Tuesday, 2015-03-17

*** ricardoamaro has quit (Ping timeout: 246 seconds)11:05
*** ricardoamaro (~ricardoam@drupal.org/user/74228/view) has joined #wikid11:19
*** ricardoamaro has quit (Ping timeout: 265 seconds)11:24
*** nowen (~nowen@50-194-249-125-static.hfc.comcastbusiness.net) has joined #wikid13:18
mo__hi nick13:44
nowenmorning mo13:45
mo__so before i continue with my fix from yesterday i would like to know how does wikid work if i lose an isp13:46
mo__that is i have two isp feeds into my office13:46
nowenand that would require a change of IPs?13:46
mo__yes13:47
nowenwe can create a DNS entry in our DNS that would point the tokens to the new IP13:47
mo__can i do that on my own dns13:49
mo__we dyn13:49
mo__we use dyn13:50
nowenonly if you are only using PC tokens and it would require pushing out changes to all the tokens13:50
mo__if i use yours would i need to change teh dns settings anywehere in my systems13:54
nowenno13:54
*** Troy_SANM (3286cb7f@gateway/web/freenode/ip.50.134.203.127) has joined #wikid14:01
Troy_SANMGood morning Nick14:02
nowenmorning14:02
Troy_SANMif I get a interCA from the ca license site for my lab.. can I do it again for the production boxes?14:02
Troy_SANMit will be the same FQDN domain14:03
Troy_SANMunless you think I can just copy the /private folder over after upgrade is done..14:04
nowenI'm thinking either should work, but let me check14:04
Troy_SANMof course I would need to re-create the localhost and network client certs again14:04
Troy_SANMwe came up with 6533 unique licenses in use in our current prod environment14:05
nowenwhat does the server say?14:05
Troy_SANMthe latest version is unfortunately showing 7096 in users with Registered Devices: 3336614:10
nowenhmm14:10
nowenmo__: is your licensed users correct now?14:11
Troy_SANMi sent you a screenshot Nick14:15
nowenoh14:16
nowenhmm, is this with the eval cert?14:16
nowenbecause the latest has a new look14:17
Troy_SANMyes.. i was waiting on your reply on the certificate request before installing the new cert14:18
nowenok14:18
nowengive me a sec14:18
Troy_SANM500+ difference is quite a bit on user counts14:18
nowenyes14:18
Troy_SANMwe got to figure this out14:18
nowenyes14:19
Troy_SANMi know some users are all CAPS and or some users have a first letter caped14:19
Troy_SANMcapped14:19
Troy_SANMis there a limit of the amount of devices per user?14:19
nowenoh yeah - we went through that before - I hope it's not a regression14:20
Troy_SANMi can tell you that after the upgrade, the license count did drop from 7993 to 7096.. so some dups are dropping correctly14:22
mo__sorry had to put out a few fires14:26
mo__i'm back now14:26
mo__yes the license count is correct14:26
nowenmo__: ok good to know14:27
mo__but i have to renwew the cert14:27
nowenyep14:27
mo__because yesterday we had the temporary license14:27
nowenTroy_SANM: the plan is to upgrade one of the productions servers - java and rpm and then copy over the /private contents?14:27
Troy_SANMafter the last few failed upgrades.. my plan is to do what Nick tells me to do :)14:28
nowenok14:28
Troy_SANMi just want this to work14:28
nowenchecking on some things14:28
nowenI hear ya14:28
Troy_SANMso if re-creating the certs on both servers manually is the solution.. i will do that14:29
Troy_SANMit does not take very long to do.. as long as I get the certs back from wikid ca quickly14:29
Troy_SANMmaybe a temporary license or 60 day license for the 7100 or so until we the upgrade done.. if there is another upgrade to correct the licnse counts.. that's fine as i feel the minor upgrades should go quick after this big jump14:31
nowenI'm testing the copy of /private now14:31
Troy_SANMok14:32
Troy_SANMbrb.. coffee calling14:32
