• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Resolved: The command '/usr/local/sbin/ping-auth -s > /etc/thoth/thothid 2>/dev/null' returned exit code '127', the output was ''

Scheduled Pinned Locked Moved General pfSense Questions
developmentcryptocryptographicfirmware
53 Posts 3 Posters 7.6k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • J
    jrey @stephenw10
    last edited by Dec 18, 2023, 11:13 PM

    @stephenw10 said in The command '/usr/local/sbin/ping-auth -s > /etc/thoth/thothid 2>/dev/null' returned exit code '127', the output was '':

    The later 2100s didn't have the chip as we moved away from that

    define "later" by D.O.M. - please.

    1 Reply Last reply Reply Quote 0
    • J
      JonathanLee @stephenw10
      last edited by JonathanLee Dec 18, 2023, 11:19 PM Dec 18, 2023, 11:16 PM

      @stephenw10 yes the 23.05.01 is an SSD that came with my 2100-MAX 32GB

      The 23.09.01 is on a KingSpec SSD it's 128GB

      The new SG2100MAX comes with 128GB so I wanted mine to max up to the new MAX

      Make sure to upvote

      1 Reply Last reply Reply Quote 0
      • S
        stephenw10 Netgate Administrator
        last edited by Dec 18, 2023, 11:19 PM

        Ah, but not the same one...

        J J 2 Replies Last reply Dec 18, 2023, 11:20 PM Reply Quote 0
        • J
          JonathanLee @stephenw10
          last edited by JonathanLee Dec 18, 2023, 11:22 PM Dec 18, 2023, 11:20 PM

          @stephenw10 no it's a different it's a KingSpec the smart status does not show as much as the trendnet SSD. The install SSD guide for 2100 did not state any cyptoID issues also, that's why I thought it couldn't be the 128GB SSD everything works except that cryptoID is missing and it has the system errors to go with it

          Make sure to upvote

          1 Reply Last reply Reply Quote 0
          • J
            jrey @stephenw10
            last edited by Dec 18, 2023, 11:51 PM

            @stephenw10

            So I think the only reason my system info is showing the Crypto ID is because the file with the id in it already exists and I upgraded on the existing system

            system_get_thothid

            technically if my system did not have the id already in file and got to the exec of /usr/local/sbin/ping-auth it would fail. File does not exist.

            ls: /usr/local/sbin/ping-auth: No such file or directory
            

            The system info has displayed this since day one, and will continue to do so, until the file is gone. Then it will error.

            Begs the question, @JonathanLee does the file exist on your system?

            @stephenw10 should it? clearly it has in the past.

            Clearly the dashboard is going to call system_get_thothid and if the file does not exist it is going to call ping-auth.

            J 1 Reply Last reply Dec 18, 2023, 11:58 PM Reply Quote 1
            • J
              JonathanLee
              last edited by JonathanLee Dec 19, 2023, 12:00 AM Dec 18, 2023, 11:56 PM

              Can I just copy it over to the new SSD? I am confused is yours missing also as that path is invalid.

              I wonder what the path is to the id file. It has to match the chip each is different.

              I just need my top secret missing critical cryptoID file then for it to work again?

              Make sure to upvote

              1 Reply Last reply Reply Quote 0
              • J
                JonathanLee @jrey
                last edited by Dec 18, 2023, 11:58 PM

                @jrey is your 2100 a MAX?

                Make sure to upvote

                J 1 Reply Last reply Dec 19, 2023, 12:33 AM Reply Quote 0
                • S
                  stephenw10 Netgate Administrator
                  last edited by Dec 19, 2023, 12:04 AM

                  Can you test 23.09.1 on the other SSD or on the eMMC?

                  1 Reply Last reply Reply Quote 0
                  • J
                    JonathanLee
                    last edited by JonathanLee Dec 19, 2023, 12:10 AM Dec 19, 2023, 12:07 AM

                    I can't because I will loose my Snort package that works with out core dumps in 23.05.01

                    Snort package .11 will be lost in the process if I do a firmware install on that drive. That's my everything works everyday version of PfSense. There has got to be another way....

                    It's my 🥯 drive

                    Make sure to upvote

                    1 Reply Last reply Reply Quote 0
                    • J
                      JonathanLee
                      last edited by JonathanLee Dec 19, 2023, 12:32 AM Dec 19, 2023, 12:23 AM

                      Screenshot 2023-12-18 at 4.21.34 PM.png

                      Location of file that is needed!!! Bingo

                      Screenshot 2023-12-18 at 4.31.50 PM.png

                      Just add it to backup package

                      Make sure to upvote

                      1 Reply Last reply Reply Quote 0
                      • J
                        jrey @JonathanLee
                        last edited by Dec 19, 2023, 12:33 AM

                        @JonathanLee

                        the file with the id in it exists - yes.

