*** nowen (~nowen@adsl-98-66-183-205.asm.bellsouth.net) has joined #wikid | 12:19 | |
*** Mo__ (4084d7c2@gateway/web/freenode/ip.64.132.215.194) has joined #wikid | 15:25 | |
Mo__ | hi | 15:29 |
---|---|---|
nowen | hi | 15:29 |
Mo__ | im trying to update one of the wikid server with yum update | 15:29 |
Mo__ | it updated everything however when i reboot i get the old 'switchroot: mount failed' | 15:30 |
Mo__ | and 'kernel panic - ny synching' | 15:30 |
nowen | isn this the same | 15:30 |
Mo__ | you had pointed me to an article b4 and i tried it | 15:30 |
nowen | isn't this the same issue you had before? | 15:30 |
Mo__ | it does not work | 15:30 |
Mo__ | i've noticed that when i reboot | 15:30 |
Mo__ | the server by default tries to load 'centOS.........el5PAE | 15:31 |
Mo__ | if i load the updated kernel... with CentOS........el5 only it seems to work | 15:31 |
nowen | so, do you want to remove the el5PAE kernel? | 15:32 |
Mo__ | so my question is how can i force it to load (CentOS (2.6.18-308.13.1.el5) and NOT el5PAE | 15:33 |
nowen | I suggest removing that kernel | 15:33 |
Mo__ | I guess yes I don't need that do i | 15:33 |
nowen | running 'rpm -qa | grep kernel' will tell you what kernels are installed | 15:33 |
nowen | then you want to run ' yum remove kernel..el5PAE - or whatever the rpm command returns for the PAE kernel | 15:34 |
Mo__ | i just type in such as '2.6.18-308.13.1.el5PAE' or do i have to type the whole thing including CEntOS | 15:38 |
nowen | whatever is returned, I think, exactly. | 15:39 |
Mo__ | looks like its removing all versions of PAE | 15:43 |
Mo__ | it removed everything BUT el5PAE | 15:45 |
nowen | that's not good. | 15:45 |
nowen | don't reboot | 15:45 |
nowen | run the rpm command again | 15:45 |
Mo__ | i guess i missed the - after the el5PAE | 15:46 |
nowen | can you not cut and paste? | 15:46 |
Mo__ | that is a MINUS right??? | 15:46 |
nowen | you need to access the VM via Putty, then you can cut and paste | 15:46 |
Mo__ | yes | 15:46 |
Mo__ | so what do i do now | 15:47 |
Mo__ | restore from backup | 15:47 |
Mo__ | snapshot? | 15:47 |
nowen | try 'yum install kernel' | 15:47 |
Mo__ | booting to an older version of el5pae | 15:48 |
nowen | wait | 15:49 |
nowen | that's not what I said | 15:49 |
Mo__ | i know but its too late i rebooted | 15:49 |
nowen | did you try yum install kernel???? | 15:49 |
Mo__ | trying now | 15:49 |
Mo__ | looks like its installing | 15:50 |
nowen | please stop rebooting the server. it is not necessary | 15:50 |
Mo__ | ok its installed | 15:51 |
Mo__ | NOT rebooting anymore | 15:51 |
nowen | thank you! | 15:51 |
nowen | run the 'rpm -qa | grep kernel | 15:51 |
nowen | ' | 15:51 |
nowen | command | 15:51 |
Mo__ | ok | 15:52 |
nowen | is the pae kernel gone? | 15:52 |
Mo__ | no | 15:52 |
nowen | ok | 15:52 |
Mo__ | i will have to reissue the above command with the MINUS | 15:53 |
nowen | can you cut and paste from the terminal? | 15:53 |
Mo__ | last time i missed the minus | 15:53 |
Mo__ | should i go ahead | 15:53 |
Mo__ | and try | 15:53 |
nowen | i recommend you first figure out how to cut and paste from the terminal. Typing is not a sustainable option. | 15:54 |
Mo__ | ok using putty | 15:54 |
Mo__ | now | 15:54 |
nowen | ok - paste the listing of PAE kernels here | 15:54 |
Mo__ | also when you paste it the program automatically executes the command | 15:55 |
