PFsense on Imprivata Onesign OS200
-
Very Similar to http://forum.pfsense.org/index.php?topic=47105.0
Has this inside
http://www.supermicro.com/products/motherboard/xeon3000/3210/x7sbi.cfm
2gb of ram
Intel Core 2 Duo E8400
and raid on two 260gb drives2x Gigabit Intel Ethernet onboard.
one of these mounted to the front
http://www.crystalfontz.com/product/CFA633TMIKSand I will be buying the riser card to give me some more interfaces.
Looks like it will make a decent firewall. Ill get pictures up soon of the hardware.
First issue I ran into is with the LCD screen CFA633
Tried using the LCD-DEV package on 2.1 but i cant tell what isn't working.
Hopefully someone has some clues and I hope to include some more information.
-
What did you try to get the LCD working?
If it's like the Sendio unit you'll have to select com2 for the serial connection then select the Crystalfontz driver. Then select some screens to display on the second tab. Save that. Now go to Status: Services: and click the arrow next to lcdproc.Steve
-
thanks Steve,
I traced the LCD screen to com2 on the mother board so I tried both of those settings on the settings page. serial 2 and alternative 2.
I also selected the CrystalFontz 633 Driver
I wasn't sure what to select in the Connection Type.
I did select multiple screens to try and clicked save. Then started the LCDproc service on the Services page. But Lcdprox never shows as running. It always says stopped.
-
Anything in the logs to show why it's not starting?
Did you check 'run at startup'? You might need to hit save on each tab in the lcdproc setup.
Look at what devices you have in /dev to see which com port you need to select.
Steve
-
here is the output from dmesg
[2.1-RELEASE][admin@pfSense.localdomain]/root(1): dmesg Copyright (c) 1992-2012 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 8.3-RELEASE-p11 #0: Wed Sep 11 18:39:44 EDT 2013 root@snapshots-8_3-i386.builders.pfsense.org:/usr/obj.pfSense/usr/pfSensesrc/src/sys/pfSense_SMP.8 i386 Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GHz (3000.23-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0x10676 Family = 6 Model = 17 Stepping = 6 Features=0xbfebfbff <fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe>Features2=0x8e3fd <sse3,dtes64,mon,ds_cpl,vmx,smx,est,tm2,ssse3,cx16,xtpr,pdcm,sse4.1>AMD Features=0x20100000 <nx,lm>AMD Features2=0x1 <lahf>TSC: P-state invariant real memory = 2147483648 (2048 MB) avail memory = 2080731136 (1984 MB) ACPI APIC Table: <ptltd ="" apic ="">FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs FreeBSD/SMP: 1 package(s) x 2 core(s) cpu0 (BSP): APIC ID: 0 cpu1 (AP): APIC ID: 1 ioapic0 <version 2.0="">irqs 0-23 on motherboard ioapic1 <version 2.0="">irqs 24-47 on motherboard wlan: mac acl policy registered ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw/. ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. module_register_init: MOD_LOAD (ipw_bss_fw, 0xc07bb6f0, 0) error 1 ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw/. ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. module_register_init: MOD_LOAD (ipw_ibss_fw, 0xc07bb790, 0) error 1 ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw/. ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.conf. module_register_init: MOD_LOAD (ipw_monitor_fw, 0xc07bb830, 0) error 1 kbd1 at kbdmux0 cryptosoft0: <software crypto="">on motherboard padlock0: No ACE support. acpi0: <ptltd ="" xsdt="">on motherboard acpi0: [ITHREAD] acpi0: Power Button (fixed) Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1008-0x100b on acpi0 cpu0: <acpi cpu="">on acpi0 cpu1: <acpi cpu="">on acpi0 pcib0: <acpi host-pci="" bridge="">port 0xcf8-0xcff on acpi0 pci0: <acpi pci="" bus="">on pcib0 pcib1: <acpi pci-pci="" bridge="">irq 16 at device 1.0 on pci0 pci1: <acpi pci="" bus="">on pcib1 pcib2: <acpi pci-pci="" bridge="">at device 0.0 on pci1 pci2: <acpi pci="" bus="">on pcib2 uhci0: <intel 82801i="" (ich9)="" usb="" controller="">port 0x1820-0x183f irq 16 at device 26.0 on pci0 uhci0: [ITHREAD] usbus0: <intel 82801i="" (ich9)="" usb="" controller="">on uhci0 uhci1: <intel 82801i="" (ich9)="" usb="" controller="">port 0x1840-0x185f irq 17 at device 26.1 on pci0 uhci1: [ITHREAD] usbus1: <intel 82801i="" (ich9)="" usb="" controller="">on uhci1 uhci2: <intel 82801i="" (ich9)="" usb="" controller="">port 0x1860-0x187f irq 18 at device 26.2 on pci0 uhci2: [ITHREAD] usbus2: <intel 82801i="" (ich9)="" usb="" controller="">on uhci2 ehci0: <intel 82801i="" (ich9)="" usb="" 2.0="" controller="">mem 0xd0000000-0xd00003ff irq 18 at device 26.7 on pci0 ehci0: [ITHREAD] usbus3: EHCI version 1.0 usbus3: <intel 82801i="" (ich9)="" usb="" 2.0="" controller="">on ehci0 pcib3: <acpi pci-pci="" bridge="">irq 16 at device 28.0 on pci0 pci5: <acpi pci="" bus="">on pcib3 pcib4: <acpi pci-pci="" bridge="">irq 16 at device 28.4 on pci0 pci13: <acpi pci="" bus="">on pcib4 em0: <intel(r) 1000="" pro="" network="" connection="" 7.3.2="">port 0x2000-0x201f mem 0xd0200000-0xd021ffff irq 16 at device 0.0 on pci13 em0: Using an MSI interrupt em0: [FILTER] pcib5: <acpi pci-pci="" bridge="">irq 17 at device 28.5 on pci0 pci15: <acpi pci="" bus="">on pcib5 em1: <intel(r) 1000="" pro="" network="" connection="" 7.3.2="">port 0x3000-0x301f mem 0xd0300000-0xd031ffff irq 17 at device 0.0 on pci15 em1: Using an MSI interrupt em1: [FILTER] uhci3: <intel 82801i="" (ich9)="" usb="" controller="">port 0x1880-0x189f irq 23 at device 29.0 on pci0 uhci3: [ITHREAD] usbus4: <intel 82801i="" (ich9)="" usb="" controller="">on uhci3 uhci4: <intel 82801i="" (ich9)="" usb="" controller="">port 0x18a0-0x18bf irq 22 at device 29.1 on pci0 uhci4: [ITHREAD] usbus5: <intel 82801i="" (ich9)="" usb="" controller="">on uhci4 uhci5: <intel 82801i="" (ich9)="" usb="" controller="">port 0x18c0-0x18df irq 18 at device 29.2 on pci0 uhci5: [ITHREAD] usbus6: <intel 82801i="" (ich9)="" usb="" controller="">on uhci5 ehci1: <intel 82801i="" (ich9)="" usb="" 2.0="" controller="">mem 0xd0001000-0xd00013ff irq 23 at device 29.7 on pci0 ehci1: [ITHREAD] usbus7: EHCI version 1.0 usbus7: <intel 82801i="" (ich9)="" usb="" 2.0="" controller="">on ehci1 pcib6: <acpi pci-pci="" bridge="">at device 30.0 on pci0 pci17: <acpi pci="" bus="">on pcib6 vgapci0: <vga-compatible display="">port 0x4000-0x40ff mem 0xd8000000-0xdfffffff,0xd0400000-0xd040ffff irq 22 at device 3.0 on pci17 atapci0: <ite it8213f="" udma133="" controller="">port 0x4420-0x4427,0x4414-0x4417,0x4418-0x441f,0x4410-0x4413,0x4400-0x440f irq 23 at device 4.0 on pci17 atapci0: [ITHREAD] ata2: <ata channel="">at channel 0 on atapci0 ata2: [ITHREAD] isab0: <pci-isa bridge="">at device 31.0 on pci0 isa0: <isa bus="">on isab0 atapci1: <intel