DuckCorp Projects: Issues
https://projects.duckcorp.org/
https://projects.duckcorp.org/favicon.ico?1669909042
2022-08-28T14:08:34Z
DuckCorp Projects
Redmine
DuckCorp Infrastructure - Bug #779 (Resolved): Upgrade NextCloud (from 23.0.8 to 24.0.4)
https://projects.duckcorp.org/issues/779
2022-08-28T14:08:34Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<p>Upgrade instructions: <code>toushirou</code>@<code>/srv/www/sites/stuff.milkypond.org/README.Duck</code>.</p>
<pre>
2022-08-28T15:34:59+00:00 Disabled incompatible app: breezedark
2022-08-28T15:34:59+00:00 Disabled incompatible app: end_to_end_encryption
2022-08-28T15:34:59+00:00 Disabled incompatible app: epubreader
2022-08-28T15:34:59+00:00 Disabled incompatible app: spreed
2022-08-28T15:34:59+00:00 Disabled incompatible app: twofactor_admin
2022-08-28T15:34:59+00:00 Disabled incompatible app: weather
</pre>
Supported apps:
<ul>
<li><a href="https://apps.nextcloud.com/apps/end_to_end_encryption" class="external">end_to_end_encryption</a></li>
<li><a href="https://apps.nextcloud.com/apps/breezedark" class="external">breezedark</a></li>
<li><a href="https://apps.nextcloud.com/apps/spreed" class="external">spreed</a></li>
</ul>
Unsupported/Unmaintained apps:
<ul>
<li>weather (disabled): <a class="external" href="https://github.com/nextcloud/weather/issues/102">https://github.com/nextcloud/weather/issues/102</a></li>
<li>twofactor_admin (enabled but the <code>occ</code> command <code> twofactorauth:admin:generate-code</code> doesn't appears ?): <a class="external" href="https://github.com/ChristophWurst/twofactor_admin/issues/229">https://github.com/ChristophWurst/twofactor_admin/issues/229</a></li>
</ul>
Patch applied:
<ul>
<li>epubreader: <a class="external" href="https://github.com/e-alfred/epubreader/issues/44">https://github.com/e-alfred/epubreader/issues/44</a> (patch attached)</li>
</ul>
DuckCorp Infrastructure - Bug #778 (Resolved): Upgrade NextCloud (from 23.0.7 to 23.0.8)
https://projects.duckcorp.org/issues/778
2022-08-28T12:36:32Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<p>Upgrade instructions: <code>toushirou</code>@<code>/srv/www/sites/stuff.milkypond.org/README.Duck</code>.</p>
DuckCorp Infrastructure - Bug #769 (Rejected): Toushirou get stuck randomly at boot
https://projects.duckcorp.org/issues/769
2022-04-15T23:36:48Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<p>Toushirou get stuck randomly at boot.</p>
Another reboot party needs to be planned in order to assess this issue:
<ul>
<li><a href="https://www.askapache.com/linux/linux-debugging/" class="external">kernel parameters</a>: <code>debug ignore_loglevel log_buf_len=10M print_fatal_signals=1 LOGLEVEL=8 earlyprintk=vga,keep sched_debug console=ttyS0,115200 systemd.log_level=debug</code></li>
<li><a href="https://www.suse.com/support/kb/doc/?id=000019461" class="external">step by step systemd boot process</a></li>
<li><a class="external" href="https://wiki.debian.org/systemd#systemd_hangs_on_startup_or_shutdown">https://wiki.debian.org/systemd#systemd_hangs_on_startup_or_shutdown</a></li>
</ul>
<p>Pictures:<br /><img src="https://projects.duckcorp.org/attachments/download/167/2022-04-13-185627_001.jpeg" loading="lazy" style="width: 50%;" alt="" /><br /><img src="https://projects.duckcorp.org/attachments/download/168/2022-04-13-185651_001.jpeg" loading="lazy" style="width: 50%;" alt="" /></p>
DuckCorp Infrastructure - Bug #746 (Rejected): unexpected restart of Toushirou host
https://projects.duckcorp.org/issues/746
2021-12-13T14:16:57Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<p>Today Toushirou was restarted unexpectedly. It seems that this restart wasn't due a command.</p>
<p>The server was restarted after <code>Dec 13 10:07:03</code> (UTC+1). I unlocked the encrypted encryption around 13h15 (UTC+1).</p>
<p><code>syslog</code> contains:<br /><pre>
Dec 13 10:06:52 Toushirou postfix/smtpd[1353160]: disconnect from <redacted> ehlo=2 starttls=1 mail=1 rcpt=1 bdat=1 quit=1 commands=7
Dec 13 10:07:03 Toushirou stunnel: LOG5[8632]: Connection closed: 182 byte(s) sent to TLS, 20 byte(s) sent to socket
@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
[...]
@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@^@
Dec 13 13:18:38 Toushirou systemd-udevd[631]: Using default interface naming scheme 'v247'.
Dec 13 13:18:38 Toushirou systemd-udevd[630]: Using default interface naming scheme 'v247'.
Dec 13 13:18:38 Toushirou lvm[578]: 3 logical volume(s) in volume group "extra" monitored
</pre></p>
<p>The filesystem journals were recovered:<br /><pre>
Dec 13 13:18:38 Toushirou systemd-fsck[791]: /dev/md0 was not cleanly unmounted, check forced.
Dec 13 13:18:38 Toushirou systemd-fsck[790]: /dev/mapper/main-ldap: recovering journal
Dec 13 13:18:38 Toushirou systemd-fsck[790]: /dev/mapper/main-ldap: clean, 14/23616 files, 9468/94208 blocks
Dec 13 13:18:38 Toushirou systemd[1]: Finished File System Check on /dev/mapper/main-ldap.
Dec 13 13:18:38 Toushirou systemd-fsck[787]: /dev/mapper/main-ftp: recovering journal
Dec 13 13:18:38 Toushirou systemd-fsck[787]: /dev/mapper/main-ftp: clean, 1042/1966080 files, 4094072/7864320 blocks
Dec 13 13:18:38 Toushirou systemd[1]: Finished File System Check on /dev/mapper/main-ftp.
Dec 13 13:18:38 Toushirou systemd-fsck[794]: /dev/mapper/main-logs: recovering journal
Dec 13 13:18:38 Toushirou systemd-fsck[794]: /dev/mapper/main-logs: Clearing orphaned inode 524490 (uid=0, gid=4, mode=0100640, size=186)
Dec 13 13:18:38 Toushirou systemd-fsck[794]: /dev/mapper/main-logs: Clearing orphaned inode 525136 (uid=0, gid=4, mode=0100640, size=2261619)
[...]
Dec 13 13:18:38 Toushirou systemd-fsck[794]: /dev/mapper/main-logs: clean, 3025/915712 files, 701679/3661824 blocks
Dec 13 13:18:38 Toushirou systemd[1]: Finished File System Check on /dev/mapper/main-logs.
Dec 13 13:18:38 Toushirou systemd-fsck[797]: /dev/mapper/main-mysql: recovering journal
Dec 13 13:18:38 Toushirou systemd-fsck[797]: /dev/mapper/main-mysql: clean, 1706/305216 files, 302945/1220608 blocks
Dec 13 13:18:38 Toushirou systemd[1]: Finished File System Check on /dev/mapper/main-mysql.