mo__i've added 60 licenses and submitted a purchase order14:33
mo__nick can you take care of on your side as per our discussion from yesterday14:34
mo__thanks14:34
nowenyes14:34
nowenmo__: just confirming - I have your renewal date as Aug 23rd 201514:37
mo__yes that is correct14:37
nowenok  -14:38
nowenyou need to logout of the CA site and log back in14:38
nowenthen you should see that you order is processed.  click on the Certificate link under Servers and install that cert14:38
nowenlet me know!14:38
nowenTroy_SANM: I moved the contents of /private to a new server and all the licenses moved.  I was able to manually add a user and added one through the example.jsp api14:45
nowenactually, I added a second token to the existing user14:45
Troy_SANMok.. are you able to add a new user?14:45
nowenes14:45
nowenyes14:45
Troy_SANMok14:46
Troy_SANMok.. sorry.. through you said "added token to existing user"14:46
mo__perfect that worked14:47
nowenTroy_SANM: did both, actually14:47
nowenmo__: great!  so you see 60 users on that server?14:47
mo__yes14:47
nowensweet14:47
Troy_SANMto send you a message directly, do I just do @nowen at the beginning of the line?14:48
mo__but i still cannot get to example.jsp14:48
nowenwhat about your adduser.jsp?14:49
mo__or adduser.jsp14:49
nowenTroy_SANM: just start typing nowen and hit tab14:49
nowenor do you mean a private message?14:49
Troy_SANMnowen: thanks14:49
nowennot sure if the web interface can do private messages14:50
Troy_SANMok.. that's fine.. just curious14:50
nowensome windows IRC clients:  http://www.makeuseof.com/tag/top-7-free-irc-clients-windows-7/14:51
*** test__ (32c2f97d@gateway/web/freenode/ip.50.194.249.125) has joined #wikid14:52
mo__if i list i still see the adduser.jsp but can browse to it14:53
mo__do i need to copy it somewhere14:53
mo__else14:53
nowenis it in /WiKIDAdmin?14:53
mo__cd /WiKIDAdmin doesnt seem to work14:55
mo__when you are you going to get a gui.. :-)14:55
nowentry ' cd /opt/WiKID/tomcat/webapps/WiKIDAdmin/ '14:55
nowenhaha14:55
nowenwell, we are making a better one14:56
nowennot sure if we can include example.jsp in it, but we will make it so you can add more tokens to a user without the api14:56
*** test__ has quit (Ping timeout: 246 seconds)14:56
mo__ok i see example.jsp but not adduser.jsp14:57
mo__but i can't browse to example.jsp14:57
nowendid you copy adduser someone else before the update?14:57
mo__in the root i have a adduser.jsp14:58
mo__must've copied it before14:58
nowenok - so you can copy that back to WiKIDAdmin using 'cp /root/adduser.jps /opt/WiKID/tomcat/webapps/WIKIDAdmin '14:59
nowenthen browse to it14:59
mo__ok copied but am getting15:00
mo__The wClient connection to the server was NOT successfully established15:00
nowentry wikidctl restart15:00
*** Mark____ (44715d76@gateway/web/freenode/ip.68.113.93.118) has joined #wikid15:01
Mark____morning15:01
Mark____Is Nick here?15:01
nowenmorning Mark____15:02
Mark____Hello15:02
nowenhi15:02
Mark____just wanted to pop in here incase there were any questions on the email Troy sent this morning15:02
Mark____i went through the report manually as well removing duplicates15:02
nowengood to have you. I think we are on target for everything15:02
Mark____and ended with the same numbr15:02
Mark____number15:03
Mark____we have employees that use John Smith, JOHN smith, JOHN SMITH, John SMITH, john smith as examples but they are all the same employee15:04
Mark____was ot sure how you programmed it to remove the duplicates15:05
nowenand were they registered as such, because I feel like we fixed that a while back15:05
Mark____they still show up though15:05
Mark____our current uniques user names in wikid is 6532 and on your latest release it still shows 709615:06
