Project

General

Profile

Actions
Copy link

Bug #20351

closed

System technique migration fails on old server

Added by Alexis Mousset over 2 years ago. Updated over 2 years ago.

Status:
Released
Priority:
N/A
Assignee:
Alexis Mousset
Category:
Packaging
Target version:
7.0.0~rc2
Pull Request:
https://github.com/Normation/rudder/p...
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:

Description

[2021-12-01 13:13:48+0100] INFO  migration - Check if all Rudder 7.0 system technique are correctly loaded in technique library
[2021-12-01 13:13:50+0100] WARN  com.normation.cfclerk.xmlparsers.VariableSpecParser - Bad tag in variable 'Check interval': since Rudder 4.3, a variable can not be marked as 'UNIQUEVARIABLE' anymore and that attribute will be ignored. In place, you should use a Rudder parameter to denote an unique value, or a Node Property for a value unique for a given node. To denote an action unique to all directive derived from the same technique, you should use pre- or post-agent-run hooks
[2021-12-01 13:13:50+0100] WARN  com.normation.cfclerk.xmlparsers.VariableSpecParser - Bad tag in variable 'Check interval': since Rudder 4.3, a variable can not be marked as 'UNIQUEVARIABLE' anymore and that attribute will be ignored. In place, you should use a Rudder parameter to denote an unique value, or a Node Property for a value unique for a given node. To denote an action unique to all directive derived from the same technique, you should use pre- or post-agent-run hooks
[2021-12-01 13:13:50+0100] WARN  com.normation.cfclerk.xmlparsers.VariableSpecParser - Bad tag in variable 'Check interval': since Rudder 4.3, a variable can not be marked as 'UNIQUEVARIABLE' anymore and that attribute will be ignored. In place, you should use a Rudder parameter to denote an unique value, or a Node Property for a value unique for a given node. To denote an action unique to all directive derived from the same technique, you should use pre- or post-agent-run hooks
[2021-12-01 13:13:50+0100] WARN  com.normation.cfclerk.xmlparsers.VariableSpecParser - Bad tag in variable 'Check interval': since Rudder 4.3, a variable can not be marked as 'UNIQUEVARIABLE' anymore and that attribute will be ignored. In place, you should use a Rudder parameter to denote an unique value, or a Node Property for a value unique for a given node. To denote an action unique to all directive derived from the same technique, you should use pre- or post-agent-run hooks
[2021-12-01 13:13:50+0100] WARN  com.normation.cfclerk.xmlparsers.VariableSpecParser - Bad tag in variable 'Check interval': since Rudder 4.3, a variable can not be marked as 'UNIQUEVARIABLE' anymore and that attribute will be ignored. In place, you should use a Rudder parameter to denote an unique value, or a Node Property for a value unique for a given node. To denote an action unique to all directive derived from the same technique, you should use pre- or post-agent-run hooks
[2021-12-01 13:13:50+0100] WARN  com.normation.cfclerk.xmlparsers.VariableSpecParser - Bad tag in variable 'Check interval': since Rudder 4.3, a variable can not be marked as 'UNIQUEVARIABLE' anymore and that attribute will be ignored. In place, you should use a Rudder parameter to denote an unique value, or a Node Property for a value unique for a given node. To denote an action unique to all directive derived from the same technique, you should use pre- or post-agent-run hooks
[2021-12-01 13:13:50+0100] WARN  com.normation.cfclerk.xmlparsers.VariableSpecParser - Bad tag in variable 'Check interval': since Rudder 4.3, a variable can not be marked as 'UNIQUEVARIABLE' anymore and that attribute will be ignored. In place, you should use a Rudder parameter to denote an unique value, or a Node Property for a value unique for a given node. To denote an action unique to all directive derived from the same technique, you should use pre- or post-agent-run hooks
[2021-12-01 13:13:51+0100] ERROR techniques.reader - Error with technique at path: '/ncf_techniques/1.0/metadata.xml', it will be ignored. Error: Parsing: Not a policy xml, missing 'name' attribute: <TECHNIQUE name="">
  <POLICYGENERATION>separated-with-parameters</POLICYGENERATION>
  <MULTIINSTANCE>true</MULTIINSTANCE>
  <DESCRIPTION/>
  <USEMETHODREPORTING>true</USEMETHODREPORTING>