Dec 13 13:18:38 Toushirou systemd-fsck[801]: /dev/mapper/main-projects: recovering journal
Dec 13 13:18:38 Toushirou systemd-fsck[801]: /dev/mapper/main-projects: clean, 15384/977280 files, 2501362/3932160 blocks
Dec 13 13:18:38 Toushirou systemd[1]: Finished File System Check on /dev/mapper/main-projects.
Dec 13 13:18:38 Toushirou systemd-fsck[805]: /dev/mapper/main-stuffcloud: recovering journal
Dec 13 13:18:38 Toushirou systemd-fsck[805]: /dev/mapper/main-stuffcloud: clean, 184647/8519680 files, 22560629/34078720 blocks
Dec 13 13:18:38 Toushirou systemd[1]: Finished File System Check on /dev/mapper/main-stuffcloud.
Dec 13 13:18:38 Toushirou systemd-fsck[810]: /dev/mapper/main-var: recovering journal
Dec 13 13:18:38 Toushirou systemd-fsck[810]: /dev/mapper/main-var: Clearing orphaned inode 136445 (uid=0, gid=0, mode=0100664, size=11567160)
Dec 13 13:18:38 Toushirou systemd-fsck[810]: /dev/mapper/main-var: Clearing orphaned inode 136045 (uid=0, gid=0, mode=0100664, size=9253600)
[...]
Dec 13 13:18:38 Toushirou systemd-fsck[810]: /dev/mapper/main-var: clean, 43941/305216 files, 677459/1220608 blocks
Dec 13 13:18:38 Toushirou systemd[1]: Finished File System Check on /dev/mapper/main-var.
Dec 13 13:18:38 Toushirou systemd-fsck[811]: /dev/mapper/main-tmp: recovering journal
Dec 13 13:18:38 Toushirou systemd-fsck[811]: /dev/mapper/main-tmp: Clearing orphaned inode 20 (uid=0, gid=0, mode=0100666, size=0)
Dec 13 13:18:38 Toushirou systemd-fsck[811]: /dev/mapper/main-tmp: Clearing orphaned inode 50 (uid=128, gid=136, mode=0100600, size=0)
[...]
Dec 13 13:18:38 Toushirou systemd-fsck[811]: /dev/mapper/main-tmp: clean, 3380/121920 files, 20791/487424 blocks
Dec 13 13:18:38 Toushirou systemd[1]: Finished File System Check on /dev/mapper/main-tmp.
Dec 13 13:18:38 Toushirou systemd-fsck[814]: /dev/mapper/main-vcs: recovering journal
Dec 13 13:18:38 Toushirou systemd-fsck[814]: /dev/mapper/main-vcs: clean, 62639/183264 files, 334140/732160 blocks
Dec 13 13:18:38 Toushirou systemd[1]: Finished File System Check on /dev/mapper/main-vcs.
Dec 13 13:18:38 Toushirou systemd-fsck[817]: /dev/mapper/main-vmail: recovering journal
Dec 13 13:18:38 Toushirou systemd-fsck[817]: /dev/mapper/main-vmail: Clearing orphaned inode 1314229 (uid=5111, gid=5111, mode=0100600, size=2543956)
[...]
Dec 13 13:18:38 Toushirou systemd-fsck[817]: /dev/mapper/main-vmail: clean, 38189/1966080 files, 3862291/7864320 blocks
Dec 13 13:18:38 Toushirou systemd[1]: Finished File System Check on /dev/mapper/main-vmail.
Dec 13 13:18:38 Toushirou systemd[1]: Finished File System Check on /dev/mapper/extra-lxd.
Dec 13 13:18:38 Toushirou systemd-fsck[827]: /dev/mapper/extra-home: recovering journal
Dec 13 13:18:38 Toushirou systemd-fsck[827]: /dev/mapper/extra-home: clean, 576437/19660800 files, 60022856/78643200 blocks
Dec 13 13:18:38 Toushirou systemd[1]: Finished File System Check on /dev/mapper/extra-home.
Dec 13 13:18:38 Toushirou systemd-fsck[791]: /dev/md0: 348/64000 files (23.9% non-contiguous), 63264/255936 blocks
Dec 13 13:18:38 Toushirou systemd-fsck[819]: /dev/mapper/main-www: recovering journal
Dec 13 13:18:38 Toushirou systemd-fsck[819]: /dev/mapper/main-www: clean, 417149/9175040 files, 7579187/36700160 blocks
Dec 13 13:18:38 Toushirou systemd[1]: Finished File System Check on /dev/mapper/main-www.
</pre></p>
<p>Thanks to GuiHome and Victor for letting me know that the NextCloud service was unavailable.</p>
<p>Once the server has been restarted there was an error with the hivane network link. Hence some service were unavailable. The nerim link worked. <br /><pre>
root@Toushirou:~# systemctl --failed
UNIT LOAD ACTIVE SUB DESCRIPTION
● apache2.service loaded failed failed The Apache HTTP Server
● ifup@eth\x2dwan\x2dhivane.service loaded failed failed ifup for eth-wan-hivane
● matrix-appservice-irc.service loaded failed failed Matrix AppService IRC
● networking.service loaded failed failed Raise network interfaces
</pre></p>
<pre>
root@Toushirou:~# ifdown --force eth-wan-hivane
RTNETLINK answers: Cannot assign requested address
RTNETLINK answers: Cannot assign requested address
root@Toushirou:~# ifup --force eth-wan-hivane
Waiting for DAD... Timed out
ifup: failed to bring up eth-wan-hivane
</pre>
<p>I remember the timed out issue occurred when the last time the server was moved from a rack to another. I tried the <code>ifdown</code>/<code>ifup</code> commands several times (until the <code>Timed out</code> disappeared).</p>
<p>The logs show that the timed out issue occurred at boot:<br /><pre>
Dec 13 13:18:45 Toushirou sh[1562]: Waiting for DAD... Timed out
Dec 13 13:18:45 Toushirou sh[1496]: ifup: failed to bring up eth-wan-hivane
</pre></p>
<p>Next I restarted <code>apache2.service</code> and <code>matrix-appservice-irc.service</code>, then I updated <code>/lib/systemd/system/lxd.socket</code> in order to fix a typo:<br /><pre>Dec 13 15:48:22 Toushirou systemd[1]: /lib/systemd/system/lxd.socket:8: Unit must be of type service, ignoring: lxd.servcie
</pre><br />After that i ran <code>systemctl daemon-reload</code> and <code>lxc list</code> then the redmine LXC container restarted.</p>
<p>At this time I tried to create this issue using redmine:https://projects.duckcorp.org/ but an issue occurred after i tried to authenticate: the redmine web interface showed an error: <code>"Cannot assign requested address - connect(2) for [2001:67c:1740:9001::c1c8:2ab1]:636"</code>.</p>
<p>The restart of the <code>slapd</code> service (which was listening on IPv6 but not IPv4) fixed this issue.</p>
DuckCorp Infrastructure - Bug #726 (Resolved): /etc/stunnel/certs/duckcorp_stunnel_redis_Orfeo.pe...