nowen | hmm, sounds like you are also getting the return | 15:55 |
Mo__ | kernel-devel-2.6.18-194.el5 | 15:56 |
nowen | mine looks like this: kernel-PAE-2.6.18-194.el5 | 15:56 |
nowen | and this: kernel-PAE-devel-2.6.18-194.el5 | 15:56 |
Mo__ | kernel-debug-2.6.18-274.3.1.el5 | 15:56 |
Mo__ | do you want all listing or just the PAE ones | 15:57 |
nowen | so, you should be able to remove them by running "yum remove kernel-PAE* " | 15:57 |
Mo__ | copied and pasted without quotes | 15:58 |
nowen | ok | 15:58 |
nowen | you should also get a confirmation, y/N | 15:59 |
nowen | it should say "remove these two packages" or some such | 15:59 |
Mo__ | ok now i see a list of kernels that have PAE at end | 15:59 |
Mo__ | there are 6 packages | 15:59 |
nowen | ok | 15:59 |
Mo__ | i have a y/n option | 16:00 |
nowen | and all of them have PAE? | 16:00 |
Mo__ | hit y? | 16:00 |
Mo__ | Yes. PAE and PAE-devel | 16:00 |
nowen | and there are non-pae kernels installed? | 16:01 |
Mo__ | yes i would guess so | 16:01 |
nowen | then y | 16:01 |
Mo__ | its running now | 16:02 |
nowen | after it runs, run the rpm -qa command. you should be able to scroll up to see the command history | 16:03 |
Mo__ | no PAE anymore | 16:03 |
nowen | ok | 16:04 |
nowen | now, I recommend rebooting to check and see if it works | 16:04 |
Mo__ | ok rebooting | 16:06 |
Mo__ | how do update the system without PAE... i ran yum update to update all | 16:06 |
nowen | now that it is not installed, it should not update | 16:07 |
Mo__ | ok | 16:07 |
nowen | each time you do yum update, a list of packages is listed for review | 16:07 |
nowen | review it for any pae packages | 16:07 |
Mo__ | reboot finish but same ressult kernel panic | 16:08 |
nowen | I think you need to redo the steps in http://www.sudonym.com/398/kernel-panic-after-yum-update-centos-with-hyper-v-linux-integration-components/ | 16:09 |
Mo__ | looks like i have restore from snapshot as the old kernels without PAE are missing | 16:12 |
Mo__ | i see el5xen | 16:13 |
Mo__ | and el5debug | 16:13 |
Mo__ | is it possibe to boot to one of these and redo the steps from the link | 16:14 |
nowen | if you hit the space bar at the grub boot screen, you'll be able to choose the kernel to boot | 16:15 |
Mo__ | ok | 16:23 |
Mo__ | looks like its booting without panicking | 16:24 |
Mo__ | no more panic attacks | 16:24 |
Mo__ | i would like to upgrade the wikid | 16:24 |
Mo__ | can you please provide the commands again | 16:25 |
nowen | ok | 16:27 |
nowen | will you copy them down this time? | 16:27 |
Mo__ | :-) | 16:27 |
Mo__ | i was going to copy the chat session last time | 16:28 |
Mo__ | but somethig happened and i lost it | 16:28 |
nowen | # wget http://wikidsystems-dl.com/wikid-server-enterprise-3.5.0.b1352-1.noarch.rpm | 16:28 |
nowen | # rpm -Uvh wikid-server-enterprise-3.5.0.b1352-1.noarch.rpm | 16:28 |
nowen | not too bad | 16:33 |
Mo__ | do i need a reboot | 16:36 |
Mo__ | after the upgrade? | 16:37 |
nowen | no | 16:37 |
Mo__ | i did stop wikidctl | 16:37 |
nowen | yes, run wikidctl start | 16:37 |
Mo__ | starting wikidctl | 16:38 |
nowen | the only time you need to reboot linux is when you want to upgrade the kernel | 16:38 |
nowen | if you want to update everything but the kernel: "yum --exclude=kernel update" | 16:39 |
nowen | should work | 16:39 |
Mo__ | great | 16:40 |
Mo__ | i think i'm up | 16:40 |
Mo__ | i will have to register some new users and test | 16:40 |
