Apache2 for fog vhost - failed - Trying to update Trunk

RipAU

I think that was from me trying to do a manual restart of the httpd to see what the error was before I looked at the logs.

## Created by the FOG Installer
## Version: 6207
## Install time: Thu 17 Dec 2015 10:20:16 ACST

ipaddress="10.254.14.77";
interface="eno16780032";
submask="255.255.240.0";
routeraddress="         option routers      10.254.15.100;";
plainrouter="10.254.15.100";
dnsaddress="    option domain-name-servers      10.254.14.55; ";
dnsbootimage="10.254.14.55";
password='PASSWORDXX';
osid="1";
osname="Redhat";
dodhcp="N";
bldhcp="0";
blexports="1";
installtype="N";
snmysqluser=""
snmysqlpass='';
snmysqlhost="";
installlang="0";
donate="0";
storageLocation="/images";
fogupdateloaded="1";
storageftpuser="fog";
storageftppass='PASSWORDXX';
docroot="/var/www/html/";
webroot="fog/";
caCreated="yes";
startrange="10.254.14.10";
endrange="10.254.14.254";
bootfilename="undionly.kpxe";
packages=" httpd php php-cli php-common php-gd mysql mysql-server tftp-server nfs-utils vsftpd net-tools wget xinetd tar gzip make m4 gcc gcc-c++ lftp php-mysqlnd curl php-mcrypt php-mbstring mod_ssl php-fpm php-process";

noTftpBuild=''
notpxedefaultfile=''

Cheers.

Wayne Workman

@RipAU Your settings file looks fine - it’s in the older style right now because you have yet to complete the installation with a newer fog trunk copy - it’s fine.

Do you have a certificate/cert installed in Apache for use with the FOG web interface (to enable https)?

RipAU

Yeah it does that a default one from the initial fedora install, but in the Error logs it is pointing at the fog directory as the cert error?

I just tried the install again and this is from the fog server right after the install fails to restart httpd and the error in the logs until i did the install.

[Thu Apr 21 13:16:06.064600 2016] [ssl:emerg] [pid 15945] AH02565: Certificate and private key 10.254.14.77:443:0 from /var/www/html/fog/management/other/ssl/srvpublic.crt and /opt/fog/snapins/ssl/.srvprivate.key do not match
AH00016: Configuration Failed

This is also from the journalctl -xe. I haven’t really used the journalctl so I’m not that familiar with it.

-- The start-up result is done.
Apr 21 13:07:37 fog2 audit[1]: <audit-1130> pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=mariadb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 21 13:07:37 fog2 polkitd[628]: Unregistered Authentication Agent for unix-process:15587:1584643 (system bus name :1.37, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_AU.UTF-8) (disconnec
Apr 21 13:07:40 fog2 polkitd[628]: Registered Authentication Agent for unix-process:15832:1585006 (system bus name :1.40 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/Authen
Apr 21 13:07:40 fog2 systemd[1]: Stopping The Apache HTTP Server...
-- Subject: Unit httpd.service has begun shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit httpd.service has begun shutting down.
Apr 21 13:07:40 fog2 systemd[1]: Stopping The PHP FastCGI Process Manager...
-- Subject: Unit php-fpm.service has begun shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit php-fpm.service has begun shutting down.
Apr 21 13:07:40 fog2 systemd[1]: Stopped The PHP FastCGI Process Manager.
-- Subject: Unit php-fpm.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit php-fpm.service has finished shutting down.
Apr 21 13:07:40 fog2 audit[1]: <audit-1130> pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=php-fpm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 21 13:07:40 fog2 audit[1]: <audit-1131> pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=php-fpm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 21 13:07:41 fog2 systemd[1]: Stopped The Apache HTTP Server.
-- Subject: Unit httpd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit httpd.service has finished shutting down.
Apr 21 13:07:41 fog2 audit[1]: <audit-1131> pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=httpd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 21 13:07:41 fog2 polkitd[628]: Unregistered Authentication Agent for unix-process:15832:1585006 (system bus name :1.40, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_AU.UTF-8) (disconnec
Apr 21 13:15:59 fog2 polkitd[628]: Registered Authentication Agent for unix-process:15897:1634901 (system bus name :1.41 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/Authen
Apr 21 13:16:00 fog2 systemd[1]: Reloading.
Apr 21 13:16:01 fog2 systemd[1]: Configuration file /usr/lib/systemd/system/auditd.service is marked world-inaccessible. This has no effect as configuration data is accessible via APIs without restrictions. Proceedi
Apr 21 13:16:02 fog2 polkitd[628]: Unregistered Authentication Agent for unix-process:15897:1634901 (system bus name :1.41, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_AU.UTF-8) (disconnec
Apr 21 13:16:02 fog2 polkitd[628]: Registered Authentication Agent for unix-process:15934:1635272 (system bus name :1.42 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/Authen
Apr 21 13:16:02 fog2 systemd[1]: Stopped The Apache HTTP Server.
-- Subject: Unit httpd.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit httpd.service has finished shutting down.
Apr 21 13:16:02 fog2 systemd[1]: Stopped The PHP FastCGI Process Manager.
-- Subject: Unit php-fpm.service has finished shutting down
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit php-fpm.service has finished shutting down.
Apr 21 13:16:02 fog2 polkitd[628]: Unregistered Authentication Agent for unix-process:15934:1635272 (system bus name :1.42, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_AU.UTF-8) (disconnec
Apr 21 13:16:04 fog2 polkitd[628]: Registered Authentication Agent for unix-process:15940:1635487 (system bus name :1.43 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/PolicyKit1/Authen
Apr 21 13:16:04 fog2 systemd[1]: Starting The Apache HTTP Server...
-- Subject: Unit httpd.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit httpd.service has begun starting up.
Apr 21 13:16:05 fog2 systemd[1]: Starting The PHP FastCGI Process Manager...
-- Subject: Unit php-fpm.service has begun start-up
Apr 21 13:16:06 fog2 systemd[1]: httpd.service: main process exited, code=exited, status=1/FAILURE
Apr 21 13:16:06 fog2 systemd[1]: Failed to start The Apache HTTP Server.
-- Subject: Unit httpd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit httpd.service has failed.
--
-- The result is failed.
Apr 21 13:16:06 fog2 systemd[1]: Unit httpd.service entered failed state.
Apr 21 13:16:06 fog2 systemd[1]: httpd.service failed.
Apr 21 13:16:06 fog2 audit[1]: <audit-1130> pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=httpd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
Apr 21 13:16:06 fog2 systemd[1]: Started The PHP FastCGI Process Manager.
-- Subject: Unit php-fpm.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit php-fpm.service has finished starting up.
--
-- The start-up result is done.
Apr 21 13:16:06 fog2 audit[1]: <audit-1130> pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=php-fpm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Apr 21 13:16:06 fog2 polkitd[628]: Unregistered Authentication Agent for unix-process:15940:1635487 (system bus name :1.43, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_AU.UTF-8) (disconnec
lines 2911-2972/2972 (END)

