Can't login to GUI

chudak

I wonder what does resetwebgui do via ssh 12) PHP shell + Netgate pfSense Plus tools

anyone?

stephenw10

It does:

// parse config.xml
config_set_path('', parse_config(true));
$default_theme = "pfSense.css";
$default_columns = 2;
$default_widgets = "system_information:col1:show,interfaces:col2:show";

echo "Resetting webGUI:\n";
echo "  Theme to " . $default_theme . "\n";
echo "  Dashboard columns to " . $default_columns . "\n";
echo "  Top navigation to scroll\n";
echo "  Widgets to System Information and Interfaces\n";
echo "...";

config_set_path('system/webgui/webguicss', $default_theme);
config_set_path('system/webgui/dashboardcolumns', $default_columns);

config_del_path('system/webgui/webguifixedmenu');

config_set_path('widgets/sequence', $default_widgets);

write_config("pfSsh.php reset webGUI");

echo "done.\n";

So it resets the dashboard to the default layout. Useful if you have added a broken widget for example because you are always first taken to the dashboard.

chudak

@stephenw10 said in Can't login to GUI:

It does:

// parse config.xml
config_set_path('', parse_config(true));
$default_theme = "pfSense.css";
$default_columns = 2;
$default_widgets = "system_information:col1:show,interfaces:col2:show";

echo "Resetting webGUI:\n";
echo "  Theme to " . $default_theme . "\n";
echo "  Dashboard columns to " . $default_columns . "\n";
echo "  Top navigation to scroll\n";
echo "  Widgets to System Information and Interfaces\n";
echo "...";

config_set_path('system/webgui/webguicss', $default_theme);
config_set_path('system/webgui/dashboardcolumns', $default_columns);

config_del_path('system/webgui/webguifixedmenu');

config_set_path('widgets/sequence', $default_widgets);

write_config("pfSsh.php reset webGUI");

echo "done.\n";

So it resets the dashboard to the default layout. Useful if you have added a broken widget for example because you are always first taken to the dashboard.

I will wait on using it , thx

That's what I got on incognito browser

Gertjan

@chudak

Time to find out what written here :

stephenw10

Can you click on that to reach the crash report?

Can you visit any other page if you go to it directly? Like: https://<firewall_ip>/status_logs.php

chudak

@Gertjan said in Can't login to GUI:

@chudak

Time to find out what written here :

The web server encountered an error processing this request.

Check the Crash Reporter for details.
50x Error

chudak

@stephenw10 said in Can't login to GUI:

Can you click on that to reach the crash report?

Can you visit any other page if you go to it directly? Like: https://<firewall_ip>/status_logs.php

Yes actually!!!

But not dashboard

What does it mean?

stephenw10

Almost certainly that something on the dashboard is triggering the issue.

What widgets do you have enabled there?

chudak

@stephenw10

Hard to say, can't remember

I'd say all :)

stephenw10

Well running that phpshell script will set the dash back to the defaults if needed. Or you can roll back the config if you just added something to the dash.

chudak

@stephenw10 said in Can't login to GUI:

Well running that phpshell script will set the dash back to the defaults if needed. Or you can roll back the config if you just added something to the dash.

I will try rebooting tomorrow

I have not touched anything at all on the dash, so ‍️

Another issue is - what’s the best way to troubleshoot for users in similar situations. So far no answer yet

I must tell that today's exchange was useful

Thx guys!

stephenw10

Check the System and Webgui logs. Use the CLI if the webgui is not available at all.

Gertjan

@chudak said in Can't login to GUI:

what’s the best way to troubleshoot for users in similar situations.

As my signature : always start looking at the logs.
Don't care if the GUI or whatever isn't working : the logs are always (every system on the planet) here : /var/log/
Logs files are always great : the tell you when the system is happy, you'll learn to see what logs look like if all is well.
When things go downhill, you'll spot the new lines / messages and these tell you what is up.

chudak

The system is back to normal without me doing anything today !!!

JonathanLee

There is a GUI security feature that will lock the gui out under some attack conditions. It self locks for a specific time

chudak

@JonathanLee said in Can't login to GUI:

There is a GUI security feature that will lock the gui out under some attack conditions. It self locks for a specific time

Really? And where is it configured and how do I know it was invoked?

I did run multiple pings from other countries, so it could be treated as an attack, I guess.

stephenw10

If you fail to login 3 times from the same source IP it will get locked out by sshguard. When that happens you won't be able to connect at all. You won't see the login screen. What you're seeing is not that.

https://docs.netgate.com/pfsense/en/latest/config/advanced-admin.html#login-protection

JonathanLee

@stephenw10 I learned that the hard way :)

chudak

@stephenw10 said in Can't login to GUI:

If you fail to login 3 times from the same source IP it will get locked out by sshguard. When that happens you won't be able to connect at all. You won't see the login screen. What you're seeing is not that.

https://docs.netgate.com/pfsense/en/latest/config/advanced-admin.html#login-protection

Does it expose any GUI level option?

thx it's great!

stephenw10

@chudak said in Can't login to GUI:

Does it expose any GUI level option?

Not sure what you're asking there?

There are tuning options for it in the GUI. You can whitelist IPs to prevent them being blocked.