mo__getting same thing15:06
mo__The wClient connection to the server was NOT successfully established15:06
nowenmo__: can you check the code and see if the passphrase is correct?15:07
mo__yes15:10
nowenhmm15:11
mo__not sure if i canged it to something else15:11
mo__i will change it then test it.15:11
nowenyou can test it on the command line15:11
nowenhttps://www.wikidsystems.com/support/wikid-support-center/troubleshooting-faq/how-do-i-know-if-my-certificate-is-valid15:12
nowenuse the localhost one with the passprhase from the file15:12
mo__i can't get out of the edit mode :q does not seem to work15:20
nowenhit the esc key a few times15:20
mo__did not work15:20
mo__disconnected15:21
mo__now reconnecting15:21
mo__that worked15:22
mo__password is not an issue15:22
nowengreat15:22
nowenmo__: you're soon to master Linux! ;-)15:22
mo__lol... i wish15:24
mo__still can't connect to adduser.jsp or example.jsp though15:24
mo__still getting15:24
mo__The wClient connection to the server was NOT successfully established15:24
nowenoh  - I thought you had it working :(15:25
nowencan you check the WiKIDAdmin logs?15:25
nowenbut it is either going to be the passphrase or maybe there's an extra space or carriage return in the file15:26
mo__2015-03-17 11:05:38.813 ERROR com.wikidsystems.client.wClient ERROR: javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate15:29
mo__2015-03-17 11:05:38.804 ERROR com.wikidsystems.server.wAuth Couldn't validate the client certificate. Verify the validity and dates of the client cert.15:29
mo__i may have to redo the cert15:30
nowengo ahead and create a new local host cert15:30
mo__done15:32
nowenrestart wikid and try again15:32
nowenMark____: here's what I don't get, if I register nowen via example.jsp and then go and add a token to NOWEN, it all goes on nowen15:34
Mark____so if you register nowen then two days later register NOWEN and then two days later register NOwen do you get the same results?15:36
Mark____remember we use self registration and on our end we overcame the caps issue15:37
Mark____just not sure in your DB it is differentiating between all the different variables someone may register with15:38
mo__same thing15:39
mo__here is the error15:39
mo__ERROR: java.io.IOException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded15:39
nowenmo__: hmm15:40
nowenMark____: I mispoke.  the user shows up as NOWEN, nowen and NoweN, but the license count doesn't change15:42
nowenmo__: can you run both the keytool commands?15:42
nowenfrom https://www.wikidsystems.com/support/wikid-support-center/troubleshooting-faq/how-do-i-know-if-my-certificate-is-valid15:43
nowenMark____: is it something besides just caps?15:44
mo__ok i ran both15:47
nowenany errors?15:47
mo__i don't see any15:51
mo__do i need to recreate the cert just in case a typo was introduced to teh password15:55
nowenfor the localhost?15:55
mo__no the intermediate15:56
nowenthe example.jsp only uses the localhost15:57
mo__same thing16:06
nowenok - let's set up a teamviewer session16:07
mo__417 541 46616:15
mo__505016:15
Mark____Nick i think it is only caps16:17
nowenok16:17
Mark____when i manually sorted the report that is all i removed16:17
nowenmo__: got to update to 1016:18
mo__me or you?16:18
nowenme16:18
mo__ok16:19
nowenok16:19
nowenMark____: what function did you use to count?16:33
Mark____so i did it two ways16:36
Mark____i highlighted column a then went to remove duplicates16:36
Mark____and the other process was i manually went through each line manually removing uplicates16:37
Mark____duplicates16:37
Mark____then it is simply a matter of counting the lines left which excel handles16:37
*** mo__ has quit (Quit: Page closed)16:40
nowenMark____: are you counting disabled users?16:43