Mo__ | also test with some existing users. | 16:40 |
Mo__ | do i need anything else besides saving this chat session for COMMANDS reference | 16:41 |
Mo__ | :-) | 16:41 |
nowen | I don't think so | 16:41 |
nowen | '_ | 16:41 |
nowen | :) | 16:41 |
Mo__ | Thanks a lot... appreciate the help | 16:41 |
nowen | np | 16:42 |
*** Mo__ has quit (Quit: Page closed) | 18:21 | |
*** Mo (4084d7c2@gateway/web/freenode/ip.64.132.215.194) has joined #wikid | 19:35 | |
Mo | Hi | 19:35 |
Mo | I'm back | 19:35 |
nowen | hi | 19:35 |
nowen | welcome back :) | 19:35 |
*** Mo is now known as Guest12716 | 19:36 | |
Guest12716 | since the upgrade this morning...guess what the example.jsp page changed | 19:36 |
Guest12716 | i have to redit it | 19:36 |
Guest12716 | but i did create a copy of the example.jsp | 19:37 |
Guest12716 | now i can't get to it. | 19:37 |
nowen | didn't you wipe that vm? | 19:37 |
Guest12716 | no | 19:37 |
Guest12716 | i did this last week when you showed me how to copy | 19:38 |
nowen | yes, but didn't you revert to an older vm today? | 19:38 |
Guest12716 | no i did not have to | 19:39 |
nowen | you just need to change the defaultservercode to your WiKID server domain code and the localhost passphrase to your passphrase | 19:39 |
Guest12716 | upgrading or updatig shouldn't delete the page should it? | 19:39 |
Guest12716 | yea i know what to change now | 19:40 |
nowen | yes, if the page is updated | 19:40 |
Guest12716 | but i was just wondering i copied the example page to adduser.jsp | 19:40 |
nowen | vim /opt/WiKID/tomcat/webapps/WiKIDAdmin/example.jsp | 19:40 |
nowen | ahh | 19:40 |
Guest12716 | so adduser.jsp is gone now | 19:40 |
nowen | we should have copied it to another directory | 19:41 |
Guest12716 | that one should not have been deleted or updated right? | 19:41 |
Guest12716 | oh | 19:41 |
nowen | this time do 'cp example.jsp adduser.jsp; cp adduser.jsp /root/adduser.jsp' | 19:41 |
nowen | then you'll have a copy in /root | 19:41 |
Guest12716 | should i restart wikid | 19:45 |
Guest12716 | still getting same | 19:46 |
nowen | yes, the pages are cached by tomcat | 19:46 |
Guest12716 | ok that worked... thanks again | 19:48 |
nowen | np | 19:48 |
joevano | nowen: where do I put my passhrase in that file? I am trying to mess with it so I understand what you guys are talking about | 20:16 |
nowen | around line 51 | 20:16 |
nowen | wc = new wClient("127.0.0.1", 8388, Config.getValue("BASEPATH") + "private/localhost.p12", "passphrase", | 20:16 |
nowen | change passphrase to your localhost passphrase | 20:17 |
joevano | ok that is what I thought... I was confused by the comment that said ti change it in both places | 20:17 |
nowen | hmm. | 20:18 |
joevano | comment in the page a couple of lines below* | 20:18 |
nowen | the comment is supposed to say "DO NOT CHANGE CHANGEIT" | 20:18 |
nowen | or some such | 20:18 |
joevano | // NOTE: The passphrase above "changeit" is the default passphrase for the CA trust store as delivered | 20:18 |
joevano | // by Sun with Java. If you change this value you will also need to change the passphrase used to | 20:19 |
joevano | // encrypt the CACertStore fi | 20:19 |
joevano | // encrypt the CACertStore file. You must change both if you change either. | 20:19 |
nowen | yeah, it used to say something else | 20:20 |
nowen | like, "don't change this ever" :( | 20:20 |
