23.01 Squid issue

ben-ihelputech

@hugoeyng Are you using high availability sync for squidguard?

hugoeyng

@ben-ihelputech Where could I see that? I have no access to SquidGuard setup since this bug appeared

JonathanLee

@hugoeyng Your going to have to revert the patch back. I will add your notes to redmine

ben-ihelputech

@hugoeyng Do you have two pfSense boxes? The type error I'm running into is related to the XMLRPC sync for SquidGaurd. Just curious for my own troubleshooting.

Crash report begins.  Anonymous machine information:

amd64
14.0-CURRENT
FreeBSD 14.0-CURRENT #0 plus-RELENG_23_01-n256037-6e914874a5e: Fri Feb 10 20:30:29 UTC 2023     root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/obj/amd64/VDZvZksF/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBS

Crash report details:

PHP Errors:
[03-May-2023 16:42:46 America/Chicago] PHP Fatal error:  Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1150
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1046): convert_pfxml_to_sgxml_rewrite(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /etc/inc/pkg-utils.inc(691): require_once('/usr/local/pkg/...')
#3 /etc/rc.start_packages(66): sync_package('squidGuard')
#4 {main}
  thrown in /usr/local/pkg/squidguard.inc on line 1150
[03-May-2023 16:46:19 America/Chicago] PHP Fatal error:  Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1150
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1046): convert_pfxml_to_sgxml_rewrite(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /usr/local/www/xmlrpc.php(147) : eval()'d code(1): require_once('/usr/local/pkg/...')
#3 /usr/local/www/xmlrpc.php(147): eval()
#4 /usr/local/share/pear/XML/RPC2/Server/CallHandler/Instance.php(141): pfsense_xmlrpc_server->exec_php('require_once('/...', 0)
#5 /usr/local/share/pear/XML/RPC2/Backend/Php/Server.php(135): XML_RPC2_Server_Callhandler_Instance->__call('pfsense.exec_ph...', Array)
#6 /usr/local/share/pear/XML/RPC2/Backend/Php/Server.php(99): XML_RPC2_Backend_Php_Server->getResponse()
#7 /usr/local/www/xmlrpc.php(987): XML_RPC2_Backend_Php_Server->handleCall()
#8 {main}
  thrown in /usr/local/pkg/squidguard.inc on line 1150
[03-May-2023 16:47:29 America/Chicago] PHP Fatal error:  Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1150
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1046): convert_pfxml_to_sgxml_rewrite(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /usr/local/www/xmlrpc.php(147) : eval()'d code(1): require_once('/usr/local/pkg/...')
#3 /usr/local/www/xmlrpc.php(147): eval()
#4 /usr/local/share/pear/XML/RPC2/Server/CallHandler/Instance.php(141): pfsense_xmlrpc_server->exec_php('require_once('/...', 0)
#5 /usr/local/share/pear/XML/RPC2/Backend/Php/Server.php(135): XML_RPC2_Server_Callhandler_Instance->__call('pfsense.exec_ph...', Array)
#6 /usr/local/share/pear/XML/RPC2/Backend/Php/Server.php(99): XML_RPC2_Backend_Php_Server->getResponse()
#7 /usr/local/www/xmlrpc.php(987): XML_RPC2_Backend_Php_Server->handleCall()
#8 {main}
  thrown in /usr/local/pkg/squidguard.inc on line 1150
[03-May-2023 16:48:40 America/Chicago] PHP Fatal error:  Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1150
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1046): convert_pfxml_to_sgxml_rewrite(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /usr/local/www/xmlrpc.php(147) : eval()'d code(1): require_once('/usr/local/pkg/...')
#3 /usr/local/www/xmlrpc.php(147): eval()
#4 /usr/local/share/pear/XML/RPC2/Server/CallHandler/Instance.php(141): pfsense_xmlrpc_server->exec_php('require_once('/...', 0)
#5 /usr/local/share/pear/XML/RPC2/Backend/Php/Server.php(135): XML_RPC2_Server_Callhandler_Instance->__call('pfsense.exec_ph...', Array)
#6 /usr/local/share/pear/XML/RPC2/Backend/Php/Server.php(99): XML_RPC2_Backend_Php_Server->getResponse()
#7 /usr/local/www/xmlrpc.php(987): XML_RPC2_Backend_Php_Server->handleCall()
#8 {main}
  thrown in /usr/local/pkg/squidguard.inc on line 1150
[03-May-2023 16:49:51 America/Chicago] PHP Fatal error:  Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1150
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1046): convert_pfxml_to_sgxml_rewrite(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /usr/local/www/xmlrpc.php(147) : eval()'d code(1): require_once('/usr/local/pkg/...')
#3 /usr/local/www/xmlrpc.php(147): eval()
#4 /usr/local/share/pear/XML/RPC2/Server/CallHandler/Instance.php(141): pfsense_xmlrpc_server->exec_php('require_once('/...', 0)
#5 /usr/local/share/pear/XML/RPC2/Backend/Php/Server.php(135): XML_RPC2_Server_Callhandler_Instance->__call('pfsense.exec_ph...', Array)
#6 /usr/local/share/pear/XML/RPC2/Backend/Php/Server.php(99): XML_RPC2_Backend_Php_Server->getResponse()
#7 /usr/local/www/xmlrpc.php(987): XML_RPC2_Backend_Php_Server->handleCall()
#8 {main}
  thrown in /usr/local/pkg/squidguard.inc on line 1150