https://projects.duckcorp.org/issues/726
2021-07-08T22:43:06Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<p>On Orfeo: <code>/etc/stunnel/certs/duckcorp_stunnel_redis_Orfeo.pem</code> certificate is expired.</p>
DuckCorp Infrastructure - Bug #698 (Resolved): replication wasn't working on db-ldap-2
https://projects.duckcorp.org/issues/698
2020-05-28T02:29:00Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<p><code>db-ldap-2.duckcorp.org</code> and <code>db-ldap-1.duckcorp.org</code> were desynchronized: <code>pierre-louis</code> account wasn't available on <code>db-ldap-2.duckcorp.org</code>.</p>
<p>In order to fix this issue, I restarted slapd service on toushirou (<code>systemctl restart slapd</code>).</p>
<p>Here are the logs of <code>slapd.service</code>:<br /><pre>
-- Logs begin at Mon 2020-05-18 03:15:02 CEST, end at Thu 2020-05-28 04:24:00 CEST. --
May 18 14:58:04 Toushirou slapd[3394]: slap_global_control: unrecognized control: 1.3.6.1.4.1.42.2.27.8.5.1
May 18 16:58:30 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 18 20:44:05 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 18 20:44:25 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 18 22:04:35 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 19 00:44:33 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 19 03:43:39 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 19 15:09:35 Toushirou slapd[3394]: connection_read(26): no connection!
May 19 16:31:36 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 19 16:31:53 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 19 19:10:07 Toushirou slapd[3394]: connection_read(35): no connection!
May 19 19:10:07 Toushirou slapd[3394]: connection_read(24): no connection!
May 19 22:13:59 Toushirou slapd[3394]: connection_read(37): no connection!
May 19 22:14:07 Toushirou slapd[3394]: connection_read(41): no connection!
May 19 22:41:01 Toushirou slapd[3394]: connection_read(40): no connection!
May 20 01:06:14 Toushirou slapd[3394]: conn=61577 op=0 do_bind: ber_scanf failed
May 20 03:04:59 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 20 05:03:11 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 20 10:16:29 Toushirou slapd[3394]: do_syncrep2: rid=004 (-1) Can't contact LDAP server
May 20 10:16:29 Toushirou slapd[3394]: do_syncrep2: rid=002 (-1) Can't contact LDAP server
May 20 10:16:29 Toushirou slapd[3394]: do_syncrepl: rid=004 rc -1 retrying (2 retries left)
May 20 10:16:29 Toushirou slapd[3394]: do_syncrepl: rid=002 rc -1 retrying (2 retries left)
May 20 10:16:41 Toushirou slapd[3394]: slap_client_connect: URI=ldap://db-ldap-1.duckcorp.org Error, ldap_start_tls failed (-1)
May 20 10:16:41 Toushirou slapd[3394]: do_syncrepl: rid=004 rc -1 retrying (1 retries left)
May 20 10:16:51 Toushirou slapd[3394]: slap_client_connect: URI=ldap://db-ldap-1.duckcorp.org Error, ldap_start_tls failed (-1)
May 20 10:16:51 Toushirou slapd[3394]: do_syncrepl: rid=002 rc -1 retrying (1 retries left)
May 20 10:17:01 Toushirou slapd[3394]: slap_client_connect: URI=ldap://db-ldap-1.duckcorp.org Error, ldap_start_tls failed (-1)
May 20 10:17:01 Toushirou slapd[3394]: do_syncrepl: rid=004 rc -1 retrying
May 20 10:17:05 Toushirou slapd[3394]: slap_client_connect: URI=ldap://db-ldap-1.duckcorp.org Error, ldap_start_tls failed (-1)
May 20 10:17:05 Toushirou slapd[3394]: do_syncrepl: rid=002 rc -1 retrying
May 20 10:17:24 Toushirou slapd[3394]: slap_client_connect: URI=ldap://db-ldap-1.duckcorp.org Error, ldap_start_tls failed (-1)
May 20 10:17:24 Toushirou slapd[3394]: slap_client_connect: URI=ldap://db-ldap-1.duckcorp.org Error, ldap_start_tls failed (-1)
May 20 10:17:24 Toushirou slapd[3394]: do_syncrepl: rid=004 rc -1 retrying (2 retries left)
May 20 10:17:24 Toushirou slapd[3394]: do_syncrepl: rid=002 rc -1 retrying (2 retries left)
May 20 10:17:56 Toushirou slapd[3394]: slap_client_connect: URI=ldap://db-ldap-1.duckcorp.org Error, ldap_start_tls failed (-1)
May 20 10:17:56 Toushirou slapd[3394]: do_syncrepl: rid=004 rc -1 retrying (1 retries left)
May 20 10:18:05 Toushirou slapd[3394]: slap_client_connect: URI=ldap://db-ldap-1.duckcorp.org Error, ldap_start_tls failed (-1)
May 20 10:18:05 Toushirou slapd[3394]: do_syncrepl: rid=002 rc -1 retrying (1 retries left)
May 20 10:18:36 Toushirou slapd[3394]: slap_client_connect: URI=ldap://db-ldap-1.duckcorp.org Error, ldap_start_tls failed (-1)
May 20 10:18:40 Toushirou slapd[3394]: slap_client_connect: URI=ldap://db-ldap-1.duckcorp.org Error, ldap_start_tls failed (-1)
May 20 10:18:40 Toushirou slapd[3394]: do_syncrepl: rid=002 rc -1 retrying
May 20 10:19:17 Toushirou slapd[3394]: slap_client_connect: URI=ldap://db-ldap-1.duckcorp.org Error, ldap_start_tls failed (-1)
May 20 10:19:17 Toushirou slapd[3394]: slap_client_connect: URI=ldap://db-ldap-1.duckcorp.org Error, ldap_start_tls failed (-1)
May 20 10:19:17 Toushirou slapd[3394]: do_syncrepl: rid=004 rc -1 quitting
May 20 10:19:17 Toushirou slapd[3394]: do_syncrepl: rid=002 rc -1 quitting
May 20 14:37:58 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 20 15:40:15 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 20 16:25:01 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 20 16:44:58 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 20 17:49:45 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 20 17:50:06 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 20 19:15:34 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 20 19:15:57 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 20 21:26:32 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 20 21:52:44 Toushirou slapd[3394]: connection_read(43): no connection!
May 20 21:52:52 Toushirou slapd[3394]: connection_read(37): no connection!
May 20 22:08:55 Toushirou slapd[3394]: connection_read(15): no connection!
May 20 23:27:19 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 21 01:07:08 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 21 04:24:50 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 21 06:01:22 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 21 12:21:33 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 21 16:43:53 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 21 16:44:10 Toushirou slapd[3394]: connection_input: conn=1016 deferring operation: too many executing
May 21 23:36:27 Toushirou slapd[3394]: connection_read(35): no connection!
May 22 00:56:11 Toushirou slapd[3394]: connection_read(43): no connection!
May 22 01:11:53 Toushirou slapd[3394]: connection_read(40): no connection!
May 22 01:12:03 Toushirou slapd[3394]: connection_read(26): no connection!
May 22 02:47:32 Toushirou slapd[3394]: connection_read(42): no connection!
May 22 03:19:33 Toushirou slapd[3394]: connection_read(36): no connection!
May 22 16:36:11 Toushirou slapd[3394]: connection_read(35): no connection!
May 22 23:20:19 Toushirou slapd[3394]: connection_read(15): no connection!
