Skip to content

ACME Plugin Privileges are wrong causing not showing the ACME Log #5458

Description

@progS1m

OPNSense Version: OPNsense 26.1.8_5-amd64
Plugin Version: os-acme-client (installed) | 4.16_1

The os-acme-client plugin is missing the api/diagnostics/log/core/acmeclient/* pattern in its ACL.xml. This prevents assigning ACME log viewing privileges to non-admin users, resulting in a redirect/spinng loading circle error when trying to load ui/acmeclient/logs.

System Logs are shown correctly!

To reproduce it: Create a fresh user and assign the Privileges Diagnostics: Logs: System and Services: ACME Client

Workaround - fix:

  1. SSH into your OPNsense firewall as root (or use option 8 for the shell).
  2. Open the ACME ACL file: vi /usr/local/opnsense/mvc/app/models/OPNsense/AcmeClient/ACL/ACL.xml
  3. Look for the <pattern>ui/acmeclient/*</pattern> line.
  4. Directly below it, add the missing API pattern: <pattern>api/diagnostics/log/core/acmeclient/*</pattern>
  5. Save the file.
  6. Reboot the OPNsense

Metadata

Metadata

Assignees

Labels

incompleteIssue template missing info

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions