[rudder-users] LDAP issue

Nicolas Charles nicolas.charles at normation.com
Thu Mar 6 16:16:34 CET 2014


Cédric,

If I'm following you correctly, you have an original server SERVERTEST, 
with everything correct, and SERVERPROD which is the new server.
You copied the content of the /var/rudder/configuration-repository from 
SERVERTEST to SERVERPROD, and imported everything, on SERVERPROD, and it 
removed the category.xml.
Have I understood correctly ?
If so, it is exactly the opposite bug of what we were looking for...

Nicolas

On 06/03/2014 16:09, Prestasit01 wrote:
>
> Hello
>
> We have already done this.
>
> Last time It was « groups » / « categories » created on a 2.5 version.
>
> To be sure, all has been recreated on a 2.6.10 server (manually) & 
> without errors.
>
> The configuration-repository folder has been « tared » ( tar --cvf 
> xxx.tar.gz) then transfered & « untared » on a 2.6.10 server 
> (installed from scratch), and we have restored from the web interface.
>
> So I don't know what happens.
>
> Any other idea ?
>
> Thanks
>
> BR
>
> Cédric
>
> *De :*Nicolas Charles [mailto:nicolas.charles at normation.com]
> *Envoyé :* jeudi 6 mars 2014 15:35
> *À :* Prestasit01
> *Cc :* 'Francois Armand'; 'Matthieu CERDA'; 
> 'rudder-users at lists.rudder-project.org'
> *Objet :* Re: [rudder-users] LDAP issue
>
> Hello,
>
> this look a lot like what happened last time, where export didn't have 
> all categories, and groups could not be restored...
> Which version of Rudder are you doing you export from?
>
> To circumvent the issue, you could:
> 1/ make your export as the gzip
> 2/ copy the gzip on the new server
> 3/ manually synchronise the groups folder from old server to new server
> 4/ commit the changes in the new server
> 5/ import from the web interface
>
> Does it solve the issue ?
>
> Regards,
> Nicolas
>
> On 06/03/2014 09:54, Prestasit01 wrote:
>
> Hello,
>
> So here are the informations on the servers :
>
> [root at SERVERPROD groups]# pwd
>
> /var/rudder/configuration-repository/groups
>
> [root at SERVERPROD groups]# ls -altr
>
> total 16
>
> drwxr-x--- 2 root root 4096  4 mars  16:59 
> 6c3843bb-92e6-4fd0-b50f-dcb26798b495
>
> drwxr-xr-x 8 root root 4096  4 mars  16:59 ..
>
> drwxr-x--- 3 root root 4096  4 mars  18:04 
> 163d6d00-7f6d-4511-aadf-440421cd8bf1
>
> drwxr-x--- 4 root root 4096  4 mars  18:04 .
>
> [root at SERVERPROD groups]# cd 6c3843bb-92e6-4fd0-b50f-dcb26798b495/
>
> [root at SERVERPROD 6c3843bb-92e6-4fd0-b50f-dcb26798b495]# ls -altr
>
> total 12
>
> drwxr-x--- 2 root root 4096  4 mars  16:59 .
>
> -rw-r----- 1 root root  598  4 mars  17:07 
> 9d01ebc1-f6f7-4c5b-9742-fd42bd89fc38.xml
>
> drwxr-x--- 4 root root 4096  4 mars  18:04 ..
>
> [root at SERVERPROD 6c3843bb-92e6-4fd0-b50f-dcb26798b495]# cd ..
>
> [root at SERVERPROD groups]# cd 163d6d00-7f6d-4511-aadf-440421cd8bf1/
>
> [root at SERVERPROD 163d6d00-7f6d-4511-aadf-440421cd8bf1]# ls -altr
>
> total 12
>
> drwxr-x--- 2 root root 4096  4 mars  18:04 
> a8d7eb7b-9e56-4ccf-9f45-67b75850dda6
>
> drwxr-x--- 4 root root 4096  4 mars  18:04 ..
>
> drwxr-x--- 3 root root 4096  4 mars  18:04 .
>
> [root at SERVERPROD 163d6d00-7f6d-4511-aadf-440421cd8bf1]# cd 
> a8d7eb7b-9e56-4ccf-9f45-67b75850dda6/
>
> [root at SERVERPROD a8d7eb7b-9e56-4ccf-9f45-67b75850dda6]# ls -altr
>
> total 12
>
> -rw-r----- 1 root root 1752  4 mars  18:04 
> bdcedc96-ff67-413b-ae1d-97d67a5312f0.xml
>
> drwxr-x--- 3 root root 4096  4 mars  18:04 ..
>
> drwxr-x--- 2 root root 4096  4 mars  18:04 .
>
> [root at SERVERPROD a8d7eb7b-9e56-4ccf-9f45-67b75850dda6]# locate 
