PFsense on Imprivata Onesign OS200



  • Very Similar to http://forum.pfsense.org/index.php?topic=47105.0

    Has this inside

    http://www.supermicro.com/products/motherboard/xeon3000/3210/x7sbi.cfm

    2gb of ram
    Intel Core 2 Duo E8400
    and raid on two 260gb drives

    2x Gigabit Intel Ethernet onboard.

    one of these mounted to the front
    http://www.crystalfontz.com/product/CFA633TMIKS

    and I will be buying the riser card to give me some more interfaces.

    Looks like it will make a decent firewall. Ill get pictures up soon of the hardware.

    First issue I ran into is with the LCD screen CFA633

    Tried using the LCD-DEV package on 2.1 but i cant tell what isn't working.

    Hopefully someone has some clues and I hope to include some more information.


  • Netgate Administrator

    What did you try to get the LCD working?
    If it's like the Sendio unit you'll have to select com2 for the serial connection then select the Crystalfontz driver. Then select some screens to display on the second tab. Save that. Now go to Status: Services: and click the arrow next to lcdproc.

    Steve



  • thanks Steve,

    I traced the LCD screen to com2 on the mother board so I tried both of those settings on the settings page. serial 2 and alternative 2.

    I also selected the CrystalFontz 633 Driver

    I wasn't sure what to select in the Connection Type.

    I did select multiple screens to try and clicked save. Then started the LCDproc service on the Services page. But Lcdprox never shows as running. It always says stopped.


  • Netgate Administrator

    Anything in the logs to show why it's not starting?

    Did you check 'run at startup'? You might need to hit save on each tab in the lcdproc setup.

    Look at what devices you have in /dev to see which com port you need to select.

