*** perkiset (3fe224a9@gateway/web/freenode/ip.63.226.36.169) has joined #wikid | 00:18 | |
perkiset | Hello again - sorry I was so delayed getting back in yesterday. Anyone still about? | 00:19 |
---|---|---|
perkiset | I'll try back in the morning, but if anyone catches this before I return, my challenge is with Secure Gateway 6. | 04:02 |
perkiset | I (believe) I have everything setup correctly, but as a new WiKID user I'm not certain. I get the question for the passcode in SG, | 04:03 |
perkiset | I receive a code from the server on my iPhone client - I get an Access Denied message in the log of WiKID. Here's the exact message: | 04:03 |
perkiset | <0> Access-Request(1) LEN=73 10.10.123.10:57795 Access-Request by ed Failed: AccessRejectException: Access Denied | 04:03 |
perkiset | So my assumption is that all the plumbing is in order and I've missed a step somewhere or something. Since WiKID is the player that logged the deny, | 04:05 |
perkiset | I assume (again, I know) that it was the player that executed the deny. Any thoughts or bumps greatly appreciated. | 04:06 |
*** nowen (~nowen@adsl-98-66-183-205.asm.bellsouth.net) has joined #wikid | 12:11 | |
nowen | perkiset: are you there? | 12:16 |
Guest90097 | hello | 19:42 |
Guest90097 | hi nick | 19:42 |
Guest90097 | can we retry | 19:43 |
Guest90097 | hello | 19:45 |
Guest90097 | anybody there | 19:45 |
nowen | hi | 20:00 |
*** Guest90097 has quit (Quit: Page closed) | 20:00 | |
*** Mo (4084d7c2@gateway/web/freenode/ip.64.132.215.194) has joined #wikid | 20:02 | |
*** Mo is now known as Guest90022 | 20:02 | |
Guest90022 | hello | 20:02 |
nowen | hi | 20:02 |
nowen | Guest90022: can you give me a status update of your situation? | 20:03 |
Guest90022 | same | 20:06 |
Guest90022 | still getting 404 | 20:06 |
nowen | actually, I want to know about all your servers. | 20:06 |
Guest90022 | need to patch server | 20:08 |
Guest90022 | however patching it causes the kernel to blow up | 20:08 |
nowen | my assumptions: 1. you have a working server that has a kernel issue | 20:08 |
nowen | 2. You have a back up of that server from a while ago, but we don't really know if it has the users in it or not | 20:09 |
nowen | 3. you have a non-working new install | 20:09 |
nowen | correct? | 20:09 |
Guest90022 | No | 20:09 |
Guest90022 | working server does not have kernel issue | 20:09 |
Guest90022 | ONLY when i update it | 20:10 |
Guest90022 | however, i do have to update it as the working server has an older version of ssh which is insecure | 20:10 |
Guest90022 | assumption 2 is also incorrect... | 20:10 |
Guest90022 | i have a working server that works PERFECTLY except not updated | 20:11 |
nowen | you can reboot that server without issue? | 20:11 |
Guest90022 | yes the old server is PERFECT | 20:13 |
nowen | so, #2 - how is it incorrect? | 20:13 |
Guest90022 | no issues just need to update it particularly ssh | 20:13 |
nowen | so you have two perfect servers that will not update? | 20:14 |
Guest90022 | No | 20:16 |
Guest90022 | let me start from scratch | 20:16 |
Guest90022 | here is the current setup | 20:17 |
Guest90022 | two servers lets call it old and new | 20:17 |
Guest90022 | old server = perfect | 20:17 |
Guest90022 | need to update old server | 20:17 |
Guest90022 | if updating old server, kernel crashes | 20:18 |
Guest90022 | ran yum update... reboot... kernel issue... server will not boot | 20:18 |
Guest90022 | don't think about second one | 20:18 |
Guest90022 | how do i resolve my issue? | 20:19 |
nowen | ok, I am not familiar with hyper-v. Can you take a snapshot and revert it ? | 20:19 |
Guest90022 | YOU suggested creating new server... copy contents to new server.. make new server master... delete old server | 20:19 |
nowen | understood. | 20:19 |
Guest90022 | here is the current state | 20:20 |
Guest90022 | old server perfect... | 20:20 |
Guest90022 | new server just brought up... | 20:20 |
Guest90022 | i can browse to the new server as well | 20:20 |
Guest90022 | i couldnt browse to it yesterday... | 20:20 |
nowen | so, there isn't a 404 on it? | 20:21 |
Guest90022 | new server has all updates except wikid update | 20:21 |
Guest90022 | i revert it back to old wikid version... started up.. got error not db... but had the info on how to create db on screen so ran it | 20:22 |
