[rudder-users] LDAP issue

Prestasit01 prestasit01 at ouest-france.fr
Thu Mar 6 16:09:09 CET 2014


Hello

We have already done this.

Last time It was « groups » / « categories » created on a 2.5 version.

To be sure, all has been recreated on a 2.6.10 server (manually) & without errors.
The configuration-repository  folder has been « tared » ( tar -cvf xxx.tar.gz) then transfered & « untared » on a 2.6.10 server (installed from scratch), and we have restored from the web interface.
So I don't know what happens.

Any other idea ?

Thanks

BR
Cédric


De : Nicolas Charles [mailto:nicolas.charles at normation.com]
Envoyé : jeudi 6 mars 2014 15:35
À : Prestasit01
Cc : 'Francois Armand'; 'Matthieu CERDA'; 'rudder-users at lists.rudder-project.org'
Objet : Re: [rudder-users] LDAP issue

Hello,

this look a lot like what happened last time, where export didn't have all categories, and groups could not be restored...
Which version of Rudder are you doing you export from?

To circumvent the issue, you could:
1/ make your export as the gzip
2/ copy the gzip on the new server
3/ manually synchronise the groups folder from old server to new server
4/ commit the changes in the new server
5/ import from the web interface

Does it solve the issue ?

Regards,
Nicolas

On 06/03/2014 09:54, Prestasit01 wrote:
Hello,

So here are the informations on the servers :

[root at SERVERPROD groups]# pwd
/var/rudder/configuration-repository/groups
[root at SERVERPROD groups]# ls -altr
total 16
drwxr-x--- 2 root root 4096  4 mars  16:59 6c3843bb-92e6-4fd0-b50f-dcb26798b495
drwxr-xr-x 8 root root 4096  4 mars  16:59 ..
drwxr-x--- 3 root root 4096  4 mars  18:04 163d6d00-7f6d-4511-aadf-440421cd8bf1
drwxr-x--- 4 root root 4096  4 mars  18:04 .
[root at SERVERPROD groups]# cd 6c3843bb-92e6-4fd0-b50f-dcb26798b495/
[root at SERVERPROD 6c3843bb-92e6-4fd0-b50f-dcb26798b495]# ls -altr
total 12
drwxr-x--- 2 root root 4096  4 mars  16:59 .
-rw-r----- 1 root root  598  4 mars  17:07 9d01ebc1-f6f7-4c5b-9742-fd42bd89fc38.xml
drwxr-x--- 4 root root 4096  4 mars  18:04 ..
[root at SERVERPROD 6c3843bb-92e6-4fd0-b50f-dcb26798b495]# cd ..
[root at SERVERPROD groups]# cd 163d6d00-7f6d-4511-aadf-440421cd8bf1/
[root at SERVERPROD 163d6d00-7f6d-4511-aadf-440421cd8bf1]# ls -altr
total 12
drwxr-x--- 2 root root 4096  4 mars  18:04 a8d7eb7b-9e56-4ccf-9f45-67b75850dda6
drwxr-x--- 4 root root 4096  4 mars  18:04 ..
drwxr-x--- 3 root root 4096  4 mars  18:04 .
[root at SERVERPROD 163d6d00-7f6d-4511-aadf-440421cd8bf1]# cd a8d7eb7b-9e56-4ccf-9f45-67b75850dda6/
[root at SERVERPROD a8d7eb7b-9e56-4ccf-9f45-67b75850dda6]# ls -altr
total 12
-rw-r----- 1 root root 1752  4 mars  18:04 bdcedc96-ff67-413b-ae1d-97d67a5312f0.xml
drwxr-x--- 3 root root 4096  4 mars  18:04 ..
drwxr-x--- 2 root root 4096  4 mars  18:04 .
[root at SERVERPROD a8d7eb7b-9e56-4ccf-9f45-67b75850dda6]# locate d41e37d2-5cb8-485a-9183-3388c4a7c009
[root at SERVERPROD a8d7eb7b-9e56-4ccf-9f45-67b75850dda6]#

VS

[root at SERVERTEST groups]# pwd
/var/rudder/configuration-repository/groups
[root at SERVERTEST groups]# ls -altr
total 20
drwxr-x--- 2 root root 4096  4 mars  16:59 6c3843bb-92e6-4fd0-b50f-dcb26798b495
drwxr-xr-x 8 root root 4096  4 mars  16:59 ..
drwxr-x--- 3 root root 4096  4 mars  18:04 163d6d00-7f6d-4511-aadf-440421cd8bf1
drwxr-x--- 4 root root 4096  4 mars  18:04 .
-rw-r----- 1 root root  289  5 mars  16:21 category.xml
[root at SERVERTEST groups]# cd 6c3843bb-92e6-4fd0-b50f-dcb26798b495/
[root at SERVERTEST 6c3843bb-92e6-4fd0-b50f-dcb26798b495]# ls -altr
total 12
drwxr-x--- 2 root root 4096  4 mars  16:59 .
-rw-r----- 1 root root  598  4 mars  17:07 9d01ebc1-f6f7-4c5b-9742-fd42bd89fc38.xml
drwxr-x--- 4 root root 4096  4 mars  18:04 ..
[root at SERVERTEST 6c3843bb-92e6-4fd0-b50f-dcb26798b495]# cd ..
[root at SERVERTEST groups]# cd 163d6d00-7f6d-4511-aadf-440421cd8bf1/
[root at SERVERTEST 163d6d00-7f6d-4511-aadf-440421cd8bf1]# ls -altr
total 12
drwxr-x--- 2 root root 4096  4 mars  18:04 a8d7eb7b-9e56-4ccf-9f45-67b75850dda6
drwxr-x--- 4 root root 4096  4 mars  18:04 ..
drwxr-x--- 3 root root 4096  4 mars  18:04 .
[root at SERVERTEST 163d6d00-7f6d-4511-aadf-440421cd8bf1]# cd a8d7eb7b-9e56-4ccf-9f45-67b75850dda6/
[root at SERVERTEST a8d7eb7b-9e56-4ccf-9f45-67b75850dda6]# ls -altr
total 12
-rw-r----- 1 root root 1752  4 mars  18:04 bdcedc96-ff67-413b-ae1d-97d67a5312f0.xml
drwxr-x--- 3 root root 4096  4 mars  18:04 ..
drwxr-x--- 2 root root 4096  4 mars  18:04 .
[root at SERVERTEST a8d7eb7b-9e56-4ccf-9f45-67b75850dda6]# locate d41e37d2-5cb8-485a-9183-3388c4a7c009
[root at SERVERTEST a8d7eb7b-9e56-4ccf-9f45-67b75850dda6]#


