Koozali.org formerly Contribs.org

continuation of the topic SME Server 10 known issues

Offline ReetP

  • *
  • 2,830
Re: continuation of the topic SME Server 10 known issues
« Reply #15 on: April 06, 2021, 11:53:39 PM »
Use the command as per JPs post above

https://forums.contribs.org/index.php/topic,54441.msg285046.html#msg285046

Terry, that probably needs updating on the wiki - useful commands & letsencrypt?
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline TerryF

  • grumpy old man
  • *
  • 1,388
Re: continuation of the topic SME Server 10 known issues
« Reply #16 on: April 07, 2021, 01:51:34 AM »
« Last Edit: April 07, 2021, 01:55:49 AM by TerryF »
--
qui scribit bis legit

Offline ReetP

  • *
  • 2,830
Re: continuation of the topic SME Server 10 known issues
« Reply #17 on: April 07, 2021, 09:14:56 AM »
Letsencrypt one doesn't use ssl-update?
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline TerryF

  • grumpy old man
  • *
  • 1,388
Re: continuation of the topic SME Server 10 known issues
« Reply #18 on: April 07, 2021, 09:48:29 AM »
as per the wiki

config delprop modSSL CertificateChainFile
config delprop modSSL crt
config delprop modSSL key

signal-event console-save
--
qui scribit bis legit

Offline ReetP

  • *
  • 2,830
Re: continuation of the topic SME Server 10 known issues
« Reply #19 on: April 07, 2021, 03:49:28 PM »
Inconsistent then :-)
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Re: continuation of the topic SME Server 10 known issues
« Reply #20 on: April 08, 2021, 08:47:52 AM »
USB mouse connect/disconnect log noise in messages log.

I've submitted a bug report:  https://bugs.koozali.org/show_bug.cgi?id=11536

See bug for fix that works for me but as yet untested/unconfirmed.
..................

Offline TerryF

  • grumpy old man
  • *
  • 1,388
Re: continuation of the topic SME Server 10 known issues
« Reply #21 on: April 08, 2021, 08:50:00 AM »
Excellent, thank you
--
qui scribit bis legit

Re: continuation of the topic SME Server 10 known issues
« Reply #22 on: April 08, 2021, 05:13:40 PM »
Bonjour.
Unfortunately, after several attempts, I still can't access the server-manager despite your help and the help of the wiki https://wiki.koozali.org/Useful_Commands#Certificates.
I also tested the completed installation, the import of the backup with the admin console (number 9) and recreate the certificate but still nothing.
Thank you for everything, I will start from scratch and reassemble the user data, accounts ... manually.

Offline ReetP

  • *
  • 2,830
Re: continuation of the topic SME Server 10 known issues
« Reply #23 on: April 08, 2021, 05:37:56 PM »
Hmmm.

You really ought to try and nail your issue as it might happen all over again.

Show us:

Code: [Select]
/sbin/e-smith/audittools/templates
Code: [Select]
/sbin/e-smith/audittools/newrpms
What do your logs say?

Look in:

/var/log/messages
/var/log/httpd/error_log
/var/log/httpd/admin_error_log

https://wiki.koozali.org/Useful_Commands#Parse_Log_files_to_search_for_errors

There should be something in there to give you a clue.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Re: continuation of the topic SME Server 10 known issues
« Reply #24 on: April 09, 2021, 08:58:35 AM »
Thank you for your encouragement. I am attaching the screenshots but I don't see anything that can inform us unfortunately.
Some kernel errors in the /var/log/messages and nothing  in the other.


Offline ReetP

  • *
  • 2,830
Re: continuation of the topic SME Server 10 known issues
« Reply #25 on: April 09, 2021, 05:32:08 PM »
Hmmmm. It doesn't make sense.

There has to be something, somewhere.

Those screenshots were taken AFTER a restore and while you have the issue?

The assumption is there is a problem with server-manager, but I am wondering if you actually have network issues.

What error do you get in your browser trying to access the server manager?