    Steve



  • here is the output from dmesg

    [2.1-RELEASE][admin@pfSense.localdomain]/root(1): dmesg
    Copyright (c) 1992-2012 The FreeBSD Project.
    Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
            The Regents of the University of California. All rights reserved.
    FreeBSD is a registered trademark of The FreeBSD Foundation.
    FreeBSD 8.3-RELEASE-p11 #0: Wed Sep 11 18:39:44 EDT 2013
        root@snapshots-8_3-i386.builders.pfsense.org:/usr/obj.pfSense/usr/pfSensesrc/src/sys/pfSense_SMP.8 i386
    Timecounter "i8254" frequency 1193182 Hz quality 0
    CPU: Intel(R) Core(TM)2 Duo CPU     E8400  @ 3.00GHz (3000.23-MHz 686-class CPU)
      Origin = "GenuineIntel"  Id = 0x10676  Family = 6  Model = 17  Stepping = 6
      Features=0xbfebfbff <fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe>Features2=0x8e3fd <sse3,dtes64,mon,ds_cpl,vmx,smx,est,tm2,ssse3,cx16,xtpr,pdcm,sse4.1>AMD Features=0x20100000 <nx,lm>AMD Features2=0x1 <lahf>TSC: P-state invariant
    real memory  = 2147483648 (2048 MB)
    avail memory = 2080731136 (1984 MB)
    ACPI APIC Table: <ptltd   ="" apic ="">FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
    FreeBSD/SMP: 1 package(s) x 2 core(s)
     cpu0 (BSP): APIC ID:  0
     cpu1 (AP): APIC ID:  1
    ioapic0 <version 2.0="">irqs 0-23 on motherboard
    ioapic1 <version 2.0="">irqs 24-47 on motherboard
    wlan: mac acl policy registered
    ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw/.
    ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf.
    module_register_init: MOD_LOAD (ipw_bss_fw, 0xc07bb6f0, 0) error 1
    ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw/.
    ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf.
    module_register_init: MOD_LOAD (ipw_ibss_fw, 0xc07bb790, 0) error 1
    ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw/.
    ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf.
    module_register_init: MOD_LOAD (ipw_monitor_fw, 0xc07bb830, 0) error 1
    kbd1 at kbdmux0
    cryptosoft0: <software crypto="">on motherboard
    padlock0: No ACE support.
    acpi0: <ptltd   ="" xsdt="">on motherboard
    acpi0: [ITHREAD]
    acpi0: Power Button (fixed)
    Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
    acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1008-0x100b on acpi0
    cpu0: <acpi cpu="">on acpi0
    cpu1: <acpi cpu="">on acpi0
    pcib0: <acpi host-pci="" bridge="">port 0xcf8-0xcff on acpi0
    pci0: <acpi pci="" bus="">on pcib0
    pcib1: <acpi pci-pci="" bridge="">irq 16 at device 1.0 on pci0
    pci1: <acpi pci="" bus="">on pcib1
    pcib2: <acpi pci-pci="" bridge="">at device 0.0 on pci1
    pci2: <acpi pci="" bus="">on pcib2
    uhci0: <intel 82801i="" (ich9)="" usb="" controller="">port 0x1820-0x183f irq 16 at device 26.0 on pci0
    uhci0: [ITHREAD]
    usbus0: <intel 82801i="" (ich9)="" usb="" controller="">on uhci0
    uhci1: <intel 82801i="" (ich9)="" usb="" controller="">port 0x1840-0x185f irq 17 at device 26.1 on pci0
    uhci1: [ITHREAD]
    usbus1: <intel 82801i="" (ich9)="" usb="" controller="">on uhci1
    uhci2: <intel 82801i="" (ich9)="" usb="" controller="">port 0x1860-0x187f irq 18 at device 26.2 on pci0
    uhci2: [ITHREAD]
    usbus2: <intel 82801i="" (ich9)="" usb="" controller="">on uhci2
    ehci0: <intel 82801i="" (ich9)="" usb="" 2.0="" controller="">mem 0xd0000000-0xd00003ff irq 18 at device 26.7 on pci0
    ehci0: [ITHREAD]
    usbus3: EHCI version 1.0
    usbus3: <intel 82801i="" (ich9)="" usb="" 2.0="" controller="">on ehci0
    pcib3: <acpi pci-pci="" bridge="">irq 16 at device 28.0 on pci0