The only thing which change is the « category.xml » file which is not present on our SERVERPROD (The server which have all groups displayed...)

And as you know, we got a lot of Groups / categories & sub categories. Not just 2.

In addition, many of them were well restored.

Any idea ???

BR

Cedric


De : Francois Armand [mailto:francois.armand at normation.com]
Envoyé : mercredi 5 mars 2014 17:54
À : Prestasit01; 'Matthieu CERDA'
Cc : 'rudder-users at lists.rudder-project.org<mailto:rudder-users at lists.rudder-project.org>'
Objet : Re: [rudder-users] LDAP issue

On 05/03/2014 17:41, Prestasit01 wrote:
Hello,

Thanks François, the error seems away !

After, I have tested to modify a rule and it worked !


Cool !




But (:) I'm testing a lot of thing to check)

I also test to copy our configuration-repository to another rudder server (same version, installed from scratch and without data) and to restore but it gave me that :

[cid:image001.jpg at 01CF3956.3B8953A0]

So... I'm a little bit affraid... May there is always bad values/data...

Can you told me how to know which is the name of the concerned group ??? just to check from my side ???

Thanks for the support.



OK,
For the group name, I fear we don't have a nice UI field for that, you will have to supply the UUID in the URL like that:
http://yourserver/rudder/secure/nodeManager/groups#<http://yourserver/rudder/secure/nodeManager/groups>{"groupId":"d41e37d2-5cb8-485a-9183-3388c4a7c009"}

You can also check that the group is correctly exported by looking on the archive. You should have, somewhere under the "group" directory, a file named d41e37d2-5cb8-485a-9183-3388c47c009.xml

Hope it helps,



BR

Cedric


De : Francois Armand [mailto:francois.armand at normation.com]
Envoyé : mercredi 5 mars 2014 14:06
À : Prestasit01; 'Matthieu CERDA'
Cc : 'rudder-users at lists.rudder-project.org<mailto:rudder-users at lists.rudder-project.org>'
Objet : Re: [rudder-users] LDAP issue

Hello,

What you are reporting is very strange, and you are the first one to encounter all these problem with the LDAP back-end, so I suspect that something want really bad when the /var was full, and lead to some kind of corruption of some part of LDAP storage (likelly BDB-related).

All the problem you are seing seems to be linked with a BDB corruption. As soon as the coruption happen, everything starts to fall appart.

I'm fearing that you will have to delete data in base and restart from a back-up with the following process:

/etc/init.d/slapd stop

/etc/init.d/slapd backup



#remove corrupted data

rm -f alock __db.* *.bdb log.*



#restore your backup

slapadd -l /var/rudder/ldap/backup/openldap-data-20140305xxxxx.ldif



#restart

/etc/init.d/slapd start

Hope it helps !

--
________________________________

[cid:image002.png at 01CF3956.3B8953A0]François ARMAND
Directeur de la R&D
Normation<http://www.normation.com>

________________________________

87 rue de Turbigo, 75003 Paris, France

Telephone:

+33 (0)1 83 62 99 23

Mobile:

+33 (0)6 63 37 60 55

________________________________


-------------------------------------------------------------------------
Les informations ou pieces jointes contenues dans ce message sont confidentielles. Seul le destinataire expressement vise peut en prendre connaissance. Toute autre personne qui en divulguera, diffusera ou prendra des copies sera passible de poursuites. La societe Ouest-France decline en outre, toute responsabilite de quelque nature que ce soit au titre de ce message s'il a ete altere, deforme ou falsifie.



_______________________________________________

rudder-users mailing list

rudder-users at lists.rudder-project.org<mailto:rudder-users at lists.rudder-project.org>

http://www.rudder-project.org/mailman/listinfo/rudder-users




--

Nicolas CHARLES

-------------------------------------------------------------------------<br>
Les informations ou pieces jointes contenues dans ce message sont
confidentielles. Seul le destinataire expressement vise peut en prendre
connaissance. Toute autre personne qui en divulguera, diffusera ou prendra des copies sera passible de poursuites. La societe Ouest-France decline en outre, toute responsabilite de quelque nature que ce soit au titre de ce message s'il a ete altere, deforme ou falsifie.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.rudder-project.org/pipermail/rudder-users/attachments/20140306/92ac779b/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 36995 bytes
Desc: image001.jpg
URL: <http://www.rudder-project.org/pipermail/rudder-users/attachments/20140306/92ac779b/attachment-0001.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 4098 bytes
Desc: image002.png
URL: <http://www.rudder-project.org/pipermail/rudder-users/attachments/20140306/92ac779b/attachment-0001.png>


More information about the rudder-users mailing list