So I’m leaning towards a cert error with the fog sever? I’m assuming it is regenerating some certs that are then failing to match?
I’m not that familiar with the SSL system in Linux sorry.

RipAU

Also my httpd fog.conf file

<VirtualHost *:80>
    KeepAlive Off
    ServerName 10.254.14.77
    DocumentRoot /var/www/html/
    #RewriteEngine On
    #RewriteRule /management/other/ca.cert.der$ - [L]
    #RewriteRule /management/ https://%{HTTP_HOST}%{REQUEST_URI}%{QUERY_STRING} [R,L]
</VirtualHost>
<VirtualHost *:443>
    KeepAlive Off
    Servername 10.254.14.77
    DocumentRoot /var/www/html/
    SSLEngine On
    SSLCertificateFile /var/www/html/fog//management/other/ssl/srvpublic.crt
    SSLCertificateKeyFile /opt/fog/snapins/ssl/.srvprivate.key
    SSLCertificateChainFile /var/www/html/fog//management/other/ca.cert.der
</VirtualHost>

All looks pretty fine to me. These are the files that after the update the server complains about though… ?

Wayne Workman

@RipAU said in Apache2 for fog vhost - failed - Trying to update Trunk:

These are the files that after the update the server complains about though… ?

Yes, they are. Here a while back, the locations of these files were changed. Used to be it was /opt/fog/.ssl I think?? And now it’s /opt/fog/snapins/ssl and I’m wondering if something went wrong with the moving around.

Do you know what version of fog trunk you came from? I’d like to try to replicate if I can.

RipAU

Going from the Fog installer log.

## Created by the FOG Installer
## Version: 6207
## Install time: Thu 17 Dec 2015 10:20:16 ACST

I’m assuming it updates the log at the last update?

RipAU

@Wayne-Workman said in Apache2 for fog vhost - failed - Trying to update Trunk:

Yes, they are. Here a while back, the locations of these files were changed. Used to be it was /opt/fog/.ssl I think?? And now it’s /opt/fog/snapins/ssl

I’m just checking now as well, I don’t have any files in /opt/fog/.ssl I only have the following structure:

/opt/fog/log
/opt/fog/service
/opt/fog/snapins
/opt/fog/utils
/opt/fog/.fogsettings

So I’m suspecting that something is going wrong with regenerating the keys from the CA.

RipAU

After going through the forum some more I found this - ./installfog.sh --recreate-keys
Would this help fix the issue at all with the upgrade?

https://forums.fogproject.org/topic/6975/change-server-but-not-change-certificate/6

From reading this I should be able to run this without affecting the currently running clients? as it should use the current CA?

Wayne Workman

@RipAU said in Apache2 for fog vhost - failed - Trying to update Trunk:

Would this help fix the issue at all with the upgrade?
https://forums.fogproject.org/topic/6975/change-server-but-not-change-certificate/6
From reading this I should be able to run this without affecting the currently running clients? as it should use the current CA?

Wouldn’t hurt to try, not at all. Here’s further reading on the topic for yourself and future readers: https://wiki.fogproject.org/wiki/index.php?title=FOG_Client

RipAU

Ok this worked by recreating the keys. Install worked fine and server seems to be working well.
Only thing I have noticed is several labs worth of Desktops had invalid tokens so I’ve needed to “Reset Encryption Data” to get them talking back to the server again.

Aside from that all is working well

Thanks again.

Apache2 for fog vhost - failed - Trying to update Trunk

282

11.7k

17.1k

154.7k