@tacioandrade:

Good morning, I wonder if any of you have already configured freeradius2 with Mysql in pfSense? I ask this, because'm trying configure the freeradius2 with the Mysql in pfSense 2.0.3; but not'm managing to do the Radius write in the database. I was in the SQL option and I enabled under this topic http://forum.pfsense.org/index.php/topic, 43675.msg235475.html # msg235475 that appears in the documentation, using the root user (mysql) and all other data correct, however when adding a NAS or else a user they are not written to the database, anyone know what it could be?

Yes.

You misunderstood the mysql option on freeradius2 package. If you add a "User" or "NAS/client" this all will be written to plain text files on pfsense. If you configure mysql on freeradius you must have a mysql server somewhere on your network. The mysql configuration on freeradius GUI ist just to make the connection to a database but it does not contain any database.

So adding users, clients and so on needs to be done on the sql server.

Hopefully this will make things clear. :)

Sorry to keep spamming but I have also found this in the logs:

Aug 5 00:01:00 nrpe[60526]: Cannot remove pidfile '/var/run/nrpe2.pid' - check your privileges.
Aug 5 00:01:00 nrpe[60526]: Cannot remove pidfile '/var/run/nrpe2.pid' - check your privileges.

Tried to set the permissions on that folder so that all users can read/write/execute but not sure I did it right of if it even needs to be done?

OK I've tried a bunch of different adapters, and only the original PL2303 one does anythign at all.  I tried an old USB/serial adapter that our Cisco expert swears by, and a funny looking stacking Belkin one that the other Cisco wally likes.

In the NUT config screen, the "Local UPS port" list always shows these choices:
Auto (USB Only)
cuau0
cuac1
ttyu0
ttyu1

When I have the working adapter plugged, the list gains two more entries (notice the capitalisation)
Auto (USB Only)
cuaU0
cuau0
cuac1
ttyU0
ttyu0
ttyu1

dmesg entries, working USB/serial adapter
ugen0.2: <prolific technology="" inc.="">at usbus0
uplcom0: <prolific 0="" 2="" technology="" inc.="" usb-serial="" controller,="" class="" 0,="" rev="" 1.10="" 3.00,="" addr="">on usbus0

dmesg entries, failing Belkin USB/serial adapter
ugen0.2: <belkin components="">at usbus0

So there's no uplcom0 line for the non working ones.  I'm stumped now - not sure if it s a kernel thing not finding the right module, or a php/gui thing.</belkin></prolific></prolific>

Im not sure if there is a actual difference with the proxy ports for http and https.., But it seams at least with squid i can successfully use the following option in my haproxy.cfg

option httpchk HEAD http://127.0.0.1/
server SquidProxyServer 127.0.0.1:3128  check inter 1000  weight 1

So to get that fill in the following in the backend config page:
Health check method: HTML
Http check Method: HEAD
Http check URI: http://127.0.0.1/

Also "Least Connections" is available in haproxy-devel package..

Where the first 127.0.0.1 points to the webinterface of pfSense (needs to be a running/available website) (i do have pfSense WbGUI running on https.. but left the default redirect enabled)
The second 127.0.0.1:3128 points to a locally running squid installation.

Then when looking at the 'stats' page of HAproxy it tells the backend is UP and LastChk: L7OK/301 in 1ms.
Did require squid to also allow also listen and allow connections on/from the 127.0.0.1 network.

For the 8443 you could try the same.. Or maybe add a advanced option "check-ssl", not sure it there is technically any difference in those proxy ports.. ???

As for FTP, im not sure if its possible to perform health checks on it.. I guess you might need the agent check.. Or maybe give smtpchk a try, ive read/seen its 'sort off' compatible.. at least it will pass the check if the welcome message is a single line…  :-\

Just upgrade to 2.1

The install bug report got me to actually try this. It is installed and working on a bunch of systems. Now I can add individual user names, put them in the admins group, then they can ssh in, get a command line and

sudo -s

to get a decent looking shell as root, if needed.
The admin (root) password on each system no longer needs to be remembered (= constantly looked up when going to different systems) and shared with multiple people.
So far, the defaults work fine for me, it's IT admin staff who need "all or nothing" access. I haven't played with giving users access to only particular commands…
It's a good thing - thanks.

I'm having the same issue.

here is my syslog:

Jul 31 21:30:51 **.***.***.*** php:  /pkg_edit.php: Sarg: force refresh now with  args, compress() and both action after sarg finish. Jul 31 21:30:51 **.***.***.*** php:  /pkg_edit.php: The command '/usr/pbi/sarg-amd64/bin/sarg ' returned exit code '1', the output was 'SARG: Cannot set the locale LC_ALL to the environment variable'

Thanks! Now it's working fine. Installation done.

@kejianshi:

What other packages are you running?

I am using squid guard

Hi :)
My versions are listed in the first Post.
Further, i tried this with different browsers and cleared cache.

I will check the access.log file tomorror and report back here.l

Best wishes

spYro

Update:

I missed that the the version of my zabbix server was 1.8.10 I updated it to 2.0.6.

In "CONFIGURATION OF TEMPLATES" I imported: https://github.com/kelsen/zabbix/blob/master/pfsense202.xml

In "CONFIGURATION OF HOSTS" I added my host with the correct settings and the pfsense template.

The IPMI availability is green. But the ZABBIX agent Availability is red.

The settings in pfSense below:

If I remove the pfsense template and added Template OS FreeBSD.

Now the the ZABBIX agent Availability is green.