  <AGENT type="cfengine-community,cfengine-nova">
    <BUNDLES>
      <NAME/>
    </BUNDLES>
    <FILES>
      <FILE name="RUDDER_CONFIGURATION_REPOSITORY/techniques/ncf_techniques//1.0/technique.cf">
        <INCLUDED>true</INCLUDED>
      </FILE>
      <FILE name="RUDDER_CONFIGURATION_REPOSITORY/techniques/ncf_techniques//1.0/resources/dsfgdsg/brightness_290_512.icc">
        <INCLUDED>false</INCLUDED>
        <OUTPATH>/1.0/resources/dsfgdsg/brightness_290_512.icc</OUTPATH>
      </FILE>
    </FILES>
  </AGENT>
  <AGENT type="dsc">
    <BUNDLES>
      <NAME/>
    </BUNDLES>
    <FILES>
      <FILE name="RUDDER_CONFIGURATION_REPOSITORY/techniques/ncf_techniques//1.0/technique.ps1">
        <INCLUDED>true</INCLUDED>
      </FILE>
      <FILE name="RUDDER_CONFIGURATION_REPOSITORY/techniques/ncf_techniques//1.0/resources/dsfgdsg/brightness_290_512.icc">
        <INCLUDED>false</INCLUDED>
        <OUTPATH>/1.0/resources/dsfgdsg/brightness_290_512.icc</OUTPATH>
      </FILE>
    </FILES>
  </AGENT>
  <SECTIONS>
    <SECTION name="File absent" multivalued="true" component="true">
      <REPORTKEYS>
        <VALUE>/tmp/invalid</VALUE>
      </REPORTKEYS>
    </SECTION>
    <SECTION name="Technique parameters">
      <INPUT>
        <NAME>7FF43A76-6DDA-4D3B-BE61-E95D816FEF86</NAME>
        <DESCRIPTION>ttest</DESCRIPTION>
        <LONGDESCRIPTION/>
        <CONSTRAINT>
          <TYPE>textarea</TYPE>
          <MAYBEEMPTY>false</MAYBEEMPTY>
        </CONSTRAINT>
      </INPUT>
    </SECTION>
  </SECTIONS>
</TECHNIQUE>
[2021-12-01 13:13:53+0100] WARN  com.normation.cfclerk.xmlparsers.VariableSpecParser - Bad tag in variable 'Check interval': since Rudder 4.3, a variable can not be marked as 'UNIQUEVARIABLE' anymore and that attribute will be ignored. In place, you should use a Rudder parameter to denote an unique value, or a Node Property for a value unique for a given node. To denote an action unique to all directive derived from the same technique, you should use pre- or post-agent-run hooks
[2021-12-01 13:13:53+0100] WARN  com.normation.cfclerk.xmlparsers.VariableSpecParser - Bad tag in variable 'Check interval': since Rudder 4.3, a variable can not be marked as 'UNIQUEVARIABLE' anymore and that attribute will be ignored. In place, you should use a Rudder parameter to denote an unique value, or a Node Property for a value unique for a given node. To denote an action unique to all directive derived from the same technique, you should use pre- or post-agent-run hooks
[2021-12-01 13:13:53+0100] WARN  com.normation.cfclerk.xmlparsers.VariableSpecParser - Bad tag in variable 'Check interval': since Rudder 4.3, a variable can not be marked as 'UNIQUEVARIABLE' anymore and that attribute will be ignored. In place, you should use a Rudder parameter to denote an unique value, or a Node Property for a value unique for a given node. To denote an action unique to all directive derived from the same technique, you should use pre- or post-agent-run hooks
[2021-12-01 13:13:53+0100] WARN  com.normation.cfclerk.xmlparsers.VariableSpecParser - Bad tag in variable 'Check interval': since Rudder 4.3, a variable can not be marked as 'UNIQUEVARIABLE' anymore and that attribute will be ignored. In place, you should use a Rudder parameter to denote an unique value, or a Node Property for a value unique for a given node. To denote an action unique to all directive derived from the same technique, you should use pre- or post-agent-run hooks
[2021-12-01 13:13:53+0100] WARN  com.normation.cfclerk.xmlparsers.VariableSpecParser - Bad tag in variable 'Check interval': since Rudder 4.3, a variable can not be marked as 'UNIQUEVARIABLE' anymore and that attribute will be ignored. In place, you should use a Rudder parameter to denote an unique value, or a Node Property for a value unique for a given node. To denote an action unique to all directive derived from the same technique, you should use pre- or post-agent-run hooks
[2021-12-01 13:13:53+0100] WARN  com.normation.cfclerk.xmlparsers.VariableSpecParser - Bad tag in variable 'Check interval': since Rudder 4.3, a variable can not be marked as 'UNIQUEVARIABLE' anymore and that attribute will be ignored. In place, you should use a Rudder parameter to denote an unique value, or a Node Property for a value unique for a given node. To denote an action unique to all directive derived from the same technique, you should use pre- or post-agent-run hooks
