[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [Spacewalk-list] OSA Dispatcher "conflict" error [SEC=UNCLASSIFIED]



At this point clients are not communicating with Spacewalk, only Yum has been used in the past for package installations and executed from the client end.

So at this point no clients are talking to Spacewalk, only OSA Dispatcher talking to Jabber.

Regards

Andrew

-----Original Message-----
From: spacewalk-list-bounces redhat com [mailto:spacewalk-list-bounces redhat com] On Behalf Of Paschedag, Robert
Sent: Friday, 8 September 2017 5:44 PM
To: spacewalk-list redhat com
Subject: Re: [Spacewalk-list] OSA Dispatcher "conflict" error [SEC=UNCLASSIFIED]

Hi Andrew,

it is this "id" that looks odd (to me)

>>to='rhn-dispatcher-sat FQDN-censored-address/superclient'
>>type='set' id='zb6g3gnj6oylakzw0ntgapdin3tlgajgmqwq6j9c'><query xmlns
>=

And later set to another id

>>to='rhn-dispatcher-sat FQDN-censored-address/superclient'
>>type='set' id='78xisxfsl88wymemq876irn4hjvn340bcyt5w8xh'><query xmlns
>=

All of "my" spacewalk clients are registered with a name starting with "osad-<10hexdigits>@<my spacewalk-server-id>"

I never saw such a weired id.

That's why I asked, if there are multiple IDs used within jabber.

Also we never spoke about your spacewalk clients. Do they connect "correctly" to your server? Do they experience any errors? Can you execute remote scripts (triggered immediately via osad)?

Robert


-----Urspr√ľngliche Nachricht-----
Von: spacewalk-list-bounces redhat com [mailto:spacewalk-list-bounces redhat com] Im Auftrag von Andrew Bergman
Gesendet: Freitag, 8. September 2017 08:08
An: spacewalk-list redhat com
Betreff: Re: [Spacewalk-list] OSA Dispatcher "conflict" error [SEC=UNCLASSIFIED]

No issues it seems:


