Bill Marquette
5bc3bf2811
uncomment the commented out functionality that actually restarts sshd
...
when it's enabled
2008-09-07 03:45:32 +00:00
Chris Buechler
d8e60e2d40
WPA is optional, hence shouldn't be <strong>
2008-09-07 02:22:05 +00:00
Scott Ullrich
44f1247ec6
Cleanup output text
2008-09-07 02:06:57 +00:00
Bill Marquette
12294e724d
we don't care if rm can't find old dhcpd database files
2008-09-07 01:18:59 +00:00
Bill Marquette
ac6ddeffe1
fix debug code that never worked and make it disabled by default
2008-09-07 01:17:54 +00:00
Bill Marquette
b980f9e485
Semicolons after if's apparently parse...but it's not terribly helpful
2008-09-07 01:15:31 +00:00
Scott Ullrich
8d9a67b2ec
Eliminate unneeded ,
2008-09-07 01:09:56 +00:00
Scott Ullrich
7993688e8b
Check to see if key exists before unsetting
2008-09-07 01:06:39 +00:00
Scott Ullrich
a4c597209a
Check to see if a interface has a dhcp key before trying to unset
...
if the interface has a dhcp server enabled.
2008-09-07 01:00:20 +00:00
Scott Ullrich
254454a2f6
Hide misc errors that occur on / when we have a read-only filesystem (livecd).
2008-09-06 23:33:07 +00:00
Scott Ullrich
347819236f
* Cleanup php fastcgi files better
...
* Remove *.tmp files
2008-09-06 23:12:48 +00:00
Scott Ullrich
4f54dd23b8
Add conf.default to the unionfs roster
2008-09-06 22:48:41 +00:00
Scott Ullrich
d948c0d40c
Allow bin sbin and boot writing
2008-09-06 22:36:01 +00:00
Seth Mos
968453a37e
Correctly use defaults
2008-09-06 22:07:20 +00:00
Scott Ullrich
4f05fc7357
Do not update platform on cvssync runs
2008-09-06 22:02:38 +00:00
Scott Ullrich
b9c529eba6
It is now technically possible to cvssync livecd for testing :)
2008-09-06 21:57:46 +00:00
Seth Mos
557784d2f5
Remove modulate state per ticket 1730
2008-09-06 21:52:30 +00:00
Scott Ullrich
3e5dbb6efc
rc.cdrom already outputs its status
2008-09-06 21:39:13 +00:00
Matthew Grooms
3c11bd3c5b
Minor re-work of OpenVPN configuration. Use operational modes to determine
...
what configuration options are appropriate. The operational mode dictates
the authentication method. They are defines as follows ...
Peer to Peer ( SSL/TLS )
Peer to Peer ( Shared Key )
Remote Access ( SSL/TLS )
Remote Access ( User Auth )
Remote Access ( SSL/TLS + User Auth )
Some of these modes allow for user authentication using passwords. We now
use the etc/inc/openvpn.auth-user.php file to facilitate this by checking
the username and password supplied by OpenVPN against our centralized user
database.
The Server and Client user interfaces have also been updated to support
TLS packet authentication. This is an additional security option that is
optional.
2008-09-06 21:10:43 +00:00
Scott Ullrich
ab1a08b262
* Show operations in progress
...
* Increase /conf memory partition size to 6m
2008-09-06 20:47:46 +00:00
Scott Ullrich
bfc956c056
Move cvssync functions to /root/
2008-09-06 20:25:51 +00:00
Scott Ullrich
75cf30df1a
Use root unionfs, this saves a bit of memory.
2008-09-06 06:07:06 +00:00
Scott Ullrich
84e50dc84a
Cleanup text
2008-09-06 05:32:11 +00:00
Scott Ullrich
12bf92cacc
Move unionfs commands earlier
2008-09-06 04:41:23 +00:00
Scott Ullrich
9d847a1a37
Correct CDROM check
2008-09-06 04:34:44 +00:00
Scott Ullrich
a8d5dba40c
* Mount /root unionfs writable
...
* Move unionfs mounting to earlier in the sequence
2008-09-06 04:13:00 +00:00
Scott Ullrich
c75c3809e1
Mount /usr/ with write access using UNIONFS.
2008-09-06 04:00:12 +00:00
Seth Mos
9166304508
Make the ftp proxy work again.
2008-09-05 22:47:32 +00:00
Matthew Grooms
0770c295d1
Remove the code that auto-generates an outbound NAT rule for traffic that
...
originates from a private network to a distant OpenVPN network. We don't
want to unconditionally hide all traffic behind the vpn interface address.