May 23 00:35:39 Toushirou slapd[3394]: connection_read(28): no connection!
May 23 01:26:12 Toushirou slapd[3394]: connection_read(34): no connection!
May 23 02:46:12 Toushirou slapd[3394]: connection_read(35): no connection!
May 23 21:24:26 Toushirou slapd[3394]: connection_read(38): no connection!
May 23 21:40:25 Toushirou slapd[3394]: connection_read(37): no connection!
May 24 00:21:30 Toushirou slapd[3394]: connection_read(35): no connection!
May 24 00:53:33 Toushirou slapd[3394]: connection_read(23): no connection!
May 24 15:44:52 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:44:52 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:44:52 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:44:53 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:44:53 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:44:59 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:45:02 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:45:02 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:45:03 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:45:03 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:45:03 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:45:03 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:45:03 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:45:03 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:45:03 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 15:55:30 Toushirou slapd[3394]: connection_read(37): no connection!
May 24 16:11:22 Toushirou slapd[3394]: connection_read(22): no connection!
May 24 16:34:58 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 16:35:08 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 16:35:09 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 16:35:09 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 16:35:10 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 16:35:10 Toushirou slapd[3394]: <= mdb_substring_candidates: (uid) not indexed
May 24 17:06:40 Toushirou slapd[3394]: connection_read(35): no connection!
May 24 22:28:20 Toushirou slapd[3394]: connection_read(35): no connection!
May 24 22:28:23 Toushirou slapd[3394]: connection_read(39): no connection!
May 24 22:44:24 Toushirou slapd[3394]: connection_read(36): no connection!
May 24 23:16:44 Toushirou slapd[3394]: connection_read(34): no connection!
May 25 00:05:58 Toushirou slapd[3394]: connection_read(41): no connection!
May 25 00:06:05 Toushirou slapd[3394]: connection_read(30): no connection!
May 25 00:22:03 Toushirou slapd[3394]: connection_read(26): no connection!
May 25 00:38:08 Toushirou slapd[3394]: connection_read(40): no connection!
May 25 00:38:22 Toushirou slapd[3394]: connection_read(15): no connection!
May 25 00:54:28 Toushirou slapd[3394]: connection_read(34): no connection!
May 25 10:19:11 Toushirou slapd[3394]: connection_input: conn=77688 deferring operation: too many executing
May 25 12:39:50 Toushirou slapd[3394]: connection_input: conn=77688 deferring operation: too many executing
May 26 00:01:56 Toushirou slapd[3394]: connection_read(39): no connection!
May 26 00:17:57 Toushirou slapd[3394]: connection_read(34): no connection!
May 26 00:33:51 Toushirou slapd[3394]: connection_read(39): no connection!
May 26 00:34:18 Toushirou slapd[3394]: connection_read(27): no connection!
May 26 00:50:57 Toushirou slapd[3394]: connection_read(27): no connection!
May 26 00:50:58 Toushirou slapd[3394]: connection_read(33): no connection!
May 26 01:23:07 Toushirou slapd[3394]: connection_read(38): no connection!
May 26 09:28:09 Toushirou slapd[3394]: connection_input: conn=77688 deferring operation: too many executing
May 26 11:21:01 Toushirou slapd[3394]: connection_input: conn=77688 deferring operation: too many executing
May 26 12:37:12 Toushirou slapd[3394]: connection_read(35): no connection!
May 26 16:16:54 Toushirou slapd[3394]: connection_input: conn=77688 deferring operation: too many executing
May 26 20:11:28 Toushirou slapd[3394]: connection_read(34): no connection!
May 26 21:15:23 Toushirou slapd[3394]: connection_read(28): no connection!
May 27 00:38:19 Toushirou slapd[3394]: connection_read(41): no connection!
May 27 18:52:09 Toushirou slapd[3394]: connection_read(47): no connection!
May 27 18:52:15 Toushirou slapd[3394]: connection_read(28): no connection!
May 27 18:52:26 Toushirou slapd[3394]: connection_read(43): no connection!
May 27 19:56:32 Toushirou slapd[3394]: connection_read(40): no connection!
May 27 19:56:39 Toushirou slapd[3394]: connection_read(40): no connection!
May 27 21:51:12 Toushirou slapd[3394]: connection_read(38): no connection!
May 27 21:51:18 Toushirou slapd[3394]: connection_read(26): no connection!
May 27 22:07:00 Toushirou slapd[3394]: connection_read(15): no connection!
May 27 22:07:19 Toushirou slapd[3394]: connection_read(22): no connection!
May 27 22:39:01 Toushirou slapd[3394]: connection_read(26): no connection!
May 27 23:01:56 Toushirou slapd[3394]: connection_read(33): no connection!
May 27 23:18:10 Toushirou slapd[3394]: connection_read(49): no connection!
May 28 01:10:25 Toushirou slapd[3394]: connection_read(37): no connection!
May 28 01:10:33 Toushirou slapd[3394]: connection_read(39): no connection!
May 28 01:42:20 Toushirou slapd[3394]: connection_read(38): no connection!
May 28 04:18:56 Toushirou systemd[1]: Stopping LSB: OpenLDAP standalone server (Lightweight Directory Access Protocol)...
May 28 04:18:56 Toushirou slapd[3394]: daemon: shutdown requested and initiated.
May 28 04:18:56 Toushirou slapd[3394]: slapd shutdown: waiting for 0 operations/tasks to finish
May 28 04:18:57 Toushirou slapd[3394]: DIGEST-MD5 common mech free
May 28 04:18:57 Toushirou slapd[3394]: DIGEST-MD5 common mech free
May 28 04:18:57 Toushirou slapd[3394]: slapd stopped.
May 28 04:18:57 Toushirou slapd[6990]: Stopping OpenLDAP: slapd.
May 28 04:18:57 Toushirou systemd[1]: slapd.service: Succeeded.
May 28 04:18:57 Toushirou systemd[1]: Stopped LSB: OpenLDAP standalone server (Lightweight Directory Access Protocol).
May 28 04:18:57 Toushirou systemd[1]: slapd.service: Consumed 4h 4min 55.502s CPU time.
May 28 04:18:57 Toushirou systemd[1]: Starting LSB: OpenLDAP standalone server (Lightweight Directory Access Protocol)...
May 28 04:18:57 Toushirou slapd[7001]: @(#) $OpenLDAP: slapd (Apr 20 2020 18:19:54) $
May 28 04:18:57 Toushirou slapd[7003]: slapd starting
May 28 04:18:57 Toushirou slapd[6995]: Starting OpenLDAP: slapd.
May 28 04:18:57 Toushirou systemd[1]: Started LSB: OpenLDAP standalone server (Lightweight Directory Access Protocol).