    pci5: <acpi pci="" bus="">on pcib3
    pcib4: <acpi pci-pci="" bridge="">irq 16 at device 28.4 on pci0
    pci13: <acpi pci="" bus="">on pcib4
    em0: <intel(r) 1000="" pro="" network="" connection="" 7.3.2="">port 0x2000-0x201f mem 0xd0200000-0xd021ffff irq 16 at device 0.0 on pci13
    em0: Using an MSI interrupt
    em0: [FILTER]
    pcib5: <acpi pci-pci="" bridge="">irq 17 at device 28.5 on pci0
    pci15: <acpi pci="" bus="">on pcib5
    em1: <intel(r) 1000="" pro="" network="" connection="" 7.3.2="">port 0x3000-0x301f mem 0xd0300000-0xd031ffff irq 17 at device 0.0 on pci15
    em1: Using an MSI interrupt
    em1: [FILTER]
    uhci3: <intel 82801i="" (ich9)="" usb="" controller="">port 0x1880-0x189f irq 23 at device 29.0 on pci0
    uhci3: [ITHREAD]
    usbus4: <intel 82801i="" (ich9)="" usb="" controller="">on uhci3
    uhci4: <intel 82801i="" (ich9)="" usb="" controller="">port 0x18a0-0x18bf irq 22 at device 29.1 on pci0
    uhci4: [ITHREAD]
    usbus5: <intel 82801i="" (ich9)="" usb="" controller="">on uhci4
    uhci5: <intel 82801i="" (ich9)="" usb="" controller="">port 0x18c0-0x18df irq 18 at device 29.2 on pci0
    uhci5: [ITHREAD]
    usbus6: <intel 82801i="" (ich9)="" usb="" controller="">on uhci5
    ehci1: <intel 82801i="" (ich9)="" usb="" 2.0="" controller="">mem 0xd0001000-0xd00013ff irq 23 at device 29.7 on pci0
    ehci1: [ITHREAD]
    usbus7: EHCI version 1.0
    usbus7: <intel 82801i="" (ich9)="" usb="" 2.0="" controller="">on ehci1
    pcib6: <acpi pci-pci="" bridge="">at device 30.0 on pci0
    pci17: <acpi pci="" bus="">on pcib6
    vgapci0: <vga-compatible display="">port 0x4000-0x40ff mem 0xd8000000-0xdfffffff,0xd0400000-0xd040ffff irq 22 at device 3.0 on pci17
    atapci0: <ite it8213f="" udma133="" controller="">port 0x4420-0x4427,0x4414-0x4417,0x4418-0x441f,0x4410-0x4413,0x4400-0x440f irq 23 at device 4.0 on pci17
    atapci0: [ITHREAD]
    ata2: <ata channel="">at channel 0 on atapci0
    ata2: [ITHREAD]
    isab0: <pci-isa bridge="">at device 31.0 on pci0
    isa0: <isa bus="">on isab0
    atapci1: <intel ich8="" sata300="" controller="">port 0x1c50-0x1c57,0x1c44-0x1c47,0x1c48-0x1c4f,0x1c40-0x1c43,0x18e0-0x18ff mem 0xd0002000-0xd00027ff irq 17 at device 31.2 on pci0
    atapci1: [ITHREAD]
    atapci1: AHCI called from vendor specific driver
    atapci1: AHCI v1.20 controller with 6 3Gbps ports, PM supported
    ata3: <ata channel="">at channel 0 on atapci1
    ata3: [ITHREAD]
    ata4: <ata channel="">at channel 1 on atapci1
    ata4: [ITHREAD]
    ata5: <ata channel="">at channel 2 on atapci1
    ata5: [ITHREAD]
    ata6: <ata channel="">at channel 3 on atapci1
    ata6: [ITHREAD]
    ata7: <ata channel="">at channel 4 on atapci1
    ata7: [ITHREAD]
    ata8: <ata channel="">at channel 5 on atapci1
    ata8: [ITHREAD]
    pci0: <serial bus,="" smbus="">at device 31.3 (no driver attached)
    pci0: <dasp>at device 31.6 (no driver attached)
    acpi_button0: <power button="">on acpi0
    atrtc0: <at realtime="" clock="">port 0x70-0x71 irq 8 on acpi0
    atkbdc0: <keyboard controller="" (i8042)="">port 0x60,0x64 irq 1 on acpi0
    atkbd0: <at keyboard="">irq 1 on atkbdc0
    kbd0 at atkbd0
    atkbd0: [GIANT-LOCKED]
    atkbd0: [ITHREAD]
    uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
    uart0: [FILTER]
    uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0
    uart1: [FILTER]
    pmtimer0 on isa0
    orm0: <isa option="" rom="">at iomem 0xc0000-0xc8fff pnpid ORM0000 on isa0
    sc0: <system console="">at flags 0x100 on isa0
    sc0: VGA <16 virtual consoles, flags=0x300>
    vga0: <generic isa="" vga="">at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