ich8="" sata300="" controller="">port 0x1c50-0x1c57,0x1c44-0x1c47,0x1c48-0x1c4f,0x1c40-0x1c43,0x18e0-0x18ff mem 0xd0002000-0xd00027ff irq 17 at device 31.2 on pci0 atapci1: [ITHREAD] atapci1: AHCI called from vendor specific driver atapci1: AHCI v1.20 controller with 6 3Gbps ports, PM supported ata3: <ata channel="">at channel 0 on atapci1 ata3: [ITHREAD] ata4: <ata channel="">at channel 1 on atapci1 ata4: [ITHREAD] ata5: <ata channel="">at channel 2 on atapci1 ata5: [ITHREAD] ata6: <ata channel="">at channel 3 on atapci1 ata6: [ITHREAD] ata7: <ata channel="">at channel 4 on atapci1 ata7: [ITHREAD] ata8: <ata channel="">at channel 5 on atapci1 ata8: [ITHREAD] pci0: <serial bus,="" smbus="">at device 31.3 (no driver attached) pci0: <dasp>at device 31.6 (no driver attached) acpi_button0: <power button="">on acpi0 atrtc0: <at realtime="" clock="">port 0x70-0x71 irq 8 on acpi0 atkbdc0: <keyboard controller="" (i8042)="">port 0x60,0x64 irq 1 on acpi0 atkbd0: <at keyboard="">irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] atkbd0: [ITHREAD] uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 uart0: [FILTER] uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0 uart1: [FILTER] pmtimer0 on isa0 orm0: <isa option="" rom="">at iomem 0xc0000-0xc8fff pnpid ORM0000 on isa0 sc0: <system console="">at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> vga0: <generic isa="" vga="">at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 ata0: <ata channel="">at port 0x1f0-0x1f7,0x3f6 irq 14 on isa0 ata0: [ITHREAD] ata1: <ata channel="">at port 0x170-0x177,0x376 irq 15 on isa0 ata1: [ITHREAD] ppc0: parallel port not found. est0: <enhanced speedstep="" frequency="" control="">on cpu0 p4tcc0: <cpu frequency="" thermal="" control="">on cpu0 est1: <enhanced speedstep="" frequency="" control="">on cpu1 p4tcc1: <cpu frequency="" thermal="" control="">on cpu1 Timecounters tick every 1.000 msec IPsec: Initialized Security Association Processing. usbus0: 12Mbps Full Speed USB v1.0 usbus1: 12Mbps Full Speed USB v1.0 usbus2: 12Mbps Full Speed USB v1.0 usbus3: 480Mbps High Speed USB v2.0 usbus4: 12Mbps Full Speed USB v1.0 usbus5: 12Mbps Full Speed USB v1.0 usbus6: 12Mbps Full Speed USB v1.0 usbus7: 480Mbps High Speed USB v2.0 ad6: 239372MB <wdc wd2500ys-01shb1="" 20.06c06="">at ata3-master UDMA100 SATA 3Gb/s ugen0.1: <intel>at usbus0 uhub0: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus0 ugen1.1: <intel>at usbus1 uhub1: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus1 ugen2.1: <intel>at usbus2 uhub2: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus2 ugen3.1: <intel>at usbus3 uhub3: <intel 1="" 9="" ehci="" root="" hub,="" class="" 0,="" rev="" 2.00="" 1.00,="" addr="">on usbus3 ugen4.1: <intel>at usbus4 uhub4: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus4 ugen5.1: <intel>at usbus5 uhub5: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus5 ugen6.1: <intel>at usbus6 uhub6: <intel 1="" 9="" uhci="" root="" hub,="" class="" 0,="" rev="" 1.00="" 1.00,="" addr="">on usbus6 ugen7.1: <intel>at usbus7 uhub7: <intel 1="" 9="" ehci="" root="" hub,="" class="" 0,="" rev="" 2.00="" 1.00,="" addr="">on usbus7 ad8: 239372MB <wdc wd2500ys-01shb1="" 20.06c06="">at ata4-master UDMA100 SATA 3Gb/s uhub0: 2 ports with 2 removable, self powered uhub1: 2 ports with 2 removable, self powered