Sep  8 06:04:55 censored-address jabberd/sm[21702]: starting up Sep  8 06:04:55 censored-address jabberd/sm[21702]: process id is 21702, written to /var/lib/jabberd/pid/sm.pid Sep  8 06:04:55 censored-address jabberd/sm[21702]: loading 'db' storage module Sep  8 06:04:55 censored-address jabberd/sm[21702]: initialised storage driver 'db'
Sep  8 06:04:55 censored-address jabberd/sm[21702]: modules search path: /usr/lib64/jabberd Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'status' added to chain 'sess-start' (order 0 index 0 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'status' added to chain 'sess-end' (order 0 index 0 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'iq-last' added to chain 'sess-end' (order 1 index 1 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'validate' added to chain 'in-sess' (order 0 index 2 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'status' added to chain 'in-sess' (order 1 index 0 seq 2) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'privacy' added to chain 'in-sess' (order 2 index 3 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'roster' added to chain 'in-sess' (order 3 index 4 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'vacation' added to chain 'in-sess' (order 4 index 5 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'iq-vcard' added to chain 'in-sess' (order 5 index 6 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'iq-ping' added to chain 'in-sess' (order 6 index 7 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'iq-private' added to chain 'in-sess' (order 7 index 8 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'disco' added to chain 'in-sess' (order 8 index 9 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'amp' added to chain 'in-sess' (order 9 index 10 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'offline' added to chain 'in-sess' (order 10 index 11 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'announce' added to chain 'in-sess' (order 11 index 12 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'presence' added to chain 'in-sess' (order 12 index 13 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'deliver' added to chain 'in-sess' (order 13 index 14 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'session' added to chain 'in-router' (order 0 index 15 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'validate' added to chain 'in-router' (order 1 index 2 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'presence' added to chain 'in-router' (order 2 index 13 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'privacy' added to chain 'in-router' (order 3 index 3 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'privacy' added to chain 'out-router' (order 0 index 3 seq 2) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'iq-last' added to chain 'pkt-sm' (order 0 index 1 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'iq-ping' added to chain 'pkt-sm' (order 1 index 7 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'iq-time' added to chain 'pkt-sm' (order 2 index 16 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'iq-version' added to chain 'pkt-sm' (order 3 index 17 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'amp' added to chain 'pkt-sm' (order 4 index 10 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'disco' added to chain 'pkt-sm' (order 5 index 9 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'announce' added to chain 'pkt-sm' (order 6 index 12 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'help' added to chain 'pkt-sm' (order 7 index 18 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'echo' added to chain 'pkt-sm' (order 8 index 19 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'status' added to chain 'pkt-sm' (order 9 index 0 seq 3) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'presence' added to chain 'pkt-sm' (order 10 index 13 seq 2) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'roster' added to chain 'pkt-user' (order 0 index 4 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'presence' added to chain 'pkt-user' (order 1 index 13 seq 3) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'iq-vcard' added to chain 'pkt-user' (order 2 index 6 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'amp' added to chain 'pkt-user' (order 3 index 10 seq 2) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'deliver' added to chain 'pkt-user' (order 4 index 14 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'vacation' added to chain 'pkt-user' (order 5 index 5 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'offline' added to chain 'pkt-user' (order 6 index 11 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'iq-last' added to chain 'pkt-user' (order 7 index 1 seq 2) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'session' added to chain 'pkt-router' (order 0 index 15 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'disco' added to chain 'pkt-router' (order 1 index 9 seq 2) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'active' added to chain 'user-load' (order 0 index 20 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'roster' added to chain 'user-load' (order 1 index 4 seq 2) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'roster-publish' added to chain 'user-load' (order 2 index 21 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'privacy' added to chain 'user-load' (order 3 index 3 seq 3) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'vacation' added to chain 'user-load' (order 4 index 5 seq 2) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'active' added to chain 'user-create' (order 0 index 20 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'template-roster' added to chain 'user-create' (order 1 index 22 seq 0) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'active' added to chain 'user-delete' (order 0 index 20 seq 2) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'announce' added to chain 'user-delete' (order 1 index 12 seq 2) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'offline' added to chain 'user-delete' (order 2 index 11 seq 2) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'privacy' added to chain 'user-delete' (order 3 index 3 seq 4) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'roster' added to chain 'user-delete' (order 4 index 4 seq 3) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'vacation' added to chain 'user-delete' (order 5 index 5 seq 3) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'status' added to chain 'user-delete' (order 6 index 0 seq 4) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'iq-last' added to chain 'user-delete' (order 7 index 1 seq 3) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'iq-private' added to chain 'user-delete' (order 8 index 8 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'iq-vcard' added to chain 'user-delete' (order 9 index 6 seq 2) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'iq-version' added to chain 'disco-extend' (order 0 index 17 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: module 'help' added to chain 'disco-extend' (order 1 index 18 seq 1) Sep  8 06:04:55 censored-address jabberd/sm[21702]: version: jabberd sm 2.6.1 Sep  8 06:04:55 censored-address jabberd/sm[21702]: [FQDN-censored-address] configured Sep  8 06:04:55 censored-address jabberd/sm[21702]: attempting connection to router at 127.0.0.1, port=5347 Sep  8 06:04:55 censored-address jabberd/router[21694]: [127.0.0.1, port=33974] connect Sep  8 06:04:55 censored-address jabberd/router[21694]: [127.0.0.1, port=33974] authenticated as jabberd jabberd-router Sep  8 06:04:55 censored-address jabberd/sm[21702]: connection to router established Sep  8 06:04:55 censored-address jabberd/router[21694]: [FQDN-censored-address] online (bound to 127.0.0.1, port 33974) Sep  8 06:04:55 censored-address jabberd/c2s[21710]: modules search path: /usr/lib64/jabberd Sep  8 06:04:55 censored-address jabberd/c2s[21710]: loading 'db' authreg module Sep  8 06:04:55 censored-address jabberd/c2s[21710]: initialized auth module 'db'
Sep  8 06:04:55 censored-address jabberd/c2s[21710]: starting up Sep  8 06:04:55 censored-address jabberd/c2s[21710]: process id is 21710, written to /var/lib/jabberd/pid/c2s.pid Sep  8 06:04:55 censored-address jabberd/sm[21702]: FQDN-censored-address ready for sessions Sep  8 06:04:55 censored-address jabberd/c2s[21710]: [FQDN-censored-address] configured; realm=, authreg=db, registration enabled, using PEM:/etc/pki/spacewalk/jabberd/server.pem
Sep  8 06:04:55 censored-address jabberd/c2s[21710]: attempting connection to router at 127.0.0.1, port=5347 Sep  8 06:04:55 censored-address jabberd/router[21694]: [127.0.0.1, port=33976] connect Sep  8 06:04:55 censored-address jabberd/router[21694]: [127.0.0.1, port=33976] authenticated as jabberd jabberd-router Sep  8 06:04:55 censored-address jabberd/c2s[21710]: connection to router established Sep  8 06:04:55 censored-address jabberd/router[21694]: [c2s] online (bound to 127.0.0.1, port 33976) Sep  8 06:04:55 censored-address jabberd/s2s[21718]: starting up (interval=3, queue=60, keepalive=0, idle=86400) Sep  8 06:04:55 censored-address jabberd/s2s[21718]: process id is 21718, written to /var/lib/jabberd/pid/s2s.pid Sep  8 06:04:55 censored-address jabberd/s2s[21718]: attempting connection to router at 127.0.0.1, port=5347 Sep  8 06:04:55 censored-address jabberd/router[21694]: [127.0.0.1, port=33978] connect Sep  8 06:04:55 censored-address jabberd/router[21694]: [127.0.0.1, port=33978] authenticated as jabberd jabberd-router Sep  8 06:04:55 censored-address jabberd/s2s[21718]: connection to router established Sep  8 06:04:55 censored-address jabberd/router[21694]: [s2s] set as default route Sep  8 06:04:55 censored-address jabberd/router[21694]: [s2s] online (bound to 127.0.0.1, port 33978) Sep  8 06:04:55 censored-address jabberd/c2s[21710]: [0.0.0.0, port=5222] listening for connections Sep  8 06:04:55 censored-address jabberd/c2s[21710]: ready for connections Sep  8 06:04:55 censored-address jabberd/s2s[21718]: [0.0.0.0, port=5269] listening for connections Sep  8 06:04:55 censored-address jabberd/s2s[21718]: ready for connections Sep  8 06:05:05 censored-address jabberd/c2s[21710]: [7] [134.178.147.224, port=46853] connect Sep  8 06:05:06 censored-address jabberd/c2s[21710]: [7] traditional.digest authentication succeeded: rhn-dispatcher-sat@/superclient 134.178.147.224:46853 TLS Sep  8 06:05:06 censored-address jabberd/c2s[21710]: [7] requesting session: jid=rhn-dispatcher-sat FQDN-censored-address/superclient
Sep  8 06:05:06 censored-address jabberd/sm[21702]: session started: jid=rhn-dispatcher-sat@ FQDN-censored-address /superclient

