Unable to display Fog Management Console - Newbie to Linux & Fog Project
-
@tolaria Than take a look at the apache error log and post new contents here again.
To make sure SELinux is actually turned off run this command and post output or picture here in the forums:
getenforce(this is as root!)Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)
Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG
-
Hi Sebastian,
Sure, I will run the command getenforce as root and then post the output here tomorrow
May I know by apache error log, you are referring to this? tail -n 100 /var/log/httpd/error_log
Thank you in advance
-
@tolaria said in Unable to display Fog Management Console - Newbie to Linux & Fog Project:
May I know by apache error log, you are referring to this? tail -n 100 /var/log/httpd/error_log
Yes, exactly
-
The problem, as far as I can see, is PHP installed is still older. 5.3 It would seem? (
php -vto view the php version).
In particular, this is the line I think causing the issues:[Tue Nov 14 18:04:50.525805 2017] [:error] [pid 8108] [client 10.30.4.8:55431] PHP Parse error: syntax error, unexpected '&' in /var/www/html/fog/commons/init.php on line 132Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG! Get in contact with me (chat bubble in the top right corner) if you want to join in.
Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)
Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG
-
@tolaria Just follow this guide, don’t skip any steps: https://wiki.fogproject.org/wiki/index.php?title=CentOS_7
Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!
Daily Clean Installation Results:
https://fogtesting.fogproject.us/
FOG Reporting:
https://fog-external-reporting-results.fogproject.us/ -
@wayne-workman Hi Wayne, yes, I have seen and followed the article you posted to the dot, but I still ended up with this problem
-
@sebastian-roth Hi Sebastian, I managed to check out the contents of my SELINUX Config file by running this command using my root account,
cat /etc/systemconfig/selinux # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is loaded. SELINUX=permissive # SELINUXTYPE= can take one of three two values: # targeted - Targeted processes are protected, # minimum - Modification of targeted policy. Only selected processes are pr$ # mls - Multi Level Security protection. SELINUXTYPE=targetedAnd it does seem my SELINUX has already been set to permissive
And running the
getenforcecommand does reveal my SELINUX to be permissive as well[root@sglfog01 jquek]# getenforce PermissiveAnd these are my httpd logs today as requested
[Tue Nov 14 17:07:08.528476 2017] [core:notice] [pid 8091] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Tue Nov 14 17:07:08.530056 2017] [suexec:notice] [pid 8091] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Tue Nov 14 17:07:08.576043 2017] [auth_digest:notice] [pid 8091] AH01757: generating secret for digest authentication …
[Tue Nov 14 17:07:08.577783 2017] [lbmethod_heartbeat:notice] [pid 8091] AH02282: No slotmem from mod_heartmonitor
[Tue Nov 14 17:07:08.595965 2017] [mpm_prefork:notice] [pid 8091] AH00163: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 configured – resuming normal operations
[Tue Nov 14 17:07:08.595994 2017] [core:notice] [pid 8091] AH00094: Command line: ‘/usr/sbin/httpd -D FOREGROUND’
[Tue Nov 14 18:04:50.525805 2017] [:error] [pid 8108] [client 10.30.4.8:55431] PHP Parse error: syntax error, unexpected ‘&’ in /var/www/html/fog/commons/init.php on line 132
[Tue Nov 14 18:11:48.862112 2017] [mpm_prefork:notice] [pid 8091] AH00170: caught SIGWINCH, shutting down gracefully
[Wed Nov 15 08:33:31.453047 2017] [core:notice] [pid 1156] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Wed Nov 15 08:33:31.525563 2017] [suexec:notice] [pid 1156] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Nov 15 08:33:31.694538 2017] [auth_digest:notice] [pid 1156] AH01757: generating secret for digest authentication …
[Wed Nov 15 08:33:31.695329 2017] [lbmethod_heartbeat:notice] [pid 1156] AH02282: No slotmem from mod_heartmonitor
[Wed Nov 15 08:33:31.958396 2017] [mpm_prefork:notice] [pid 1156] AH00163: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 configured – resuming normal operations
[Wed Nov 15 08:33:31.958435 2017] [core:notice] [pid 1156] AH00094: Command line: ‘/usr/sbin/httpd -D FOREGROUND’
[Wed Nov 15 10:48:50.587093 2017] [mpm_prefork:notice] [pid 1156] AH00170: caught SIGWINCH, shutting down gracefully