> d41e37d2-5cb8-485a-9183-3388c4a7c009
>
> [root at SERVERPROD a8d7eb7b-9e56-4ccf-9f45-67b75850dda6]#
>
> VS
>
> [root at SERVERTEST groups]# pwd
>
> /var/rudder/configuration-repository/groups
>
> [root at SERVERTEST groups]# ls -altr
>
> total 20
>
> drwxr-x--- 2 root root 4096  4 mars  16:59 
> 6c3843bb-92e6-4fd0-b50f-dcb26798b495
>
> drwxr-xr-x 8 root root 4096  4 mars  16:59 ..
>
> drwxr-x--- 3 root root 4096  4 mars  18:04 
> 163d6d00-7f6d-4511-aadf-440421cd8bf1
>
> drwxr-x--- 4 root root 4096  4 mars  18:04 .
>
> -rw-r----- 1 root root  289  5 mars  16:21 category.xml
>
> [root at SERVERTEST groups]# cd 6c3843bb-92e6-4fd0-b50f-dcb26798b495/
>
> [root at SERVERTEST 6c3843bb-92e6-4fd0-b50f-dcb26798b495]# ls -altr
>
> total 12
>
> drwxr-x--- 2 root root 4096  4 mars  16:59 .
>
> -rw-r----- 1 root root  598  4 mars  17:07 
> 9d01ebc1-f6f7-4c5b-9742-fd42bd89fc38.xml
>
> drwxr-x--- 4 root root 4096  4 mars  18:04 ..
>
> [root at SERVERTEST 6c3843bb-92e6-4fd0-b50f-dcb26798b495]# cd ..
>
> [root at SERVERTEST groups]# cd 163d6d00-7f6d-4511-aadf-440421cd8bf1/
>
> [root at SERVERTEST 163d6d00-7f6d-4511-aadf-440421cd8bf1]# ls -altr
>
> total 12
>
> drwxr-x--- 2 root root 4096  4 mars  18:04 
> a8d7eb7b-9e56-4ccf-9f45-67b75850dda6
>
> drwxr-x--- 4 root root 4096  4 mars  18:04 ..
>
> drwxr-x--- 3 root root 4096  4 mars  18:04 .
>
> [root at SERVERTEST 163d6d00-7f6d-4511-aadf-440421cd8bf1]# cd 
> a8d7eb7b-9e56-4ccf-9f45-67b75850dda6/
>
> [root at SERVERTEST a8d7eb7b-9e56-4ccf-9f45-67b75850dda6]# ls -altr
>
> total 12
>
> -rw-r----- 1 root root 1752  4 mars  18:04 
> bdcedc96-ff67-413b-ae1d-97d67a5312f0.xml
>
> drwxr-x--- 3 root root 4096  4 mars  18:04 ..
>
> drwxr-x--- 2 root root 4096  4 mars  18:04 .
>
> [root at SERVERTEST a8d7eb7b-9e56-4ccf-9f45-67b75850dda6]# locate 
> d41e37d2-5cb8-485a-9183-3388c4a7c009
>
> [root at SERVERTEST a8d7eb7b-9e56-4ccf-9f45-67b75850dda6]#
>
> The only thing which change is the « category.xml » file which is not 
> present on our SERVERPROD (The server which have all groups displayed...)
>
> And as you know, we got a lot of Groups / categories & sub categories. 
> Not just 2.
>
> In addition, many of them were well restored.
>
> Any idea ???
>
> BR
>
> Cedric
>
> *De :*Francois Armand [mailto:francois.armand at normation.com]
> *Envoyé :* mercredi 5 mars 2014 17:54
> *À :* Prestasit01; 'Matthieu CERDA'
> *Cc :* 'rudder-users at lists.rudder-project.org 
> <mailto:rudder-users at lists.rudder-project.org>'
> *Objet :* Re: [rudder-users] LDAP issue
>
> On 05/03/2014 17:41, Prestasit01 wrote:
>
>     Hello,
>
>     Thanks François, the error seems away !
>
>     After, I have tested to modify a rule and it worked !
>
>
> Cool !
>
>
>
>
> But (JI'm testing a lot of thing to check)
>
> I also test to copy our configuration-repository to another rudder 
> server (same version, installed from scratch and without data) and to 
> restore but it gave me that :
>
> So... I'm a little bit affraid... May there is always bad values/data...
>
> Can you told me how to know which is the name of the concerned 
> group ??? just to check from my side ???
>
> Thanks for the support.
>
>
>
> OK,
> For the group name, I fear we don't have a nice UI field for that, you 
> will have to supply the UUID in the URL like that:
> http://yourserver/rudder/secure/nodeManager/groups# 
> <http://yourserver/rudder/secure/nodeManager/groups>{"groupId":"d41e37d2-5cb8-485a-9183-3388c4a7c009"}
>
> You can also check that the group is correctly exported by looking on 
> the archive. You should have, somewhere under the "group" directory, a 
