23.02 WebGUI enable ?

matlear

Hi all,

Looking to enable the WebGUI on 23.02.
Cannot see any info yet in the knowledge base on how to do this.

Any Ideas?

gigabitguru

I'm trying to figure this out too. I poked around and found files in the expected place, /var/www, but no obvious systemd services to start (e.g. nginx). I find a few paths with /var/www in /etc but they mainly look like config files (sudo grep -R '/var/www' /etc/*)

I'm wondering if this is a service managed inside of TNSR CLI, but even there the commands to run it are not obvious.

Definitely wondering how to kick this off to test things.

heper

Is there a new version that has a GUI ?afaik tnsr is cli only

matlear

@heper said in 23.02 WebGUI enable ?:

Is there a new version that has a GUI ?afaik tnsr is cli only

Read the announcement for 23.02 https://www.netgate.com/blog/tnsr-version-23.02-is-now-available

Misterb

@litmaj0r In the Netgate docs for TNSR 23.02 if you scroll down to the TNSR Configuration Example Recipes there is an entry TNSR GUI Service with Client Certificate Authentication. I haven't tried it myself yet but there seems to be a lot of info about the process.

matlear

@misterb said in 23.02 WebGUI enable ?:

@litmaj0r In the Netgate docs for TNSR 23.02 if you scroll down to the TNSR Configuration Example Recipes there is an entry TNSR GUI Service with Client Certificate Authentication. I haven't tried it myself yet but there seems to be a lot of info about the process.

Good find misterb, will take a look :)

gigabitguru

@misterb Awesome find ... it's very subtly snuck in there!

I ended up importing the Let's Encrypt CA, generating some certs, and ultimately once you get RESTCONF up and running, the Web GUI will become available. Generally, following these 2 guides will get you up and running:

https://docs.netgate.com/tnsr/en/latest/recipes/restconf-pki-nacm/index.html
https://docs.netgate.com/tnsr/en/latest/recipes/gui/index.html

Admittedly, if you run with a Public CA on the box, you'll have to do a bit more import and signing work, but it's not that bad. At least we figured out how to get the Web GUI running.

I'm having an issue getting the Client Cert imported on my mac (it claims "password is incorrect" despite export via the TNSR CLI and openssl command), but that's a separate issue. And also, you could try to swap client-cert auth for password-auth, but that's not as secure so I'll just figure out the Client Cert issue.

tkerr

@gigabitguru Hi, I'm one of the devs who worked on the GUI. Password authentication is not currently supported. Make sure that you are using the correct algorithm to export the .p12 for macOS (I believe that the docs have a section on this). Please let me know if you have any more issues.

talwell

Any screenshots of the GUI?

tkerr

@talwell Here are some images from my dev box. I believe that there will be some more marketing material coming out around this pretty soon as well. Interfaces page Edit Interfaces Dialog Dashboard

matlear

Great start :)

Keep up the good work !

talwell

Agreed - great start. I have been working with TNSR for 3-4 years and have found that the CLI combined with the documentation is very useful. The added benefit of a GUI will certainly increase the adoption of the platform.