[Wed Nov 15 12:09:21.432902 2017] [core:notice] [pid 1102] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Wed Nov 15 12:09:21.473213 2017] [suexec:notice] [pid 1102] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Nov 15 12:10:11.623108 2017] [auth_digest:notice] [pid 1102] AH01757: generating secret for digest authentication …
[Wed Nov 15 12:10:11.624981 2017] [lbmethod_heartbeat:notice] [pid 1102] AH02282: No slotmem from mod_heartmonitor
[Wed Nov 15 12:10:11.707038 2017] [mpm_prefork:notice] [pid 1102] AH00163: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 configured – resuming normal operations
[Wed Nov 15 12:10:11.707073 2017] [core:notice] [pid 1102] AH00094: Command line: ‘/usr/sbin/httpd -D FOREGROUND’
[Wed Nov 15 17:06:35.819774 2017] [core:notice] [pid 1075] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Wed Nov 15 17:06:35.866727 2017] [suexec:notice] [pid 1075] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Nov 15 17:06:35.921879 2017] [auth_digest:notice] [pid 1075] AH01757: generating secret for digest authentication …
[Wed Nov 15 17:06:35.922957 2017] [lbmethod_heartbeat:notice] [pid 1075] AH02282: No slotmem from mod_heartmonitor
[Wed Nov 15 17:06:37.073578 2017] [mpm_prefork:notice] [pid 1075] AH00163: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 configured – resuming normal operations
[Wed Nov 15 17:06:37.073626 2017] [core:notice] [pid 1075] AH00094: Command line: ‘/usr/sbin/httpd -D FOREGROUND’
[Wed Nov 15 17:08:40.453667 2017] [mpm_prefork:notice] [pid 1075] AH00170: caught SIGWINCH, shutting down gracefully
[Wed Nov 15 17:09:25.976662 2017] [core:notice] [pid 1025] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Wed Nov 15 17:09:26.023377 2017] [suexec:notice] [pid 1025] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Wed Nov 15 17:09:26.074633 2017] [auth_digest:notice] [pid 1025] AH01757: generating secret for digest authentication …
[Wed Nov 15 17:09:26.075763 2017] [lbmethod_heartbeat:notice] [pid 1025] AH02282: No slotmem from mod_heartmonitor
[Wed Nov 15 17:09:26.711910 2017] [mpm_prefork:notice] [pid 1025] AH00163: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 configured – resuming normal operations
[Wed Nov 15 17:09:26.711941 2017] [core:notice] [pid 1025] AH00094: Command line: ‘/usr/sbin/httpd -D FOREGROUND’
[Wed Nov 15 17:57:11.635827 2017] [mpm_prefork:notice] [pid 1025] AH00170: caught SIGWINCH, shutting down gracefully
[Thu Nov 16 08:30:02.089017 2017] [core:notice] [pid 1036] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Thu Nov 16 08:30:02.115647 2017] [suexec:notice] [pid 1036] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Nov 16 08:30:02.166028 2017] [auth_digest:notice] [pid 1036] AH01757: generating secret for digest authentication …
[Thu Nov 16 08:30:02.167229 2017] [lbmethod_heartbeat:notice] [pid 1036] AH02282: No slotmem from mod_heartmonitor
[Thu Nov 16 08:30:03.107308 2017] [mpm_prefork:notice] [pid 1036] AH00163: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 configured – resuming normal operations
[Thu Nov 16 08:30:03.107357 2017] [core:notice] [pid 1036] AH00094: Command line: ‘/usr/sbin/httpd -D FOREGROUND’
[Thu Nov 16 08:32:26.961388 2017] [mpm_prefork:notice] [pid 1036] AH00170: caught SIGWINCH, shutting down gracefully
[Thu Nov 16 08:34:56.136847 2017] [core:notice] [pid 978] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Thu Nov 16 08:34:56.261068 2017] [suexec:notice] [pid 978] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Nov 16 08:34:56.490859 2017] [auth_digest:notice] [pid 978] AH01757: generating secret for digest authentication …
[Thu Nov 16 08:34:56.607939 2017] [lbmethod_heartbeat:notice] [pid 978] AH02282: No slotmem from mod_heartmonitor
[Thu Nov 16 08:34:57.280474 2017] [mpm_prefork:notice] [pid 978] AH00163: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 configured – resuming normal operations
[Thu Nov 16 08:34:57.280518 2017] [core:notice] [pid 978] AH00094: Command line: ‘/usr/sbin/httpd -D FOREGROUND’ -
This post is deleted! -
@tom-elliott Hi Tom, managed to upgrade PHP to version 7.0.25, but the Fog Console is still not launching
[root@sglfog01 jquek]# php -v
PHP 7.0.25 (cli) (built: Oct 27 2017 13:55:11) ( NTS )
Copyright
1997-2017 The PHP Group
Zend Engine v3.0.0, Copyright 1998-2017 Zend Technologies
with Zend OPcache v7.0.25, Copyright 1999-2017, by Zend TechnologiesAny other ideas or suggestions?