[2021-12-01 13:13:53+0100] WARN  com.normation.cfclerk.xmlparsers.VariableSpecParser - Bad tag in variable 'Check interval': since Rudder 4.3, a variable can not be marked as 'UNIQUEVARIABLE' anymore and that attribute will be ignored. In place, you should use a Rudder parameter to denote an unique value, or a Node Property for a value unique for a given node. To denote an action unique to all directive derived from the same technique, you should use pre- or post-agent-run hooks
[2021-12-01 13:13:53+0100] ERROR techniques.reader - Error with technique at path: '/ncf_techniques/1.0/metadata.xml', it will be ignored. Error: Parsing: Not a policy xml, missing 'name' attribute: <TECHNIQUE name="">
  <POLICYGENERATION>separated-with-parameters</POLICYGENERATION>
  <MULTIINSTANCE>true</MULTIINSTANCE>
  <DESCRIPTION/>
  <USEMETHODREPORTING>true</USEMETHODREPORTING>
  <AGENT type="cfengine-community,cfengine-nova">
    <BUNDLES>
      <NAME/>
    </BUNDLES>
    <FILES>
      <FILE name="RUDDER_CONFIGURATION_REPOSITORY/techniques/ncf_techniques//1.0/technique.cf">
        <INCLUDED>true</INCLUDED>
      </FILE>
      <FILE name="RUDDER_CONFIGURATION_REPOSITORY/techniques/ncf_techniques//1.0/resources/dsfgdsg/brightness_290_512.icc">
        <INCLUDED>false</INCLUDED>
        <OUTPATH>/1.0/resources/dsfgdsg/brightness_290_512.icc</OUTPATH>
      </FILE>
    </FILES>
  </AGENT>
  <AGENT type="dsc">
    <BUNDLES>
      <NAME/>
    </BUNDLES>
    <FILES>
      <FILE name="RUDDER_CONFIGURATION_REPOSITORY/techniques/ncf_techniques//1.0/technique.ps1">
        <INCLUDED>true</INCLUDED>
      </FILE>
      <FILE name="RUDDER_CONFIGURATION_REPOSITORY/techniques/ncf_techniques//1.0/resources/dsfgdsg/brightness_290_512.icc">
        <INCLUDED>false</INCLUDED>
        <OUTPATH>/1.0/resources/dsfgdsg/brightness_290_512.icc</OUTPATH>
      </FILE>
    </FILES>
  </AGENT>
  <SECTIONS>
    <SECTION name="File absent" multivalued="true" component="true">
      <REPORTKEYS>
        <VALUE>/tmp/invalid</VALUE>
      </REPORTKEYS>
    </SECTION>
    <SECTION name="Technique parameters">
      <INPUT>
        <NAME>7FF43A76-6DDA-4D3B-BE61-E95D816FEF86</NAME>
        <DESCRIPTION>ttest</DESCRIPTION>
        <LONGDESCRIPTION/>
        <CONSTRAINT>
          <TYPE>textarea</TYPE>
          <MAYBEEMPTY>false</MAYBEEMPTY>
        </CONSTRAINT>
      </INPUT>
    </SECTION>
  </SECTIONS>
</TECHNIQUE>
[2021-12-01 13:13:54+0100] INFO  techniques.reader - Reloading technique library, found modified technique(s): ['rudder-service-postgresql': updated (1.0: added)], ['inventory': updated (1.0: updated)], ['server-roles': deleted (1.0)], ['server-common': updated (1.0: added)], ['dnsConfiguration': updated (3.0: updated)], ['rudder-service-relayd': updated (1.0: added)], ['rudder-service-webapp': updated (1.0: added)], ['fileTemplate': updated (1.0: updated)], ['distributePolicy': deleted (1.0)], ['rudder-service-slapd': updated (1.0: added)], ['userManagement': updated (9.0: updated)], ['common': deleted (1.0)], ['clockConfiguration': updated (3.2: updated)], ['downloadFile': updated (4.0: updated)], ['fstabConfiguration': updated (4.0: updated)], ['rudder-service-apache': updated (1.0: added)]
[2021-12-01 13:13:56+0100] INFO  com.normation.rudder.services.policies.TechniqueAcceptationUpdater - Automatically adding technique 'rudder-service-postgresql' in category 'Active techniques used by Rudder (Rudder Internal)' of active techniques library
[2021-12-01 13:13:56+0100] ERROR application - System technique 'server-roles' (1.0)' is deleted ingit base. This will likely cause grave problem. You should investigate.
[2021-12-01 13:13:56+0100] INFO  com.normation.rudder.services.policies.TechniqueAcceptationUpdater - Automatically adding technique 'server-common' in category 'Active techniques used by Rudder (Rudder Internal)' of active techniques library
[2021-12-01 13:13:57+0100] INFO  com.normation.rudder.services.policies.TechniqueAcceptationUpdater - Automatically adding technique 'rudder-service-relayd' in category 'Active techniques used by Rudder (Rudder Internal)' of active techniques library
