SSH easyrule works with root only. Custom user cannot write config.xml

nagaraja

Hey folks,

i am trying to ssh easyrule command and reload pf rules. I am able to successfully do it using root user access. On the contrary, if i use a new user, even with admin rights i get on webui:

Unable to open /cf/conf/config.xml for writing in write_config()

I am on 2.4.4-RELEASE-p3 (amd64)

Is this working as intended or is there something i am missing?

any help is really appreciated

Thanks

stephenw10

You usually only see that if you have added the User - Config: Deny Config Write privilege to the user.

Steve

Gertjan

@nagaraja said in SSH easyrule works with root only. Custom user cannot write config.xml:

is there something i am missing?

Yep. Read the release notes (2.4.5-p1) to see the list with issues that got resolved.

nagaraja

Hey guyz,

i am honored to get answers from both @stephenw10, my fav pfGOD and the iconic @Gertjan.

Checking release notes i found this "Fixed handling of misconfigured groups which prevented the admin user from making configuration changes #10492", it is related to my behaviour but it is not too similar, because i have no issue with admin account.

The only thing i have yet not tried is to apply privileges instead of inherit them from admin group membership; that's probably pointing to the resolved bug.

Anyway i will update soon to verify it.

Thanks all guyz

stephenw10

You should upgrade to 2.4.5p1 when you can either way.

Steve

nagaraja

I will surely do that way

nagaraja

and thanks to be accurate on answers