Koozali.org: home of the SME Server

continuation of the topic SME Server 10 known issues

Offline Raphaël

  • *
  • 38
  • +0/-0
continuation of the topic SME Server 10 known issues
« on: March 30, 2021, 10:56:13 AM »
#2 after I restore my data from my SME9 to my SME10 , I can not access to the web server / server-manager

Bonjour.
I'm testing to restore my 9.2 backup to a new SmeV10Rc1 installatiion.
On the 9.2 i've the smeserver-dhcpmanager and sme9admin contribs installed.
I've two problems when restoring :
 - The access to the server-manager isn't working, (ip or Netbios, and the httpd -t command say all is correct)
 - I've the server in DHCP mode but the client doesn't have an ip.
If i install the smeserver-dhcp-dns contrib, the dhcp works, but the access to the manager no.
Sorry for my poor english.
Thank you for your hard work.
Raphaël Larronde

Offline jameswilson

  • ****
  • 739
  • +0/-0
    • Security Warehouse, trade security equipment
Re: continuation of the topic SME Server 10 known issues
« Reply #1 on: March 30, 2021, 11:01:12 AM »
Is it a certificate issue. What's in the logs

Offline TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: continuation of the topic SME Server 10 known issues
« Reply #2 on: March 30, 2021, 11:44:13 AM »
My bet is on

Remove your templates-custom for httpd. There are chances you have a fragment with reference to php values for php module for httpd. We do not use this anymore, and it creates a fatal error on start of httpd

Be careful with following:

 mv /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf /root/
 systemctl restart httpd-e-smith.service
--
qui scribit bis legit

Offline Jean-Philippe Pialasse

  • *
  • 2,746
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: continuation of the topic SME Server 10 known issues
« Reply #3 on: March 30, 2021, 05:36:09 PM »
Is it a certificate issue. What's in the logs
unlikely, it has been fool proofed.

My bet is on

Remove your templates-custom for httpd. There are chances you have a fragment with reference to php values for php module for httpd. We do not use this anymore, and it creates a fatal error on start of httpd
most likely, so it is not a continuation of SME Server 10 known issues, but it is #2 after I restore my data from my SME9 to my SME10 , I can not access to the web server / server-manage


so please do , and report here the content of
Code: [Select]
# /sbin/e-smith/audittools/templates
#httpd -t

then to fix as pointed by Terry

Code: [Select]
# mv /etc/e-smith/templates-custom/etc/httpd.conf/httpd.conf /root/
# systemctl restart httpd-e-smith.service
why not the /sbin/e-smith/expand-template /etc/httpd/conf/httpd.conf ? because systemd does it for httpd-e-smith....




for the dhcp it is unclear for me because you speak about having smeserver-dhcpmanager on SME9, but solved the issue by installing smeserver-dhcp-dns on SME10 ... please clarify
« Last Edit: March 31, 2021, 05:17:30 PM by Jean-Philippe Pialasse »

Offline Jean-Philippe Pialasse

  • *
  • 2,746
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: continuation of the topic SME Server 10 known issues
« Reply #4 on: March 30, 2021, 05:58:39 PM »
for the dhcp it is unclear for me because you speak about having smeserver-dhcpmanager on SME9, but solved the issue by installing smeserver-dhcp-dns on SME10 ... please clarify

$ ls smeserver-dhcpmanager-2.0.4/root/etc/e-smith/templates-custom/etc/dhcpd.conf/
25DomainNameServers  25LeaseTimeDefault  25LeaseTimeMax  25Routers

so this is similar issue  as #3
you need to remove the templates-custom that the contribs should not have put there.... or install it, but we need to fix the contrib not to do that

Offline Raphaël

  • *
  • 38
  • +0/-0
Re: continuation of the topic SME Server 10 known issues
« Reply #5 on: March 31, 2021, 09:40:19 AM »
Bonjour and thank's for yours answers.
I will do a fresh smeserver 10 install, and restore the backup.
And after report the command mentionned by Jean-Philippe Pialasse
# /sbin/e-smith/audittools/templates
#httpd -t
And sorry it's not a continuation but i didn't know how to put.