    ata0: <ata channel="">at port 0x1f0-0x1f7,0x3f6 irq 14 on isa0
    ata0: [ITHREAD]
    ata1: <ata channel="">at port 0x170-0x177,0x376 irq 15 on isa0
    ata1: [ITHREAD]
    ppc0: parallel port not found.
    est0: <enhanced speedstep="" frequency="" control="">on cpu0
    p4tcc0: <cpu frequency="" thermal="" control="">on cpu0
    est1: <enhanced speedstep="" frequency="" control="">on cpu1
    p4tcc1: <cpu frequency="" thermal="" control="">on cpu1
    Timecounters tick every 1.000 msec
    IPsec: Initialized Security Association Processing.
    usbus0: 12Mbps Full Speed USB v1.0
    usbus1: 12Mbps Full Speed USB v1.0
    usbus2: 12Mbps Full Speed USB v1.0
    usbus3: 480Mbps High Speed USB v2.0
    usbus4: 12Mbps Full Speed USB v1.0
    usbus5: 12Mbps Full Speed USB v1.0
    usbus6: 12Mbps Full Speed USB v1.0
    usbus7: 480Mbps High Speed USB v2.0
    ad6: 239372MB <wdc wd2500ys-01shb1="" 20.06c06="">at ata3-master UDMA100 SATA 3Gb/s
    ugen0.1: <intel>at usbus0
    uhub0: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus0
    ugen1.1: <intel>at usbus1
    uhub1: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus1
    ugen2.1: <intel>at usbus2
    uhub2: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus2
    ugen3.1: <intel>at usbus3
    uhub3: <intel 1="" 9="" ehci="" root="" hub,="" class="" 0,="" rev="" 2.00="" 1.00,="" addr="">on usbus3
    ugen4.1: <intel>at usbus4
    uhub4: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus4
    ugen5.1: <intel>at usbus5
    uhub5: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus5
    ugen6.1: <intel>at usbus6
    uhub6: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus6
    ugen7.1: <intel>at usbus7
    uhub7: <intel 1="" 9="" ehci="" root="" hub,="" class="" 0,="" rev="" 2.00="" 1.00,="" addr="">on usbus7
    ad8: 239372MB <wdc wd2500ys-01shb1="" 20.06c06="">at ata4-master UDMA100 SATA 3Gb/s
    uhub0: 2 ports with 2 removable, self powered
    uhub1: 2 ports with 2 removable, self powered
    uhub2: 2 ports with 2 removable, self powered
    uhub4: 2 ports with 2 removable, self powered
    uhub5: 2 ports with 2 removable, self powered
    uhub6: 2 ports with 2 removable, self powered
    uhub3: 6 ports with 6 removable, self powered
    uhub7: 6 ports with 6 removable, self powered
    SMP: AP CPU #1 Launched!
    Trying to mount root from ufs:/dev/ad6s1a
    ZFS NOTICE: Prefetch is disabled by default on i386 -- to enable,
                add "vfs.zfs.prefetch_disable=0" to /boot/loader.conf.
    ZFS WARNING: Recommended minimum kmem_size is 512MB; expect unstable behavior.
                 Consider tuning vm.kmem_size and vm.kmem_size_max
                 in /boot/loader.conf.
    ZFS filesystem version 5
    ZFS storage pool version 28
    em0: link state changed to UP
    pflog0: promiscuous mode enabled
    em1: link state changed to UP</wdc></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></wdc></cpu></enhanced></cpu></enhanced></ata></ata></generic></system></isa></at></keyboard></at></power></dasp></serial></ata></ata></ata></ata></ata></ata></intel></isa></pci-isa></ata></ite></vga-compatible></acpi></acpi></intel></intel></intel></intel></intel></intel></intel></intel></intel(r)></acpi></acpi></intel(r)></acpi></acpi></acpi></acpi></intel></intel></intel></intel></intel></intel></intel></intel></acpi></acpi></acpi></acpi></acpi></acpi></acpi></acpi></ptltd ></software></version></version></ptltd ></lahf></nx,lm></sse3,dtes64,mon,ds_cpl,vmx,smx,est,tm2,ssse3,cx16,xtpr,pdcm,sse4.1></fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe> 
    