If a admin wants to do this manually, nothing is stopping them.
2008-09-05 03:16:33 +00:00
Matthew Grooms
3f066eb810
Disallow creation of user certificates until the user has actually been
...
created. This obviously won't work.
2008-09-04 22:51:47 +00:00
Matthew Grooms
ea28182c90
Correct the path for OpenVPN client specific configuration files. When the
...
directory creation moved to the rc script, the path name was changed from
/var/etc/openvpn_csc to /var/etc/openvpn-csc. Update the code to match.
2008-09-04 22:48:45 +00:00
Matthew Grooms
095a95ae54
Revert to the previous method of referencing OpenVPN device names in the
...
filter.inc file. We now specify the openvpn device name which is actually
an os managed group. OpenVPN tap instances are added or removed from this
group when OpenVPN configurations are created or destroyed. Portions of
this patch were written by Ermal.
2008-09-04 19:47:19 +00:00
Matthew Grooms
91224d9af0
Modify the ssh toggle script so it at least runs. I suspect its broken in
...
a more subtle way however. Connected client don't appear to disconnect.
2008-09-04 19:29:35 +00:00
Ermal Luçi
16f9b3918e
More array checks.
2008-09-04 17:43:01 +00:00
Seth Mos
4dc589efd2
Correct array depth in is_array check
2008-09-04 17:36:49 +00:00
Matthew Grooms
8411b218e6
Bump the system dh-parameters file to 2048 per request on dev@.
2008-09-04 17:13:14 +00:00
Ermal Luçi
a5d223c656
Add checks when an array its expected to avoid errors from php.
...
Reported-by: Seth
2008-09-04 16:59:31 +00:00
Matthew Grooms
df81417f55
Break out the advanced system options page into tabs group by categories.
...
Fold the sysctl tunables page into a tab under the advanced options page.
This reduces the top level menu options by one. There should be no
functional changes.
2008-09-04 15:40:54 +00:00
Matthew Grooms
e65c9c120e
Major whitespace cleanup. Remove a useless html table.
2008-09-03 21:25:41 +00:00
Matthew Grooms
d591e2e19e
Major whitespace cleanup. Fix some html table column class mismatches that
...
made for ugly output
2008-09-03 21:03:51 +00:00
Matthew Grooms
f5054d5798
Fix some html table column class mismatches that made for ugly output.
2008-09-03 21:02:48 +00:00
Matthew Grooms
d97ab68861
Cleanup some of the authentication code. Fix the problem where you must
...
navigate away from the initial page twice to get somewhere. Remove some
of the cruft that was no longer used. Don't unconditionally redirect a
user to their homepage if another url was specified pre-login. This will
allow admins to create bookmarks to specific pfsense webui pages.
2008-09-03 20:33:06 +00:00
Matthew Grooms
a0d4c5da29
Correct all double click action urls in the main IPsec config screens.
...
Reported by Seth.
2008-09-03 18:20:19 +00:00
Matthew Grooms
bfea87fff2
Remove the page locking privileges after discussion with Scott on IRC. The
...
feature was confusing and offered little utility that I could see. If we
really need to provide serialized access to sections of the webui, IMO it
should be a global lock option and enabled or disabled manually and not a
privilege that is on all the time.
2008-09-03 17:52:15 +00:00
Matthew Grooms
89c1777a0b
Change the text in the privilege table row to read "Assigned Privileges"
...
instead of "Effective Privileges". This is in contrast to the user page
which also lists group privilege inheritance.
2008-09-03 17:33:58 +00:00
Matthew Grooms
322ac5a628
Correct a regression in the privilege system where pages were not being
...
matched correctly. Reported by Seth.
2008-09-03 17:25:47 +00:00
Ermal Luçi
45335fc4a4
Hopefully fix wirless configuration issues on GUI part since the wireless code requests an optcfg array as global which was removed with multi pppoe/pptp/... fixes. Pass the required array as a parameter to the wireless code to avoid further breakage while fixing other code.
2008-09-03 16:35:19 +00:00
Ermal Luçi
c33e18c232
Allow to set the mtu higher than 1500 bytes on interfaces.
2008-09-03 16:21:32 +00:00
Seth Mos
58fe7e2bb3
Fix openvpn upgrade to look for right array.
...
Prevents Fatal parse error
2008-09-03 16:19:45 +00:00
Ermal Luçi
8a64810061
Actually fix problem with assigning number of interfaces greater than 10 or 20.
2008-09-03 16:19:27 +00:00