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_message_to_entry: rid=002 DN: dc=milkypond,dc=org, UUID: 5e25ffb0-34d0-103a-826b-1b8e95bf3725
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_entry: rid=002 LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_ADD) tid 1effd700
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_entry: rid=002 inserted UUID 5e25ffb0-34d0-103a-826b-1b8e95bf3725
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_entry: rid=002 be_search (0)
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_entry: rid=002 dc=milkypond,dc=org
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_entry: rid=002 be_add dc=milkypond,dc=org (68)
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_entry: rid=002 be_modify dc=milkypond,dc=org (0)
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_message_to_entry: rid=002 DN: cn=admin,dc=milkypond,dc=org, UUID: 5e299e0e-34d0-103a-826c-1b8e95bf3725
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_entry: rid=002 LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_ADD) tid 1effd700
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_entry: rid=002 inserted UUID 5e299e0e-34d0-103a-826c-1b8e95bf3725
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_entry: rid=002 be_search (0)
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_entry: rid=002 cn=admin,dc=milkypond,dc=org
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_entry: rid=002 be_add cn=admin,dc=milkypond,dc=org (68)
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_entry: rid=002 be_modify cn=admin,dc=milkypond,dc=org (0)
May 28 04:18:57 Toushirou slapd[7003]: syncrepl_message_to_entry: rid=002 DN: ou=People,dc=milkypond,dc=org, UUID: 5e2e345a-34d0-103a-826d-1b8e95bf3725
[...]
</pre></p>
DuckCorp Infrastructure - Bug #697 (Resolved): Fix "Found variable using reserved name: port" (an...
https://projects.duckcorp.org/issues/697
2020-05-07T13:47:32Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<p>ansible-role-ssh: Don't use reserved name 'port'</p>
<p>Fix this warning:</p>
<pre>
[WARNING]: Found variable using reserved name: port
</pre>
<p>Once merged the following patch will be required on the main repository:<br /><pre>
--- a/ansible/roles/dc-base/tasks/main.yml
+++ b/ansible/roles/dc-base/tasks/main.yml
@@ -52,7 +52,7 @@
import_role:
name: ssh
vars:
- port: "{{ ssh.port }}"
+ sshd_port: "{{ ssh.port }}"
listen_addresses: "{{ ssh.listen_addresses }}"
# for GuiHome streaming
enable_gatewayports: "{{ inventory_hostname == 'Toushirou' }}"
</pre></p>
DuckCorp Infrastructure - Bug #669 (Resolved): WARNING: Ignoring deprecated option DetectBrokenEx...
https://projects.duckcorp.org/issues/669
2019-08-24T09:51:43Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<p>This warning is received on dc-admins mailing list every hour:<br /><pre>
[DC-Admins] Cron <clamav@Toushirou> [ -x /usr/sbin/clamav-unofficial-sigs ] && /usr/sbin/clamav-unofficial-sigs
WARNING: Ignoring deprecated option DetectBrokenExecutables at /etc/clamav/clamd.conf:40
</pre></p>
DuckCorp Infrastructure - Bug #659 (Resolved): Toushirou: unable to decrypt root partition at boot
https://projects.duckcorp.org/issues/659
2019-07-15T23:53:44Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<p>Network interface name in initramfs configuration was wrong.</p>
<p>Closed by <a class="changeset" title="Toushirou: fix initramfs iface name This update has been successfully tested and is already appl..." href="https://projects.duckcorp.org/projects/dc-admin/repository/duckcorp-infra/revisions/4278dccfa464a6897d43762720285b4e3a20dd82">4278dccfa464a6897d43762720285b4e3a20dd82</a></p>
DuckCorp Infrastructure - Bug #653 (Resolved): Fix logcheck regex
https://projects.duckcorp.org/issues/653
2019-05-25T09:50:06Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<p>Fix these errors:<br /><pre>
Cron <logcheck@Orfeo> if [ -x /usr/sbin/logcheck ]; then nice -n10 /usr/sbin/logcheck; fi
grep: /tmp/logcheck.TZdmWT/ignore/dc:29: Unmatched ( or \(
grep: /tmp/logcheck.TZdmWT/ignore/dc:31: Unmatched ( or \(
</pre></p>
<p>Fixed by <a class="external" href="https://projects.duckcorp.org/projects/dc-admin/repository/revisions/a8373a5690178cf345a2b2bde39efb6d700b15fd">https://projects.duckcorp.org/projects/dc-admin/repository/revisions/a8373a5690178cf345a2b2bde39efb6d700b15fd</a></p>
<p>Deployed using:<br /><pre>ANSIBLE_DISPLAY_SKIPPED_HOSTS=0 ANSIBLE_DISPLAY_OK_HOSTS=0 ansible-playbook -i hosts.yml playbooks/common.yml --diff</pre></p>
DuckCorp Infrastructure - Bug #635 (Resolved): invalid group 'prj-bip-webmasters'
https://projects.duckcorp.org/issues/635
2018-09-09T23:43:05Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<blockquote>
<p>Cron <root@Toushirou> ionice -c3 srv_ftp_bip_update<br />chown: invalid group: 'pilou:prj-bip-webmasters'</p>
</blockquote>
<p>group <code>prj-bip-webmasters</code> doesn't exist:</p>
<blockquote>
<p>$ getent group prj-bip-webmasters<br />$ ls <del>l /srv/ftp/ftp.duckcorp.org/public/bip/bip-0.9.0-rc.1.tar.gz<br />-rw-r--r-</del> 1 pilou 15101 273464 Nov 13 2016 /srv/ftp/ftp.duckcorp.org/public/bip/bip-0.9.0-rc.1.tar.gz</p>
</blockquote>
It seems group <code>prj-bip-webmasters</code> existed but has been removed:
<ul>
<li>should this group be created</li>
<li>or should <code>prj-bip-devs</code> be used instead ?</li>
</ul>
DuckCorp Infrastructure - Bug #605 (Rejected): No mail since 2017-10-15 07:00:02
https://projects.duckcorp.org/issues/605
2017-10-16T10:53:44Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<p>On orfeo, Oct 15 07:00:00 (UTC+2), policyd-weight daemon was unable to restart, then all incoming mail were rejected.</p>
<pre>
# systemctl status policyd-weight.service
● policyd-weight.service - LSB: Start and stop the policyd-weight daemon
Loaded: loaded (/etc/init.d/policyd-weight; generated; vendor preset: enabled)
Active: failed (Result: exit-code) since Sun 2017-10-15 07:00:02 CEST; 1 day 5h ago
Docs: man:systemd-sysv-generator(8)
Process: 28244 ExecStop=/etc/init.d/policyd-weight stop (code=exited, status=0/SUCCESS)
Process: 28291 ExecStart=/etc/init.d/policyd-weight start (code=exited, status=1/FAILURE)
Tasks: 0 (limit: 4915)
Memory: 372.0K
CPU: 389ms
CGroup: /system.slice/policyd-weight.service
</pre>
<pre>
# grep "policyd-weight" /var/log/syslog.1
Oct 15 07:00:00 orfeo systemd[1]: Stopping LSB: Start and stop the policyd-weight daemon...
Oct 15 07:00:02 orfeo policyd-weight[28244]: Stopping policyd-weight (incl. cache): policyd-weight.
Oct 15 07:00:02 orfeo systemd[1]: Stopped LSB: Start and stop the policyd-weight daemon.
Oct 15 07:00:02 orfeo systemd[1]: Starting LSB: Start and stop the policyd-weight daemon...
Oct 15 07:00:03 orfeo policyd-weight[28291]: Starting policyd-weight: policyd-weightmaster: bind 12525: IO::Socket::INET: Address already in use Address already in use at /usr/sbin/policyd-weight line 1052.
Oct 15 07:00:03 orfeo postfix/policyd-weight[28294]: warning: err: init: master: bind 12525: IO::Socket::INET: Address already in use Address already in use at /usr/sbin/policyd-weight line 1052.
