dhcpleases'
>>> Invoking backup script 'duid'
>>> Invoking backup script 'netflow'
>>> Invoking backup script 'rrd'
>>> Invoking stop script 'config'
Shutdown NOW!
shutdown: [pid 41814]
                                                                               
*** FINAL System shutdown message from root@Moldavia.localdomain ***         

System going down IMMEDIATELY                                 

Merci and good holidays to everyone

[meyergru]

That technical userid should be in your /etc/passwd (it is in mine) and is missing. You may experience problems because of this, like web UI pages not loading correctly.

It seems to be missing or the file is broken somehow. you can post it here, as no security information is contained in it. I would guess that either you have created some own userids which do not fit the syntax (resulting in a broken /etc/passwd) or some past upgrade missed to create it.

A fix would probably be to backup the config, reinstall and restore the config again.

[franco]

Above the provided output there should be the actual error from when the user and group should be added:

https://github.com/opnsense/core/blob/517c1c6f72c1d5f8fc66d1094d42308b40ffe10b/%2BPOST_INSTALL#L12-L21

At the moment that is a cosmetic issue as this is only for prepping the privilege separation which may become the default in 26.1.


Cheers,
Franco

[XabiX]

Thank you guys. This is a VPS with Freebsb install + OPNsense (not trivial).

I find it strange my passwd file. Here is what I have on the VPS.

Code Select Expand

root:*:0:0:Charlie &:/root:/bin/sh
toor:*:0:0:Bourne-again Superuser:/root:
daemon:*:1:1:Owner of many system processes:/root:/usr/sbin/nologin
operator:*:2:5:System &:/:/usr/sbin/nologin
bin:*:3:7:Binaries Commands and Source:/:/usr/sbin/nologin
tty:*:4:65533:Tty Sandbox:/:/usr/sbin/nologin
kmem:*:5:65533:KMem Sandbox:/:/usr/sbin/nologin
games:*:7:13:Games pseudo-user:/:/usr/sbin/nologin
news:*:8:8:News Subsystem:/:/usr/sbin/nologin
man:*:9:9:Mister Man Pages:/usr/share/man:/usr/sbin/nologin
sshd:*:22:22:Secure Shell Daemon:/var/empty:/usr/sbin/nologin
smmsp:*:25:25:Sendmail Submission User:/var/spool/clientmqueue:/usr/sbin/nologin
mailnull:*:26:26:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologin
bind:*:53:53:Bind Sandbox:/:/usr/sbin/nologin
unbound:*:59:59:Unbound DNS Resolver:/var/unbound:/usr/sbin/nologin
proxy:*:62:62:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin
_pflogd:*:64:64:pflogd privsep user:/var/empty:/usr/sbin/nologin
_dhcp:*:65:65:dhcp programs:/var/empty:/usr/sbin/nologin
uucp:*:66:66:UUCP pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico
pop:*:68:6:Post Office Owner:/nonexistent:/usr/sbin/nologin
auditdistd:*:78:77:Auditdistd unprivileged user:/var/empty:/usr/sbin/nologin
www:*:80:80:World Wide Web Owner:/nonexistent:/usr/sbin/nologin
ntpd:*:123:123:NTP Daemon:/var/db/ntp:/usr/sbin/nologin
_ypldap:*:160:160:YP LDAP unprivileged user:/var/empty:/usr/sbin/nologin
hast:*:845:845:HAST unprivileged user:/var/empty:/usr/sbin/nologin
tests:*:977:977:Unprivileged user for tests:/nonexistent:/usr/sbin/nologin
nobody:*:65534:65534:Unprivileged user:/nonexistent:/usr/sbin/nologin
I am wondering if some of the users are normal like Charlie. Anyway I can loging on the VPS so no issues.

Here is what I have at home:

Code Select Expand

root@OPNsense:~ # cat /etc/passwd
root:*:0:0:System Administrator:/root:/usr/local/sbin/opnsense-shell
toor:*:0:0:Bourne-again Superuser:/root:
daemon:*:1:1:Owner of many system processes:/root:/usr/sbin/nologin
operator:*:2:5:System &:/:/usr/sbin/nologin
bin:*:3:7:Binaries Commands and Source:/:/usr/sbin/nologin
tty:*:4:65533:Tty Sandbox:/:/usr/sbin/nologin
kmem:*:5:65533:KMem Sandbox:/:/usr/sbin/nologin
games:*:7:13:Games pseudo-user:/:/usr/sbin/nologin
news:*:8:8:News Subsystem:/:/usr/sbin/nologin
man:*:9:9:Mister Man Pages:/usr/share/man:/usr/sbin/nologin
sshd:*:22:22:Secure Shell Daemon:/var/empty:/usr/sbin/nologin
smmsp:*:25:25:Sendmail Submission User:/var/spool/clientmqueue:/usr/sbin/nologin
mailnull:*:26:26:Sendmail Default User:/var/spool/mqueue:/usr/sbin/nologin
bind:*:53:53:Bind Sandbox:/:/usr/sbin/nologin
unbound:*:59:59:Unbound DNS Resolver:/var/unbound:/usr/sbin/nologin
proxy:*:62:62:Packet Filter pseudo-user:/nonexistent:/usr/sbin/nologin
_pflogd:*:64:64:pflogd privsep user:/var/empty:/usr/sbin/nologin
_dhcp:*:65:65:dhcp programs:/var/empty:/usr/sbin/nologin
uucp:*:66:66:UUCP pseudo-user:/var/spool/uucppublic:/usr/local/libexec/uucp/uucico
pop:*:68:6:Post Office Owner:/nonexistent:/usr/sbin/nologin
auditdistd:*:78:77:Auditdistd unprivileged user:/var/empty:/usr/sbin/nologin
www:*:80:80:World Wide Web Owner:/nonexistent:/usr/sbin/nologin
ntpd:*:123:123:NTP Daemon:/var/db/ntp:/usr/sbin/nologin
_ypldap:*:160:160:YP LDAP unprivileged user:/var/empty:/usr/sbin/nologin
hast:*:845:845:HAST unprivileged user:/var/empty:/usr/sbin/nologin
tests:*:977:977:Unprivileged user for tests:/nonexistent:/usr/sbin/nologin
nobody:*:65534:65534:Unprivileged user:/nonexistent:/usr/sbin/nologin
_flowd:*:542:542:flowd privilege separation user:/var/empty:/usr/sbin/nologin
dhcpd:*:136:136:ISC DHCP daemon:/nonexistent:/usr/sbin/nologin
openvpn:*:301:301:OpenVPN pseudo-user:/nonexistent:/usr/sbin/nologin
cyrus:*:60:60:the cyrus mail server:/nonexistent:/usr/sbin/nologin
acme:*:169:169:ACME protocol client:/var/db/acme:/bin/sh
redis:*:535:535:Redis Daemon:/nonexistent:/usr/sbin/nologin
git_daemon:*:964:964:git daemon:/nonexistent:/usr/sbin/nologin
ntopng:*:288:288:ntopng daemon user:/nonexistent:/usr/sbin/nologin
wwwonly:*:789:789:World Wide Web Only:/nonexistent:/usr/sbin/nologin
If it s comestic, then we can close as things will change in 26.1