[2021-12-01 13:13:57+0100] INFO  com.normation.rudder.services.policies.TechniqueAcceptationUpdater - Automatically adding technique 'rudder-service-webapp' in category 'Active techniques used by Rudder (Rudder Internal)' of active techniques library
[2021-12-01 13:13:59+0100] ERROR application - System technique 'distributePolicy' (1.0)' is deleted ingit base. This will likely cause grave problem. You should investigate.
[2021-12-01 13:13:59+0100] INFO  com.normation.rudder.services.policies.TechniqueAcceptationUpdater - Automatically adding technique 'rudder-service-slapd' in category 'Active techniques used by Rudder (Rudder Internal)' of active techniques library
[2021-12-01 13:13:59+0100] ERROR application - System technique 'common' (1.0)' is deleted ingit base. This will likely cause grave problem. You should investigate.
[2021-12-01 13:14:01+0100] INFO  com.normation.rudder.services.policies.TechniqueAcceptationUpdater - Automatically adding technique 'rudder-service-apache' in category 'Active techniques used by Rudder (Rudder Internal)' of active techniques library
[2021-12-01 13:14:02+0100] INFO  com.normation.rudder.services.policies.DeployOnTechniqueCallback - Reload Technique library to allows migration to 7.x system techniques
[2021-12-01 13:14:02+0100] ERROR migration - Error during migration of policy server system configuration to Rudder V7.0 data. It is likely that Rudder won't work as expected. Please check the log above. Error was: Inconsistency: Error when looking for technique with ID 'server-roles/1.0'. Check technique name and version; cause was: Inconsistency: Error when looking for technique with ID 'distributePolicy/1.0'. Check technique name and version; cause was: Inconsistency: Error when looking for technique with ID 'distributePolicy/1.0'. Check technique name and version; cause was: Unexpected: Inconsistency: Error when looking for technique with ID 'distributePolicy/1.0'. Check technique name and version
[2021-12-01 13:14:02+0100] INFO  bootchecks - Check mandatory DIT entries
[2021-12-01 13:14:02+0100] INFO  policy.generation - Start policy generation, checking updated rules
[2021-12-01 13:14:03+0100] ERROR bootchecks - Error when checking for mandatory entries for 'root' server in the DIT. <- Inconsistency: Missing required entry 'directiveId=common-hasPolicyServer-root,activeTechniqueId=common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration'. This is most likelly because Rudder was not initialized. Please run /opt/rudder/bin/rudder-init to set it up.
[2021-12-01T13:14:03.031+01:00] ERROR FATAL An error happen during Rudder boot. Rudder will stop now. Error: SystemError: An error occured; cause was: javax.servlet.UnavailableException: Error when checking for mandatory entries for 'root' server in the DIT. <- Inconsistency: Missing required entry 'directiveId=common-hasPolicyServer-root,activeTechniqueId=common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration'. This is most likelly because Rudder was not initialized. Please run /opt/rudder/bin/rudder-init to set it up.
 ->
javax.servlet.UnavailableException: Error when checking for mandatory entries for 'root' server in the DIT. <- Inconsistency: Missing required entry 'directiveId=common-hasPolicyServer-root,activeTechniqueId=common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration'. This is most likelly because Rudder was not initialized. Please run /opt/rudder/bin/rudder-init to set it up.
    at bootstrap.liftweb.checks.consistency.CheckDIT.FAIL$1(CheckDIT.scala:80)
    at bootstrap.liftweb.checks.consistency.CheckDIT.checks(CheckDIT.scala:165)
    at bootstrap.liftweb.SequentialImmediateBootStrapChecks.$anonfun$checks$1(BootstrapChecks.scala:99)
    at bootstrap.liftweb.SequentialImmediateBootStrapChecks.$anonfun$checks$1$adapted(BootstrapChecks.scala:91)
    at scala.collection.IterableOnceOps.foreach(IterableOnce.scala:563)
    at scala.collection.IterableOnceOps.foreach$(IterableOnce.scala:561)
    at scala.collection.AbstractIterable.foreach(Iterable.scala:919)
    at bootstrap.liftweb.SequentialImmediateBootStrapChecks.checks(BootstrapChecks.scala:91)
    at bootstrap.liftweb.RudderConfig$.$anonfun$init$1(RudderConfig.scala:1388)
    at scala.runtime.java8.JFunction0$mcV$sp.apply(JFunction0$mcV$sp.scala:18)
    at zio.internal.FiberContext.evaluateNow(FiberContext.scala:490)

