Mailing-List: contact cloudstack-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: cloudstack-dev@incubator.apache.org
Received-SPF: neutral (athena.apache.org: local policy)
MIME-Version: 1.0
In-Reply-To: 
 <C66C814C1ABFA8449FF65CB44953A8B4012CBD6F7E45@SJCPMAILBOX01.citrite.net>
References: 
 <CAAxZHddjsdVtGAZ1NXse35zfqYx9yRdvQUcCLQLJ5_qFJY1j4Q@mail.gmail.com>
	<C66C814C1ABFA8449FF65CB44953A8B4012CBD6F7E45@SJCPMAILBOX01.citrite.net>
Date: Mon, 12 Nov 2012 14:32:31 -0500
Message-ID: 
 <CA+96GG7TSCNMR6dfNjh3dK9ka8RRmz8NtPt3V3Q_eQBRTkKccg@mail.gmail.com>
Subject: Re: Issue : cannot connect to management server (SSL related ....)
From: Chip Childers <chip.childers@sungard.com>
To: cloudstack-dev@incubator.apache.org
Content-Type: text/plain; charset=ISO-8859-1

Hey Edison,

Does this mean that on a production management server, the cloud user
needs password-less sudo permission?  Am I reading too much into this?

-chip

On Mon, Nov 12, 2012 at 1:40 PM, Edison Su <Edison.su@citrix.com> wrote:
> Need to make sure nopasswd for sudo(http://www.ducea.com/2006/06/18/linux-tips-password-usage-in-sudo-passwd-nopasswd/)
>
>
>> -----Original Message-----
>> From: Charles Moulliard [mailto:ch007m@gmail.com]
>> Sent: Friday, November 09, 2012 8:17 AM
>> To: cloudstack-dev
>> Subject: Issue : cannot connect to management server (SSL related ....)
>>
>> Hi,
>>
>> With last code available on master Git Hub repo, when I execute the
>> following command "mvn -pl :cloud-client-ui jetty:run" I get the message
>> that the mnget server cannot reached :
>>
>> INFO  [cloud.api.ApiServer] (Thread-18:) ApiServer listening on port 8096
>> 2012-11-09 10:30:08.527:INFO::Started
>> SelectChannelConnector@0.0.0.0:8080
>> [INFO] Started Jetty Server
>> INFO  [cloud.cluster.ClusterManagerImpl] (Cluster-Heartbeat-1:) We are
>> good, no orphan management server msid in host table is found INFO
>> [cloud.cluster.ClusterManagerImpl] (Cluster-Heartbeat-1:) No inactive
>> management server node found WARN  [cloud.cluster.ClusterManagerImpl]
>> (Cluster-Notification-1:) Notifying management server join event took 5 ms
>>
>> This issue occurs not matter if I define in devcloud.cfg file mngtSrv =
>> 127.0.0.1 or 192.168.56.2
>> In consequence, when I open the client in the web browser
>> ( http://localhost:8080/client), the first screen asks me to define the
>> configuration
>>
>> Could this be related to the following WARN appearing in log ?
>>
>> INFO  [cloud.server.ConfigurationServerImpl] (main:) SSL keystore located at
>> /Users/chmoulli/Apache/incubator-cloudstack/client/target/cloud-client-ui-
>> 4.1.0-SNAPSHOT/WEB-INF/classes/cloud.keystore
>> Password:
>> WARN  [utils.script.Script] (Script-1:) Interrupting script.
>> WARN  [utils.script.Script] (main:) Timed out: sudo keytool -genkey -keystore
>> /Users/chmoulli/Apache/incubator-cloudstack/client/target/cloud-client-ui-
>> 4.1.0-SNAPSHOT/WEB-INF/classes/cloud.keystore
>> -storepass vmops.com -keypass vmops.com -keyalg RSA -validity 3650 -
>> dname cn="Cloudstack User",ou="cloud.com",o="cloud.com",c="Unknown" .
>> Output is:
>> WARN  [cloud.server.ConfigurationServerImpl] (main:) Would use fail-safe
>> keystore to continue.
>> java.io.IOException: Fail to generate certificate!
>> at
>> com.cloud.server.ConfigurationServerImpl.generateDefaultKeystore(Config
>> urationServerImpl.java:476)
>> at
>> com.cloud.server.ConfigurationServerImpl.updateSSLKeystore(Configuratio
>> nServerImpl.java:497)
>> at
>> com.cloud.server.ConfigurationServerImpl.persistDefaultValues(Configurati
>> onServerImpl.java:265)
>> at com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:34)
>> at com.cloud.servlet.CloudStartupServlet.init(CloudStartupServlet.java:47)
>> at javax.servlet.GenericServlet.init(GenericServlet.java:241)
>> at
>> org.mortbay.jetty.servlet.ServletHolder.initServlet(ServletHolder.java:440)
>>
>> WARN  [cloud.server.ConfigurationServerImpl] (main:) Exception:
>> /Users/chmoulli/Apache/incubator-cloudstack/client/target/cloud-client-ui-
>> 4.1.0-SNAPSHOT/WEB-INF/classes/scripts/vm/systemvm/injectkeys.sh
>> /Users/chmoulli/.ssh/id_rsa.pub /Users/chmoulli/.ssh/id_rsa
>> /Users/chmoulli/Apache/incubator-cloudstack/client/target/cloud-client-ui-
>> 4.1.0-SNAPSHOT/WEB-INF/classes/vms/systemvm.iso
>> java.io.IOException: Cannot run program
>> "/Users/chmoulli/Apache/incubator-cloudstack/client/target/cloud-client-ui-
>> 4.1.0-SNAPSHOT/WEB-INF/classes/scripts/vm/systemvm/injectkeys.sh":
>> error=13, Permission denied
>> at java.lang.ProcessBuilder.start(ProcessBuilder.java:460)
>> at com.cloud.utils.script.Script.execute(Script.java:183)
>> at com.cloud.utils.script.Script.execute(Script.java:161)
>> at
>> com.cloud.server.ConfigurationServerImpl.injectSshKeysIntoSystemVmIsoP
>> atch(ConfigurationServerImpl.java:722)
>> at
>> com.cloud.server.ConfigurationServerImpl.updateKeyPairs(ConfigurationSer
>> verImpl.java:660)
>> at com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:34)
>> at
>> com.cloud.server.ConfigurationServerImpl.persistDefaultValues(Configurati
>> onServerImpl.java:268)
>> at com.cloud.utils.db.DatabaseCallback.intercept(DatabaseCallback.java:34)
>> at com.cloud.servlet.CloudStartupServlet.init(CloudStartupServlet.java:47)
>>
>> Regards,
>>
>> --
>> Charles Moulliard
>> Apache Committer / Sr. Enterprise Architect (RedHat) Twitter : @cmoulliard |
>> Blog : http://cmoulliard.blogspot.com
>