Koozali.org formerly Contribs.org

geoipupdate errors

Online ReetP

  • *
  • 1,872
Re: geoipupdate errors
« Reply #30 on: January 02, 2019, 07:03:16 PM »
... and the bad news is that server that I updated has lost the ability to resolve through DNS.

I can ping internet IP addresses (e.g .8.8.8.8 ), but not "google.com".

As it is a "live" system I have set its external DNS entry to 8.8.8.8, but that does not seem to allow workstations to work (unless I guess I set there DNS to 8.8.8.8 as well).

I can still login remotely, but not dmagent or Teamviewer through to the workstations.  Luckily it is only a few minutes walk from me.

PS This ought to be in bugzilla?

We have never experienced anything like this at all Brian. I've had it running for months, Terry has done more test installs than I care to recall and we have never seen this.

And I'm not sure how it is directly relates to geoip beyond the fact that you obviously have various test packages and possibly other stuff  your install that we don't know of that is causing issues.

None of the packages that are installed for geoip should have anything to do with your machine resolving as far as I am aware. So it doesn't make a huge amount of sense right now.

Have you actually gone and checked the logs in this machine to see what might be happening and why it isn't resolving?

Firewall, DNS, messages etc etc etc? There should be something in the logs somewhere.

Try:
/var/log/dnscache/current
/var/log/dnscache.forwarder/current
/var/log/tinydns/current
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline brianr

  • *
  • 876
Re: geoipupdate errors
« Reply #31 on: January 02, 2019, 11:06:03 PM »
nothing in those dnscache and tinydns logs of note except nothing at all after 14:40 this afternoon (all three) which happens to be just the time when I did the yum update to geoip.

Here's the logs from /var/log/messages at that time:

Jan  2 14:40:00 messerver yum[23956]: Updated: perl-Taint-Util-0.08-1.of.el6.x86_64
Jan  2 14:40:02 messerver yum[23956]: Updated: 1:perl-parent-0.228-1.of.el6.noarch
Jan  2 14:40:05 messerver yum[23956]: Updated: perl-Net-CIDR-Lite-0.21-1.of.el6.noarch
Jan  2 14:40:07 messerver yum[23956]: Updated: perl-Net-IP-1.26-1.of.el6.noarch
Jan  2 14:40:12 messerver yum[23956]: Updated: perl-Crypt-OpenSSL-RSA-0.28-1.of.el6.x86_64
Jan  2 14:40:15 messerver yum[23956]: Updated: perl-RPM2-1.0-1.of.el6.x86_64
Jan  2 14:40:20 messerver yum[23956]: Updated: perl-Geo-IP-1.45-1.of.el6.x86_64
Jan  2 14:40:24 messerver yum[23956]: Updated: perl-BSD-Resource-1.2904-1.of.el6.x86_64
Jan  2 14:40:26 messerver yum[23956]: Updated: perl-Text-Template-1.46-1.of.el6.noarch
Jan  2 14:40:29 messerver yum[23956]: Updated: mod_auth_tkt-2.3.99b1-1.of.el6.x86_64
Jan  2 14:40:32 messerver yum[23956]: Updated: perl-Time-TAI64-2.11-1.of.el6.noarch
Jan  2 14:40:36 messerver yum[23956]: Updated: perl-Net-Server-2.008-1.of.el6.noarch
Jan  2 14:40:38 messerver yum[23956]: Updated: perl-IO-Socket-INET6-2.72-1.of.el6.noarch
Jan  2 14:40:49 messerver yum[23956]: Installed: daemontools-encore-1.10-2.of.el6.x86_64
Jan  2 14:40:59 messerver yum[23956]: Updated: perl-DBD-MySQL-4.033-1.of.el6.x86_64
Jan  2 14:41:02 messerver yum[23956]: Updated: perl-File-MMagic-1.30-1.of.el6.noarch
Jan  2 14:41:33 messerver yum[23956]: Erased: perl-IO-Compress-Bzip2
Jan  2 14:43:32 messerver yum[23956]: Erased: perl-Compress-Zlib
Jan  2 14:43:33 messerver yum[23956]: Erased: perl-IO-Compress-Zlib
Jan  2 14:43:43 messerver yum[23956]: Erased: perl-IO-Compress-Base
Jan  2 14:43:58 messerver yum[23956]: Erased: urlview
Jan  2 14:44:24 messerver yum[23956]: Erased: daemontools
Jan  2 14:44:31 messerver /sbin/e-smith/db[27747]: /home/e-smith/db/configuration: OLD UnsavedChanges=no
Jan  2 14:44:31 messerver /sbin/e-smith/db[27747]: /home/e-smith/db/configuration: NEW UnsavedChanges=yes