Related issues 1 (0 open — 1 closed)

Related to Rudder - Bug #20359: techniques are seens as deleted even if there are there in Rudder 7.0ReleasedFrançois ARMANDActions
Actions
Copy link
 #1

Updated by Alexis Mousset over 2 years ago 

# extended LDIF
#
# LDAPv3
# base <techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration> with scope subtree
# filter: (objectclass=*)
# requesting: *
#

# Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
objectClass: techniqueCategory
objectClass: top
cn: Active techniques used by Rudder
description: This category contains "system" active techniques, used to configure Rudder agents and essential parts of Rudder server.
isSystem: TRUE
techniqueCategoryId: Rudder Internal

# common, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
objectClass: activeTechnique
objectClass: top
techniqueId: common
isSystem: TRUE
isEnabled: FALSE
activeTechniqueId: common
acceptationTimestamp: {"1.0":"20210526142537.969Z"}

# inventory, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=inventory,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
objectClass: activeTechnique
objectClass: top
techniqueId: inventory
isSystem: TRUE
isEnabled: FALSE
activeTechniqueId: inventory
acceptationTimestamp: {"1.0":"20211201121355.011Z"}

# server-common, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=server-common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
activeTechniqueId: server-common
objectClass: activeTechnique
objectClass: top
techniqueId: server-common
isEnabled: TRUE
isSystem: TRUE
acceptationTimestamp: {"1.0":"20211201121619.348Z"}

# rudder-service-slapd, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=rudder-service-slapd,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
activeTechniqueId: rudder-service-slapd
objectClass: activeTechnique
objectClass: top
techniqueId: rudder-service-slapd
isEnabled: TRUE
isSystem: TRUE
acceptationTimestamp: {"1.0":"20211201121619.348Z"}

# rudder-service-apache, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=rudder-service-apache,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
activeTechniqueId: rudder-service-apache
objectClass: activeTechnique
objectClass: top
techniqueId: rudder-service-apache
isEnabled: TRUE
isSystem: TRUE
acceptationTimestamp: {"1.0":"20211201121619.348Z"}

# rudder-service-relayd, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=rudder-service-relayd,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
activeTechniqueId: rudder-service-relayd
objectClass: activeTechnique
objectClass: top
techniqueId: rudder-service-relayd
isEnabled: TRUE
isSystem: TRUE
acceptationTimestamp: {"1.0":"20211201121619.348Z"}

# rudder-service-webapp, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=rudder-service-webapp,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
activeTechniqueId: rudder-service-webapp
objectClass: activeTechnique
objectClass: top
techniqueId: rudder-service-webapp
isEnabled: TRUE
isSystem: TRUE
acceptationTimestamp: {"1.0":"20211201121619.348Z"}

# rudder-service-postgresql, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=rudder-service-postgresql,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
activeTechniqueId: rudder-service-postgresql
objectClass: activeTechnique
objectClass: top
techniqueId: rudder-service-postgresql
isEnabled: TRUE
isSystem: TRUE
acceptationTimestamp: {"1.0":"20211201121619.348Z"}

# common-hasPolicyServer-root, common, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=common-hasPolicyServer-root,activeTechniqueId=common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
directiveId: common-hasPolicyServer-root
techniqueVersion: 1.0
objectClass: directive
objectClass: top
directiveVariable: OWNER[0]:${rudder.node.admin}
directiveVariable: UUID[0]:${rudder.node.id}
directiveVariable: POLICYSERVER_ID[0]:${rudder.node.policyserver.id}
directiveVariable: POLICYSERVER_ADMIN[0]:${rudder.node.policyserver.admin}
cn: Common - root
description: Common policy for nodes with 'root' for policy server
directivePriority: 0
isEnabled: TRUE
isSystem: TRUE
serializedTags: []

# common-22afad2b-0385-4b5a-8ac2-d77850ee6bf3, common, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=common-22afad2b-0385-4b5a-8ac2-d77850ee6bf3,activeTechniqueId=common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
objectClass: directive
objectClass: top
cn: Common-22afad2b-0385-4b5a-8ac2-d77850ee6bf3
description: Common - Technical
isEnabled: TRUE
isSystem: TRUE
directivePriority: 0
techniqueVersion: 1.0
serializedTags: []
directiveId: common-22afad2b-0385-4b5a-8ac2-d77850ee6bf3
directiveVariable: OWNER[0]:${rudder.node.admin}
directiveVariable: UUID[0]:${rudder.node.id}
directiveVariable: POLICYSERVER_ADMIN[0]:root
directiveVariable: POLICYSERVER_ID[0]:root
directiveVariable: ALLOWEDNETWORK[0]:192.168.110.0/24

# common-717b63d1-01fe-4d4f-a7e5-cfb7c0d47b4f, common, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=common-717b63d1-01fe-4d4f-a7e5-cfb7c0d47b4f,activeTechniqueId=common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
objectClass: directive
objectClass: top
cn: Common-717b63d1-01fe-4d4f-a7e5-cfb7c0d47b4f
description: Common - Technical
isEnabled: TRUE
isSystem: TRUE
directivePriority: 0
techniqueVersion: 1.0
serializedTags: []
directiveId: common-717b63d1-01fe-4d4f-a7e5-cfb7c0d47b4f
directiveVariable: OWNER[0]:${rudder.node.admin}
directiveVariable: UUID[0]:${rudder.node.id}
directiveVariable: POLICYSERVER_ADMIN[0]:root
directiveVariable: POLICYSERVER_ID[0]:root
directiveVariable: ALLOWEDNETWORK[0]:192.168.180.0/24

