23.05 - Blew up PHP/GUI by Importing Alias IP List
-
Any advice would be helpful here.
This location does not have any sort of TAC, so I will be unable to request assistance from Netgate.On a working 23.05 SG-5100, I went into Alias and attempted to import a new Alias.
I pasted the list of IP Addresses, then upon Save - PHP Blew up.
This error appears whenever attempting to access GUI:
"Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /etc/inc/util.inc:2053 Stack trace: #0 /etc/inc/config.gui.inc(56): alias_make_table() #1 /etc/inc/auth.inc(34): require_once('/etc/inc/config...') #2 /etc/inc/authgui.inc(27): include_once('/etc/inc/auth.i...') #3 /usr/local/www/guiconfig.inc(62): require_once('/etc/inc/authgu...') #4 /usr/local/www/index.php(46): require_once('/usr/local/www/...') #5 {main} thrown in /etc/inc/util.inc on line 2053 PHP ERROR: Type: 1, File: /etc/inc/util.inc, Line: 2053, Message: Uncaught TypeError: Cannot access offset of type string on string in /etc/inc/util.inc:2053 Stack trace: #0 /etc/inc/config.gui.inc(56): alias_make_table() #1 /etc/inc/auth.inc(34): require_once('/etc/inc/config...') #2 /etc/inc/authgui.inc(27): include_once('/etc/inc/auth.i...') #3 /usr/local/www/guiconfig.inc(62): require_once('/etc/inc/authgu...') #4 /usr/local/www/index.php(46): require_once('/usr/local/www/...') #5 {main} thrown"I then tried to SSH - and choose the option to restore the previous configuration - and am just getting a bunch of PHP errors when I try to do so.
I am on vacation and was doing this remotely.
I do not have any way of getting someone onsite to default and reload the SG-5100.Can anyone advise if there is a way to fix this through the CLI shell?
In the meantime, the SG-5100 is routing - but I have no visibility or admin.
And I am scared that something could happen to cause it to totally cease operation... -
Sounds like you hit the bug described in this older forum post: https://forum.netgate.com/topic/180313/firewall-alias-import-bug-after-upgrade-to-23-05-release-amd64.
The fix is to either update to 23.05.1 or apply the required system patch to 23.05. However, you will first need to recover your current configuration by following the steps in Post #3 of that thread here: https://forum.netgate.com/topic/180313/firewall-alias-import-bug-after-upgrade-to-23-05-release-amd64/3.
-
@bmeeks said in 23.05 - Blew up PHP/GUI by Importing Alias IP List:
Sounds like you hit the bug described in this older forum post: https://forum.netgate.com/topic/180313/firewall-alias-import-bug-after-upgrade-to-23-05-release-amd64.
The fix is to either update to 23.05.1 or apply the required system patch to 23.05. However, you will first need to recover your current configuration by following the steps in Post #3 of that thread here: https://forum.netgate.com/topic/180313/firewall-alias-import-bug-after-upgrade-to-23-05-release-amd64/3.
That was definitely it.
Thank you @bmeeks for spotting that.
I followed the instructions to recover - the system is good now.
Am researching this patch thing, as there are instructions to apply a patch number - but it seems as the Patch utility wants me to upload a patch file. -
@KB8DOA you can give it a commit ID. Or just update pfSense as noted.
https://docs.netgate.com/pfsense/en/latest/development/system-patches.html#patch-settings