Oct 15 07:00:03 orfeo policyd-weight[28291]: failed!
Oct 15 07:00:04 orfeo systemd[1]: policyd-weight.service: Control process exited, code=exited status=1
Oct 15 07:00:04 orfeo systemd[1]: Failed to start LSB: Start and stop the policyd-weight daemon.
Oct 15 07:00:04 orfeo systemd[1]: policyd-weight.service: Unit entered failed state.
Oct 15 07:00:04 orfeo systemd[1]: policyd-weight.service: Failed with result 'exit-code'.
Oct 15 07:00:05 orfeo postfix/policyd-weight[16253]: cache killed
</pre>
<pre>
# /var/log/syslog.1 extract
Oct 15 07:00:39 orfeo postfix/smtpd[28403]: warning: connect to 127.0.0.1:12525: Connection refused
Oct 15 07:00:39 orfeo postfix/smtpd[28403]: warning: problem talking to server 127.0.0.1:12525: Connection refused
Oct 15 07:00:40 orfeo postfix/smtpd[28403]: warning: connect to 127.0.0.1:12525: Connection refused
Oct 15 07:00:40 orfeo postfix/smtpd[28403]: warning: problem talking to server 127.0.0.1:12525: Connection refused
Oct 15 07:00:40 orfeo postfix/smtpd[28403]: NOQUEUE: reject: RCPT from XXX: 451 4.3.5 <XXXX@milkypond.org>: Recipient address rejected: Server configuration problem; from=<XXX@outlook.com> to=<XXX@milkypond.org> proto=ESMTP helo=<XXX>
</pre>
<p>Thanks to rtp for pointing that.</p>
DuckCorp Infrastructure - Bug #504 (Rejected): Backups are failing due to an expired certificate
https://projects.duckcorp.org/issues/504
2017-02-01T10:02:10Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<pre>
[root@Korutopi ~]# openssl x509 -in /etc/bacula/certs/duckcorp-backup_bacula_korutopi.crt -text | grep After
Not After : Jul 29 15:14:44 2016 GMT
</pre>
<pre>
01-Feb 10:00 Korutopi-dir JobId 18455: sql_get.c:391 No volumes found for JobId=18452
01-Feb 10:00 Korutopi-dir JobId 18455: No prior or suitable Full backup found in catalog. Doing FULL backup.
01-Feb 10:00 Korutopi-dir JobId 18455: Start Backup JobId 18455, Job=Thorfinn-general-data.2017-02-01_10.00.00_24
01-Feb 10:00 Korutopi-dir JobId 18455: Error: tls.c:92 Error with certificate at depth: 0, issuer = /C=DL/ST=DuckLand/L=DuckCity/O=DuckCorp/OU=DuckCorp Backup Department/CN=DuckCorp Backup CA/emailAddress=admin@duckcorp.org, subject = /C=DL/ST=DuckLand/L=DuckCity/O=DuckCorp/OU=DuckCorp Backup Department/CN=korutopi.duckcorp.org/emailAddress=admin@duckcorp.org, ERR=10:certificate has expired
01-Feb 10:00 Korutopi-dir JobId 18455: Error: openssl.c:86 Connect failure: ERR=error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
01-Feb 10:00 Korutopi-dir JobId 18455: Fatal error: TLS negotiation failed with SD at "korutopi.duckcorp.org:30003"
01-Feb 10:00 Korutopi-dir JobId 18455: Error: Bacula Korutopi-dir 5.2.6 (21Feb12):
Build OS: x86_64-pc-linux-gnu debian jessie/sid
JobId: 18455
Job: Thorfinn-general-data.2017-02-01_10.00.00_24
Backup Level: Full (upgraded from Incremental)
Client: "Thorfinn-fd" 5.2.6 (21Feb12) x86_64-pc-linux-gnu,debian,jessie/sid
FileSet: "GeneralData Set" 2012-06-24 14:00:00
Pool: "GeneralData-Full" (From Job FullPool override)
Catalog: "DcCatalog" (From Client resource)
Storage: "File" (From Pool resource)
Scheduled time: 01-Feb-2017 10:00:00
Start time: 01-Feb-2017 10:00:24
End time: 01-Feb-2017 10:00:35
Elapsed time: 11 secs
Priority: 50
FD Files Written: 0
SD Files Written: 0
FD Bytes Written: 0 (0 B)
SD Bytes Written: 0 (0 B)
Rate: 0.0 KB/s
Software Compression: None
VSS: no
Encryption: no
Accurate: yes
Volume name(s):
Volume Session Id: 0
Volume Session Time: 0
Last Volume Bytes: 0 (0 B)
Non-fatal FD errors: 2
SD Errors: 0
FD termination status:
SD termination status:
Termination: *** Backup Error ***
01-Feb 10:00 Korutopi-dir JobId 18455: Rescheduled Job Thorfinn-general-data.2017-02-01_10.00.00_24 at 01-Feb-2017 10:00 to re-run in 3600 seconds (01-Feb-2017 11:00).
01-Feb 10:00 Korutopi-dir JobId 18455: Job Thorfinn-general-data.2017-02-01_10.00.00_24 waiting 3600 seconds for scheduled start time.
01-Feb 11:00 Korutopi-dir JobId 18455: Start Backup JobId 18455, Job=Thorfinn-general-data.2017-02-01_10.00.00_24
01-Feb 11:00 Korutopi-dir JobId 18455: Error: tls.c:92 Error with certificate at depth: 0, issuer = /C=DL/ST=DuckLand/L=DuckCity/O=DuckCorp/OU=DuckCorp Backup Department/CN=DuckCorp Backup CA/emailAddress=admin@duckcorp.org, subject = /C=DL/ST=DuckLand/L=DuckCity/O=DuckCorp/OU=DuckCorp Backup Department/CN=korutopi.duckcorp.org/emailAddress=admin@duckcorp.org, ERR=10:certificate has expired
01-Feb 11:00 Korutopi-dir JobId 18455: Error: openssl.c:86 Connect failure: ERR=error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
01-Feb 11:00 Korutopi-dir JobId 18455: Fatal error: TLS negotiation failed with SD at "korutopi.duckcorp.org:30003"
01-Feb 11:00 Korutopi-dir JobId 18455: Error: Bacula Korutopi-dir 5.2.6 (21Feb12):
Build OS: x86_64-pc-linux-gnu debian jessie/sid
JobId: 18455
Job: Thorfinn-general-data.2017-02-01_10.00.00_24
Backup Level: Full (upgraded from Incremental)
Client: "Thorfinn-fd" 5.2.6 (21Feb12) x86_64-pc-linux-gnu,debian,jessie/sid
FileSet: "GeneralData Set" 2012-06-24 14:00:00
Pool: "GeneralData-Full" (From Job FullPool override)
Catalog: "DcCatalog" (From Client resource)
Storage: "File" (From Pool resource)
Scheduled time: 01-Feb-2017 10:00:00
Start time: 01-Feb-2017 11:00:40
End time: 01-Feb-2017 11:00:50
Elapsed time: 10 secs
Priority: 50
FD Files Written: 0
SD Files Written: 0
FD Bytes Written: 0 (0 B)
SD Bytes Written: 0 (0 B)
Rate: 0.0 KB/s
Software Compression: None
VSS: no
Encryption: no
Accurate: yes
Volume name(s):
Volume Session Id: 0
Volume Session Time: 0
Last Volume Bytes: 0 (0 B)
Non-fatal FD errors: 2
SD Errors: 0
FD termination status:
SD termination status:
Termination: *** Backup Error ***
01-Feb 11:00 Korutopi-dir JobId 18455: Rescheduled Job Thorfinn-general-data.2017-02-01_10.00.00_24 at 01-Feb-2017 11:00 to re-run in 3600 seconds (01-Feb-2017 12:00).