# inventory-all, inventory, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=inventory-all,activeTechniqueId=inventory,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
objectClass: directive
objectClass: top
cn: Inventory
description: inventory - Technical
isEnabled: TRUE
isSystem: TRUE
directivePriority: 0
techniqueVersion: 1.0
serializedTags: []
directiveId: inventory-all

# server-common-root, server-common, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=server-common-root,activeTechniqueId=server-common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
directiveId: server-common-root
techniqueVersion: 1.0
objectClass: directive
objectClass: top
cn: Server Common - root
description: Common policy for policy server with 'root'
directivePriority: 0
isEnabled: TRUE
isSystem: TRUE
serializedTags: []

# rudder-service-slapd-root, rudder-service-slapd, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=rudder-service-slapd-root,activeTechniqueId=rudder-service-slapd,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
directiveId: rudder-service-slapd-root
techniqueVersion: 1.0
objectClass: directive
objectClass: top
cn: Rudder Slapd - root
description: Manage slapd rudder service
directivePriority: 0
isEnabled: TRUE
isSystem: TRUE
serializedTags: []

# rudder-service-apache-root, rudder-service-apache, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=rudder-service-apache-root,activeTechniqueId=rudder-service-apache,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
directiveId: rudder-service-apache-root
techniqueVersion: 1.0
objectClass: directive
objectClass: top
cn: Rudder Apache - root
description: Manage apache rudder service
directivePriority: 0
isEnabled: TRUE
isSystem: TRUE
serializedTags: []

# rudder-service-relayd-root, rudder-service-relayd, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=rudder-service-relayd-root,activeTechniqueId=rudder-service-relayd,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
directiveId: rudder-service-relayd-root
techniqueVersion: 1.0
objectClass: directive
objectClass: top
cn: Rudder Relayd - root
description: Manage relayd rudder service
directivePriority: 0
isEnabled: TRUE
isSystem: TRUE
serializedTags: []

# rudder-service-webapp-root, rudder-service-webapp, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=rudder-service-webapp-root,activeTechniqueId=rudder-service-webapp,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
directiveId: rudder-service-webapp-root
techniqueVersion: 1.0
objectClass: directive
objectClass: top
cn: Rudder Webapp - root
description: Manage webapp rudder service
directivePriority: 0
isEnabled: TRUE
isSystem: TRUE
serializedTags: []

# rudder-service-postgresql-root, rudder-service-postgresql, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=rudder-service-postgresql-root,activeTechniqueId=rudder-service-postgresql,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
directiveId: rudder-service-postgresql-root
techniqueVersion: 1.0
objectClass: directive
objectClass: top
cn: Rudder Postgresql - root
description: Manage postgresql rudder service
directivePriority: 0
isEnabled: TRUE
isSystem: TRUE
serializedTags: []

# search result
search: 2
result: 0 Success

# numResponses: 20
# numEntries: 19
Actions
Copy link
 #2

Updated by Alexis Mousset over 2 years ago

  • Translation missing: en.field_tag_list set to Blocks 7.0.0
  • Assignee set to François ARMAND
Actions
Copy link
 #3

Updated by François ARMAND over 2 years ago

  • Status changed from New to In progress
Actions
Copy link
 #4

Updated by Alexis Mousset over 2 years ago 

# ldapsearch -o ldif-wrap=no -H "ldap://localhost:389" -x -D "cn=Manager,cn=rudder-configuration" -w plop -b "techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration" -s sub '*'
# extended LDIF
#
# LDAPv3
# base <techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration> with scope subtree
# filter: (objectclass=*)
# requesting: *
#

# Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
objectClass: techniqueCategory
objectClass: top
cn: Active techniques used by Rudder
description: This category contains "system" active techniques, used to configure Rudder agents and essential parts of Rudder server.
isSystem: TRUE
techniqueCategoryId: Rudder Internal

# common, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
objectClass: activeTechnique
objectClass: top
techniqueId: common
isSystem: TRUE
isEnabled: FALSE
activeTechniqueId: common
acceptationTimestamp: {"1.0":"20210526142537.969Z"}

# inventory, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=inventory,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
objectClass: activeTechnique
objectClass: top
techniqueId: inventory
isSystem: TRUE
isEnabled: FALSE
activeTechniqueId: inventory
acceptationTimestamp: {"1.0":"20211201121355.011Z"}

