1. This problem/solution has nothing to do with the upgrade from FreeBSD 12.x to FreeBSD 13.0.

2. Perl location in the fcgi scripts will be fixed soon with FreeBSD port version security/p5-openxpki-3.14.4_1

Regards, Sergei

On 08.10.2021 0:21, Nick Dawson wrote:
solved!

Wanted to update this thread - my upgrade path from FreeBSD 12.x to FreeBSD 13.0 wasn't clean and I'm unclear on how many of the errors I had to tackle were related to my particular set up or how many others may also encounter.

I wanted to share one big stumbling block I found and have reported to the package maintainer:

In FreeBSD perl's executable lives in /usr/local/bin/perl
but the FCGI scripts expect:
#!/usr/bin/perl -w

I edited the files but I also tested a symbolic link from /u/l/b/perl to /u/b/perl and both approaches fixed the problem for me.

we're back up and running here!





On Mon, Oct 04, 2021 at 3:09 AM, Oliver Welter <[email protected] <mailto:[email protected]>> wrote:

    The only idea that matches this picture would be that you have an
    old version of webui.fcgi deployed.

    Can you please check this and also run a  "grep" on the string
    "handle_request" on you CGI directory.

    Oliver

    Am 04.10.21 um 03:12 schrieb Nick Dawson:
    Sorry about that! I miss-typed… the current port is 3.14.4 and
    that's the version giving me the error.


    On Thu, Sep 30, 2021 at 11:28 PM, Oliver Welter <[email protected]
    <mailto:[email protected]>> wrote:

        Hi Nick,

        I don't know what happend to the FreeBSD Ports repository but
        3.1.4 ist almost 2 years old and has a number of bugs so I do
        not recommend this at all.
        I am sorry but I am unable to provide any help on this.

        best regards

        Oliver

        Am 30.09.21 um 21:29 schrieb Nick Dawson:
        Here's what I'm seeing in my webui.log:

        Can't call method "cgi" on unblessed reference at
        2021/09/30 13:26:22 DEB check for cgi session, fcgi pid
        36441 [pid=36441|sid=[undef]]
        2021/09/30 13:26:22 DEB session id (front) is
        b7508e31442c5f5da929b2db8ce8c120 [pid=36441|sid=b750]
        2021/09/30 13:26:22 DEB Use provided client instance
        [pid=36441|sid=b750]
        2021/09/30 13:26:22 DEB First session reinit with id init
        [pid=36441|sid=b750]
        2021/09/30 13:26:22 INF New backend session with id
        lj2sSyQi7BGFLPVgjmfNZQ== [pid=36441|sid=b750]
        2021/09/30 13:26:22 ERR error while handling request
        [pid=36441|sid=b750]

        /usr/local/lib/perl5/site_perl/OpenXPKI/Client/UI.pm
        <http://usr/local/lib/perl5/site_perl/OpenXPKI/Client/UI.pm>
        line 159.
        [pid=36441|sid=b750]

        I've confirmed that I have all the CGI/FCGI deps installed.
        And I'm using the socket approach to FCGI and have confirmed
        its running and the socket is listening.




        On Wed, Sep 29, 2021 at 10:31 AM, Nick Dawson
        <[email protected]
        <mailto:[email protected]>> wrote:

            Update:
            I added a system line to my handler.yml and now the
            service starts, but when I try and load the webpage I get:
            Unknown application error

            Nothing telling  in the logs:

            2021/09/29 10:03:25 openxpki.audit.system.INFO
            <http://openxpki.audit.system.info/> server was started
            [pid=2479|]
            2021/09/29 10:13:46 openxpki.application.INFO
            <http://openxpki.application.info/> Purged 2 expired
            sessions [pid=2481|sid=uHjs]
            2021/09/29 10:18:49 openxpki.application.INFO
            <http://openxpki.application.info/> Purged 4 expired
            sessions [pid=2481|sid=uHjs]
            2021/09/29 10:23:52 openxpki.application.INFO
            <http://openxpki.application.info/> Purged 6 expired
            sessions [pid=2481|sid=uHjs]
            2021/09/29 10:28:55 openxpki.application.INFO
            <http://openxpki.application.info/> Purged 6 expired
            sessions [pid=2481|sid=uHjs]


            On Wed, Sep 29, 2021 at 9:51 AM, Nick Dawson
            <[email protected]
            <mailto:[email protected]>> wrote:

                Hey everyone,
                I upgraded a FreeBSD box to 13.0 and OpenXPKI 3.1.4
                and now I'm getting a strange error.
                The system fails to start because of an error with
                the handler to System, but I don't even have System
                in my handler.yalm

                Error:

                2021/09/29 09:47:52 openxpki.system.ERROR No type
                given for authentication handler System [pid=63402|]
                2021/09/29 09:47:52 openxpki.system.FATAL Exception
                during initialization task 'authentication': No type
                given for authentication handler System [pid=63402|]
                2021/09/29 09:47:52 openxpki.system.FATAL Exception
                during server initialization: No type given for
                authentication handler System (No type given for
                authentication handler System) [pid=63402|]

                Handler:

                ╰─○ cat /ucat
                /usr/local/etc/openxpki/config.d/realm/dzsec/auth/handler.yaml
                dzop:
                type: Password
                label: Operator Password
                description:
                I18N_OPENXPKI_CONFIG_AUTH_HANDLER_DESCRIPTION_PASSWORD
                # The passwords can be generated with "openxpkiadm
                hashpwd"
                role: RA Operator
                user:
                dzsecop: "{ssha}MaUPTo+MBwL9kn8C1NJoqUxt0VpnT1ZV"
                realm: dzsec


                dzlogin:
                type: Connector
                label: AD Login DZ Sec
                description:
                I18N_OPENXPKI_CONFIG_AUTH_HANDLER_DESCRIPTION_PASSWORD
                role: User
                source@: connector:auth.connector.dz-ad
                realm: dzsec

                dzadmin:
                type: Connector
                label: AD Login DZ Sec Admins
                description:
                I18N_OPENXPKI_CONFIG_AUTH_HANDLER_DESCRIPTION_PASSWORD
                role: CA Operator
                source@: connector:auth.connector.dz-admin
                realm: dzsec

                dzra:
                type: Connector
                label: AD Login DZ Sec Admins
                description:
                I18N_OPENXPKI_CONFIG_AUTH_HANDLER_DESCRIPTION_PASSWORD
                role: RA Operator
                source@: connector:auth.connector.dzra
                realm: dzsec




        _______________________________________________
        OpenXPKI-users mailing list
        [email protected]
        https://lists.sourceforge.net/lists/listinfo/openxpki-users


-- Protect your environment - close windows and adopt a penguin!

        _______________________________________________
        OpenXPKI-users mailing list
        [email protected]
        <mailto:[email protected]>
        https://lists.sourceforge.net/lists/listinfo/openxpki-users
        <https://lists.sourceforge.net/lists/listinfo/openxpki-users>




    _______________________________________________
    OpenXPKI-users mailing list
    [email protected]
    https://lists.sourceforge.net/lists/listinfo/openxpki-users


-- Protect your environment - close windows and adopt a penguin!

    _______________________________________________
    OpenXPKI-users mailing list
    [email protected]
    <mailto:[email protected]>
    https://lists.sourceforge.net/lists/listinfo/openxpki-users
    <https://lists.sourceforge.net/lists/listinfo/openxpki-users>




_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users



_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to