So I figured adding multiply templates (the pfsense template which collects data via SNMP and template OS FreeBSD which collects data via zabbax agent). But if I do this there is and Error on which I do not get a grip on. Error: Two items ("sysName" and "Host name") cannot populate one host inventory field "Name", this would lead to a conflict.

How do I fix it?

@meets21jp:

My pfsense version is
2.0.3-RELEASE (amd64)
built on Fri Apr 12 10:27:15 EDT 2013
FreeBSD 8.1-RELEASE-p13

At first, I installed the squid 2.7.9 pkg v.4.3.3 and Lightsquid 1.8.2 pkg v.2.32.
Then I open the Proxy report–>Lightsquid Report-->Graph Report, it's working fine.

After that, I installed the squid 3.1.20 pkg 2.0.6.
Then I open the Graph Report but it's not working, the error message is 500 – Internal Server Error.

However, finally I got the solution of solving this problem.
1:  cd /usr/local/www/lightsquid

2: ./check-setup.pl
LightSquid Config Checker, (c) 2005-9 Sergey Erokhin GNU GPL

LogPath   : /var/squid/logs
reportpath: /var/lightsquid/report
Lang      : /usr/local/share/lightsquid/lang/eng
Template  : /usr/local/www/lightsquid/tpl/base
Ip2Name   : /usr/local/libexec/lightsquid/ip2name.ip

no: GD.PM found, please install or set $graphreport=0 to disable

3: ls -al /usr/bin/perl*
lrwxr-xr-x  1 root  wheel  25 Jul 21 23:14 /usr/bin/perl -> /usr/local/bin/perl5.12.4
lrwxr-xr-x  1 root  wheel  25 Jul 21 23:14 /usr/bin/perl5 -> /usr/local/bin/perl5.12.4

4: ls -al /usr/local/bin/perl5*
lrwxr-xr-x  1 root  wheel    25 Jul 21 23:14 /usr/local/bin/perl5 -> /usr/local/bin/perl5.12.4
-rwxr-xr-x  2 root  wheel  7328 Jun 27  2012 /usr/local/bin/perl5.12.4
-rwxr-xr-x  1 root  wheel  7424 Mar  6 23:18 /usr/local/bin/perl5.14.2

5: unlink /usr/bin/perl

6: unlink /usr/bin/perl5

7: unlink /usr/local/bin/perl5

8:  ./check-setup.pl
./check-setup.pl: Command not found.

9:  ls -al /usr/bin/perl*
ls: No match.

10:  ls -al /usr/bin/perl5*
ls: No match.

11:  ls -al /usr/local/bin/perl5*
-rwxr-xr-x  2 root  wheel  7328 Jun 27  2012 /usr/local/bin/perl5.12.4
-rwxr-xr-x  1 root  wheel  7424 Mar  6 23:18 /usr/local/bin/perl5.14.2

12: ln -s /usr/local/bin/perl5.14.2 /usr/bin/perl

13: ln -s /usr/local/bin/perl5.14.2 /usr/bin/perl5

14: ln -s /usr/local/bin/perl5.14.2 /usr/local/bin/perl5

15: ls -al /usr/bin/perl*
lrwxr-xr-x  1 root  wheel  25 Jul 21 23:25 /usr/bin/perl -> /usr/local/bin/perl5.14.2
lrwxr-xr-x  1 root  wheel  25 Jul 21 23:25 /usr/bin/perl5 -> /usr/local/bin/perl5.14.2

16: ls -al /usr/bin/perl5*
lrwxr-xr-x  1 root  wheel  25 Jul 21 23:25 /usr/bin/perl5 -> /usr/local/bin/perl5.14.2

17: ls -al /usr/local/bin/perl5*
lrwxr-xr-x  1 root  wheel    25 Jul 21 23:25 /usr/local/bin/perl5 -> /usr/local/bin/perl5.14.2
-rwxr-xr-x  2 root  wheel  7328 Jun 27  2012 /usr/local/bin/perl5.12.4
-rwxr-xr-x  1 root  wheel  7424 Mar  6 23:18 /usr/local/bin/perl5.14.2

18: ./check-setup.pl
LightSquid Config Checker, (c) 2005-9 Sergey Erokhin GNU GPL

LogPath   : /var/squid/logs
reportpath: /var/lled lightingightsquid/report
Lang      : /usr/local/share/lightsquid/lang/eng
Template  : /usr/local/www/lightsquid/tpl/base
Ip2Name   : /usr/local/libexec/lightsquid/ip2name.ip

WARNING: $skipurl variable contain unescaped '.' char !!!
WARNING: if you use . as regular expression metacharacter please use '' instead "" and escape . via .
WARNING: $skipurl now ->zzz.zzz<

all check passed, now try access to cgi part in browser

If there is above message, you can see the Graph Report.

Thanks for sharing information.. Internal server error is a big problem so thanks for sharing solution..

Or even when just reapplying a backed up configuration.

The clue (must have) been that it did block some of the content but not the full site (pictures were absent)
But since dansguardian is -as it seem to me - quite strict in default settings I'll have to fine-tune this guy (obviously it even blocks .exe or signature updates of some Antivirus clients (Forefront Endpoint uses .cab)

So the main issue between keyboard and chair ;-)

Additionally IE seems to less like getting "broken" sites than other browsers like Chrome or Firefox…

Can you tell me what have you defined under Squidguard -> "Client Source" !?
make sure to hit save button on "General Settings" page and then hit "Apply" at top of the same page!