Project

General

Profile

Bug #10454

Rudder root on SLES12 shows LDAP error during installation

Added by Janos Mattyasovszky over 1 year ago. Updated 7 months ago.

Status:
Released
Priority:
N/A
Category:
Packaging
Target version:
Target version (plugin):
Severity:
Major - prevents use of part of Rudder | no simple workaround
User visibility:
Getting started - demo | first install | level 1 Techniques
Effort required:
Priority:
58

Description

Hi,

I just installed 4.1-rc1 on SLES12 SP2, and I got some errors during the installation:

  1. LDAP error?
(21/21) Installing: rudder-server-root-1398866025:4.1.0.rc1-1.SLES.12.noarch ...........................................................................[done]
Additional rpm output:
58cbc27e mdb_db_open: database "cn=rudder-configuration" cannot be opened: No such file or directory (2). Restore from backup!
58cbc27e backend_startup_one (type=mdb, suffix="cn=rudder-configuration"): bi_db_open failed! (2)
slap_startup failed

Not sure why this happened...

(jetty failing was because I forgot to install java, so that's explainable...)

Here the complete installation for reference:

sles12sp2# zypper -v in rudder-server-root
Verbosity: 1
Non-option program arguments: 'rudder-server-root'
Initializing Target
Checking whether to refresh metadata for Rudder_4.1.rc1
Checking whether to refresh metadata for SLES12-SP2
Checking whether to refresh metadata for wsgi
Loading repository data...
Reading installed packages...
Force resolution: No
Selecting 'rudder-server-root-1398866025:4.1.0.rc1-1.SLES.12.noarch' from repository 'Rudder_4.1.rc1' for installation.
Resolving package dependencies...
Force resolution: No

The following 21 NEW packages are going to be installed:
  apache2                    2.4.23-14.7
  apache2-mod_wsgi           4.5.2-59.1
  apache2-prefork            2.4.23-14.7
  apache2-utils              2.4.23-14.7
  libnghttp2-14              1.7.1-1.84
  libpq5                     9.4.9-14.1
  make                       4.0-4.1
  ncf                        1398866025:1.1.0.201703061252-1.SLES.12
  ncf-api-virtualenv         1398866025:4.1.0.rc1-1.SLES.12
  openldap2-client           2.4.41-18.25.1
  postgresql-init            9.4-17.14.1
  postgresql94               9.4.9-14.1
  postgresql94-server        9.4.9-14.1
  rudder-inventory-endpoint  1398866025:4.1.0.rc1-1.SLES.12
  rudder-inventory-ldap      1398866025:4.1.0.rc1-1.SLES.12
  rudder-jetty               1398866025:4.1.0.rc1-1.SLES.12
  rudder-reports             1398866025:4.1.0.rc1-1.SLES.12
  rudder-server-relay        1398866025:4.1.0.rc1-1.SLES.12
  rudder-server-root         1398866025:4.1.0.rc1-1.SLES.12
  rudder-techniques          1398866025:4.1.0.rc1-1.SLES.12
  rudder-webapp              1398866025:4.1.0.rc1-1.SLES.12

The following 21 packages are not supported by their vendor:
  apache2                    2.4.23-14.7
  apache2-mod_wsgi           4.5.2-59.1
  apache2-prefork            2.4.23-14.7
  apache2-utils              2.4.23-14.7
  libnghttp2-14              1.7.1-1.84
  libpq5                     9.4.9-14.1
  make                       4.0-4.1
  ncf                        1398866025:1.1.0.201703061252-1.SLES.12
  ncf-api-virtualenv         1398866025:4.1.0.rc1-1.SLES.12
  openldap2-client           2.4.41-18.25.1
  postgresql-init            9.4-17.14.1
  postgresql94               9.4.9-14.1
  postgresql94-server        9.4.9-14.1
  rudder-inventory-endpoint  1398866025:4.1.0.rc1-1.SLES.12
  rudder-inventory-ldap      1398866025:4.1.0.rc1-1.SLES.12
  rudder-jetty               1398866025:4.1.0.rc1-1.SLES.12
  rudder-reports             1398866025:4.1.0.rc1-1.SLES.12
  rudder-server-relay        1398866025:4.1.0.rc1-1.SLES.12
  rudder-server-root         1398866025:4.1.0.rc1-1.SLES.12
  rudder-techniques          1398866025:4.1.0.rc1-1.SLES.12
  rudder-webapp              1398866025:4.1.0.rc1-1.SLES.12