Can you ping the server?
Can you ping from the server to your router or internet?
Can you ssh to the server?

What is your network configuration?


...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Re: continuation of the topic SME Server 10 known issues
« Reply #26 on: April 10, 2021, 01:41:16 AM »
I know it a bit basic but you have shut down the old sme, ie the new one is booting when the IP it wants is available

Re: continuation of the topic SME Server 10 known issues
« Reply #27 on: April 11, 2021, 10:04:03 PM »
In summary.
The current server, v9.2 is a domain controller, 2 sata disks in raid1, running the administrative part in a small school set, 40 users and 50 workstations.
The contribs dhcpmanager, dhcpdns and sme9admin are installed.
2 Ethernets cards, one to the fixed IP router, one to the local network distributing DHCP addresses.
Almost no files, no ibays, the storage is done on a Nas.

The new server is a DellT110, 16go ram, 3 sata disks. I'm testing on a separate network, with a windows 10 pro client.
In reply to ReetP
 - all screenshots are taken after the restore,
After the restore :
 - internet access works from server and client,
 - access to the server-manager does not work,
 - I haven't tested to mount the client to the domain yet. I'll do it tomorrow.
Thanks for your help.

Offline ReetP

  • *
  • 2,830
Re: continuation of the topic SME Server 10 known issues
« Reply #28 on: April 11, 2021, 10:18:55 PM »
So you are accessing the new server manager using Windows 10 on the internal network?

What does the browser say?

What do the /var/log/httpd/access & error logs say - there should be something when you try to connect?

Tail them both as you try.

You definitely removed all custom templates and reset the certificates after restore?
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline Jean-Philippe Pialasse

  • *
  • 1,695
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: continuation of the topic SME Server 10 known issues
« Reply #29 on: April 11, 2021, 10:41:36 PM »
I saw that you were able to update a few times so you  have network access apart from the dhcp issue which is now fixed with signal-event  e-smith-base-update.


I would really suggest you to do the following commands using putty or any means to access using ssh to your server, as it will be easier to avoid a typo and would of greater help for us and latter to be able to read copy pasted text than poor quality pics.

So to debug httpd

we already had
Code: [Select]
httpd -t
Syntax OK

no custom template as /sbin/e-smith/audittools/templates returns nothing


also I am assuming that we have the following
Code: [Select]
config show modSSL
modSSL=service
    Country=CA
    TCPPort=443
    access=public
    status=enabled

If you see key, crt or CertificateChainFile properties do:
Code: [Select]
config delprop modSSL CertificateChainFile crt key
signal-event ssl-update
systemctl restart httpd-e-smith
systemctl is-active httpd-e-smith


we are assuming the issue is httpd-e-smith as the erorrs we get about certs in one of your pics, but you only speak about server-manager does not work, which we have interpreted as is not reachable.
What exactly you mean as does not work ??? what are you seeing ?
Are you able to see the content of your primary ebay using http ? what do you see if you try ? error message ?


can you access (at least seeing the login page ) the manager from the  server doing
Code: [Select]
elinks http://localhost:980/server-managerare you able to login ?

and doing this way :
Code: [Select]
elinks http://localhost:80/server-manager


assuming this works using port 980 but not 80; could you try those 2 commands
Code: [Select]
openssl rsa -noout -modulus -in /home/e-smith/ssl.key/$HOSTNAME.key |openssl md5
openssl x509 -noout -modulus -in /home/e-smith/ssl.crt/$HOSTNAME.crt |openssl md5
you do not need to paste here the actual result but please check that the content of those two command is eaxctly the same, letter by letter amd no error message is provided before this line
Code: [Select]
(stdin)= sometexthere

if they are different please delete or move those two files and do
Code: [Select]
signal-event ssl-update
systemctl restart httpd-e-smith
systemctl is-active httpd-e-smith


finally, if still not working getting the result of the following would help
Code: [Select]
ll /var/log/httpd/error_log*
tail -f   /var/log/httpd/error_log
systemctl cat httpd-e-smith
systemctl status httpd-e-smith