Yes, you could. You don't by default and that's all that matters, pretty much. Good luck convincing those unfortunate guys that need to mess with AD CA to mess with the templates.

You can export CA cert and private key and use them to create your wildcard cert, which you can just import back (along with private key) to CertMgr. Probably you can do all this on pfSense box using built-in OpenSSL.

The problem was search scope base DN. They are different for pfSense query and ldapsearch command, as it can be seen above.
The solution is to remove "cn=users,cn=compat" part from base DN and leave only "dc=company,dc=com".

A LAN Accounting Suite.

Thanks. Applies and works just fine for both 1/ and 2/.

I am seeing slow GUI response up to needing serial logon and Webconfigurator to restart.
Not using LDAP, however.
Does anyone know if there are any tweaks that can be done in the advanced settings or otherwise
to hasten the response time ?
I am running a new SG-4860 box.

Thanks

Oh I am such a doorknob! Thanks for pointing that out, I hadn't noticed the change in the interface.
Have been working on 2.0.1 too long !

thanks again

cheers,

Chris

The RSS widget is right there.  Use it as a template and write your own widget.  Have it load your URL file instead of fetching the feed from pfsense.org.  Done.

no. Can follow this ticket for updates. https://redmine.pfsense.org/issues/4383

It is fixed on 2.2.x; if you are on 2.1.x then either

clear your freaking cache if on Windows install the MS fonts if you are on Linux.

I remake mine every morning…  Just to be sure.

(kidding - no one should be seeing that except you.  It shouldn't matter if that interface is HTTPS or HTTP in my opinion. )

@kejianshi:

I would reduce my pings from every 1 second to every 5 or ten seconds in that case.

Its just as useful for you and less likely to have your packets dropped as a nuisance.

I did same and my apinger started behaving better.

right thx.

Block access to management ports from source WLAN subnet to "This Firewall" destination. (Assuming pfS 2.2.x)

@coachmark2:

Hmm… I'm running 2.2.1 and not seeing this.

I know it sounds dumb, but I've done it a hundred times before... Have you gone to User Manager > Settings and changed it from Local Database to your DC on the backup firewall? Gets me every time since it's not a replicated setting that I'm aware of.

Most bizarre thing, it's working now and I've literally changed nothing. And it's been broken for weeks.

Just chalk it up to a gremlin?

Yeah - I hate telling people to dig into the underlying files because often you are just telling them how to break pfsense.

At least if people stick to the gui newbie damage is pretty limited usually.

Awesome, that was quick  :)

Because https://github.com/pfsense/pfsense/commit/23fafd1482d7ece0614bc467a304437b516d997a