<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=FR-BE link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Hello everybody,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I’ve just migrated from Rudder 4.2 to 4.3.2. (not 4.3.3, Debian has not yet this version in the repository).<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Server and client are on Debian 8.11, all updates from today.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>After upgrade, clients can not update their policies :<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>From a client :<o:p></o:p></p><p class=MsoNormal><b>rudder agent update<o:p></o:p></b></p><p class=MsoNormal><b>R: *********************************************************************************<o:p></o:p></b></p><p class=MsoNormal><b>* rudder-agent could not get an updated configuration from the policy server. *<o:p></o:p></b></p><p class=MsoNormal><b>* This can be caused by: *<o:p></o:p></b></p><p class=MsoNormal><b>* * an agent key that has been changed *<o:p></o:p></b></p><p class=MsoNormal><b>* * if this node is not accepted or deleted node on the Rudder root server *<o:p></o:p></b></p><p class=MsoNormal><b>* * if this node has changed policy server without sending a new inventory *<o:p></o:p></b></p><p class=MsoNormal><b>* Any existing configuration policy will continue to be applied without change. *<o:p></o:p></b></p><p class=MsoNormal><b>*********************************************************************************<o:p></o:p></b></p><p class=MsoNormal><b>ok: Rudder agent promises were updated.<o:p></o:p></b></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>From the serveur :<o:p></o:p></p><p class=MsoNormal>rudder server debug 10.X.X.X<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Logs from server :<o:p></o:p></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Setting IDENTITY: USERNAME=root<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Received public key compares equal to the one we have stored<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> MD5=70b5b4d90fa8c1176cd2c1a00deb9884: Client is TRUSTED, public key MATCHES stored one.<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Received: STAT /var/rudder/share/02dfe0b6-fee5-491a-96bb-95ecf27b07bb/rules/cfengine-community/rudder_promises_generated<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Translated to: STAT /var/rudder/share/02dfe0b6-fee5-491a-96bb-95ecf27b07bb/rules/cfengine-community/rudder_promises_generated<o:p></o:p></b></p><p class=MsoNormal><b>rudder info: 10.X.X.X> access denied to STAT: /var/rudder/share/02dfe0b6-fee5-491a-96bb-95ecf27b07bb/rules/cfengine-community/rudder_promises_generated<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> REFUSAL to user='root' of request: SYNCH 1531473776 STAT /var/rudder/share/02dfe0b6-fee5-491a-96bb-95ecf27b07bb/rules/cfengine-community/rudder_promises_generated<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Received: STAT /usr/share/ncf/tree/ncf_hash_file<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Translated to: STAT /usr/share/ncf/tree/ncf_hash_file<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Received: MD5 /usr/share/ncf/tree/ncf_hash_file<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Translated to: MD5 /usr/share/ncf/tree/ncf_hash_file<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Received: STAT /var/rudder/configuration-repository/ncf/ncf_hash_file<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Translated to: STAT /var/rudder/configuration-repository/ncf/ncf_hash_file<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Received: MD5 /var/rudder/configuration-repository/ncf/ncf_hash_file<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Translated to: MD5 /var/rudder/configuration-repository/ncf/ncf_hash_file<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Received: STAT /var/rudder/tools/rudder_tools_updated<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Translated to: STAT /var/rudder/tools/rudder_tools_updated<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Received: MD5 /var/rudder/tools/rudder_tools_updated<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Translated to: MD5 /var/rudder/tools/rudder_tools_updated<o:p></o:p></b></p><p class=MsoNormal><b>rudder verbose: 10.X.X.X> Remote peer terminated TLS session (SSL_read)<o:p></o:p></b></p><p class=MsoNormal><b>rudder info: 10.X.X.X> Closing connection, terminating thread<o:p></o:p></b></p><p class=MsoNormal><b><o:p> </o:p></b></p><p class=MsoNormal>DNS is ok, server and client resolve each other.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Is there something to do after migration ?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Regards<o:p></o:p></p><p class=MsoNormal><span lang=FR style='mso-fareast-language:FR'>Cordialement,<o:p></o:p></span></p><p class=MsoNormal><span lang=FR style='mso-fareast-language:FR'><o:p> </o:p></span></p><p class=MsoNormal><span lang=FR style='mso-fareast-language:FR'>Tristan</span><span lang=FR style='font-size:10.0pt;color:#167394;mso-fareast-language:FR-BE'> </span><span style='font-size:10.0pt;color:#167394;mso-fareast-language:FR-BE'><o:p></o:p></span></p><div class=MsoNormal align=center style='text-align:center'><span style='color:#167394;mso-fareast-language:FR-BE'><hr size=2 width="100%" align=center></span></div><p class=MsoNormal style='mso-margin-top-alt:5.0pt;margin-right:11.25pt;margin-bottom:5.0pt;margin-left:11.25pt'><a href="https://www.leforem.be/"><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:black;mso-fareast-language:FR-BE;text-decoration:none'><img border=0 width=26 height=24 style='width:.2708in;height:.25in' id="Image_x0020_3" src="cid:image001.png@01D41A9C.E1849590" alt="cid:image002.png@01CFD99D.B7C249D0"></span></a><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:black;mso-fareast-language:FR-BE'> </span><a href="https://www.facebook.com/LeForem?fref=ts"><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:black;mso-fareast-language:FR-BE;text-decoration:none'><img border=0 width=24 height=24 style='width:.25in;height:.25in' id="Image_x0020_4" src="cid:image002.png@01D41A9C.E1849590" alt="cid:image003.png@01CFD99D.B7C249D0"></span></a><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:black;mso-fareast-language:FR-BE'> </span><a href="https://twitter.com/LeForem"><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:black;mso-fareast-language:FR-BE;text-decoration:none'><img border=0 width=23 height=19 style='width:.2395in;height:.1979in' id="Image_x0020_5" src="cid:image003.png@01D41A9C.E1849590" alt="cid:image004.png@01CFD99D.B7C249D0"></span></a><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:black;mso-fareast-language:FR-BE'> </span><a href="http://be.linkedin.com/company/le-forem"><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:black;mso-fareast-language:FR-BE;text-decoration:none'><img border=0 width=25 height=22 style='width:.2604in;height:.2291in' id="Image_x0020_2" src="cid:image004.png@01D41A9C.E1849590" alt="cid:image005.png@01CFD99D.B7C249D0"></span></a><a href="http://www.youtube.com/user/VideosLeForem"><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:black;mso-fareast-language:FR-BE;text-decoration:none'><img border=0 width=22 height=22 style='width:.2291in;height:.2291in' id="Image_x0020_6" src="cid:image005.png@01D41A9C.E1849590" alt="cid:image006.png@01CFD99D.B7C249D0"></span></a><span style='font-size:10.5pt;font-family:"Arial",sans-serif;color:#1F497D'><o:p></o:p></span></p><div class=MsoNormal align=center style='text-align:center'><span style='color:#167394;mso-fareast-language:FR-BE'><hr size=2 width="100%" align=center></span></div><p class=MsoNormal><o:p> </o:p></p></div></body></html>