and this is the last entries in the dnscache log

2019-01-02 14:40:30.234746500 query 21957 c0a80373:f5b7:6deb 1 cescollector.cwatchapi.com.
2019-01-02 14:40:30.234763500 tx 0 1 cescollector.cwatchapi.com. . 7f000002
2019-01-02 14:40:30.234848500 nxdomain 7f000002 0 cescollector.cwatchapi.com.
2019-01-02 14:40:30.234862500 sent 21957 44
2019-01-02 14:40:40.240137500 query 21958 c0a80373:cd8b:6b44 1 cescollector.cwatchapi.com.
2019-01-02 14:40:40.240156500 tx 0 1 cescollector.cwatchapi.com. . 7f000002
2019-01-02 14:40:40.240244500 nxdomain 7f000002 0 cescollector.cwatchapi.com.
2019-01-02 14:40:40.240257500 sent 21958 44

Looks like requests are not getting through to the dns at all?

dig bjsystems.co.uk
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6_10.1 <<>> bjsystems.co.uk
;; global options: +cmd
;; connection timed out; no servers could be reached

tinydns and dnscache seems to be running:

[root@messerver dnscache.forwarder]# ps ax | grep tinydns
  961 ?        Ds     0:05 runsv tinydns
 7130 ?        S      0:00 /usr/local/bin/tinydns
28041 pts/1    S+     0:00 grep tinydns
[root@messerver dnscache.forwarder]# ps ax | grep dnscache
  940 ?        Ss     0:05 runsv dnscache.forwarder
  969 ?        Ss     0:05 runsv dnscache
 6991 ?        S      0:00 /usr/local/bin/dnscache
 7252 ?        S      0:00 /usr/local/bin/dnscache
28677 pts/1    S+     0:00 grep dnscache

Wondering about perl_IO-Socket-INET6.

This is version from the non working system - perl-IO-Socket-INET6-2.72-1.of.el6.noarc

and this is the one from a working one - perl-IO-Socket-INET6-2.57-2.el6.rfx.noarch

It was updated just about when the tinydns last got a request, and sounds relevant (!)

However i can't use yum to downgrade as the server will not resolve!  I think it might work direct on the console - i'll have to try tomorrow.

Brian j Read
(retired, but still looking after 5 SME installations)
.........

Online ReetP

  • *
  • 1,872
Re: geoipupdate errors
« Reply #32 on: January 03, 2019, 12:36:22 AM »
I installed the latest perl INET6 myself and it seemed to work

From the look of it you have installed everything updatable from openfusion. I can see a few files there that should NOT have been updated

I'm not sure how you managed that?

What command did you issue - I did mention above what to do?

...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline brianr

  • *
  • 876
Re: geoipupdate errors
« Reply #33 on: January 03, 2019, 08:49:19 AM »
I installed the latest perl INET6 myself and it seemed to work

From the look of it you have installed everything updatable from openfusion. I can see a few files there that should NOT have been updated

I'm not sure how you managed that?

What command did you issue - I did mention above what to do?

Yes i follwed your instructions I think:

[root@messerver dnscache.forwarder]# db yum_repositories show openfusion
openfusion=repository
    BaseURL=http://repo.openfusion.net/centos$releasever-$basearch
    EnableGroups=no
    Exclude=mod_perl
    GPGCheck=yes
    GPGKey=http://repo.openfusion.net/RPM-GPG-KEY-openfusion
    Name=Openfusion
    Visible=yes
    status=disabled
 
and then did the yum update -y --enablerepo=smecontribs,openfusion

aha - I did not soley update smeserver-geoip I did a full update.  That I presume was the mistake?  Drat.

Any idea how I can back out of it?  Or is it a full re-install and restore?

I can get a full list of the rpms updated by

/sbin/e-smith/audittools/newrpms |grep openfusion

If I could get rpm downgrade to work then I could downgrade each one in a batch file?
« Last Edit: January 03, 2019, 08:51:54 AM by brianr »
Brian j Read
(retired, but still looking after 5 SME installations)
.........

