No longer log into web gui with any user but admin

knotbeerdan

I have been running pfsense 2.0.1 for approximately 6 months. After shutting down to blow out the pc I can no longer login with any user besides the admin user. I can use openVPN and login to the shell, but when I attempt to login to the web GUI I get an error that there is no page assigned to this user. The user is an admin user, and I even created another user with admin privileges with no changes.

After creating the new user with no luck, I then went into the the user properties for the old existing user and selected all pages…

I have tried rebooting the router again, and have covered every area I can possibly think of to resolve this issue.

Only thing I can find in the logs is this...

php: /index.php: User logged out for user 'drogers' from: 10.0.0.139

(drogers is the user I have been using since day 1 to access the web GUI)

I realize I may be lacking some important info, if there is anything else I need to post please let me know and I will get the information or logs.

jfassad

I have the exact same problem.
Im using the default local database auth server.

Testing the login on Diagnostics > Authentication gives me the result:
User: jfassad authenticated successfully.
This user is a member of these groups:
all admins

Everything looks fine except I can't login with the user.

EDIT: Running 2.0.1-RELEASE

jfassad

I have managed to fix the problem.

I had to edit /etc/inc/priv.inc and comment lines 252 e 253

249 function getAllowedPages($username) {
250         global $config, $_SESSION;
251
252 //      if (!function_exists("ldap_connect"))
253 //              return;

Im not using ldap and after inspecting the code, not thoroughly, I must admit. I don't think it will break anything.

I looked but couldn't find the function ldap_connect declaration anywhere. I wonder how it was working before the reboot. Maybe something got deleted during the reboot somehow.

Can anybody please check where is the function ldap_connect declared and tell me ?

regards,

Joao

jfassad

Looks like the problem is that php ldap module was not loaded.

cat /var/run/php_modules_load_errors.txt

ldap did not load correctly. Removing from php.ini…

And here is why:

On /tmp/PHP_errors.log:
[12-Jul-2012 21:40:50] PHP Warning: PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20060613/ldap.so' - Shared object "libsasl2.so.2" not found, required by "libldap-2.4.so.8" in Unknown on line 0

I did not remove libsasl2.so.2 myself, but I have this feeling that I remember seeing libsasl being mentioned in some package I installed. I probably removed this package later and libsasl2.so.2 was removed by the script.

Are there any package install/remove logs that I can check ?

knotbeerdan

@jfassad:

I have managed to fix the problem.

I had to edit /etc/inc/priv.inc and comment lines 252 e 253
249 function getAllowedPages($username) {
250         global $config, $_SESSION;
251
252 //      if (!function_exists("ldap_connect"))
253 //              return;

I applied the fix above and it seemed to work for me as well. I also am not using LDAP and it would be nice if we could disable this completely or at least stop the module from loading.

jfassad

knotbeerdan,

It seems the problem is that some package that you and had had installed and subsequently removed , ended up deleting libsasl which is a core dependency. Without libsasl installed php wont load the ldap module and will break the getAllowedPages function.

There is even an old bug report describing a similar case - http://redmine.pfsense.org/issues/875

knotbeerdan

Thanks for the info!