After a while I tried to add those networks to a web filter profile but the webadmin throws an error,
that the REF_ItfAwe8 can't be used.
I tried to create a simple web filter profile with a source network of 192.168.10.0/24 but the error remains the same (see screenshot).
So I made a backup delete every wireless network object and every web filter profile (also in confd -> http -> profile, but left the default profile),
but the error still remains the same. Here is the confd-debug.log output at creating time of the web filter profile:
2014:01:28-15:25:27 utm91-2 confd[22850]: >=========================================================================
2014:01:28-15:25:27 utm91-2 confd[22850]: D Object::set_object:1136() => id="3100" severity="debug" sys="System" sub="confd" name="set_object" user="admin" srcip="***.***.***.***" facility="webadmin" client="webadmin.plx" call="set_object" object="$VAR1 = {
2014:01:28-15:25:27 utm91-2 confd[22850]: 'ref' => 'REF_HttProConta19216Netwo',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'lock' => '',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'data' => {
2014:01:28-15:25:27 utm91-2 confd[22850]: 'status' => 0,
2014:01:28-15:25:27 utm91-2 confd[22850]: 'scan_ssl_opt' => 'simple_https_filtering',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'device_auth' => [],
2014:01:28-15:25:27 utm91-2 confd[22850]: 'aua' => 0,
2014:01:28-15:25:27 utm91-2 confd[22850]: 'in_progress' => 0,
2014:01:28-15:25:27 utm91-2 confd[22850]: 'full_transparent' => 0,
2014:01:28-15:25:27 utm91-2 confd[22850]: 'transparent' => 1,
2014:01:28-15:25:27 utm91-2 confd[22850]: 'enable_device_auth' => 0,
2014:01:28-15:25:27 utm91-2 confd[22850]: 'opendirectory_auth' => 0,
2014:01:28-15:25:27 utm91-2 confd[22850]: 'edir_sso' => 0,
2014:01:28-15:25:27 utm91-2 confd[22850]: 'cff_profiles' => [
2014:01:28-15:25:27 utm91-2 confd[22850]: 'REF_HttCffAllowAllExcep2'
2014:01:28-15:25:27 utm91-2 confd[22850]: ],
2014:01:28-15:25:27 utm91-2 confd[22850]: 'ordered_cff_profiles' => [
2014:01:28-15:25:27 utm91-2 confd[22850]: 'REF_UVoyUzsBsN',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'REF_RjdEYfcIPM',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'REF_HttCffWarn2',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'REF_KPSLAoBSxs',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'REF_SQQLasaEwf',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'REF_HttCffPolicyInf',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'REF_mzIGqwgPFC',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'REF_DMpUaKitAh',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'REF_YwgZoUXJdg',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'REF_FGcwOwPxUu',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'REF_HttCffAllowAllExcep2'
2014:01:28-15:25:27 utm91-2 confd[22850]: ],
2014:01:28-15:25:27 utm91-2 confd[22850]: 'name' => '12',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'transparent_aac' => 0,
2014:01:28-15:25:27 utm91-2 confd[22850]: 'default_cff_action' => 'REF_DefaultHTTPCFFAction',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'networks' => [
2014:01:28-15:25:27 utm91-2 confd[22850]: 'REF_ItfAwe8'
2014:01:28-15:25:27 utm91-2 confd[22850]: ],
2014:01:28-15:25:27 utm91-2 confd[22850]: 'endpoints_groups' => [],
2014:01:28-15:25:27 utm91-2 confd[22850]: 'block_on_auth_failed' => 1,
2014:01:28-15:25:27 utm91-2 confd[22850]: 'transparent_auth' => 0,
2014:01:28-15:25:27 utm91-2 confd[22850]: 'comment' => '',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'ntlm' => 0
2014:01:28-15:25:27 utm91-2 confd[22850]: },
2014:01:28-15:25:27 utm91-2 confd[22850]: 'type' => 'profile',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'class' => 'http',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'autoname' => '0',
2014:01:28-15:25:27 utm91-2 confd[22850]: 'hidden' => 0,
2014:01:28-15:25:27 utm91-2 confd[22850]: 'nodel' => ''
2014:01:28-15:25:27 utm91-2 confd[22850]: };" external="1"
2014:01:28-15:25:27 utm91-2 confd[22850]: id="3100" severity="warn" sys="System" sub="confd" name="OBJECT_OBJECT_BADREF (The web filtering profile object needs network objects for the allowed network list attribute.)" class="http" type="profile" ref="REF_HttProConta19216Netwo" attr="networks" user="admin" srcip="***.***.***.***" facility="webadmin" client="webadmin.plx" call="set_object" check="input" badref="REF_ItfAwe8" goodclass="network" fatal="0"
2014:01:28-15:25:27 utm91-2 confd[22850]: D Datatype::_check_element:427() => id="3100" severity="debug" sys="System" sub="confd" name="wrong object type" type="REF_ItfAwe8" user="admin" srcip="***.***.***.***" facility="webadmin" client="webadmin.plx" call="set_object" allowed="REF"
2014:01:28-15:25:27 utm91-2 confd[22850]: W Message::err_set:1076() => id="3100" severity="warn" sys="System" sub="confd" name="DATATYPE_ARRAY_ELEMENT (Removing 1 invalid element(s) 'REF_ItfAwe8' from the list.)" class="http" type="profile" ref="REF_HttProConta19216Netwo" attr="networks" user="admin" srcip="***.***.***.***" facility="webadmin" client="webadmin.plx" call="set_object" remove="REF_ItfAwe8" number="1" check="input"
The object doesn't exist anymore:
# cc get_object REF_ItfAwe8
0
What could cause this error and how can this be fixed?
Regards,
Marco