21 new packages to install.
Overall download size: 169.0 MiB. Already cached: 0 B. After the operation, additional 190.2 MiB will be used.
Continue? [y/n/? shows all options] (y): y
committing
Retrieving package rudder-jetty-1398866025:4.1.0.rc1-1.SLES.12.noarch                                                   (1/21),   5.4 MiB (  5.4 MiB unpacked)
Retrieving package rudder-inventory-ldap-1398866025:4.1.0.rc1-1.SLES.12.x86_64                                          (2/21),  11.0 MiB ( 11.0 MiB unpacked)
Retrieving package rudder-inventory-endpoint-1398866025:4.1.0.rc1-1.SLES.12.noarch                                      (3/21),  38.1 MiB ( 38.1 MiB unpacked)
Retrieving package apache2-utils-2.4.23-14.7.x86_64                                                                     (4/21), 139.7 KiB (221.4 KiB unpacked)
Retrieving: apache2-utils-2.4.23-14.7.x86_64.rpm .......................................................................................................[done]
Retrieving package libnghttp2-14-1.7.1-1.84.x86_64                                                                      (5/21),  72.8 KiB (135.3 KiB unpacked)
Retrieving: libnghttp2-14-1.7.1-1.84.x86_64.rpm ........................................................................................................[done]
Retrieving package make-4.0-4.1.x86_64                                                                                  (6/21), 381.5 KiB (  1.0 MiB unpacked)
Retrieving: make-4.0-4.1.x86_64.rpm ....................................................................................................................[done]
Retrieving package postgresql-init-9.4-17.14.1.noarch                                                                   (7/21),  14.0 KiB (  4.2 KiB unpacked)
Retrieving: postgresql-init-9.4-17.14.1.noarch.rpm .....................................................................................................[done]
Retrieving package openldap2-client-2.4.41-18.25.1.x86_64                                                               (8/21), 161.3 KiB (568.3 KiB unpacked)
Retrieving: openldap2-client-2.4.41-18.25.1.x86_64.rpm .................................................................................................[done]
Retrieving package libpq5-9.4.9-14.1.x86_64                                                                             (9/21), 162.6 KiB (464.6 KiB unpacked)
Retrieving: libpq5-9.4.9-14.1.x86_64.rpm ...............................................................................................................[done]
Retrieving package apache2-2.4.23-14.7.x86_64                                                                          (10/21),   1.1 MiB (  4.0 MiB unpacked)
Retrieving: apache2-2.4.23-14.7.x86_64.rpm .............................................................................................................[done]
Retrieving package postgresql94-9.4.9-14.1.x86_64                                                                      (11/21),   1.1 MiB (  4.2 MiB unpacked)
Retrieving: postgresql94-9.4.9-14.1.x86_64.rpm .........................................................................................................[done]
Retrieving package apache2-prefork-2.4.23-14.7.x86_64                                                                  (12/21), 274.0 KiB (596.3 KiB unpacked)
Retrieving: apache2-prefork-2.4.23-14.7.x86_64.rpm .....................................................................................................[done]
Retrieving package postgresql94-server-9.4.9-14.1.x86_64                                                               (13/21),   3.4 MiB ( 16.6 MiB unpacked)
Retrieving: postgresql94-server-9.4.9-14.1.x86_64.rpm ..................................................................................................[done]
Retrieving package ncf-1398866025:1.1.0.201703061252-1.SLES.12.noarch                                                  (14/21),   1.2 MiB (  1.2 MiB unpacked)
Retrieving package rudder-reports-1398866025:4.1.0.rc1-1.SLES.12.noarch                                                (15/21),  10.9 KiB ( 10.9 KiB unpacked)
Retrieving package rudder-techniques-1398866025:4.1.0.rc1-1.SLES.12.noarch                                             (16/21),  17.6 MiB ( 17.6 MiB unpacked)
Retrieving package apache2-mod_wsgi-4.5.2-59.1.x86_64                                                                  (17/21), 139.3 KiB (431.9 KiB unpacked)
apache2-mod_wsgi-4.5.2-59.1.x86_64.rpm:
    Header V3 DSA/SHA1 Signature, key ID bd6d129a: NOKEY
    Header SHA1 digest: OK (436ce66273529dea734c0f5e6a8f3a996cae3e7c)
    MD5 digest: OK (fc5e4d5ac97def2af498daf540b86cb3)
    V3 DSA/SHA1 Signature, key ID bd6d129a: NOKEY

apache2-mod_wsgi-4.5.2-59.1.x86_64 (wsgi): Signature verification failed [4-Signatures public key is not available]
Abort, retry, ignore? [a/r/i] (a): i
Retrieving package rudder-server-relay-1398866025:4.1.0.rc1-1.SLES.12.x86_64                                           (18/21),   2.9 MiB (  2.9 MiB unpacked)
Retrieving package ncf-api-virtualenv-1398866025:4.1.0.rc1-1.SLES.12.noarch                                            (19/21),   2.5 MiB (  2.5 MiB unpacked)
Retrieving package rudder-webapp-1398866025:4.1.0.rc1-1.SLES.12.noarch                                                 (20/21),  83.3 MiB ( 83.3 MiB unpacked)
Retrieving package rudder-server-root-1398866025:4.1.0.rc1-1.SLES.12.noarch                                            (21/21),   4.6 KiB (  4.6 KiB unpacked)
Checking for file conflicts: ...........................................................................................................................[done]
( 1/21) Installing: rudder-jetty-1398866025:4.1.0.rc1-1.SLES.12.noarch .................................................................................[done]
Additional rpm output:

Note: This output shows SysV services only and does not include native
systemd services. SysV configuration data might be overridden by native
systemd configuration.

If you want to list systemd services use 'systemctl list-unit-files'.
To see services enabled on particular target use
'systemctl list-dependencies [target]'.

rudder-jetty              0:off  1:off  2:off  3:off  4:off  5:off  6:off

( 2/21) Installing: rudder-inventory-ldap-1398866025:4.1.0.rc1-1.SLES.12.x86_64 ........................................................................[done]
Additional rpm output:
INFO: Setting rudder-slapd as a boot service... Done
INFO: Reloading syslogd...  Done
INFO: Restarting rudder-slapd... Done

( 3/21) Installing: rudder-inventory-endpoint-1398866025:4.1.0.rc1-1.SLES.12.noarch ....................................................................[done]
Additional rpm output:
INFO: Launching script to check if a migration is needed
INFO: End of migration script
INFO: Restarting syslogd ... Done

( 4/21) Installing: apache2-utils-2.4.23-14.7.x86_64 ...................................................................................................[done]
( 5/21) Installing: libnghttp2-14-1.7.1-1.84.x86_64 ....................................................................................................[done]
( 6/21) Installing: make-4.0-4.1.x86_64 ................................................................................................................[done]
( 7/21) Installing: postgresql-init-9.4-17.14.1.noarch .................................................................................................[done]
Additional rpm output:
Updating /etc/sysconfig/postgresql...

( 8/21) Installing: openldap2-client-2.4.41-18.25.1.x86_64 .............................................................................................[done]
( 9/21) Installing: libpq5-9.4.9-14.1.x86_64 ...........................................................................................................[done]
(10/21) Installing: apache2-2.4.23-14.7.x86_64 .........................................................................................................[done]
Additional rpm output:
Updating /etc/sysconfig/apache2...