> file named d41e37d2-5cb8-485a-9183-3388c47c009.xml
>
> Hope it helps,
>
>
>
> BR
>
> Cedric
>
> *De :*Francois Armand [mailto:francois.armand at normation.com]
> *Envoyé :* mercredi 5 mars 2014 14:06
> *À :* Prestasit01; 'Matthieu CERDA'
> *Cc :* 'rudder-users at lists.rudder-project.org 
> <mailto:rudder-users at lists.rudder-project.org>'
> *Objet :* Re: [rudder-users] LDAP issue
>
> Hello,
>
> What you are reporting is very strange, and you are the first one to 
> encounter all these problem with the LDAP back-end, so I suspect that 
> something want really bad when the /var was full, and lead to some 
> kind of corruption of some part of LDAP storage (likelly BDB-related).
>
> All the problem you are seing seems to be linked with a BDB 
> corruption. As soon as the coruption happen, everything starts to fall 
> appart.
>
> I'm fearing that you will have to delete data in base and restart from 
> a back-up with the following process:
>
> |/etc/init.d/slapd stop|
> |/etc/init.d/slapd backup|
> |  |
> |#remove corrupted data|
> |rm -f alock __db.* *.bdb log.*|
> |  |
> |#restore your backup|
> |slapadd -l /var/rudder/ldap/backup/openldap-data-20140305xxxxx.ldif|
> |  |
> |#restart|
> |/etc/init.d/slapd start|
>
>
> Hope it helps !
>
> -- 
>
> ------------------------------------------------------------------------
>
> *François ARMAND*
> /Directeur de la R&D/
> Normation <http://www.normation.com>
>
> ------------------------------------------------------------------------
>
> *87 rue de Turbigo, 75003 Paris, France*
>
> Telephone:
>
> 	
>
> +33 (0)1 83 62 99 23
>
> Mobile:
>
> 	
>
> +33 (0)6 63 37 60 55
>
> ------------------------------------------------------------------------
>
> -------------------------------------------------------------------------
> Les informations ou pieces jointes contenues dans ce message sont 
> confidentielles. Seul le destinataire expressement vise peut en 
> prendre connaissance. Toute autre personne qui en divulguera, 
> diffusera ou prendra des copies sera passible de poursuites. La 
> societe Ouest-France decline en outre, toute responsabilite de quelque 
> nature que ce soit au titre de ce message s'il a ete altere, deforme 
> ou falsifie.
>
>
> _______________________________________________
> rudder-users mailing list
> rudder-users at lists.rudder-project.org  <mailto:rudder-users at lists.rudder-project.org>
> http://www.rudder-project.org/mailman/listinfo/rudder-users
>
>
>
>
> -- 
> Nicolas CHARLES
> -------------------------------------------------------------------------
> Les informations ou pieces jointes contenues dans ce message sont 
> confidentielles. Seul le destinataire expressement vise peut en 
> prendre connaissance. Toute autre personne qui en divulguera, 
> diffusera ou prendra des copies sera passible de poursuites. La 
> societe Ouest-France decline en outre, toute responsabilite de quelque 
> nature que ce soit au titre de ce message s'il a ete altere, deforme 
> ou falsifie. 


-- 
Nicolas CHARLES

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.rudder-project.org/pipermail/rudder-users/attachments/20140306/661de8a4/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/jpeg
Size: 36995 bytes
Desc: not available
URL: <http://www.rudder-project.org/pipermail/rudder-users/attachments/20140306/661de8a4/attachment-0001.jpe>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 4098 bytes
Desc: not available
URL: <http://www.rudder-project.org/pipermail/rudder-users/attachments/20140306/661de8a4/attachment-0001.png>


More information about the rudder-users mailing list