    and output of ls on /dev

    [2.1-RELEASE][admin@pfSense.localdomain]/dev(194): ls
    acpi       crypto     fd         nfslock    ttyu0.init ttyv8      ugen4.1
    ad6        ctty       fido       null       ttyu0.lock ttyv9      ugen5.1
    ad6s1      cuau0      geom.ctl   pci        ttyu1      ttyva      ugen6.1
    ad6s1a     cuau0.init io         pf         ttyu1.init ttyvb      ugen7.1
    ad6s1b     cuau0.lock kbd0       ptmx       ttyu1.lock ttyvc      urandom
    ad8        cuau1      kbd1       pts        ttyv0      ttyvd      usb
    ata        cuau1.init kbdmux0    random     ttyv1      ttyve      usbctl
    atkbd0     cuau1.lock klog       speaker    ttyv2      ttyvf      xpt0
    audit      dcons      kmem       stderr     ttyv3      ufsid      zero
    bpf        devctl     led        stdin      ttyv4      ugen0.1    zfs
    bpf0       devstat    md0        stdout     ttyv5      ugen1.1
    console    dgdb       mdctl      sysmouse   ttyv6      ugen2.1
    consolectl dumpdev    mem        ttyu0      ttyv7      ugen3.1
    
    


  • Here is what i see when starting the service from the system log tab

    Oct 15 14:10:45	check_reload_status: Syncing firewall
    Oct 15 14:10:45	php: lcdproc: Sync: End package sync
    Oct 15 14:10:52	php: lcdproc: Sync: Begin package sync
    Oct 15 14:10:52	php: lcdproc: Sync: End package sync
    Oct 15 14:11:00	LCDd: LCDd version 0.5.6 starting
    Oct 15 14:11:00	LCDd: Using Configuration File: /usr/local/etc/LCDd.conf
    Oct 15 14:11:00	LCDd: Listening for queries on 127.0.0.1:13666
    Oct 15 14:11:00	LCDd: Could not open driver module /usr/local/lib/lcdproc/CFontz633.so: Cannot open "/usr/local/lib/lcdproc/CFontz633.so"
    Oct 15 14:11:00	LCDd: Driver [CFontz633] binding failed
    Oct 15 14:11:00	LCDd: Could not load driver CFontz633
    Oct 15 14:11:00	LCDd: There is no output driver
    Oct 15 14:11:00	LCDd: Critical error while initializing, abort.
    Oct 15 14:11:00	php: lcdproc: Start client procedure. Error counter: (0)
    Oct 15 14:11:11	php: lcdproc: Failed to connect to LCDd process Operation timed out (60)
    Oct 15 14:11:11	php: lcdproc: Start client procedure. Error counter: (1)
    

    Seems it cant load the driver… but looking in the folder the driver isnt there....

    [2.1-RELEASE][admin@pfSense.localdomain]/(212): cd usr/local/lib/lcdproc/
    CFontz.so@       bayrad.so@       lcterm.so@       serialPOS.so@
    CFontzPacket.so@ curses.so@       ms6931.so@       serialVFD.so@
    CwLnx.so@        ea65.so@         mtc_s16209x.so@  shuttleVFD.so@
    EyeboxOne.so@    glcd.so@         nexcom.so*       sli.so@
    IOWarrior.so@    glk.so@          picolcd.so@      stv5730.so@
    MD8800.so@       hd44780.so@      pyramid.so@      t6963.so@
    MtxOrb.so@       icp_a106.so@     sdeclcd.so@      text.so@
    NoritakeVFD.so@  lb216.so@        sed1330.so@      tyan.so@
    SureElec.so@     lcdm001.so@      sed1520.so@      vlsys_m428.so@
    
    

  • Netgate Administrator

    Ok so your com2 port appears as cuau1, use the alternate setting.

    Hmm, no driver. That'll stop it working!  ::)

    This might be a known problem though I thought it only applied to the lcdproc standard package. If you look at the 2.1 packages spreadsheet:
    https://docs.google.com/spreadsheet/ccc?key=0AojFUXcbH0ROdEFZcC1GbEV6ekpqcXFEZTE5TGpzaXc#gid=0

    Missing some added drivers that existed on 2.x

    I have no idea how up to date that is. In 2.0.X some drivers were included as binary only so wouldn't have been compiled for 2.1. Hmm weird it doesn't look to be in either the lcdproc or lcdproc dev package.  :-\

    Perhaps it's been merged with one of the other CFontz drivers?

    Edit: The lcdproc site lists the 633 as supported by the packet driver, maybe try that.

    Steve



  • Good news..

    I installed 2.0.3 in a vm and grabbed the driver CFontz633.so from the lcdproc (not dev) package and copied it over to the 2.1.

    (for a future reference is there an easier way to do this then to install on a vm)

    And it WORKS!

    Service now shows as running and the screen and buttons Work!  Now to figure out how to write to the EPPROM so it doesn't say "Impriata Onesign" on start up anymore.

    How can we get the driver ported over?

    Thanks a bunch!


  • Netgate Administrator

    Nice! I was just looking for a source to download it directly.

    When you install the lcdproc (not dev package) from 2.0.X you get this file: http://files.pfsense.org/packages/8/All/lcdproc-0.5.5.tbz which contains the 633 driver. If you install the dev package from 2.0.X you get this: http://files.pfsense.org/packages/8/All/lcdproc-0.5.6.tbz which does not.

    2.1 uses PBIs instead of tar balls but both dev and not dev are using 0.5.6. No driver.

    It looks like the 633 driver was due to be merged with the packet driver though so that might explain why 0.5.6 doesn't have it.

    @http://lcdproc.cvs.sourceforge.net/viewvc/lcdproc/lcdproc/server/drivers/CFontzPacket.c?view=log:

    Move the key events from CFontzPacket.c into CFontz633io.h replacing the
    unused ones there. Note that CFontz633 driver uses its own key event definitions,
    too. Don't update this driver as it is scheduled for removal anyway.

    Steve



  • ended up using this script to set the boot message
    http://noisybox.net/computers/crystalfontz/

    It now says

    "Loading PFsense!"
    "Please Wait"

    When booting.


  • Netgate Administrator

    Nice.  :)
    That also implies the packet driver might work with the 633.

    Steve


Log in to reply