Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
Received-SPF: pass (athena.apache.org: domain of daan.hoogland@gmail.com
 designates 209.85.213.177 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAGQtxva7yBKpvGuHCSe32yYu7WG4auv2dmtyGpJbzp6fuoje2Q@mail.gmail.com>
References: <700084860.15252.1413216382510.JavaMail.zimbra@li.nux.ro>
 <CALFpzo5KhZ7LAQU=YG01AnP7wLTDCT289Sjn9a_Prsk02KM8DQ@mail.gmail.com>
 <998807907.15425.1413220495402.JavaMail.zimbra@li.nux.ro>
 <CAP997UefDRBNVMddKhN2fmJ_xbCJpL0Chk2n32wE7LqWLpHR0w@mail.gmail.com>
 <2076663919.16066.1413244493474.JavaMail.zimbra@li.nux.ro>
 <CAEJ3w4VbsLKvDPWNa4p4UcktLeSOky_L5AH-SDwJyhK8a7aOOg@mail.gmail.com>
 <CAD97iof=CHiXWwaq-xESaLHy7AL0Osx_W1YgoTP7hecUjsSgzw@mail.gmail.com>
 <110013592.16324.1413272893405.JavaMail.zimbra@li.nux.ro>
 <CAGQtxva7yBKpvGuHCSe32yYu7WG4auv2dmtyGpJbzp6fuoje2Q@mail.gmail.com>
From: Daan Hoogland <daan.hoogland@gmail.com>
Date: Tue, 14 Oct 2014 10:04:52 +0200
Message-ID: 
 <CAGQtxva7gdN=tp0qeB0iN=O5g0vJhhRu2cf5zUoXSNN+5RgWqA@mail.gmail.com>
Subject: Re: Weird ssl keystore error while upgrading to 4.4.1
To: dev <dev@cloudstack.apache.org>
Content-Type: multipart/alternative; boundary=001a11c205609a5a7105055d79fa

--001a11c205609a5a7105055d79fa
Content-Type: text/plain; charset=UTF-8

created https://issues.apache.org/jira/browse/CLOUDSTACK-7702 to add any
comments

On Tue, Oct 14, 2014 at 10:00 AM, Daan Hoogland <daan.hoogland@gmail.com>
wrote:

> adding it to server/conf/cloudstack-sudoers.in in 4.4 branch. Is this
> only an issue in the 4.4 branch?
>
> On Tue, Oct 14, 2014 at 9:48 AM, Nux! <nux@li.nux.ro> wrote:
>
>> Cheers for that, in my setup I had this appended to my sudoers file (note
>> the missing keytool):
>>
>> "cloud ALL =NOPASSWD : /bin/chmod, /bin/cp, /bin/mkdir, /bin/mount,
>> /bin/umount
>> Defaults !requiretty"
>>
>> Adding keytool to that solved the problem. Thanks!
>>
>>
>> Lucian
>>
>> --
>> Sent from the Delta quadrant using Borg technology!
>>
>> Nux!
>> www.nux.ro
>>
>> ----- Original Message -----
>> > From: "Pierre-Luc Dion" <pdion891@apache.org>
>> > To: dev@cloudstack.apache.org
>> > Sent: Tuesday, 14 October, 2014 01:58:54
>> > Subject: Re: Weird ssl keystore error while upgrading to 4.4.1
>>
>> > sudo line for user "cloud" should look like this:
>> >
>> > cloud ALL =NOPASSWD : /bin/chmod, /bin/cp, /bin/mkdir, /bin/mount,
>> > /bin/umount, /usr/bin/keytool
>> >
>> > keytool was probably missing which cause the sudo error...
>> >
>> > On Mon, Oct 13, 2014 at 8:39 PM, Ian Duffy <ian@ianduffy.ie> wrote:
>> >
>> >> > AFAIK the sudo rights are given during the mgmt server install.
>> >>
>> >> Yes this happens during the cloud-setup-management stage. It modifies
>> the
>> >> sudoers file.
>> >>
>> >> There is one binary it attempts to execute using sudo that it doesn't
>> have
>> >> permission to do so. If memory serves me correctly its keytool.
>> >>
>> >> On 14 October 2014 00:54, Nux! <nux@li.nux.ro> wrote:
>> >>
>> >> > Is this done automatically? If yes, we may have just found a bug. :-)
>> >> >
>> >> > Lucian
>> >> >
>> >> > --
>> >> > Sent from the Delta quadrant using Borg technology!
>> >> >
>> >> > Nux!
>> >> > www.nux.ro
>> >> >
>> >> > ----- Original Message -----
>> >> > > From: "Erik Weber" <terbolous@gmail.com>
>> >> > > To: "dev" <dev@cloudstack.apache.org>
>> >> > > Sent: Monday, 13 October, 2014 20:16:53
>> >> > > Subject: Re: Weird ssl keystore error while upgrading to 4.4.1
>> >> >
>> >> > > AFAIK the sudo rights are given during the mgmt server install.
>> >> > >
>> >> > > --
>> >> > > Erik
>> >> > >
>> >> > > On Mon, Oct 13, 2014 at 7:14 PM, Nux! <nux@li.nux.ro> wrote:
>> >> > >
>> >> > >> Marcus,
>> >> > >>
>> >> > >> User "cloud" has no sudo rights, that might be one of the causes.
>> I
>> >> have
>> >> > >> never read that this user should have sudo access.
>> >> > >> Am I wrong?
>> >> > >>
>> >> > >> Lucian
>> >> > >>
>> >> > >> --
>> >> > >> Sent from the Delta quadrant using Borg technology!
>> >> > >>
>> >> > >> Nux!
>> >> > >> www.nux.ro
>> >> > >>
>> >> > >> ----- Original Message -----
>> >> > >> > From: "Marcus" <shadowsor@gmail.com>
>> >> > >> > To: dev@cloudstack.apache.org
>> >> > >> > Sent: Monday, 13 October, 2014 18:01:15
>> >> > >> > Subject: Re: Weird ssl keystore error while upgrading to 4.4.1
>> >> > >>
>> >> > >> > 2014-10-13 16:45:51,662 DEBUG [c.c.u.s.Script] (main:null)
>> >> Executing:
>> >> > >> > sudo keytool -genkey -keystore
>> >> > >> > /etc/cloudstack/management/cloud.keystore -storepass vmops.com
>> >> > >> > -keypass vmops.com -keyalg RSA -validity 3650 -dname
>> cn="Cloudstack
>> >> > >> > User",ou="management",o="management",c="Unknown"
>> >> > >> > 2014-10-13 16:45:51,675 DEBUG [c.c.u.s.Script] (main:null) Exit
>> >> value
>> >> > is
>> >> > >> 1
>> >> > >> >
>> >> > >> > Not sure exactly, but I notice this. Run that command manually
>> and
>> >> see
>> >> > >> >
>> >> >
>>
>
>
>
> --
> Daan
>


-- 
Daan

--001a11c205609a5a7105055d79fa--