# server-common, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=server-common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
activeTechniqueId: server-common
objectClass: activeTechnique
objectClass: top
techniqueId: server-common
isEnabled: TRUE
isSystem: TRUE
acceptationTimestamp: {"1.0":"20211201121619.348Z"}

# rudder-service-slapd, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=rudder-service-slapd,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
activeTechniqueId: rudder-service-slapd
objectClass: activeTechnique
objectClass: top
techniqueId: rudder-service-slapd
isEnabled: TRUE
isSystem: TRUE
acceptationTimestamp: {"1.0":"20211201121619.348Z"}

# rudder-service-apache, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=rudder-service-apache,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
activeTechniqueId: rudder-service-apache
objectClass: activeTechnique
objectClass: top
techniqueId: rudder-service-apache
isEnabled: TRUE
isSystem: TRUE
acceptationTimestamp: {"1.0":"20211201121619.348Z"}

# rudder-service-relayd, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=rudder-service-relayd,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
activeTechniqueId: rudder-service-relayd
objectClass: activeTechnique
objectClass: top
techniqueId: rudder-service-relayd
isEnabled: TRUE
isSystem: TRUE
acceptationTimestamp: {"1.0":"20211201121619.348Z"}

# rudder-service-webapp, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=rudder-service-webapp,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
activeTechniqueId: rudder-service-webapp
objectClass: activeTechnique
objectClass: top
techniqueId: rudder-service-webapp
isEnabled: TRUE
isSystem: TRUE
acceptationTimestamp: {"1.0":"20211201121619.348Z"}

# rudder-service-postgresql, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: activeTechniqueId=rudder-service-postgresql,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
activeTechniqueId: rudder-service-postgresql
objectClass: activeTechnique
objectClass: top
techniqueId: rudder-service-postgresql
isEnabled: TRUE
isSystem: TRUE
acceptationTimestamp: {"1.0":"20211201121619.348Z"}

# common-hasPolicyServer-root, common, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=common-hasPolicyServer-root,activeTechniqueId=common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
directiveId: common-hasPolicyServer-root
techniqueVersion: 1.0
objectClass: directive
objectClass: top
directiveVariable: OWNER[0]:${rudder.node.admin}
directiveVariable: UUID[0]:${rudder.node.id}
directiveVariable: POLICYSERVER_ID[0]:${rudder.node.policyserver.id}
directiveVariable: POLICYSERVER_ADMIN[0]:${rudder.node.policyserver.admin}
cn: Common - root
description: Common policy for nodes with 'root' for policy server
directivePriority: 0
isEnabled: TRUE
isSystem: TRUE
serializedTags: []

# common-22afad2b-0385-4b5a-8ac2-d77850ee6bf3, common, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=common-22afad2b-0385-4b5a-8ac2-d77850ee6bf3,activeTechniqueId=common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
objectClass: directive
objectClass: top
cn: Common-22afad2b-0385-4b5a-8ac2-d77850ee6bf3
description: Common - Technical
isEnabled: TRUE
isSystem: TRUE
directivePriority: 0
techniqueVersion: 1.0
serializedTags: []
directiveId: common-22afad2b-0385-4b5a-8ac2-d77850ee6bf3
directiveVariable: OWNER[0]:${rudder.node.admin}
directiveVariable: UUID[0]:${rudder.node.id}
directiveVariable: POLICYSERVER_ADMIN[0]:root
directiveVariable: POLICYSERVER_ID[0]:root
directiveVariable: ALLOWEDNETWORK[0]:192.168.110.0/24

# common-717b63d1-01fe-4d4f-a7e5-cfb7c0d47b4f, common, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=common-717b63d1-01fe-4d4f-a7e5-cfb7c0d47b4f,activeTechniqueId=common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
objectClass: directive
objectClass: top
cn: Common-717b63d1-01fe-4d4f-a7e5-cfb7c0d47b4f
description: Common - Technical
isEnabled: TRUE
isSystem: TRUE
directivePriority: 0
techniqueVersion: 1.0
serializedTags: []
directiveId: common-717b63d1-01fe-4d4f-a7e5-cfb7c0d47b4f
directiveVariable: OWNER[0]:${rudder.node.admin}
directiveVariable: UUID[0]:${rudder.node.id}
directiveVariable: POLICYSERVER_ADMIN[0]:root
directiveVariable: POLICYSERVER_ID[0]:root
directiveVariable: ALLOWEDNETWORK[0]:192.168.180.0/24

# inventory-all, inventory, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=inventory-all,activeTechniqueId=inventory,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
objectClass: directive
objectClass: top
cn: Inventory
description: inventory - Technical
isEnabled: TRUE
isSystem: TRUE
directivePriority: 0
techniqueVersion: 1.0
serializedTags: []
directiveId: inventory-all