                        -rw-r--r--  1 root wheel 19 Jan 23  2023 /etc/thoth/thothid
                        

                        the file that creates it (ping-auth), if the ID does not exist, does not exist 😑 my question to @stephenw10 was should it ?

                        because the file with the ID stored in it already exist, it happily displays it on my dashboard.

                        Could a SSD cause this?

                        in a word yes.

                        should you copy the file from the old one?
                        ping-auth is likely a NO, if required it is likely a different build. don't do it.
                        bring the thothid file over (with the ID in it), MAYBE, depends on if and/or what it is still used for. Stephen did imply they have gone away from this in undefined "later" hardware so maybe nothing uses it anymore.

                        I'd wait to see what is said about the existence of ping-auth.

                        I'm going to venture a guess that the ID is no longer used and the code just hasn't been cleaned up to generate it. Then because you went to a new drive, the ID file doesn't exist, and you get an error.

                        I still have the file (same drive) and therefore never tries to recreate it. But it is still likely not used anymore.

                        MAX, if that in their new terminology means >= 32GB SSD stock then yes this is MAX, but I call him Wallie.

                        Then I see you've already moved the file.. WOW. So the question will then be "is it still needed for anything?"

                        J 3 Replies Last reply Dec 19, 2023, 12:39 AM Reply Quote 1
                        • J
                          JonathanLee @jrey
                          last edited by Dec 19, 2023, 12:39 AM

                          @jrey If it is not needed why is the GUI set to request it, This is used in OpenVPN so it is used. They do not have them in the non plus version.

                          Make sure to upvote

                          1 Reply Last reply Reply Quote 0
                          • J
                            JonathanLee @jrey
                            last edited by Dec 19, 2023, 12:40 AM

                            @jrey I am going to test it, again my ethernet layer 2 broadcast domains are still an issues in 23.09.01 are you using a compex wifi card in your 2100 also?

                            Make sure to upvote

                            1 Reply Last reply Reply Quote 0
                            • S
                              stephenw10 Netgate Administrator
                              last edited by Dec 19, 2023, 12:53 AM

                              Ah, so upgrades appear to work because the file exists. I was busily trying to work out how that file was being populated by ping-auth when it doesn't exist!

                              Ok so if it exists it will show there but the utility is deprecated and the ID itself is unused in 23.09. So it should be removed.

                              J J 2 Replies Last reply Dec 19, 2023, 1:15 AM Reply Quote 1
                              • J
                                JonathanLee
                                last edited by Dec 19, 2023, 1:10 AM

                                Screenshot 2023-12-18 at 4.59.00 PM.png

                                It required the full folder fixed it :)

                                Make sure to upvote

                                1 Reply Last reply Reply Quote 0
                                • J
                                  jrey @stephenw10
                                  last edited by Dec 19, 2023, 1:15 AM

                                  @stephenw10

                                  Which is contrary to JonathanLee's belief/understanding - that this is used in OpenVPN or compex wifi card.

                                  I'm going by your previous statement that "later" hardware doesn't even have it, that it was not needed.

                                  Yes I tracked it down, and discovered that the file with ID exists, and if that did not there would be an error because ping-auth does not exist on my system.

                                  Yes, the dashboard should likely stop looking for it and anything else that might call system_get_thothid is also likely suspect where the file does not exist and needs to be recreated. In my case nothing I am aware of uses it, so as long as the file exists it can display or not..

                                  The code will catch up when it does.

                                  J 1 Reply Last reply Dec 19, 2023, 1:28 AM Reply Quote 1
                                  • J
                                    JonathanLee @stephenw10
                                    last edited by JonathanLee Dec 19, 2023, 1:24 AM Dec 19, 2023, 1:23 AM

                                    @stephenw10

                                    ping-auth -s is not included in 23.09.1 so the folder is no longer pre populated

                                    https://redmine.pfsense.org/issues/15103

                                    This is now confirmed as the cause of cryptID no longer working in 23.09.01 on fresh firmware

                                    Make sure to upvote

                                    1 Reply Last reply Reply Quote 0
                                    • J
                                      JonathanLee
                                      last edited by Dec 19, 2023, 1:25 AM

                                      Thanks Steve !!

                                      Now I will start looking into the layer 2 broadcast domain issues on 23.09.01

                                      Make sure to upvote

                                      1 Reply Last reply Reply Quote 0
                                      • J
                                        JonathanLee @jrey
                                        last edited by Dec 19, 2023, 1:27 AM

                                        @jrey Thanks too

                                        Make sure to upvote

                                        1 Reply Last reply Reply Quote 0
                                        • J
                                          JonathanLee @jrey
                                          last edited by Dec 19, 2023, 1:28 AM

                                          @jrey so the crypt chip is no longer used??

                                          Make sure to upvote

                                          J 1 Reply Last reply Dec 19, 2023, 1:53 AM Reply Quote 0
                                          39 out of 53
                                          • First post
                                            39/53
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received