01-Feb 11:00 Korutopi-dir JobId 18455: Job Thorfinn-general-data.2017-02-01_10.00.00_24 waiting 3600 seconds for scheduled start time.
01-Feb 12:01 Korutopi-dir JobId 18455: Start Backup JobId 18455, Job=Thorfinn-general-data.2017-02-01_10.00.00_24
01-Feb 12:01 Korutopi-dir JobId 18455: Error: tls.c:92 Error with certificate at depth: 0, issuer = /C=DL/ST=DuckLand/L=DuckCity/O=DuckCorp/OU=DuckCorp Backup Department/CN=DuckCorp Backup CA/emailAddress=admin@duckcorp.org, subject = /C=DL/ST=DuckLand/L=DuckCity/O=DuckCorp/OU=DuckCorp Backup Department/CN=korutopi.duckcorp.org/emailAddress=admin@duckcorp.org, ERR=10:certificate has expired
01-Feb 12:01 Korutopi-dir JobId 18455: Error: openssl.c:86 Connect failure: ERR=error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
01-Feb 12:01 Korutopi-dir JobId 18455: Fatal error: TLS negotiation failed with SD at "korutopi.duckcorp.org:30003"
01-Feb 12:01 Korutopi-dir JobId 18455: Error: Bacula Korutopi-dir 5.2.6 (21Feb12):
Build OS: x86_64-pc-linux-gnu debian jessie/sid
JobId: 18455
Job: Thorfinn-general-data.2017-02-01_10.00.00_24
Backup Level: Full (upgraded from Incremental)
Client: "Thorfinn-fd" 5.2.6 (21Feb12) x86_64-pc-linux-gnu,debian,jessie/sid
FileSet: "GeneralData Set" 2012-06-24 14:00:00
Pool: "GeneralData-Full" (From Job FullPool override)
Catalog: "DcCatalog" (From Client resource)
Storage: "File" (From Pool resource)
Scheduled time: 01-Feb-2017 10:00:00
Start time: 01-Feb-2017 12:01:07
End time: 01-Feb-2017 12:01:19
Elapsed time: 12 secs
Priority: 50
FD Files Written: 0
SD Files Written: 0
FD Bytes Written: 0 (0 B)
SD Bytes Written: 0 (0 B)
Rate: 0.0 KB/s
Software Compression: None
VSS: no
Encryption: no
Accurate: yes
Volume name(s):
Volume Session Id: 0
Volume Session Time: 0
Last Volume Bytes: 0 (0 B)
Non-fatal FD errors: 2
SD Errors: 0
FD termination status:
SD termination status:
Termination: *** Backup Error ***
01-Feb 12:01 Korutopi-dir JobId 18455: Rescheduled Job Thorfinn-general-data.2017-02-01_10.00.00_24 at 01-Feb-2017 12:01 to re-run in 3600 seconds (01-Feb-2017 13:01).
01-Feb 12:01 Korutopi-dir JobId 18455: Job Thorfinn-general-data.2017-02-01_10.00.00_24 waiting 3600 seconds for scheduled start time.
01-Feb 13:01 Korutopi-dir JobId 18455: Start Backup JobId 18455, Job=Thorfinn-general-data.2017-02-01_10.00.00_24
01-Feb 13:01 Korutopi-dir JobId 18455: Error: tls.c:92 Error with certificate at depth: 0, issuer = /C=DL/ST=DuckLand/L=DuckCity/O=DuckCorp/OU=DuckCorp Backup Department/CN=DuckCorp Backup CA/emailAddress=admin@duckcorp.org, subject = /C=DL/ST=DuckLand/L=DuckCity/O=DuckCorp/OU=DuckCorp Backup Department/CN=korutopi.duckcorp.org/emailAddress=admin@duckcorp.org, ERR=10:certificate has expired
01-Feb 13:01 Korutopi-dir JobId 18455: Error: openssl.c:86 Connect failure: ERR=error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
01-Feb 13:01 Korutopi-dir JobId 18455: Fatal error: TLS negotiation failed with SD at "korutopi.duckcorp.org:30003"
01-Feb 13:01 Korutopi-dir JobId 18455: Error: Bacula Korutopi-dir 5.2.6 (21Feb12):
Build OS: x86_64-pc-linux-gnu debian jessie/sid
JobId: 18455
Job: Thorfinn-general-data.2017-02-01_10.00.00_24
Backup Level: Full (upgraded from Incremental)
Client: "Thorfinn-fd" 5.2.6 (21Feb12) x86_64-pc-linux-gnu,debian,jessie/sid
FileSet: "GeneralData Set" 2012-06-24 14:00:00
Pool: "GeneralData-Full" (From Job FullPool override)
Catalog: "DcCatalog" (From Client resource)
Storage: "File" (From Pool resource)
Scheduled time: 01-Feb-2017 10:00:00
Start time: 01-Feb-2017 13:01:21
End time: 01-Feb-2017 13:01:31
Elapsed time: 10 secs
Priority: 50
FD Files Written: 0
SD Files Written: 0
FD Bytes Written: 0 (0 B)
SD Bytes Written: 0 (0 B)
Rate: 0.0 KB/s
Software Compression: None
VSS: no
Encryption: no
Accurate: yes
Volume name(s):
Volume Session Id: 0
Volume Session Time: 0
Last Volume Bytes: 0 (0 B)
Non-fatal FD errors: 2
SD Errors: 0
FD termination status:
SD termination status:
Termination: *** Backup Error ***
</pre>
DuckCorp Infrastructure - Bug #451 (Rejected): postfix and LDAP errors: ldap:/etc/postfix/ldap_re...
https://projects.duckcorp.org/issues/451
2015-05-21T10:44:27Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<blockquote>
<p>zgrep -A 1 "dict_ldap_lookup: Search error -5: Timed out" /var/log/syslog* |sort -rn</p>
</blockquote>
<pre>
/var/log/syslog.7.gz:May 15 06:32:49 orfeo postfix/cleanup[25851]: warning: ldap:/etc/postfix/ldap_redirs.cf lookup error for "arnau@duckcorp.dl"
/var/log/syslog.7.gz:May 15 06:32:49 orfeo postfix/cleanup[25851]: warning: dict_ldap_lookup: Search error -5: Timed out
/var/log/syslog.6.gz:May 16 06:42:58 orfeo postfix/cleanup[7985]: warning: ldap:/etc/postfix/ldap_redirs.cf lookup error for "duck@duckcorp.dl"
/var/log/syslog.6.gz:May 16 06:42:58 orfeo postfix/cleanup[7985]: warning: dict_ldap_lookup: Search error -5: Timed out
/var/log/syslog.3.gz:May 19 06:34:24 orfeo postfix/trivial-rewrite[25111]: warning: ldap:/etc/postfix/ldap_virtual_domains.cf: table lookup problem
/var/log/syslog.3.gz:May 19 06:34:24 orfeo postfix/trivial-rewrite[25111]: warning: dict_ldap_lookup: Search error -5: Timed out
/var/log/syslog.2.gz:May 20 06:32:51 orfeo postfix/trivial-rewrite[3709]: warning: ldap:/etc/postfix/ldap_virtual_domains.cf: table lookup problem
/var/log/syslog.2.gz:May 20 06:32:51 orfeo postfix/trivial-rewrite[3709]: warning: dict_ldap_lookup: Search error -5: Timed out
/var/log/syslog.1:May 21 06:42:36 orfeo postfix/trivial-rewrite[21147]: warning: ldap:/etc/postfix/ldap_virtual_domains.cf: table lookup problem
/var/log/syslog.1:May 21 06:42:36 orfeo postfix/trivial-rewrite[21147]: warning: dict_ldap_lookup: Search error -5: Timed out
/var/log/syslog.1:May 21 06:32:21 orfeo postfix/cleanup[16995]: warning: ldap:/etc/postfix/ldap_redirs.cf lookup error for "Duck@duckcorp.org"
/var/log/syslog.1:May 21 06:32:21 orfeo postfix/cleanup[16995]: warning: dict_ldap_lookup: Search error -5: Timed out
/var/log/syslog.1:May 21 06:28:55 orfeo postfix/trivial-rewrite[16155]: warning: ldap:/etc/postfix/ldap_virtual_domains.cf: table lookup problem
/var/log/syslog.1:May 21 06:28:55 orfeo postfix/trivial-rewrite[16155]: warning: dict_ldap_lookup: Search error -5: Timed out
</pre>
<p>All errors occur around 06:30am. LDAP server is on the same host. <code>slapd</code> process is running since <code>Apr06 12:51</code>.</p>
Bip - Bug #339 (Rejected): Client side ssl not working
https://projects.duckcorp.org/issues/339
2014-06-10T14:02:00Z
Pierre-Louis Bonicoli
pierre-louis.bonicoli@ir5.eu
<p>kick wrote on irc:</p>
<blockquote>
<p>I copied my working config file from my bip 0.8.8-2<br />and I've got ssl handshake problems.. <br />I'm using a ubnutu trusty for bip 0.8.9-1 <br />I have a bip.pem set, with good owner and permissions.</p>
</blockquote>
<p>Error in client:</p>
<blockquote>
<p>connexion a échoué. Erreur : (336151568) error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure</p>
</blockquote>
<p>bip.log contains:</p>
<blockquote>
<p>139638493165216:error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher:s3_srvr.c:1358:ERROR: Error in SSL handshake.</p>
</blockquote>
<p><strong>bip 0.8.8-2, sslv3</strong><br /><pre>
openssl s_client -ssl3 -connect edited.bip.server:7778
CONNECTED(00000003)
depth=0 C = fr, O = Sexy boys, OU = Bip, CN = Bip
verify error:num=18:self signed certificate
verify return:1
depth=0 C = fr, O = Sexy boys, OU = Bip, CN = Bip
verify return:1
---
Certificate chain
0 s:/C=fr/O=Sexy boys/OU=Bip/CN=Bip
i:/C=fr/O=Sexy boys/OU=Bip/CN=Bip
---
Server certificate
-----BEGIN CERTIFICATE-----
EDITED XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
-----END CERTIFICATE-----
subject=/C=fr/O=Sexy boys/OU=Bip/CN=Bip
issuer=/C=fr/O=Sexy boys/OU=Bip/CN=Bip
---
No client certificate CA names sent
---
SSL handshake has read 2318 bytes and written 364 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 4096 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : SSLv3
Cipher : DHE-RSA-AES256-SHA
Session-ID: EDITED XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Session-ID-ctx:
Master-Key: EDITED XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1402406408
Timeout : 7200 (sec)
Verify return code: 18 (self signed certificate)
</pre></p>
<p><strong>bip 0.8.8-2, tls1</strong><br /><pre>
openssl s_client -tls1 -connect server.bip.edited:7778
CONNECTED(00000003)
depth=0 C = fr, O = Sexy boys, OU = Bip, CN = Bip
verify error:num=18:self signed certificate
verify return:1
depth=0 C = fr, O = Sexy boys, OU = Bip, CN = Bip
verify return:1
---
Certificate chain
0 s:/C=fr/O=Sexy boys/OU=Bip/CN=Bip
i:/C=fr/O=Sexy boys/OU=Bip/CN=Bip
---
Server certificate
-----BEGIN CERTIFICATE-----
Edited XXXXXXXXXXXXXXXXXXXXXXX
-----END CERTIFICATE-----
subject=/C=fr/O=Sexy boys/OU=Bip/CN=Bip
issuer=/C=fr/O=Sexy boys/OU=Bip/CN=Bip
---
No client certificate CA names sent
---
SSL handshake has read 2454 bytes and written 423 bytes
---
New, TLSv1/SSLv3, Cipher is DHE-RSA-AES256-SHA
Server public key is 4096 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : DHE-RSA-AES256-SHA
Session-ID: Edited XXXXXXXXXXXXXXXXXXXXXXX
Session-ID-ctx:
Master-Key: Edited XXXXXXXXXXXXXXXXXXXXXXX
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
TLS session ticket lifetime hint: 60 (seconds)
TLS session ticket:
0000 - 0d b9 57 57 8b b7 cd bf-70 3c 72 79 d0 f4 6f 81 ..WW....p<ry..o.
0010 - e4 30 64 d1 97 96 62 05-8c ed 45 8e d8 36 d6 52 .0d...b...E..6.R
0020 - 37 65 b5 7d 6d 19 5c 8e-22 ab 31 4c a5 b9 ac 6a 7e.}m.\.".1L...j
Edited XXXXXXXXXXXXXXXXXXXXXXX
0080 - f7 cc ab e5 18 cc 33 28-b0 7a 12 46 3f 21 ba 1b ......3(.z.F?!..
0090 - c0 9b 4c 8b 61 3a 4d d4-78 e8 77 91 80 b9 ab a1 ..L.a:M.x.w.....
Start Time: 1402406391
Timeout : 7200 (sec)
Verify return code: 18 (self signed certificate)
---
</pre></p>
<p><strong>bip 0.8.9-1, sslv3</strong><br /><pre>
openssl s_client -ssl3 -connect edited:7778
CONNECTED(00000003)
140228681320096:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1260:SSL alert number 40
140228681320096:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:596:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 7 bytes and written 0 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : SSLv3
Cipher : 0000
Session-ID:
Session-ID-ctx:
Master-Key:
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1402406211
Timeout : 7200 (sec)
Verify return code: 0 (ok)
---
</pre></p>
<p><strong>bip 0.8.9-1, tls1</strong><br /><pre>
openssl s_client -tls1 -connect edited:7778
CONNECTED(00000003)
140587600295584:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1260:SSL alert number 40
140587600295584:error:1409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:596:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 7 bytes and written 0 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1
Cipher : 0000
Session-ID:
Session-ID-ctx:
Master-Key:
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1402406299
Timeout : 7200 (sec)
Verify return code: 0 (ok)
</pre></p>