(11/21) Installing: postgresql94-9.4.9-14.1.x86_64 .....................................................................................................[done]
(12/21) Installing: apache2-prefork-2.4.23-14.7.x86_64 .................................................................................................[done]
(13/21) Installing: postgresql94-server-9.4.9-14.1.x86_64 ..............................................................................................[done]
(14/21) Installing: ncf-1398866025:1.1.0.201703061252-1.SLES.12.noarch .................................................................................[done]
(15/21) Installing: rudder-reports-1398866025:4.1.0.rc1-1.SLES.12.noarch ...............................................................................[done]
Additional rpm output:
INFO: Setting PostgreSQL as a boot service... Done
INFO: Waiting for PostgreSQL to be up... Done
INFO: Creating Rudder PostgreSQL user... Done
INFO: Creating Rudder PostgreSQL database... Done

(16/21) Installing: rudder-techniques-1398866025:4.1.0.rc1-1.SLES.12.noarch ............................................................................[done]
(17/21) Installing: apache2-mod_wsgi-4.5.2-59.1.x86_64 .................................................................................................[done]
Additional rpm output:
warning: /var/cache/zypp/packages/wsgi/apache2-mod_wsgi-4.5.2-59.1.x86_64.rpm: Header V3 DSA/SHA1 Signature, key ID bd6d129a: NOKEY

(18/21) Installing: rudder-server-relay-1398866025:4.1.0.rc1-1.SLES.12.x86_64 ..........................................................................[done]
Additional rpm output:
INFO: Creating group rudder... Done
INFO: Creating the rudder user... Done
INFO: Setting Apache HTTPd as a boot service... Done
INFO: Stopping Apache HTTPd... Done
INFO: No usable SSL certificate detected for Rudder HTTP/S support, generating one automatically... Done
INFO: Starting Apache HTTPd...Job for apache2.service failed because the control process exited with error code. See "systemctl status apache2.service" and "journalctl -xe" for details.

*****************************************************************************************
INFO: rudder-server-relay setup complete.
INFO:
INFO: * If you are installing a root server, configuration is automatically done
INFO: * If you are installing a simple relay, run:
INFO:   '/opt/rudder/bin/rudder-node-to-relay 30ccb268-92ac-4e4b-945b-70fab864ef66'
INFO:   on your root server to complete this node transition to a relay server.
INFO:   Please look at the documentation for details (Section 'Relay servers')
*****************************************************************************************

(19/21) Installing: ncf-api-virtualenv-1398866025:4.1.0.rc1-1.SLES.12.noarch ...........................................................................[done]
Additional rpm output:
INFO: Creating the ncf-api-venv user... Done
warning: group ncf-api-venv does not exist - using root
INFO: Restarting Apache HTTPd... Done

(20/21) Installing: rudder-webapp-1398866025:4.1.0.rc1-1.SLES.12.noarch ................................................................................[done]
Additional rpm output:
INFO: Setting Apache HTTPd as a boot service... Done
INFO: Restarting syslog... Done
INFO: Stopping Apache HTTPd... Done
INFO: Adding ncf-api-venv to the rudder group... Done
INFO: Starting Apache HTTPd... Done
INFO: Launching script to check if a migration is needed
INFO: Checking if rudder-web.properties database access credentials are all right... LDAP OK,  SQL Credentials updated
INFO: Checking if inventory-web.properties database access credentials are all right... LDAP OK,  SQL skipped
INFO: Checking PostgreSQL service status... OK
INFO: Checking LDAP service status............ FAILED
LDAP service verification failed after 10 tries.

