Exceeding 110% of user count

cc set licensing active_ips =[]
cc set licensing user_limit_exceeded 0

Bob,

Hi. How do you execute those two commands? 

Thanks,
Jason

In the shell of course.

Enable it and set passwords at Management --> System Settings --> Shell Access

Thanks. This is the first time that I have used the Shell to make changes. Exciting times!

I set up a loginuser password, logged in via SSH, and attempted to run the commands but was told that I didn't have the right permissions:

loginuser@asg:/home/login > cc set licensing active_ips =[]

-bash: /usr/local/bin/confd-client.plx: Permission denied

loginuser@asg:/home/login > cc set licensing user_limit_exceeded 0

-bash: /usr/local/bin/confd-client.plx: Permission denied

What's the next step from here?

Set a password for the "Root" user as well.

Type: su -

Then type the root password. You're now logged in as root! Re-type the commands. 

Set a password for the "Root" user as well.

Type: su -

Then type the root password. You're now logged in as root! Re-type the commands. 

Thank you.  Very nice.  Is the following the expected normal output for these commands?

loginuser@asg:/home/login > su -

Password: 

asg:/root # cc set licensing active_ips =[]

0

{

          'Nattrs' => [

                        'nodelist'

                      ],

          'attrs' => [],

          'check' => 'input',

          'datatype' => 'ARRAY',

          'fatal' => 1,

          'format' => 'The %_N requires %_d.',

          'msgtype' => 'INCOMPATIBLE_DATA',

          'name' => 'The active IP address list requires a Perl array.',

          'never_hide' => 0,

          'nodelist' => 'licensing->active_ips',

          'value' => '=[]'

        }

asg:/root # cc set licensing user_limit_exceeded 0

1

asg:/root #

Hi, Jason, and welcome to the UTM Community!

What do you get now when you run:

/usr/local/bin/count_active_ip.plx --showcount

Cheers - Bob

Bob,

Thanks.  This is the result:

Totals: IPv4: 90 IPv6: 0

It would appear that something didn't work, yes?

Jason

Yes, it appears that Sophos decided that allowing resets was resulting in too much fraudulent use of their software.  I don't know if there's a new way to clear the IP list.

Cheers - Bob

Thanks, Bob, for your assistance with this.

It took about a week for the Sophos box to come back to its senses and report the correct amount (below the 50 limit).  Why it takes that long and why you cannot influence this correction, I am left to wonder.

Jason