nowen | because it was very confusing as you have found out | 20:20 |
joevano | ;-) | 20:21 |
joevano | hmm connection not successfully established | 20:30 |
nowen | did you restart wikid? the old page gets cached | 20:30 |
joevano | yes | 20:30 |
nowen | hmm | 20:30 |
nowen | check the WiKIDAdmin logs | 20:31 |
joevano | ah... good idea, you should work support | 20:31 |
nowen | lol | 20:31 |
nowen | I do ;-) | 20:31 |
joevano | "couldn't validate the client certificate" | 20:34 |
joevano | bad passphrase? | 20:34 |
nowen | sounds like it | 20:34 |
nowen | remember, the localhost.p12 doesn't necessarily have the same passphrase as the intca | 20:34 |
joevano | ah | 20:37 |
Guest12716 | hi again | 20:37 |
Guest12716 | quick question | 20:37 |
nowen | ok | 20:37 |
Guest12716 | i may have asked this before and probably wasnt satisfied with the answer... hence can't remember... | 20:38 |
Guest12716 | my company has several laptops that are shared... | 20:38 |
nowen | ok | 20:38 |
Guest12716 | how do i go about using these shared laptops with wikid | 20:38 |
nowen | do the users login with different usernames? | 20:39 |
Guest12716 | No | 20:39 |
Guest12716 | same user name | 20:39 |
nowen | well, that's another security issue. I can't remember - is this for PCI compliance? | 20:40 |
Guest12716 | no... just want the users who borrow the laptop connect to the network | 20:41 |
nowen | they would have to use a smart phone token | 20:41 |
Guest12716 | but the laptops themselved have to registered on wikid, right? | 20:43 |
nowen | no | 20:43 |
joevano | nowen: used keytool to verify the passphrase on both the intca and localhost keys and it is correct | 20:44 |
Guest12716 | so can i connect to the network using pin generated by an iphone which is then entered into a laptop that was never registered on wikid? | 20:44 |
joevano | do I have to escape any special charaters? | 20:44 |
nowen | joevano: I don't think so | 20:44 |
nowen | but maybe | 20:44 |
joevano | k... ill do some looking | 20:44 |
nowen | Guest12716: yes. WiKID is only validating the OTP. | 20:45 |
Guest12716 | ok | 20:47 |
nowen | Guest12716: this section of our website might help: http://www.wikidsystems.com/learn-more/technology/overview | 20:48 |
Guest12716 | but whatever device is used to generate the otp must be registered right? | 20:50 |
nowen | correct | 20:50 |
Guest12716 | ok | 20:50 |
Guest12716 | great | 20:51 |
Guest12716 | ok so how does the otp connect to username... if i generate otp... i can't login as anyone but myself... correct?? | 20:55 |
nowen | Guest12716: yes, remember the username is part of the registration | 20:56 |
Guest12716 | yup... that is the connection | 20:57 |
Guest12716 | great... | 20:57 |
Guest12716 | is the token available for android devices? | 20:57 |
nowen | yes | 20:57 |
nowen | I have to check out soon - it's a soccer day for my son | 20:58 |
Guest12716 | great... np... hope they win... enjoy the game!!! | 20:59 |
nowen | Guest12716: thanks | 21:00 |
nowen | joevano: is your passphrase still in double-quotes? | 21:00 |
*** Guest12716 has quit (Quit: Page closed) | 21:01 | |
nowen | joevano: let's touch base tomorrow, same bat channel ;) | 21:03 |
joevano | nowen sounds like a plan... | 21:03 |
nowen | later | 21:04 |
*** nowen has quit (Quit: Leaving.) | 21:04 |
Generated by irclog2html.py 2.11.0 by Marius Gedminas - find it at mg.pov.lt!