No FreeBSD crash data found.

hugoeyng

@ben-ihelputech what do you mean with "Do you have two pfSense boxes?"

ben-ihelputech

@hugoeyng Then you probably don't have HA setup.
https://docs.netgate.com/pfsense/en/latest/highavailability/index.html

You get two pfsense machines and link them together. If the primary dies, it will seamlessly switch to the secondary. I'm guessing that the SquidGuard PHP TypeError that you're running into is different than the one I'm running into.

JonathanLee

@hugoeyng It's a fail over firewall, or high availability Example is if one firewall fails and goes down the other firewall takes over so the user side in a business, they have no impact it's about 100% uptime. High Availability or (H.A.)

https://docs.netgate.com/pfsense/en/latest/recipes/high-availability.html

JonathanLee

@hugoeyng try to resave the HA settings on pfsense, they might be missing

hugoeyng

@ben-ihelputech I have only one computer running pfSense

JonathanLee

@hugoeyng said in 23.01 Squid issue:

@jonathanlee The log:
Crash report begins. Anonymous machine information:
amd64
14.0-CURRENT
FreeBSD 14.0-CURRENT #0 plus-RELENG_23_01-n256037-6e914874a5e: Fri Feb 10 20:30:29 UTC 2023 root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/obj/amd64/VDZvZksF/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBS
Crash report details:
PHP Errors:
[03-May-2023 18:12:49 America/Sao_Paulo] PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1184
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1038): convert_pfxml_to_sgxml_time(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /etc/inc/pkg-utils.inc(691): require_once('/usr/local/pkg/...')
#3 /etc/rc.start_packages(66): sync_package('squidGuard')
#4 {main}
thrown in /usr/local/pkg/squidguard.inc on line 1184
[03-May-2023 18:34:31 America/Sao_Paulo] PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1184
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1038): convert_pfxml_to_sgxml_time(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /etc/inc/pkg-utils.inc(691): require_once('/usr/local/pkg/...')
#3 /etc/rc.start_packages(66): sync_package('squidGuard')
#4 {main}
thrown in /usr/local/pkg/squidguard.inc on line 1184
[03-May-2023 18:34:41 America/Sao_Paulo] PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1184
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1038): convert_pfxml_to_sgxml_time(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /etc/inc/pkg-utils.inc(1068): require_once('/usr/local/pkg/...')
#3 /etc/rc.packages(80): delete_package_xml('squidGuard', 'deinstall')
#4 {main}
thrown in /usr/local/pkg/squidguard.inc on line 1184
[03-May-2023 18:34:42 America/Sao_Paulo] PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1193
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1047): convert_pfxml_to_sgxml_time(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /etc/inc/pkg-utils.inc(868): require_once('/usr/local/pkg/...')
#3 /etc/rc.packages(76): install_package_xml('squidGuard')
#4 {main}
thrown in /usr/local/pkg/squidguard.inc on line 1193
No FreeBSD crash data found.

added to Redmine #13984

hugoeyng

@jonathanlee Should I do it when the patches are aplied or when they are not?

JonathanLee

@hugoeyng Try to resave that area, my errors pointed to missing config too that I never used. I had to resave reverse squid for my php errors to stop. What is INFIX? Mine shows WAN as default unused value

hugoeyng

@jonathanlee INFIX is a WAN

HA is not active.

I resaved RP too

Did not work.

JonathanLee

@hugoeyng Marcos has created a new patch please see link after your logs were submitted.

https://redmine.pfsense.org/issues/13984

JonathanLee

Marcos created a new fix

https://redmine.pfsense.org/issues/13984

Fresh New Patch!!!!

as of 5-3-23 4:43PM PST

Please apply both Squid and Squid_guard patches again.

ben-ihelputech

@jonathanlee Looks like that resolved my issue also

JonathanLee

@hugoeyng Hello, I wanted to check with you, did Marcos Patch #3 work? This was made after your logs were sent in.

hugoeyng

@jonathanlee Hello, Jonathan. Thank you for so kindly help.

Yes and no.

The PHP error has gone, but now squidGuard do not start.

When I look in pf Sense services, squidGuard is not there:

Thank you for so kindly help

When I look O.S. process, squdiGuard is there:

When I look to pfSense menu, squidGuard is not there:

I already removed squidGuard e and reinstalled few times.

JonathanLee

@hugoeyng I have had this issue in the past. I had to remove both Squid and Squidguard and lightSquid. After reboot the firewall and install in order Squid proxy first and after Squidguard and that fixed this issue for me. After its both visable install lightsquid. It has to be in that order, or it would not work for me. It was stuck in the in-between land.

stephenw10

If it's not showing as a service or in the menus that means pfSense thinks it is uninstalled. Those things are created from values in the config file. Reinstall it fro the package manager.