Dansguardian package for 2.0
-
Does anyone know how to troubleshoot these kinds of XMLRPC sync errors? I could enable debugging if I knew how but I'm not sure if the debugging information would be helpful to me or only a programmer…
Try to call sync function from a php on console, if it returns any text message, xml sync will fail.
-
Does anyone know how to troubleshoot these kinds of XMLRPC sync errors? I could enable debugging if I knew how but I'm not sure if the debugging information would be helpful to me or only a programmer…
Try to call sync function from a php on console, if it returns any text message, xml sync will fail.
I know I can run php at the command line but how do you call the sync function?
Also I completely wiped both servers and started over. I figured out that the dansguardian not working during failover is more a network issue for me. So the pfsync issue is completely separate. From what I can tell everything syncs fine, it just generates those errors.
-
It makes sense. if there is no users on groups, then there is no loop to do. Tongue
I don't think you got what I meant. So I add a user to the AD group; it adds a user in pfsense/dansguardian. I then remove that user from the AD group; it does nothing so the user still exists in pfsense/dansguardian. If I add 10 users, it adds 10. If I then remove all 10 users at once, all 10 users remain in pfsense/dansguardian. So you can never remove access for all users via an AD group. At best you can remove 9 first, but then you will always have that 1 left that won't get removed (unless you do it in the pfsense gui).
Like I said, easy work around but still a bug. ;)
marcelloc - I figured out the code for this and was able to get it to synchronize completely (even when the AD group is empty) by just adding a little bit of code to /usr/local/www/dansguardian_ldap.php. Here is the section (towards the end), my addition is in bold:
if (!empty($members)){
$import_users = explode("\n", $members);
asort($import_users);
$members=base64_encode(implode("\n", $import_users));
if($config['installedpackages']['dansguardianusers']['config'][0][strtolower($group['name'])] != $members){
$config['installedpackages']['dansguardianusers']['config'][0][strtolower($group['name'])] = $members;
$apply_config++;
}
}
** else {
$config['installedpackages']['dansguardianusers']['config'][0][strtolower($group['name'])] = NULL;
$apply_config++;
}**
}
$id++;
}Is that a fix you'd be willing to add to the package? Also I noticed that there is a typo when configuring a group in the Values section. It says "Naughtiness limite" and should be "Naughtiness limit" without the 'e'. Really minor but thought I'd let you know.
-
marcelloc - I figured out the code for this and was able to get it to synchronize completely (even when the AD group is empty) by just adding a little bit of code to /usr/local/www/dansguardian_ldap.php. Here is the section (towards the end), my addition is in bold:
if (!empty($members)){
$import_users = explode("\n", $members);
asort($import_users);
$members=base64_encode(implode("\n", $import_users));
if($config['installedpackages']['dansguardianusers']['config'][0][strtolower($group['name'])] != $members){
$config['installedpackages']['dansguardianusers']['config'][0][strtolower($group['name'])] = $members;
$apply_config++;
}
}
** else {
$config['installedpackages']['dansguardianusers']['config'][0][strtolower($group['name'])] = NULL;
$apply_config++;
}**
}
$id++;
}Is that a fix you'd be willing to add to the package? Also I noticed that there is a typo when configuring a group in the Values section. It says "Naughtiness limite" and should be "Naughtiness limit" without the 'e'. Really minor but thought I'd let you know.
Thank's for this contribution. limite is limit in portuguese :)
I'm testing dansguardian 2.12.0.2 that fixes pcre 8.3 issue and others.
I'll push it since freebsd ports core team apply my update request.
-
Thank's for this contribution. limite is limit in portuguese :)
I'm testing dansguardian 2.12.0.2 that fixes pcre 8.3 issue and others.
I'll push it since freebsd ports core team apply my update request.
I see from your comments on your update request that 2.12.0.2 has memory leaks. Did they apply your update request to 2.12.0.3 instead?
-
I see from your comments on your update request that 2.12.0.2 has memory leaks. Did they apply your update request to 2.12.0.3 instead?
both updates are still pending. I'll contact dansguardian maintainer to try to seep up the process. :)
-
I see from your comments on your update request that 2.12.0.2 has memory leaks. Did they apply your update request to 2.12.0.3 instead?
both updates are still pending. I'll contact dansguardian maintainer to try to seep up the process. :)
Sweet, it looks like they closed it out today, can't wait to test it out.
Also I can try to troubleshoot my sync issue but I still am unsure how to run it manually. I know I can run the "php" command and do a "-f /path/to/php/file" to run a file but I am not sure how to just run the sync function manually like this.
-
Sweet, it looks like they closed it out today, can't wait to test it out.
I`ve sent a shar file, they asked for a diff file for 2.12.0.3
I can't confirm that 2.12.0.2 has memory leaks.
Also I can try to troubleshoot my sync issue but
you will need a php that call pfsense inc files, dansguardian inc and then call sync function.
-
2.12.0.3 commited on freebsd ports :)
http://www.freebsd.org/cgi/query-pr.cgi?pr=175526
-
Can't wait for the package release. Wanna jump on 2.1 bandwagon ASAP. :)
Hopefully the snort/dansguardian issue with pcre on 2.1 is rectified in this version.
-
Hopefully the snort/dansguardian issue with pcre on 2.1 is rectified in this version.
pcre,clamav and acls are working fine on 2.0.x and 2.1.
I'll do some more tests before package release.
-
Hopefully the snort/dansguardian issue with pcre on 2.1 is rectified in this version.
pcre,clamav and acls are working fine on 2.0.x and 2.1.
I'll do some more tests before package release.
You da man Marcelloc. Is this package going to have squid 3 already in it or is that more a matter of how the port was done?
-
Is this package going to have squid 3 already in it or is that more a matter of how the port was done?
still with the same dependencies.
-
package version 0.1.7 with dansguardian 2.12.0.3 is finally out! :)
changes/fixes
-
fix pcre issue
-
update to dansguardian latest version (2.12.0.3)
-
included multi auth plugin
-
pfsense 2.1 support
-
few gui changes
-
better ldap user auth integration
-
-
Yaahoooo !!!
Thank you ! :D
-
Cant get it to work..
php: /pkg_edit.php: The command '/usr/local/etc/rc.d/dansguardian.sh start' returned exit code '1', the output was 'kern.ipc.somaxconn: 16384 -> 16384 kern.maxfiles: 131072 -> 131072 kern.maxfilesperproc: 104856 -> 104856 kern.threads.max_threads_per_proc: 4096 -> 4096 Starting dansguardian. Unable to getpwnam() - does the proxy user exist? Proxy user looking for is 'clamav' /usr/local/etc/rc.d/dansguardian.sh: WARNING: failed to start dansguardian'
-
what pfsense version are you using? I've tested on 2.0.1 amd64 and 2.1 amd64?
-
2.1 amd64
During install I get this error 4 times in the system logs
php: /pkg_mgr_install.php: The command 'chown -R clamav:nobody /var/log/dansguardian' returned exit code '1', the output was 'chown: clamav: Invalid argument'
-
-
No.. its not there. I have used clean installed 3 times with same results.