Online ReetP

  • *
  • 1,872
Re: geoipupdate errors
« Reply #34 on: January 03, 2019, 10:03:32 AM »
There's your problem:

yum update -y --enablerepo=smecontribs,openfusion

You have enabled both repos and told SME to update all available packages from them.

From my earlier post....

Quote
The correct form is:

yum --enablerepo=smecontribs,openfusion install smeserver-geoip

I'm not sure if you can downgrade. There's a lot of packages. Likely first culprit is daemontools. A lot of the perl packages probably aren't so important.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline brianr

  • *
  • 876
Re: geoipupdate errors
« Reply #35 on: January 03, 2019, 11:28:12 AM »
I'm getting this for daemontools:

[root@messerver ~]# yum downgrade daemontools
Loaded plugins: fastestmirror, post-transaction-actions, smeserver
Setting up Downgrade Process
Loading mirror speeds from cached hostfile
 * base: mirrors.ukfast.co.uk
 * smeaddons: www.mirrorservice.org
 * smeextras: www.mirrorservice.org
 * smeos: www.mirrorservice.org
 * smeupdates: www.mirrorservice.org
 * updates: repo.uk.bigstepcloud.com
No Match for available package: daemontools-0.76-6.el6.sme.x86_64
Nothing to do

How can I tell which repo it came from?  I tried smecontribs as well.

[root@messerver ~]# rpm -qa | grep daemon
daemontools-encore-1.10-2.of.el6.x86_64
[root@messerver ~]#
« Last Edit: January 03, 2019, 11:34:54 AM by brianr »
Brian j Read
(retired, but still looking after 5 SME installations)
.........

Online ReetP

  • *
  • 1,872
Re: geoipupdate errors
« Reply #36 on: January 03, 2019, 11:59:22 AM »
Normally yum info, but that will only show you the LATEST repo, not the original.

Best thing is to probably take a browse in the main repos:

http://mirror.hakkers.com/releases/9.2/

http://mirror.hakkers.com/releases/9.2/smeos/x86_64/Packages/
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline brianr

  • *
  • 876
Re: geoipupdate errors
« Reply #37 on: January 03, 2019, 12:36:32 PM »
Normally yum info, but that will only show you the LATEST repo, not the original.
Best thing is to probably take a browse in the main repos:
http://mirror.hakkers.com/releases/9.2/
http://mirror.hakkers.com/releases/9.2/smeos/x86_64/Packages/

Found it in smeos - Any idea why it won't install / downgrade?
Brian j Read
(retired, but still looking after 5 SME installations)
.........

Online ReetP

  • *
  • 1,872
Re: geoipupdate errors
« Reply #38 on: January 03, 2019, 04:28:21 PM »
Found it in smeos - Any idea why it won't install / downgrade?

In a word no. Is it because there are other dependencies?

Can you download a copy and localinstall?
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline brianr

  • *
  • 876
Re: geoipupdate errors
« Reply #39 on: January 03, 2019, 05:26:11 PM »
Had to abandon this now  - am re-installing from ISO and restoring the data.
Brian j Read
(retired, but still looking after 5 SME installations)
.........

Online ReetP

  • *
  • 1,872
Re: geoipupdate errors
« Reply #40 on: January 03, 2019, 06:58:51 PM »
Had to abandon this now  - am re-installing from ISO and restoring the data.

Damn...... :-(
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline brianr

  • *
  • 876
Re: geoipupdate errors
« Reply #41 on: January 03, 2019, 07:09:10 PM »
Damn...... :-(

Sorry - my clients need a system.

Actually I'll probably be replacing one of the Raid drives, so I might be able to resume troubleshooting it in a few days.
Brian j Read
(retired, but still looking after 5 SME installations)
.........

Online ReetP

  • *
  • 1,872
Re: geoipupdate errors
« Reply #42 on: January 03, 2019, 07:14:50 PM »
Sorry - my clients need a system.

Needs must.

I'm sorry it went pear shaped

Quote
Actually I'll probably be replacing one of the Raid drives, so I might be able to resume troubleshooting it in a few days.

Ok... we need as many hands as possible to prevent this sort of thing happening.

I'll try and have a look at mailstats too when I get a minute.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation