Skip to content

ACME Plugin Privileges are wrong causing not showing the ACME Log #5458

@progS1m

Description

@progS1m

OPNSense Version: OPNsense 26.1.8_5-amd64
Plugin Version: os-acme-client (installed) | 4.16_1

The os-acme-client plugin is missing the api/diagnostics/log/core/acmeclient/* pattern in its ACL.xml. This prevents assigning ACME log viewing privileges to non-admin users, resulting in a redirect/spinng loading circle error when trying to load ui/acmeclient/logs.

System Logs are shown correctly!

To reproduce it: Create a fresh user and assign the Privileges Diagnostics: Logs: System and Services: ACME Client

Workaround - fix:

  1. SSH into your OPNsense firewall as root (or use option 8 for the shell).
  2. Open the ACME ACL file: vi /usr/local/opnsense/mvc/app/models/OPNsense/AcmeClient/ACL/ACL.xml
  3. Look for the <pattern>ui/acmeclient/*</pattern> line.
  4. Directly below it, add the missing API pattern: <pattern>api/diagnostics/log/core/acmeclient/*</pattern>
  5. Save the file.
  6. Reboot the OPNsense

Metadata

Metadata

Assignees

Labels

incompleteIssue template missing info

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions