• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Resolved: The command '/usr/local/sbin/ping-auth -s > /etc/thoth/thothid 2>/dev/null' returned exit code '127', the output was ''

Scheduled Pinned Locked Moved General pfSense Questions
developmentcryptocryptographicfirmware
53 Posts 3 Posters 7.6k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S
    stephenw10 Netgate Administrator
    last edited by Dec 18, 2023, 10:24 PM

    It's not a TPM device, it doesn't have anything to do with drive encryption.

    I wouldn't expect a driver to make any difference here. I could just about imagine causing problems communicating with the chip but that would be the same in 23.05.1.

    I assume running ping-auth -s correctly returns the crypto ID there?

    J 1 Reply Last reply Dec 18, 2023, 10:28 PM Reply Quote 0
    • J
      JonathanLee @stephenw10
      last edited by JonathanLee Dec 18, 2023, 10:31 PM Dec 18, 2023, 10:28 PM

      @stephenw10 said in The command '/usr/local/sbin/ping-auth -s > /etc/thoth/thothid 2>/dev/null' returned exit code '127', the output was '':

      ping-auth -s

      in 23.05.01

      Screenshot 2023-12-18 at 2.25.15 PM.png

      So its something with that build? I also have issues with experimental ethernet rules and compex ath0 driver they no longer separate the layer 2 broadcast domains for ARP requests from LAN to Compex card, this version is prone to ARP broadcast storms across different interfaces before it broke them up I never showed traffic between the two interfaces.

      Screenshot 2023-12-18 at 1.09.45 PM.png

      https://forum.netgate.com/topic/184894/ethernet-rules-on-two-networks

      Make sure to upvote

      1 Reply Last reply Reply Quote 0
      • J
        JonathanLee
        last edited by Dec 18, 2023, 10:39 PM

        https://redmine.pfsense.org/issues/15103

        Make sure to upvote

        1 Reply Last reply Reply Quote 0
        • S
          stephenw10 Netgate Administrator
          last edited by Dec 18, 2023, 10:45 PM

          Did you try 23.09.1 without the new SSD installed?

          J 1 Reply Last reply Dec 18, 2023, 10:50 PM Reply Quote 0
          • J
            JonathanLee @stephenw10
            last edited by Dec 18, 2023, 10:50 PM

            @stephenw10 yes but I can't remember I think it also had the same issue. Could a SSD cause this?

            Make sure to upvote

            1 Reply Last reply Reply Quote 0
            • S
              stephenw10 Netgate Administrator
              last edited by Dec 18, 2023, 10:58 PM

              It could if, for example it somehow had the same smbus address as the crypto chip. It shouldn't but it works fine for me here in 23.09.1 without an SSD.

              Is that test from 23.05.1 also with the SSD?

              J 1 Reply Last reply Dec 18, 2023, 11:16 PM Reply Quote 0
              • J
                jrey @JonathanLee
                last edited by Dec 18, 2023, 11:06 PM

                @JonathanLee

                So as you have already noticed, I'm guessing, what you're showing is different than the build date I'm showing and posted above

                Curious was that image before or after TAC sent you the new image, or is/was the date the same on both.

                Still think it is different than just a package here or there, as was discussed here.

                https://forum.netgate.com/topic/184681/after-update-2-7-2-23-09-1?_=1702938917839

                1 Reply Last reply Reply Quote 0
                • J
                  jrey @stephenw10
                  last edited by Dec 18, 2023, 11:13 PM

                  @stephenw10 said in The command '/usr/local/sbin/ping-auth -s > /etc/thoth/thothid 2>/dev/null' returned exit code '127', the output was '':

                  The later 2100s didn't have the chip as we moved away from that

                  define "later" by D.O.M. - please.

                  1 Reply Last reply Reply Quote 0
                  • J
                    JonathanLee @stephenw10
                    last edited by JonathanLee Dec 18, 2023, 11:19 PM Dec 18, 2023, 11:16 PM

                    @stephenw10 yes the 23.05.01 is an SSD that came with my 2100-MAX 32GB

                    The 23.09.01 is on a KingSpec SSD it's 128GB

                    The new SG2100MAX comes with 128GB so I wanted mine to max up to the new MAX

                    Make sure to upvote

                    1 Reply Last reply Reply Quote 0
                    • S
                      stephenw10 Netgate Administrator
                      last edited by Dec 18, 2023, 11:19 PM

                      Ah, but not the same one...

                      J J 2 Replies Last reply Dec 18, 2023, 11:20 PM Reply Quote 0
                      • J
                        JonathanLee @stephenw10
                        last edited by JonathanLee Dec 18, 2023, 11:22 PM Dec 18, 2023, 11:20 PM

                        @stephenw10 no it's a different it's a KingSpec the smart status does not show as much as the trendnet SSD. The install SSD guide for 2100 did not state any cyptoID issues also, that's why I thought it couldn't be the 128GB SSD everything works except that cryptoID is missing and it has the system errors to go with it

                        Make sure to upvote

                        1 Reply Last reply Reply Quote 0
                        • J
                          jrey @stephenw10
                          last edited by Dec 18, 2023, 11:51 PM

                          @stephenw10

                          So I think the only reason my system info is showing the Crypto ID is because the file with the id in it already exists and I upgraded on the existing system

                          system_get_thothid

                          technically if my system did not have the id already in file and got to the exec of /usr/local/sbin/ping-auth it would fail. File does not exist.

                          ls: /usr/local/sbin/ping-auth: No such file or directory
                          

                          The system info has displayed this since day one, and will continue to do so, until the file is gone. Then it will error.

                          Begs the question, @JonathanLee does the file exist on your system?

                          @stephenw10 should it? clearly it has in the past.

                          Clearly the dashboard is going to call system_get_thothid and if the file does not exist it is going to call ping-auth.

                          J 1 Reply Last reply Dec 18, 2023, 11:58 PM Reply Quote 1
                          • J
                            JonathanLee
                            last edited by JonathanLee Dec 19, 2023, 12:00 AM Dec 18, 2023, 11:56 PM

                            Can I just copy it over to the new SSD? I am confused is yours missing also as that path is invalid.

                            I wonder what the path is to the id file. It has to match the chip each is different.

                            I just need my top secret missing critical cryptoID file then for it to work again?

                            Make sure to upvote

                            1 Reply Last reply Reply Quote 0
                            • J
                              JonathanLee @jrey
                              last edited by Dec 18, 2023, 11:58 PM

                              @jrey is your 2100 a MAX?

                              Make sure to upvote

                              J 1 Reply Last reply Dec 19, 2023, 12:33 AM Reply Quote 0
                              • S
                                stephenw10 Netgate Administrator
                                last edited by Dec 19, 2023, 12:04 AM

                                Can you test 23.09.1 on the other SSD or on the eMMC?

                                1 Reply Last reply Reply Quote 0
                                • J
                                  JonathanLee
                                  last edited by JonathanLee Dec 19, 2023, 12:10 AM Dec 19, 2023, 12:07 AM

                                  I can't because I will loose my Snort package that works with out core dumps in 23.05.01

                                  Snort package .11 will be lost in the process if I do a firmware install on that drive. That's my everything works everyday version of PfSense. There has got to be another way....

                                  It's my 🥯 drive

                                  Make sure to upvote

                                  1 Reply Last reply Reply Quote 0
                                  • J
                                    JonathanLee
                                    last edited by JonathanLee Dec 19, 2023, 12:32 AM Dec 19, 2023, 12:23 AM

                                    Screenshot 2023-12-18 at 4.21.34 PM.png

                                    Location of file that is needed!!! Bingo

                                    Screenshot 2023-12-18 at 4.31.50 PM.png

                                    Just add it to backup package

                                    Make sure to upvote

                                    1 Reply Last reply Reply Quote 0
                                    • J
                                      jrey @JonathanLee
                                      last edited by Dec 19, 2023, 12:33 AM

                                      @JonathanLee

                                      the file with the id in it exists - yes.

                                      -rw-r--r--  1 root wheel 19 Jan 23  2023 /etc/thoth/thothid
                                      

                                      the file that creates it (ping-auth), if the ID does not exist, does not exist 😑 my question to @stephenw10 was should it ?

                                      because the file with the ID stored in it already exist, it happily displays it on my dashboard.

                                      Could a SSD cause this?

                                      in a word yes.

                                      should you copy the file from the old one?
                                      ping-auth is likely a NO, if required it is likely a different build. don't do it.
                                      bring the thothid file over (with the ID in it), MAYBE, depends on if and/or what it is still used for. Stephen did imply they have gone away from this in undefined "later" hardware so maybe nothing uses it anymore.

                                      I'd wait to see what is said about the existence of ping-auth.

                                      I'm going to venture a guess that the ID is no longer used and the code just hasn't been cleaned up to generate it. Then because you went to a new drive, the ID file doesn't exist, and you get an error.

                                      I still have the file (same drive) and therefore never tries to recreate it. But it is still likely not used anymore.

                                      MAX, if that in their new terminology means >= 32GB SSD stock then yes this is MAX, but I call him Wallie.

                                      Then I see you've already moved the file.. WOW. So the question will then be "is it still needed for anything?"

                                      J 3 Replies Last reply Dec 19, 2023, 12:39 AM Reply Quote 1
                                      • J
                                        JonathanLee @jrey
                                        last edited by Dec 19, 2023, 12:39 AM

                                        @jrey If it is not needed why is the GUI set to request it, This is used in OpenVPN so it is used. They do not have them in the non plus version.

                                        Make sure to upvote

                                        1 Reply Last reply Reply Quote 0
                                        • J
                                          JonathanLee @jrey
                                          last edited by Dec 19, 2023, 12:40 AM

                                          @jrey I am going to test it, again my ethernet layer 2 broadcast domains are still an issues in 23.09.01 are you using a compex wifi card in your 2100 also?

                                          Make sure to upvote

                                          1 Reply Last reply Reply Quote 0
                                          42 out of 53
                                          • First post
                                            42/53
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received