pfSense

I do not see that on my 2.2 boxes.

Sounds like a problem in your /cf/conf/config.xml
That should start with:

<pfsense>

And the XML parser looks for that <pfsense> section.

What packages do you have installed?
There is also code that needs to parse the package XML inside the config.
Something is looking for a section <leases>

Phillip Davis wrote:

Sounds like a problem in your /cf/conf/config.xml
That should start with:

<pfsense>

That's definitely OK.

What packages do you have installed?

One of the boxes I'm seeing this on:

playback listpkg

Playback of file listpkg started.

Installed packages:
nut-2.7.2_6 pkg 2.0.2          Network UPS Tools
Cron-0.1.8                     The cron utility is used to manage commands on...
Shellcmd-0.5                   The shellcmd utility is used to manage command...
System Patches-1.0.2           A package to apply and maintain custom system ...
RRD Summary-1.1                RRD Summary Page, which will give a total amou...
pfBlocker-1.0.3                Introduce Enhanced Aliastable Feature to pfsen...
vnstat2-1.11_6,2               Vnstat is a console-based network traffic moni...
gwled-0.2.1                    Allows you to use LEDs for gateway status on s...
Notes-0.2.4                    Track things you want to note for this system.
Service Watchdog-1.6           Monitors for stopped services and restarts them.
blinkled-0.4.3                 Allows you to use LEDs for network activity on...
SSHDCond-1.0.1                 Allows to define SSH overrides for users,group...
OpenVPN Client Export Utility-1.2.15 Allows a pre-configured OpenVPN Windows ...

And which dashboard widgets are enabled?

 <sequence>system_information-container:col1:show,services_status-container:col1:show,nut-container:col1:show,carp_status-container:col1:close,cpu_graphs-container:col1:close,gmirror_status-container:col1:close,installed_packages-container:col1:close,interfaces-container:col2:show,gateways-container:col2:show,load_balancer_status-container:col2:close,picture-container:col2:close,rss-container:col2:close,traffic_graphs-container:col2:close,smart_status-container:col2:none,thermal_sensors-container:col2:none,interface_statistics-container:col2:show,dyn_dns_status-container:col2:close,log-container:col3:show,pfBlocker-container:col3:show,captive_portal_status-container:col3:show,ipsec-container:col3:show,openvpn-container:col3:show,wake_on_lan-container:col3:show,ntp_status-container:col3:none</sequence>

If you turn off the IPsec widget, does the error stop?
Do you have mobile IPsec enabled?

It's the only thing I can think of that might deal with a "leases" XML object since it calls mobile IPsec client IP assignments leases and it does pass XML back and forth between the IPsec daemon for its status.

Looks like it might be the culrpit:

source:etc/inc/ipsec.inc#L603

Yes, removing that widget works. (Was kinda planning on removing that for now anyway, seems in quite a messy state with 2.2, together with the whole strongswan thing, but that's for a different bug.)

Normally an ipsec stroke leases creates an empty file with only main leases tag inside!

Applied in changeset 046d253a34d74c794d7ed44b241c79a01fe86b20.