uhub2: 2 ports with 2 removable, self powered uhub4: 2 ports with 2 removable, self powered uhub5: 2 ports with 2 removable, self powered uhub6: 2 ports with 2 removable, self powered uhub3: 6 ports with 6 removable, self powered uhub7: 6 ports with 6 removable, self powered SMP: AP CPU #1 Launched! Trying to mount root from ufs:/dev/ad6s1a ZFS NOTICE: Prefetch is disabled by default on i386 -- to enable, add "vfs.zfs.prefetch_disable=0" to /boot/loader.conf. ZFS WARNING: Recommended minimum kmem_size is 512MB; expect unstable behavior. Consider tuning vm.kmem_size and vm.kmem_size_max in /boot/loader.conf. ZFS filesystem version 5 ZFS storage pool version 28 em0: link state changed to UP pflog0: promiscuous mode enabled em1: link state changed to UP</wdc></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></intel></wdc></cpu></enhanced></cpu></enhanced></ata></ata></generic></system></isa></at></keyboard></at></power></dasp></serial></ata></ata></ata></ata></ata></ata></intel></isa></pci-isa></ata></ite></vga-compatible></acpi></acpi></intel></intel></intel></intel></intel></intel></intel></intel></intel(r)></acpi></acpi></intel(r)></acpi></acpi></acpi></acpi></intel></intel></intel></intel></intel></intel></intel></intel></acpi></acpi></acpi></acpi></acpi></acpi></acpi></acpi></ptltd ></software></version></version></ptltd ></lahf></nx,lm></sse3,dtes64,mon,ds_cpl,vmx,smx,est,tm2,ssse3,cx16,xtpr,pdcm,sse4.1></fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat,pse36,clflush,dts,acpi,mmx,fxsr,sse,sse2,ss,htt,tm,pbe>
and output of ls on /dev
[2.1-RELEASE][admin@pfSense.localdomain]/dev(194): ls acpi crypto fd nfslock ttyu0.init ttyv8 ugen4.1 ad6 ctty fido null ttyu0.lock ttyv9 ugen5.1 ad6s1 cuau0 geom.ctl pci ttyu1 ttyva ugen6.1 ad6s1a cuau0.init io pf ttyu1.init ttyvb ugen7.1 ad6s1b cuau0.lock kbd0 ptmx ttyu1.lock ttyvc urandom ad8 cuau1 kbd1 pts ttyv0 ttyvd usb ata cuau1.init kbdmux0 random ttyv1 ttyve usbctl atkbd0 cuau1.lock klog speaker ttyv2 ttyvf xpt0 audit dcons kmem stderr ttyv3 ufsid zero bpf devctl led stdin ttyv4 ugen0.1 zfs bpf0 devstat md0 stdout ttyv5 ugen1.1 console dgdb mdctl sysmouse ttyv6 ugen2.1 consolectl dumpdev mem ttyu0 ttyv7 ugen3.1
-
Here is what i see when starting the service from the system log tab
Oct 15 14:10:45 check_reload_status: Syncing firewall Oct 15 14:10:45 php: lcdproc: Sync: End package sync Oct 15 14:10:52 php: lcdproc: Sync: Begin package sync Oct 15 14:10:52 php: lcdproc: Sync: End package sync Oct 15 14:11:00 LCDd: LCDd version 0.5.6 starting Oct 15 14:11:00 LCDd: Using Configuration File: /usr/local/etc/LCDd.conf Oct 15 14:11:00 LCDd: Listening for queries on 127.0.0.1:13666 Oct 15 14:11:00 LCDd: Could not open driver module /usr/local/lib/lcdproc/CFontz633.so: Cannot open "/usr/local/lib/lcdproc/CFontz633.so" Oct 15 14:11:00 LCDd: Driver [CFontz633] binding failed Oct 15 14:11:00 LCDd: Could not load driver CFontz633 Oct 15 14:11:00 LCDd: There is no output driver Oct 15 14:11:00 LCDd: Critical error while initializing, abort. Oct 15 14:11:00 php: lcdproc: Start client procedure. Error counter: (0) Oct 15 14:11:11 php: lcdproc: Failed to connect to LCDd process Operation timed out (60) Oct 15 14:11:11 php: lcdproc: Start client procedure. Error counter: (1)
Seems it cant load the driver… but looking in the folder the driver isnt there....