Offline Raphaël

  • *
  • 38
  • +0/-0
Re: continuation of the topic SME Server 10 known issues
« Reply #6 on: March 31, 2021, 01:45:12 PM »
Suite.
New installation (no contrib installation) and restoration from a USB key.
See the results in attachment.
The state of the server !
 - server ping: OK.
 - No IP address affected to the client.
 - After setting a manual ip, access to the internet is fine but no access to the server-manager.
For the dhcpmanager and dhcp-dns contribs, it was just to show you what I had on version 9.2 and how I had done to have the DHCP working on V10.
Thanks

Offline Jean-Philippe Pialasse

  • *
  • 2,746
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: continuation of the topic SME Server 10 known issues
« Reply #7 on: March 31, 2021, 05:26:11 PM »
sorry there was a typo, fixed it in the original message

Code: [Select]
mv /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf /root/
should be
Code: [Select]
mv /etc/e-smith/templates-custom/etc/httpd.conf/httpd.conf /root/
as shown in your pic "aucun fichier ou dossier" because of the typo, so nothing has changed

a free tips, when typing this long paths, hit "tab" key it will autocomplete to what is available, it limits the amount of typos, and could have help you to find mine ;)


but funny, you do not seem to have any templates custom looking at the empty output of
/sbin/e-smith/audittools/templates

so might not be this the issue...

could you give us the output of
Code: [Select]
tail -f /var/log/httpd/error_log
also the output of
Code: [Select]
tail -f /var/log/dhcpd/dhcpd.log -n50

Offline Raphaël

  • *
  • 38
  • +0/-0
Re: continuation of the topic SME Server 10 known issues
« Reply #8 on: April 03, 2021, 02:27:27 PM »
Egun on.
Here are the results of the orders. In attachments.
Certificate and subnetwork problems obviously.
Thanks in advance for your help.

Offline Jean-Philippe Pialasse

  • *
  • 2,746
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: continuation of the topic SME Server 10 known issues
« Reply #9 on: April 03, 2021, 05:43:23 PM »
Well seems that the cookie is for James Wilson, as certificates it is.

certificate it is, we fool proofed it by checking that files exists, but not by testing they are actual SSL server certificates and keys....

what were you using for your SSL certificates ? Let's encrypt or do you import them from an external CA ?
if you imported a key forme xternal CA, it could be that the order inside the pem file is wrong see https://stackoverflow.com/questions/4658484/ssl-install-problem-key-value-mismatch-but-they-do-match

a quick workaround would be :
Code: [Select]

config show modSSL
config delprop modSSL crt key CertificateChainFile
 signal-event ssl-update
you then would have a httpd working with the default self signed certificate.

for dhcp you did not show the output of the command asked.

Offline Raphaël

  • *
  • 38
  • +0/-0
Re: continuation of the topic SME Server 10 known issues
« Reply #10 on: April 03, 2021, 06:11:16 PM »
Oups. Sorry for the attachment.
I will test your code tomorrow.
Then thanks and  also to James Wilson

Offline TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: continuation of the topic SME Server 10 known issues
« Reply #11 on: April 03, 2021, 10:07:54 PM »
Well seems that the cookie is for James Wilson, as certificates it is.

certificate it is, we fool proofed it by checking that files exists, but not by testing they are actual SSL server certificates and keys....

:-) Free chicken dinner to James, well picked.....
--
qui scribit bis legit

Offline Jean-Philippe Pialasse

  • *
  • 2,746
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: continuation of the topic SME Server 10 known issues
« Reply #12 on: April 03, 2021, 10:37:04 PM »
Oups. Sorry for the attachment.
I will test your code tomorrow.
Then thanks and  also to James Wilson

not realy readable but I imagine I read something like
Not configured to listen to any interface
...
No subnet declaration for eth0 (noIPv4 addresses)


so there is no template custom  as per previous output...

and you have a reference to eth0 while it is highly imporbable that on SME10 you have a eth0, it will more likely be called ens1 or something else.

what gives :
Code: [Select]
systemctl cat dhcpd
also
Code: [Select]
config show InternalInterface
do a simple
Code: [Select]
signal-event  e-smith-base-updatehelps ?

Offline jameswilson

  • ****
  • 739
  • +0/-0
    • Security Warehouse, trade security equipment
Re: continuation of the topic SME Server 10 known issues
« Reply #13 on: April 04, 2021, 12:58:56 AM »
Whoa too much credit
Just something that caught me and stopped apache starting. Had it on affa rise when the certs were not added to the backup.
But I'll take it lol

Offline Raphaël

  • *
  • 38
  • +0/-0
Re: continuation of the topic SME Server 10 known issues
« Reply #14 on: April 06, 2021, 05:10:56 PM »
Bonjour.
Concerning the DHCP your command worked well. I will put the captures of your commands tonight if it helps.
On the other hand I still have an error accessing the server-manager. Can I try to recreate them with these command : https://wiki.contribs.org/Useful_Commands#Certificates?
Thanks