-
@tolaria said in Unable to display Fog Management Console - Newbie to Linux & Fog Project:
cat /etc/systemconfig/selinux
That’s not where SELinux’s configuration is on CentOS 7. It’s here:
/etc/selinux/configPlease help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!
Daily Clean Installation Results:
https://fogtesting.fogproject.us/
FOG Reporting:
https://fog-external-reporting-results.fogproject.us/ -
@wayne-workman Hi Wayne, thanks for spotting the error. Did another run and it also indicates SELINUX as permissive
cat /etc/selinux/config # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is loaded. SELINUX=permissive # SELINUXTYPE= can take one of three two values: # targeted - Targeted processes are protected, # minimum - Modification of targeted policy. Only selected processes are protected. # mls - Multi Level Security protection. SELINUXTYPE=targeted -
@tolaria said in Unable to display Fog Management Console - Newbie to Linux & Fog Project:
Hi Tom, managed to upgrade PHP to version 7.0.25, but the Fog Console is still not launching
Forget about SELinux for now. I went on the wrong track with this. Apache still has this message in the logs just because it’s capable of running with SELinux. If
getenforceis showing ‘permissive’’ you are on the save side about this for now.I think you need to be more specific on what happens when you open the URL in the browser. Do you get a blank page now or does it return a 500 internal server error or not load the page at all. For the later I’d think the firewall is still on. Run
iptables -L -n -vand post output here`.[root@sglfog01 jquek]# php -v PHP 7.0.25 (cli) (built: Oct 27 2017 13:55:11) ( NTS )If you see a blank page check apache error log again. Possibly the PHP version you upgraded was only the PHP CLI. This is used when running PHP on the command line but apache uses a library which could be still the old version. Best to check in the apache error log. The following line is important:
... AH00163: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16 configured ...You need PHP to be at least 5.5.0 (reference in section “Changelog”)!
Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)
Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG
-
@sebastian-roth Hi Sebastian, noted and I attempted to upgrade PHP from v5.4.16 to v7.0.25, but it seems that it only upgraded certain components
I then tried to remove all versions of PHP by running yum -y remove php* and then installing PHP v7, but then it seems that it is not able to remove certain components of v5.4.16, resulting in a mixed environment where there are components of both v5.4.16 and v7.0.25 when I run the tail -n command
Error message when trying to load the Fog Console is as shown:
Network Error
A communication error occurred: “Operation timed out”The Web Server may be down, too busy, or experiencing other problems preventing it from responding to requests. You may wish to try again at a later time.
For assistance, contact your service desk.
Exception ID : tcp_error
As requested, ran the iptables -L -n -v and obtained the following results
iptables -L -n -v Chain INPUT (policy ACCEPT 14086 packets, 2720K bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * virbr0 0.0.0.0/0 192.168.122.0/24 ctstate RELATED,ESTABLISHED 0 0 ACCEPT all -- virbr0 * 192.168.122.0/24 0.0.0.0/0 iptables -L -n -v Chain INPUT (policy ACCEPT 14086 packets, 2720K bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 0 0 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67 Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT all -- * virbr0 0.0.0.0/0 192.168.122.0/24 ctstate RELATED,ESTABLISHED 0 0 ACCEPT all -- virbr0 * 192.168.122.0/24 0.0.0.0/0 0 0 ACCEPT all -- virbr0 virbr0 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * virbr0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- virbr0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain OUTPUT (policy ACCEPT 4016 packets, 760K bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- * virbr0 0.0.0.0/0 0.0.0.0/0 udp dpt:68 0 0 ACCEPT all -- virbr0 virbr0 0.0.0.0/0 0.0.0.0/0 0 0 REJECT all -- * virbr0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable 0 0 REJECT all -- virbr0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable Chain OUTPUT (policy ACCEPT 4016 packets, 760K bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT udp -- * virbr0 0.0.0.0/0 0.0.0.0/0 udp dpt:68 -
@tolaria said in Unable to display Fog Management Console - Newbie to Linux & Fog Project:
A communication error occurred: “Operation timed out”
Ok, this is definitely a connection issue in the first place. Might be other things behind that but we need to fix that first. So run the following commands as root:
iptables -X iptables -F iptables -t nat -X iptables -t nat -F iptables -t mangle -X iptables -t mangle -F iptables -P INPUT ACCEPT iptables -P FORWARD ACCEPT iptables -P OUTPUT ACCEPTThis is just temporary till you reboot your server. We’ll add proper rules later on.
Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)
Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG
-
@sebastian-roth Hi Sebastian, have run the commands as indicated. Running this in GUI mode with Terminal as Root
[root@sglfog01 jquek]# iptables -X
[root@sglfog01 jquek]# iptables -F
[root@sglfog01 jquek]# iptables -t nax -X
iptables v1.4.21: can’t initialize iptables table `nax’: Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
[root@sglfog01 jquek]# iptables -t nat -F
[root@sglfog01 jquek]# iptables -t mangle -X
[root@sglfog01 jquek]# iptables -t mangle -F
[root@sglfog01 jquek]# iptables -P INPUT ACCEPT
[root@sglfog01 jquek]# iptables -P FORWARD ACCEPT
[root@sglfog01 jquek]# iptables -P OUTPUT ACCEPTAfter that, tried to open Fog Console and still fails
-
@tolaria said in Unable to display Fog Management Console - Newbie to Linux & Fog Project:
After that, tried to open Fog Console and still fails
This is not helpful. Does it fail the same way as timeout or different? Maybe apache server is not running after PHP update anymore.
service httpd restart tail -15 /var/log/httpd/error_log dateRun as root and post full output here.
Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)
Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG
-
@sebastian-roth Hi Sebastian, my bad, same exact error after I ran the iptable commands, forgot to indicate in my reply
Just did the commands as recommended in your last post,
tail -15 /var/log/httpd/error_log
[Thu Nov 16 10:20:23.671488 2017] [core:notice] [pid 4510] AH00094: Command line: ‘/usr/sbin/httpd -D FOREGROUND’
[Thu Nov 16 12:04:50.917584 2017] [mpm_prefork:notice] [pid 4510] AH00170: caught SIGWINCH, shutting down gracefully
[Thu Nov 16 12:05:47.395822 2017] [core:notice] [pid 982] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Thu Nov 16 12:05:47.471806 2017] [suexec:notice] [pid 982] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Nov 16 12:05:47.618523 2017] [auth_digest:notice] [pid 982] AH01757: generating secret for digest authentication …
[Thu Nov 16 12:05:47.619540 2017] [lbmethod_heartbeat:notice] [pid 982] AH02282: No slotmem from mod_heartmonitor
[Thu Nov 16 12:05:49.379196 2017] [mpm_prefork:notice] [pid 982] AH00163: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.25 configured – resuming normal operations
[Thu Nov 16 12:05:49.379240 2017] [core:notice] [pid 982] AH00094: Command line: ‘/usr/sbin/httpd -D FOREGROUND’
[Thu Nov 16 16:03:02.220557 2017] [mpm_prefork:notice] [pid 982] AH00170: caught SIGWINCH, shutting down gracefully
[Thu Nov 16 16:03:03.303095 2017] [core:notice] [pid 5969] SELinux policy enabled; httpd running as context system_u:system_r:httpd_t:s0
[Thu Nov 16 16:03:03.304266 2017] [suexec:notice] [pid 5969] AH01232: suEXEC mechanism enabled (wrapper: /usr/sbin/suexec)
[Thu Nov 16 16:03:03.336522 2017] [auth_digest:notice] [pid 5969] AH01757: generating secret for digest authentication …
[Thu Nov 16 16:03:03.337384 2017] [lbmethod_heartbeat:notice] [pid 5969] AH02282: No slotmem from mod_heartmonitor
[Thu Nov 16 16:03:03.367540 2017] [mpm_prefork:notice] [pid 5969] AH00163: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.0.25 configured – resuming normal operations
[Thu Nov 16 16:03:03.367575 2017] [core:notice] [pid 5969] AH00094: Command line: ‘/usr/sbin/httpd -D FOREGROUND’
[root@sglfog01 jquek]# date
Thu Nov 16 16:03:22 +08 2017 -
@tolaria Ok, I see the apache service restarted fine just recently. It also seems to have the correct PHP module (version 7.0.25). Are you sure you try to access the correct server in your browser? Sorry if this question sounds dumb but we better make sure.
Please run those commands to make sure:
ip a s | grep "inet" | awk '{print $2}' | cut -d'/' -f1 iptables -L -n -vFrom the first command you will get several IP addresses. One will be
127.0.0.1. Just ignore that. See if you have the correct IP to access the web interface http://x.x.x.x/fog/As well try command
ping x.x.x.xfrom the Windows command line to see if you can actually reach the server over the network. -
@tolaria said in Unable to display Fog Management Console - Newbie to Linux & Fog Project:
After that, tried to open Fog Console and still fails
What is the URL you’re trying to use for the web interface? None of this is making any sense at all. The fog installer is solid, and is especially solid on CentOS 7. Something about your setup is not standard, or fog would just work. What is not standard? Are you downloading the CentOS 7 ISO yourself? Are you installing FOG on it’s very own OS, on it’s very own hardware/vm ? What is not standard here?
-
@tolaria Did you get this up and running?