[2.1-RELEASE][admin@pfSense.localdomain]/(212): cd usr/local/lib/lcdproc/ CFontz.so@ bayrad.so@ lcterm.so@ serialPOS.so@ CFontzPacket.so@ curses.so@ ms6931.so@ serialVFD.so@ CwLnx.so@ ea65.so@ mtc_s16209x.so@ shuttleVFD.so@ EyeboxOne.so@ glcd.so@ nexcom.so* sli.so@ IOWarrior.so@ glk.so@ picolcd.so@ stv5730.so@ MD8800.so@ hd44780.so@ pyramid.so@ t6963.so@ MtxOrb.so@ icp_a106.so@ sdeclcd.so@ text.so@ NoritakeVFD.so@ lb216.so@ sed1330.so@ tyan.so@ SureElec.so@ lcdm001.so@ sed1520.so@ vlsys_m428.so@
-
Ok so your com2 port appears as cuau1, use the alternate setting.
Hmm, no driver. That'll stop it working! ::)
This might be a known problem though I thought it only applied to the lcdproc standard package. If you look at the 2.1 packages spreadsheet:
https://docs.google.com/spreadsheet/ccc?key=0AojFUXcbH0ROdEFZcC1GbEV6ekpqcXFEZTE5TGpzaXc#gid=0Missing some added drivers that existed on 2.x
I have no idea how up to date that is. In 2.0.X some drivers were included as binary only so wouldn't have been compiled for 2.1. Hmm weird it doesn't look to be in either the lcdproc or lcdproc dev package. :-\
Perhaps it's been merged with one of the other CFontz drivers?
Edit: The lcdproc site lists the 633 as supported by the packet driver, maybe try that.
Steve
-
Good news..
I installed 2.0.3 in a vm and grabbed the driver CFontz633.so from the lcdproc (not dev) package and copied it over to the 2.1.
(for a future reference is there an easier way to do this then to install on a vm)
And it WORKS!
Service now shows as running and the screen and buttons Work! Now to figure out how to write to the EPPROM so it doesn't say "Impriata Onesign" on start up anymore.
How can we get the driver ported over?
Thanks a bunch!
-
Nice! I was just looking for a source to download it directly.
When you install the lcdproc (not dev package) from 2.0.X you get this file: http://files.pfsense.org/packages/8/All/lcdproc-0.5.5.tbz which contains the 633 driver. If you install the dev package from 2.0.X you get this: http://files.pfsense.org/packages/8/All/lcdproc-0.5.6.tbz which does not.
2.1 uses PBIs instead of tar balls but both dev and not dev are using 0.5.6. No driver.
It looks like the 633 driver was due to be merged with the packet driver though so that might explain why 0.5.6 doesn't have it.
@http://lcdproc.cvs.sourceforge.net/viewvc/lcdproc/lcdproc/server/drivers/CFontzPacket.c?view=log:
Move the key events from CFontzPacket.c into CFontz633io.h replacing the
unused ones there. Note that CFontz633 driver uses its own key event definitions,
too. Don't update this driver as it is scheduled for removal anyway.Steve
-
ended up using this script to set the boot message
http://noisybox.net/computers/crystalfontz/It now says
"Loading PFsense!"
"Please Wait"When booting.
-
Nice. :)
That also implies the packet driver might work with the 633.Steve