Guest90022 | it created db | 20:22 |
nowen | ok | 20:22 |
nowen | new path | 20:22 |
Guest90022 | NOW i'm able to browse | 20:22 |
Guest90022 | and log in | 20:22 |
nowen | let's update the working server, but not the kernel | 20:22 |
nowen | then, we update wikid on it | 20:22 |
Guest90022 | how do i do that | 20:23 |
nowen | first, take a snapshot of the working server | 20:24 |
nowen | then run 'yum update --exclude=kernel' | 20:24 |
Guest90022 | should wikdctl be stopped | 20:24 |
Guest90022 | probably safe to do so? | 20:24 |
nowen | yes, probably a good ide | 20:25 |
nowen | a | 20:25 |
Guest90022 | i would have to update the kernel at some point, wont I?? | 20:26 |
joevano | nowen: just got out of a meeting with one of our vendors that was pretty excited when we told them about our WikID setup | 20:26 |
nowen | thanks! | 20:27 |
joevano | were deploying Fortinet devices... you might be hearing from a Jamie Shaw from Innovative Integration Inc out of the Indianapolis area | 20:28 |
nowen | I'll keep an eye out for him | 20:29 |
joevano | he was going to go back to the office to set up a server for testing... they were the company that sold us the ActiveIdentity stuff years ago | 20:29 |
nowen | nice! | 20:29 |
joevano | already sent then the docs on integrating it with Fortinet and they sell lots of Fortinet | 20:31 |
nowen | I really appreciate the referral | 20:32 |
nowen | Did that article ever get printed? | 20:32 |
joevano | not that I am aware of | 20:36 |
Guest90022 | just finished updating without kernel should i reboot | 20:42 |
Guest90022 | ? | 20:42 |
nowen | yes | 20:42 |
Guest90022 | same thing | 20:45 |
Guest90022 | here is what i get from bottom to top | 20:45 |
Guest90022 | at teh very bottom 'kernel panic - not synching: attempted to kill init!' | 20:45 |
Guest90022 | switchroot: mount failed: no such file or directory | 20:46 |
Guest90022 | unmouinting old /sys | 20:46 |
Guest90022 | unmounting old /proc | 20:46 |
Guest90022 | unmounting old /dev | 20:46 |
Guest90022 | switching to nnew root and running init | 20:46 |
Guest90022 | problem starts from: 'mounting root file systems' | 20:48 |
Guest90022 | mount: could not find filesystem '/dev/root' | 20:48 |
nowen | what is the server os? | 20:48 |
Guest90022 | what do you mean? | 20:48 |
Guest90022 | linux? is it not? | 20:48 |
nowen | your hosr | 20:48 |
nowen | host? window 2008? | 20:49 |
Guest90022 | win server 2008 r2 | 20:49 |
Guest90022 | sp 1 | 20:49 |
Guest90022 | 64 BIT | 20:49 |
nowen | did you install Integration Components? | 20:50 |
Guest90022 | yes | 20:50 |
nowen | do they need to be reinstalled? | 20:50 |
Guest90022 | not sure... | 20:51 |
Guest90022 | i can try before upgrading again... | 20:51 |
Guest90022 | will have to revert | 20:51 |
nowen | http://www.heavens-reach.com/component/content/article/58/172-centos-kernel-update-on-hyper-v | 20:51 |
nowen | are you sure that the kernel did not update? | 20:53 |
nowen | http://www.sudonym.com/398/kernel-panic-after-yum-update-centos-with-hyper-v-linux-integration-components/ | 20:54 |
Guest90022 | i did see it down load kernel even though i did -- exclude=kernel as per your instrutciton | 20:54 |
nowen | "-- exclude=kernel " or "--exclude=kernel" | 20:55 |
nowen | ? | 20:55 |
nowen | a list of packages should come up. kernel is often the first | 20:55 |
Guest90022 | i had no space | 20:57 |
Guest90022 | nope on this one kernel was last | 20:57 |
Guest90022 | i will try the fix on the second article you sent | 21:00 |
nowen | joevano: George says the article is going to run as a 'digital spotlight soon' | 21:29 |
nowen | Guest90022: moving to virtualbox might also be a good idea | 21:31 |
*** nowen has quit (Remote host closed the connection) | 21:45 | |
*** nowen (~nowen@adsl-98-66-183-205.asm.bellsouth.net) has joined #wikid | 21:51 | |
nowen | ok - time for me to head home | 21:58 |
*** nowen has quit (Quit: Leaving.) | 22:01 | |
perkiset | DANGIT! Missed you all again! Hopefully I'll be in the office early and can tackle this then. Thanks Nick for pinging in any case. | 23:44 |
Generated by irclog2html.py 2.11.0 by Marius Gedminas - find it at mg.pov.lt!