Mark____i am not excluding them form the report17:44
nowenso, we look at them as 'likely to be re-enabled'17:44
Mark____so you are stating if we had a nowen and Nowen and the Nowen was disabled it would count as 2 licenses?17:46
nowenjust looking at these, it seems like many are disabled and have no enabled devices17:48
nowenthese are users that are disabled17:49
Mark____I am not excluding them from my report17:51
Mark____the report Troy sent you is the same one i removed the duplicates from17:51
Mark____regardless if they were disabled or not17:51
Troy_SANMi don't think 2 licenses should be consumed if 2 user has some enabled and some disabled devices17:52
nowenwhen we run SELECT count( distinct( lower(userid) )) FROM test;  we get 7096.  If we remove disabled users we get 652917:53
nowenthere are users in this list with no enabled devices, they count as one license17:53
nowenso, if you delete your disabled users - not devices, just users, we would show you at ~6530 licenses17:59
laszlofok cool18:46
laszlofI can match that18:46
laszlofno iOS token listed in there?18:47
laszlofoh I see18:47
laszlofit was doing something silly..18:47
nowenthere's more18:48
nowenstupid, let me send you the whole thing18:48
laszloflol. wrong window too18:48
laszlofmy bad18:48
nowennp18:48
nowenSausage is being made!18:49
*** ricardoamaro (~ricardoam@drupal.org/user/74228/view) has joined #wikid19:40
*** ricardoamaro has quit (Ping timeout: 240 seconds)19:48
Troy_SANMNick.. how do I set the JAVA env variable over Oracle Java or default?20:33
Troy_SANMisn't there a script?20:33
nowenisn't it /etc/alternatives?20:33
Troy_SANMthe setenv.sh doesn't move it over20:34
nowendoes java -version show 8?20:35
Troy_SANMyes20:37
Troy_SANMbut the JAVA_HOME is still showing OpenJDK20:37
nowenand what's the problem?20:37
nowenok20:37
Troy_SANMi don't want to start this unless it's pointing to the correct version20:37
Troy_SANMor will the startup script correct it?20:37
nowenyeah20:38
nowenwhat is java home now?20:38
nowenI mean exactly the path20:38
*** MO (4084d7c2@gateway/web/freenode/ip.64.132.215.194) has joined #wikid20:39
nowenAs per  echo $JAVA_HOME20:39
nowen/usr/java/default20:39
*** MO is now known as Guest7979520:39
Guest79795hi nick20:39
Troy_SANMdidn't work20:39
Guest79795this mo again20:39
nowenhi Mark____20:39
nowenhi mo20:39
nowenTroy_SANM:  'echo $JAVA_HOME' didn't work?20:40
Guest79795so i just ran yum update on a machine rebooted worked fine20:40
nowenmo - good news20:40
Guest79795then i deleted the snapshot20:40
Guest79795and rebooted and the kernel is now afued20:41
nowenafued?20:41
Guest79795all f'ed up20:41
Guest79795kernel panic20:41
Guest79795any idea20:41
nowendid you take a snapshot?20:41
Guest79795yea but then i deleted teh snapshot20:42
Guest79795as it was not needed20:42
nowenwhy?20:42
Guest79795i use hyperv20:42
nowenhyperv is a pain in the butt20:42
Guest79795not good to leave snapshots in place20:42
nowendo you get an option to choose the kernel?20:43
nowenTroy_SANM: echo $JAVA_HOME' didn't work??20:43
Guest79795yes20:43
nowencan you choose the oldest kernel20:44
Guest79795do i pick centos or wikid linux20:44
nowenpick wikid linux20:44
Guest79795theres so many .el5 .el5pae .el5xen20:45
nowenTroy_SANM: you can always set java home using export JAVA_HOME=/usr/java/....20:45
Troy_SANMi'm going to have to install b1821 first i think20:46
Troy_SANMthis went fine on my previous attempt20:46
Guest79795i see 2.6.18-274.3.1.el520:46
Guest79795i will pick that20:46
nowensure - keep notes as you may have to try them all20:47
Guest79795do i change anything20:47
nowenjust start by trying to find the old kernel20:48
Guest79795that version worked20:48
Guest79795it booted and i can login20:48
