Project

General

Profile

Actions
Copy link

Bug #15067

closed

Secondary node attempts to delete the ``admins`` group when synchronizing accounts via XMLRPC

Added by Craig Coonrad 12 months ago. Updated 8 months ago.

Status:
Resolved
Priority:
Very Low
Assignee:
Marcos M
Category:
XMLRPC
Target version:
2.8.0
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
24.03
Release Notes:
Default
Affected Version:
Affected Architecture:
All

Description

Version: 23.09-RELEASE

Error message:

Dec  5 20:37:30 fw102.local php-fpm[77756]: /xmlrpc.php: The command '/usr/sbin/pw groupdel -g 'admins'' returned exit code '64', the output was 'pw: Bad id 'admins': invalid'
Actions
Copy link
 #1

Updated by Jim Pingle 12 months ago

  • Project changed from pfSense Plus to pfSense
  • Category changed from High Availability to XMLRPC
  • Status changed from New to Confirmed
  • Priority changed from Normal to Very Low
  • Target version set to 2.8.0
  • Plus Target Version set to 24.03

A few notes after confirming this happens for me as well:

  • The secondary node does have an admins group in /etc/group
  • The command it is trying to execute there should either be using -g gid or -n name but it's using -g name which is an invalid combination. For example it should be -g 1999 or -n admins. Though it really shouldn't be trying to delete that group either way since it still has users, so something else may be broken as well.

Despite the error the user changes are properly reflected on the secondary node, the new user is added to and removed from the group even at the OS level. Thus this log message is apparently not having any practical effect on the outcome in this case, making it cosmetic only as far as I can tell at the moment.

Actions
Copy link
 #2

Updated by Marcos M 12 months ago

  • Status changed from Confirmed to Feedback
  • % Done changed from 0 to 100
Actions
Copy link
 #3

Updated by Marcos M 12 months ago

  • Subject changed from Creating or deleting a user with admin group membership in an HA pair generates php error on backup device to Secondary node attemps to delete the admins group when accounts are synched
  • Assignee set to Marcos M
  • Affected Architecture All added
Actions
Copy link
 #4

Updated by Marcos M 12 months ago

  • Subject changed from Secondary node attemps to delete the admins group when accounts are synched to Secondary node attempts to delete the admins group when accounts are synched
Actions
Copy link
 #5

Updated by Christopher Cope 12 months ago

  • Status changed from Feedback to Confirmed

After applying the fix, the errors are no longer present with the admins group, but assigning / removing any other groups still give the same sort of error.

Dec 16 15:26:16     php-fpm     60206     /xmlrpc.php: The command '/usr/sbin/pw groupdel -g 'Server'' returned exit code '64', the output was 'pw: Bad id 'Server': invalid'
Actions
Copy link
 #6

Updated by Craig Coonrad 11 months ago

confirmed Chris Cope's findings by adding new user/group.

2024-01-13T16:10:51.525153-08:00 pf101.local php-fpm 64855 - - /xmlrpc.php: The command '/usr/sbin/pw groupdel -g 'testers'' returned exit code '64', the output was 'pw: Bad id 'testers': invalid'
Actions
Copy link
 #7

Updated by Marcos M 9 months ago

  • Status changed from Confirmed to Feedback

https://gitlab.netgate.com/pfSense/pfSense/-/merge_requests/1142

f9f395f54d33ae524ece49b9ce75d381602f809c

This should resolve that error by using the correct option (-n instead of -g).

Actions
Copy link
 #8

Updated by Jim Pingle 9 months ago

  • Subject changed from Secondary node attempts to delete the admins group when accounts are synched to Secondary node attempts to delete the ``admins`` group when synchronizing accounts via XMLRPC
Actions
Copy link
 #9

Updated by Christopher Cope 8 months ago

  • Status changed from Feedback to Closed

No more errors on

24.03-BETA (amd64)
built on Fri Mar 29 6:00:00 UTC 2024
FreeBSD 15.0-CURRENT

It still seems to remove and re-add the non-admins group when it syncs, but that seems to be the expected behavior.

Mar 30 22:36:14     php-fpm     429     /xmlrpc.php: Removing group: Server
Mar 30 22:36:14     php-fpm     429     /xmlrpc.php: Adding group: Server
Actions
Copy link
 #10

Updated by Christopher Cope 8 months ago

  • Status changed from Closed to Resolved
Actions
Copy link

Also available in: Atom PDF