Jabber looks perfectly healthy.

Regards

Andrew

-----Original Message-----
From: Robert Paschedag [mailto:robert paschedag web de]
Sent: Friday, 8 September 2017 4:03 PM
To: spacewalk-list redhat com; Andrew Bergman; spacewalk-list redhat com
Subject: Re: [Spacewalk-list] OSA Dispatcher "conflict" error [SEC=UNCLASSIFIED]

Am 8. September 2017 07:56:07 MESZ schrieb Andrew Bergman <Andrew Bergman bom gov au>:
>How can I rebuild the jabber config cleanly?  I tried moving the xml 
>files, restoring them from the .xml.dist files and then re-running
>spacewalk-setup-jabberd but then jabber fails to start.   I ended up
>restoring the original jabber config.
>
>Config snippets with <id> sections below - note I censored the hostname 
>for security purposes.
>
>c2s.xml
>  <id>c2s</id>
><id require-starttls="false"
>pemfile="/etc/pki/spacewalk/jabberd/server.pem" realm=""
>register-enable="true">FQDN-censored-hostname</id>
>    <id realm='company.int'
>    <id password-change='mu' /> -->
>
>router.xml
>  <id>router</id>
>
>s2s.xml
>  <id>s2s</id>
>
>sm.xml
><sm>
>  <id>FQDN-censored-hostname</id>
><local>
>    <id>FQDN-censored-hostname</id>
>    <!-- <id>FQDN-censored-hostname</id> -->
>    <!--<id>localhost.localdomain</id> -->
>    <id>vhost1.localdomain</id> (also commented out)
>    <id>vhost2.localdomain</id> (also commented out)
>
>Regards
>
>Andrew Bergman
>
>-----Original Message-----
>From: Robert Paschedag [mailto:robert paschedag web de]
>Sent: Friday, 8 September 2017 2:35 PM
>To: spacewalk-list redhat com; Andrew Bergman; 
>spacewalk-list redhat com
>Subject: Re: [Spacewalk-list] OSA Dispatcher "conflict" error 
>[SEC=UNCLASSIFIED]
>
>Am 8. September 2017 03:29:15 MESZ schrieb Andrew Bergman
><Andrew Bergman bom gov au>:
>>Hi Spacewalk list,
>>
>>I am seeing an error on the Spacewalk 2.6 server I am responsible for:
>>
>>Jabber is running, port 5222 TCP is running from c2s process and is
>>communicable via telnet.   I see no errors in the logs except from
>>osa-dispatcher.
>>
>># osa-dispatcher -N -vvvvvvvvvvvv
>>
>>The last messages are:
>>--> <presence to='osad-bb7d64e5e1 FQDN-censored-address'
>>type='subscribed' id='presence-fb3eba-37' />
>>
>><-- <iq type='result' id='iq-request-c8a784-8'><query xmlns = 
>>'jabber:iq:roster' ><item jid='osad-bb7d64e5e1 FQDN-censored-address'
>>subscription='to'
>>/><item jid='osad-441293a7e7 FQDN-censored-address'
>>subscription='to' /></query></iq>
>>
>><-- <iq
>>to='rhn-dispatcher-sat FQDN-censored-address/superclient'
>>type='set' id='zb6g3gnj6oylakzw0ntgapdin3tlgajgmqwq6j9c'><query xmlns
>=
>>'jabber:iq:roster' ><item
>>jid='osad-441293a7e7 FQDN-censored-address' subscription='both'
>>/></query></iq>
>>
>>--> <iq type='get' id='iq-request-c8a784-9'><query xmlns =
>>'jabber:iq:roster'  /></iq>
>>
>><-- <iq
>>to='rhn-dispatcher-sat FQDN-censored-address/superclient'
>>type='set' id='78xisxfsl88wymemq876irn4hjvn340bcyt5w8xh'><query xmlns
>=
>>'jabber:iq:roster' ><item
>>jid='osad-bb7d64e5e1 FQDN-censored-address' subscription='both'
>>/></query></iq>
>>
>><-- <error><conflict xmlns = 'urn:ietf:params:xml:ns:xmpp-streams' 
>>/></error>
>>
>>Spacewalk 20123 2017/09/07 06:49:21 -00:00: ('Received an error
>stanza:
>>', <error><conflict xmlns = 'urn:ietf:params:xml:ns:xmpp-streams' 
>>/></error>)
>>Spacewalk 20123 2017/09/07 06:49:21 -00:00: ('Received an conflict.
>>Restarting with new credentials.',)
>>Spacewalk 20123 2017/09/07 06:49:21 -00:00: ('Error caught:',)
>>
>>ERROR: unhandled exception occurred: (can't write str to text stream).
>>
>>This looks similar to: 
>>https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fspac
>>ewalk-list.redhat.narkive.com%2FaH2kex2k%2Fosa-dispatcher-probl&data=0
>>2%7C01%7CPaschedag.Netlution%40swr.de%7C3d5c9fd1cd104938539a08d4f681c1
>>31%7Cbcca095d88d442f88260cc216b81f62d%7C0%7C0%7C636404484535256992&sda
>>ta=aM8zI7thgLSKUPLLvdxZbJwHHvzckR8PgrprvHOjkQw%3D&reserved=0
>>e
>>ms-no-system-ever-reports
>>
>>However, I see no SSL errors, my hosts file is fine, with ipv6 ::1 
>>entry for localhost, fully qualified hostname and the system hostname 
>>set to FQDN correctly.
>>
>>Does anyone have any suggestions?
>>
>>Thanks
>>
>>Andrew Bergman
>
>Do you use 2 IDs within your jabber configuration? The different "id"s 
>add the "switch" to other credentials looks strange to me.
>
>Robert
>
>_______________________________________________
>Spacewalk-list mailing list
>Spacewalk-list redhat com
>https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.
>redhat.com%2Fmailman%2Flistinfo%2Fspacewalk-list&data=02%7C01%7CPasched
>ag.Netlution%40swr.de%7C3d5c9fd1cd104938539a08d4f681c131%7Cbcca095d88d4
>42f88260cc216b81f62d%7C0%7C0%7C636404484535256992&sdata=GfER3kuwz5HQDQD
>kIaj7KhRfcbTgcQzP520PFxyFEsU%3D&reserved=0

I'm still on my way to work.

What does /var/log/messages tell? Any error when starting jabberd?

Robert

_______________________________________________
Spacewalk-list mailing list
Spacewalk-list redhat com
https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.redhat.com%2Fmailman%2Flistinfo%2Fspacewalk-list&data=02%7C01%7CPaschedag.Netlution%40swr.de%7C3d5c9fd1cd104938539a08d4f681c131%7Cbcca095d88d442f88260cc216b81f62d%7C0%7C0%7C636404484535256992&sdata=GfER3kuwz5HQDQDkIaj7KhRfcbTgcQzP520PFxyFEsU%3D&reserved=0

_______________________________________________
Spacewalk-list mailing list
Spacewalk-list redhat com
https://www.redhat.com/mailman/listinfo/spacewalk-list


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]