nowengood - do not reboot the server again20:48
nowenever20:48
Guest79795ha ha ha20:48
nowennot joking20:49
nowenhttps://www.centos.org/forums/viewtopic.php?t=1478620:49
nowenwe recommend against hyper-v20:49
nowenyou don't need to reboot linux like you do Windows20:50
Guest79795ok sometimes you can't help it it needs to be shutdown20:50
nowenwhy?20:50
Guest79795if windows server reboot sometimes it may shutdown the server20:51
Guest79795i have it on save20:52
Guest79795but if it crahses for soem reasons it will have to be started20:52
Guest79795let me try that fix20:52
nowengoogle up "hyper-v centos kernel panic"20:53
nowentake a snapshot now that it is working too20:53
nowenTroy_SANM: can you back up and tell me what you did/did differently?20:54
*** ricardoamaro (~ricardoam@drupal.org/user/74228/view) has joined #wikid21:20
*** ricardoamaro has quit (Remote host closed the connection)21:20
*** ricardoamaro (~ricardoam@drupal.org/user/74228/view) has joined #wikid21:21
Troy_SANMHi Nick.. we upgraded to b1821.. tried to copy over the /private and bring it up21:22
Troy_SANMnow I get insuffient licenses21:22
nowendid you delete any of the disabled users?21:22
Troy_SANMcopied from b1902 to b1821 maybe is the issue21:23
nowenno21:23
Troy_SANMi could not get b1902 to work21:23
nowenmost likely the users21:23
nowenwhy not?21:23
Troy_SANMYou do not have sufficient user licenses. Used 33467 of 7100 allowed. Delete 26367 users or purchase another licence21:23
nowenhuh21:24
nowenthat's what you had on 1902?21:24
Troy_SANMthe java env variables never switched over21:24
Troy_SANMafter installing the java 8 rpm and setting the alternatives21:25
nowenis it still java 6 or 7?21:25
Troy_SANMopenjdk 1.6 i think21:27
nowencan you do a teamviewer session?21:27
Guest79795nick you still available21:47
nowenyep21:48
Guest79795so i loaded the old kernel but i can't connect to wikid server21:48
nowenhmm, it should have auto-started21:49
nowenrun 'wikidctl start'21:49
Guest79795no this one is different21:49
Guest79795auto start was not setup on this one21:49
nowenthis is a different server?21:49
Guest79795yes21:50
nowendo you get an error when you start wikid?21:50
Guest79795no it starts21:51
Guest79795but i cant reach it21:51
nowennot sure what that means21:52
nowencan't get to the server or the page won't load?21:52
Guest79795page won't load21:52
Guest79795actually i can't ping the server21:52
nowenrun 'netstat -anp | grep 443'21:52
nowenping is blocked the firewall21:52
Guest79795no21:53
nowenI mean that it is blocked at the firewall that runs on WiKID21:53
nowencan you ssh to the server?21:54
Guest79795no21:54
nowenrun 'ifconfig'21:54
Guest79795i don't see any configured addresses21:56
Guest79795should i stop wikid server then rerun setup21:56
nowenjust run 'service network restart'21:56
Guest79795device seth0 does not seem to be present delaying initialization21:57
Guest79795failed21:57
nowenhmm21:57
nowenyou mean device eth021:58
nowensounds like your hyper-v network is missing21:58
nowenyou can try to rerun setup.  if there's no eth0, then it won'twork21:58
Guest79795is there a way to backup the data22:03
Guest79795just in case i need to rebuild the whole system22:03
nowencd /root22:05
nowentar -czvf  wikid.backup.tar.gz  /var/lib/pgsql/data/*22:05
Guest79795will have to pick up tomorrow22:10
Guest79795for not will make a backup22:10
Guest79795thanks.22:10
nowenok22:10
Guest79795thats a lot of backup22:13
Guest79795thanks22:13
nowennp22:13
*** ricardoamaro has quit (Remote host closed the connection)23:08
*** ricardoamaro (~ricardoam@drupal.org/user/74228/view) has joined #wikid23:13

Generated by irclog2html.py 2.11.0 by Marius Gedminas - find it at mg.pov.lt!