# server-common-root, server-common, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=server-common-root,activeTechniqueId=server-common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
directiveId: server-common-root
techniqueVersion: 1.0
objectClass: directive
objectClass: top
cn: Server Common - root
description: Common policy for policy server with 'root'
directivePriority: 0
isEnabled: TRUE
isSystem: TRUE
serializedTags: []

# rudder-service-slapd-root, rudder-service-slapd, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=rudder-service-slapd-root,activeTechniqueId=rudder-service-slapd,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
directiveId: rudder-service-slapd-root
techniqueVersion: 1.0
objectClass: directive
objectClass: top
cn: Rudder Slapd - root
description: Manage slapd rudder service
directivePriority: 0
isEnabled: TRUE
isSystem: TRUE
serializedTags: []

# rudder-service-apache-root, rudder-service-apache, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=rudder-service-apache-root,activeTechniqueId=rudder-service-apache,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
directiveId: rudder-service-apache-root
techniqueVersion: 1.0
objectClass: directive
objectClass: top
cn: Rudder Apache - root
description: Manage apache rudder service
directivePriority: 0
isEnabled: TRUE
isSystem: TRUE
serializedTags: []

# rudder-service-relayd-root, rudder-service-relayd, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=rudder-service-relayd-root,activeTechniqueId=rudder-service-relayd,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
directiveId: rudder-service-relayd-root
techniqueVersion: 1.0
objectClass: directive
objectClass: top
cn: Rudder Relayd - root
description: Manage relayd rudder service
directivePriority: 0
isEnabled: TRUE
isSystem: TRUE
serializedTags: []

# rudder-service-webapp-root, rudder-service-webapp, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=rudder-service-webapp-root,activeTechniqueId=rudder-service-webapp,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
directiveId: rudder-service-webapp-root
techniqueVersion: 1.0
objectClass: directive
objectClass: top
cn: Rudder Webapp - root
description: Manage webapp rudder service
directivePriority: 0
isEnabled: TRUE
isSystem: TRUE
serializedTags: []

# rudder-service-postgresql-root, rudder-service-postgresql, Rudder Internal, Active Techniques, Rudder, rudder-configuration
dn: directiveId=rudder-service-postgresql-root,activeTechniqueId=rudder-service-postgresql,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration
directiveId: rudder-service-postgresql-root
techniqueVersion: 1.0
objectClass: directive
objectClass: top
cn: Rudder Postgresql - root
description: Manage postgresql rudder service
directivePriority: 0
isEnabled: TRUE
isSystem: TRUE
serializedTags: []

# search result
search: 2
result: 0 Success

# numResponses: 20
# numEntries: 19
Actions
Copy link
 #5

Updated by François ARMAND over 2 years ago

OK, I find the problem for 

[2021-12-01 13:14:03+0100] ERROR bootchecks - Error when checking for mandatory entries for 'root' server in the DIT. <- Inconsistency: Missing required entry 'directiveId=common-hasPolicyServer-root,activeTechniqueId=common,techniqueCategoryId=Rudder Internal,techniqueCategoryId=Active Techniques,ou=Rudder,cn=rudder-configuration'. This is most likelly because Rudder was not initialized. Please run /opt/rudder/bin/rudder-init to set it up.

In bootstrap/liftweb/checks/migration/CheckMigrateSystemTechniques7_0.scala:

   final case class DirectiveDistributePolicy(policyServerId: NodeId, at: AT) {
      val id = s"common-${policyServerId.value}" 
      val dn = new DN(s"directiveId=${id},${at.dn.toString}")
    }

=> common- in place of ${at.id}- means that when we tried to delete distribute policy directive, it deleted common directive for root.

Actions
Copy link
 #6

Updated by François ARMAND over 2 years ago

I'm not sure why we have ['common': deleted (1.0)].

The migration script does not delete it.
We don't delete it (we don't delete anything from git).
The only explanation I have is that common was not marked in server system technique (it's common with agent), and so we didn't put the placeholder on it.

I can't reproduce it in tests, though.

Actions
Copy link
 #7

Updated by François ARMAND over 2 years ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from François ARMAND to Alexis Mousset
  • Pull Request set to https://github.com/Normation/rudder/pull/4036
Actions
Copy link
 #8

Updated by François ARMAND over 2 years ago

  • Status changed from Pending technical review to Pending release
Actions
Copy link
 #9

Updated by Nicolas CHARLES over 2 years ago

  • Related to Bug #20359: techniques are seens as deleted even if there are there in Rudder 7.0 added
Actions
Copy link
 #10

Updated by Alexis Mousset over 2 years ago

  • Category set to Packaging
Actions
Copy link
 #11

Updated by Vincent MEMBRÉ over 2 years ago

  • Status changed from Pending release to Released

This bug has been fixed in Rudder 7.0.0~rc2 which was released today.

Actions
Copy link

Also available in: Atom PDF