ERROR: The migration has failed in some steps. Check previous error messages.
Please restart the failed service(s), and start the migration script again.
(on a single Rudder server, try service rudder restart)
Once it is working, run:
# /opt/rudder/bin/rudder-upgrade
INFO: End of migration script
Initialized empty shared Git repository in /var/rudder/configuration-repository/.git/
Job for rudder-jetty.service failed because the control process exited with error code. See "systemctl status rudder-jetty.service" and "journalctl -xe" for details.
warning: %post(rudder-webapp-1398866025:4.1.0.rc1-1.SLES.12.noarch) scriptlet failed, exit status 1

(21/21) Installing: rudder-server-root-1398866025:4.1.0.rc1-1.SLES.12.noarch ...........................................................................[done]
Additional rpm output:
58cbc27e mdb_db_open: database "cn=rudder-configuration" cannot be opened: No such file or directory (2). Restore from backup!
58cbc27e backend_startup_one (type=mdb, suffix="cn=rudder-configuration"): bi_db_open failed! (2)
slap_startup failed
************************************************************
Rudder is now installed but not configured.
Please run /opt/rudder/bin/rudder-init
************************************************************


Related issues

Related to Rudder - Bug #10424: LDAP error at upgrade - Cannot allocate memoryReleased
Related to Rudder - Bug #10467: slapd is not always restarted after installation of rudder-inventory-ldapReleased

Associated revisions

Revision 63f6bb2d (diff)
Added by Alexis MOUSSET 10 months ago

Fixes #10454: Rudder root on SLES12 shows LDAP error during installation

History

#1 Updated by Alexis MOUSSET over 1 year ago

  • Category set to Packaging
  • Target version set to 4.1.0
  • Severity set to Critical - prevents main use of Rudder | no workaround | data loss | security

#2 Updated by François ARMAND over 1 year ago

As it is on rc1, it is most likelly http://www.rudder-project.org/redmine/issues/10424 no?

#3 Updated by François ARMAND over 1 year ago

  • Related to Bug #10424: LDAP error at upgrade - Cannot allocate memory added

#4 Updated by Alexis MOUSSET over 1 year ago

It's not the same error message (and virtual memory seems unlimited by default on SLES 12), I don't think so.

#5 Updated by Benoît PECCATTE over 1 year ago

  • Related to Bug #10467: slapd is not always restarted after installation of rudder-inventory-ldap added

#6 Updated by Benoît PECCATTE over 1 year ago

Seems to be solved by #10467

#7 Updated by François ARMAND over 1 year ago

  • Severity changed from Critical - prevents main use of Rudder | no workaround | data loss | security to Major - prevents use of part of Rudder | no simple workaround
  • User visibility set to Getting started - demo | first install | level 1 Techniques

We are thinking that it is "major" because there is a workaround (restart slapd and run rudder-upgrade script one more time), but it is not easy to find given the output.

#8 Updated by François ARMAND over 1 year ago

And for the visibility, it is something that happens at first install.

#9 Updated by Benoît PECCATTE over 1 year ago

  • Priority set to 54

#10 Updated by Vincent MEMBRÉ over 1 year ago

  • Target version changed from 4.1.0 to 4.1.1

#11 Updated by François ARMAND over 1 year ago

  • Status changed from New to Rejected
  • Target version deleted (4.1.1)

We wasn't able to reproduce it and we corrected a ton of ticket related to it, the most likelly being: #10424

So I'm closing it. Feel free to open it again in case it happens.

#12 Updated by Alexis MOUSSET 10 months ago

  • Status changed from Rejected to New
  • Assignee set to Alexis MOUSSET
  • Target version set to 4.1.10
  • Priority changed from 54 to 61

#13 Updated by Alexis MOUSSET 10 months ago

  • Status changed from New to In progress

#14 Updated by Alexis MOUSSET 10 months ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from Alexis MOUSSET to Benoît PECCATTE
  • Pull Request set to https://github.com/Normation/rudder-packages/pull/1424

#15 Updated by Alexis MOUSSET 10 months ago

The error is in the preinst script which is missing the ulimit change.

#16 Updated by Normation Quality Assistant 9 months ago

  • Assignee changed from Benoît PECCATTE to Alexis MOUSSET

#17 Updated by Alexis MOUSSET 9 months ago

  • Status changed from Pending technical review to Pending release

#18 Updated by Vincent MEMBRÉ 7 months ago

  • Status changed from Pending release to Released
  • Priority changed from 61 to 58

This bug has been fixed in Rudder 4.1.10 and 4.2.4 which were released today.

Also available in: Atom PDF