Update 157->159 - broken WebUI commands

Getting Started with IPFire Updates Trouble
1

Hello All,
after upgrading my IPFIRE install (x64) from 157 to 159 stable, I experienced the 500 error, as described in other topics.
I chmoded 755 as follow:
chmod -v 755 /usr /usr/bin /usr/lib /usr/sbin /var /var/ipfire

Also experienced a reset of SSH access, going back to port 22 and only with key. My remote access on 222 with password was down.

Here I come to the point. After having chmoded 755 (on local console) I got back access to the webUI. But since that time, whenever I want to change the SSH settings from WebUI, I get the following error message on the webpage:

Error messages

Helper program returned error code 1

and here is extract of my /var/log/httpd/error_log:

[root@secure ~]# cat /var/log/httpd/error_log
[Sun Sep 26 00:01:00.100762 2021] [core:notice] [pid 2725:tid 123262319330304] A                                        H00094: Command line: '/usr/sbin/httpd'
Couldn't clear group list: Operation not permitted
Couldn't clear group list: Operation not permitted

furthermore, output of find -type d -perm 700

[root@secure /]# find -type d -perm 700
./lost+found
./etc/dehydrated/accounts/aHR0cHM6Ly9hY21lLXYwMi5hcGkubGV...
./root/.ssh
./opt/pakfire/etc/.gnupg
./boot
./boot/grub
./boot/lost+found

In addition, I do not manage to remove any addon from Webui pakfire. Trying to remove Transmission, but error_log shows again Couldn’t clear group list: Operation not permitted
What do I miss? How to get the Webui fully operational?

many thanks.

2

Hi @capitainabloc

Welcome to the IPFire community.

Follow the command in the post in the link below:-
https://community.ipfire.org/t/update-158-remote-access-issue/5691/2

1 Like
3

Hi @bonnietwin,
tanks for your answer.
Already did that (I think I tried all solutions proposed in the forum threads :sweat_smile:)
Issue remains the same…

I’m about to do a clean install, but first I must find how to save my numerous firewall rules and DHCP fixed leases, in ordezr to avoid spending hours to rewrite all.
Any tip is welcome!
but preferably, I’d like to find out how to fix this issue.

4

Go to System - Backup, run a backup and download the resultant file to your computer running the WUI. Choose to do the backup with logfiles if you want to also keep any log history.

Then after doing your re-install you can restore from the backup file.

5

the backup from webUI is also unresponsive…
must do it from ssh: /var/ipfire/backup/bin/backup.pl

By restoring backup file, isn’t it a risk it breaks again the owner permissions as it seems to be the case now?

6

What I understand is that there is some form of bug in tar that is causing it to end up with modified permissions. A fix was put in from Core Update 158 to correct any permission changes that have happened.

Anyone upgrading from Core Update 157 has the risk that this could happen, although the large majority of people have not had any problem. What is unclear is why a few people end up with the permissions problem.

Once you have installed from fresh with Core Update 159 then the permissions will be correct because of the fix that corrects the permissions after the upgrade/install tar has done its work.

No one who has had a problem with permissions has reported any problems with the restore from backup after fixing everything or re-installing.

2 Likes