Topic: continuation of the topic SME Server 10 known issues

[ReetP]

Use the command as per JPs post above

https://forums.contribs.org/index.php/topic,54441.msg285046.html#msg285046

Terry, that probably needs updating on the wiki - useful commands & letsencrypt?

[TerryF]

Use the command as per JPs post above

https://forums.contribs.org/index.php/topic,54441.msg285046.html#msg285046

Terry, that probably needs updating on the wiki - useful commands & letsencrypt?

Does this wiki entry in effect do the same?
https://wiki.contribs.org/Useful_Commands#How_to_simply_recreate_the_certificate_for_SME_Server

and for letsencrypt
https://wiki.contribs.org/Letsencrypt#Authorization_Errors

[ReetP]

Letsencrypt one doesn't use ssl-update?

[TerryF]

as per the wiki

config delprop modSSL CertificateChainFile
config delprop modSSL crt
config delprop modSSL key

signal-event console-save

[ReetP]

Inconsistent then

[smeghead]

USB mouse connect/disconnect log noise in messages log.

I've submitted a bug report:  https://bugs.koozali.org/show_bug.cgi?id=11536

See bug for fix that works for me but as yet untested/unconfirmed.

[TerryF]

Excellent, thank you

[Raphaël]

Bonjour.
Unfortunately, after several attempts, I still can't access the server-manager despite your help and the help of the wiki https://wiki.koozali.org/Useful_Commands#Certificates.
I also tested the completed installation, the import of the backup with the admin console (number 9) and recreate the certificate but still nothing.
Thank you for everything, I will start from scratch and reassemble the user data, accounts ... manually.

[ReetP]

Hmmm.

You really ought to try and nail your issue as it might happen all over again.

Show us:

Code: [Select]

/sbin/e-smith/audittools/templates

Code: [Select]

/sbin/e-smith/audittools/newrpms
What do your logs say?

Look in:

/var/log/messages
/var/log/httpd/error_log
/var/log/httpd/admin_error_log

https://wiki.koozali.org/Useful_Commands#Parse_Log_files_to_search_for_errors

There should be something in there to give you a clue.

[Raphaël]

Thank you for your encouragement. I am attaching the screenshots but I don't see anything that can inform us unfortunately.
Some kernel errors in the /var/log/messages and nothing  in the other.

[ReetP]

Hmmmm. It doesn't make sense.

There has to be something, somewhere.

Those screenshots were taken AFTER a restore and while you have the issue?

The assumption is there is a problem with server-manager, but I am wondering if you actually have network issues.

What error do you get in your browser trying to access the server manager?

Can you ping the server?
Can you ping from the server to your router or internet?
Can you ssh to the server?

What is your network configuration?

[jameswilson]

I know it a bit basic but you have shut down the old sme, ie the new one is booting when the IP it wants is available

[Raphaël]

In summary.
The current server, v9.2 is a domain controller, 2 sata disks in raid1, running the administrative part in a small school set, 40 users and 50 workstations.
The contribs dhcpmanager, dhcpdns and sme9admin are installed.
2 Ethernets cards, one to the fixed IP router, one to the local network distributing DHCP addresses.
Almost no files, no ibays, the storage is done on a Nas.

The new server is a DellT110, 16go ram, 3 sata disks. I'm testing on a separate network, with a windows 10 pro client.
In reply to ReetP
 - all screenshots are taken after the restore,
After the restore :
 - internet access works from server and client,
 - access to the server-manager does not work,
 - I haven't tested to mount the client to the domain yet. I'll do it tomorrow.
Thanks for your help.

[ReetP]

So you are accessing the new server manager using Windows 10 on the internal network?

What does the browser say?

What do the /var/log/httpd/access & error logs say - there should be something when you try to connect?

Tail them both as you try.

You definitely removed all custom templates and reset the certificates after restore?

[Jean-Philippe Pialasse]

I saw that you were able to update a few times so you  have network access apart from the dhcp issue which is now fixed with signal-event  e-smith-base-update.


I would really suggest you to do the following commands using putty or any means to access using ssh to your server, as it will be easier to avoid a typo and would of greater help for us and latter to be able to read copy pasted text than poor quality pics.

So to debug httpd

we already had

Code: [Select]

httpd -t
Syntax OK
no custom template as /sbin/e-smith/audittools/templates returns nothing


also I am assuming that we have the following

Code: [Select]

config show modSSL
modSSL=service
    Country=CA
    TCPPort=443
    access=public
    status=enabled

If you see key, crt or CertificateChainFile properties do:

Code: [Select]

config delprop modSSL CertificateChainFile crt key
signal-event ssl-update
systemctl restart httpd-e-smith
systemctl is-active httpd-e-smith


we are assuming the issue is httpd-e-smith as the erorrs we get about certs in one of your pics, but you only speak about server-manager does not work, which we have interpreted as is not reachable.
What exactly you mean as does not work ??? what are you seeing ?
Are you able to see the content of your primary ebay using http ? what do you see if you try ? error message ?


can you access (at least seeing the login page ) the manager from the  server doing

Code: [Select]

elinks http://localhost:980/server-managerare you able to login ?

and doing this way :

Code: [Select]

elinks http://localhost:80/server-manager


assuming this works using port 980 but not 80; could you try those 2 commands

Code: [Select]

openssl rsa -noout -modulus -in /home/e-smith/ssl.key/$HOSTNAME.key |openssl md5
openssl x509 -noout -modulus -in /home/e-smith/ssl.crt/$HOSTNAME.crt |openssl md5
you do not need to paste here the actual result but please check that the content of those two command is eaxctly the same, letter by letter amd no error message is provided before this line

Code: [Select]

(stdin)= sometexthere

if they are different please delete or move those two files and do

Code: [Select]

signal-event ssl-update
systemctl restart httpd-e-smith
systemctl is-active httpd-e-smith


finally, if still not working getting the result of the following would help

Code: [Select]

ll /var/log/httpd/error_log*
tail -f   /var/log/httpd/error_log
systemctl cat httpd-e-smith
systemctl status httpd-e-smith