+1 (again)

On 3/4/13 1:06 PM, "Alex Huang" <alex.hu...@citrix.com> wrote:

>+1.  It does not belong to the management server.
>
>--Alex
>
>> -----Original Message-----
>> From: John Burwell [mailto:jburw...@basho.com]
>> Sent: Monday, March 4, 2013 8:13 AM
>> To: cloudstack-dev@incubator.apache.org
>> Subject: Re: issue with 4.1
>> 
>> Chip,
>> 
>> My recommendation in the ticket is to extract the script from the
>> management server to a external script provided as a connivence to end
>> users.  If we encounter a situation where a certificate is not present,
>>provide
>> a meaningful error message in the logs and exit.  If a user needs help
>> generating an SSL certificate, they can use execute the script with the
>> appropriate parameters.  Otherwise, they will generate/procure one
>>through
>> external means.
>> 
>> Thanks,
>> -John
>> 
>> On Mar 4, 2013, at 10:59 AM, Chip Childers <chip.child...@sungard.com>
>> wrote:
>> 
>> > On Mon, Mar 04, 2013 at 08:51:03AM -0700, Marcus Sorensen wrote:
>> >> There's a bug for this, I think it's related to passwordless sudo for
>> >> cloud user on management server.
>> >
>> > Is this the one?
>> >
>> > https://issues.apache.org/jira/browse/CLOUDSTACK-1389
>> >
>> >>
>> >> On Mon, Mar 4, 2013 at 6:52 AM, Sebastien Goasguen
>> <run...@gmail.com> wrote:
>> >>> Hi I am trying to test the latest 4.1 (and 4.1l10n branch).
>> >>>
>> >>> I am on OSX 10.8.2, I had to update to JDK 1.7 to get things going.
>> >>>
>> >>> and after a 'clean install' I get stuck with:
>> >>>
>> >>> Password:WARN  [utils.script.Script] (Script-1:) Interrupting
>>script.
>> >>> WARN  [utils.script.Script] (Timer-2:) Timed out: sudo keytool
>>-genkey -
>> keystore /Users/sebastiengoasguen/Documents/incubator-
>> cloudstack/client/target/cloud-client-ui-4.1.0-SNAPSHOT/WEB-
>> INF/classes/cloud.keystore -storepass vmops.com -keypass vmops.com -
>> keyalg RSA -validity 3650 -dname cn="Cloudstack
>> User",ou="168.1.20",o="168.1.20",c="Unknown" .  Output is:
>> >>> WARN  [cloud.server.ConfigurationServerImpl] (Timer-2:) Would use
>> fail-safe keystore to continue.
>> >>> java.io.IOException: Fail to generate certificate!: timeout
>> >>>        at
>> com.cloud.server.ConfigurationServerImpl.generateDefaultKeystore(Config
>> urationServerImpl.java:491)
>> >>>        at
>> com.cloud.server.ConfigurationServerImpl.updateSSLKeystore(Configuratio
>> nServerImpl.java:512)
>> >>>        at
>> 
>>com.cloud.server.ConfigurationServerImpl.persistDefaultValues(Configurati
>> onServerImpl.java:269)
>> >>>        at
>> com.cloud.server.ConfigurationServerImpl.configure(ConfigurationServerIm
>> pl.java:143)
>> >>>        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
>>Method)
>> >>>        at
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.j
>> ava:57)
>> >>>        at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
>> sorImpl.java:43)
>> >>>        at java.lang.reflect.Method.invoke(Method.java:601)
>> >>>        at
>> org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(
>> AopUtils.java:319)
>> >>>        at
>> org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoi
>> npoint(ReflectiveMethodInvocation.java:183)
>> >>>        at
>> org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(
>> ReflectiveMethodInvocation.java:150)
>> >>>        at
>> org.springframework.aop.aspectj.MethodInvocationProceedingJoinPoint.pr
>> oceed(MethodInvocationProceedingJoinPoint.java:80)
>> >>>        at
>> com.cloud.utils.db.TransactionContextBuilder.AroundAnyMethod(Transactio
>> nContextBuilder.java:37)
>> >>>        at sun.reflect.GeneratedMethodAccessor36.invoke(Unknown
>> Source)
>> >>>        at
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
>> sorImpl.java:43)
>> >>>        at java.lang.reflect.Method.invoke(Method.java:601)
>> >>>        at
>> org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMeth
>> odWithGivenArgs(AbstractAspectJAdvice.java:621)
>> >>>        at
>> org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMeth
>> od(AbstractAspectJAdvice.java:610)
>> >>>        at
>> org.springframework.aop.aspectj.AspectJAroundAdvice.invoke(AspectJArou
>> ndAdvice.java:65)
>> >>>        at
>> org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(
>> ReflectiveMethodInvocation.java:172)
>> >>>        at
>> org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(E
>> xposeInvocationInterceptor.java:90)
>> >>>        at
>> org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(
>> ReflectiveMethodInvocation.java:172)
>> >>>        at
>> org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDyna
>> micAopProxy.java:202)
>> >>>        at $Proxy388.configure(Unknown Source)
>> >>>        at
>> com.cloud.utils.component.ComponentContext.initComponentsLifeCycle(Co
>> mponentContext.java:110)
>> >>>        at
>> com.cloud.servlet.CloudStartupServlet$1.run(CloudStartupServlet.java:50)
>> >>>        at java.util.TimerThread.mainLoop(Timer.java:555)
>> >>>        at java.util.TimerThread.run(Timer.java:505)
>> >>> INFO  [cloud.server.ConfigurationServerImpl] (Timer-2:) Processing
>> >>> updateKeyPairs INFO  [cloud.server.ConfigurationServerImpl]
>> >>> (Timer-2:) Keypairs already in database INFO
>> >>> [cloud.server.ConfigurationServerImpl] (Timer-2:) Keypairs already
>> >>> in database, skip updating local copy (not running as cloud user)
>> >>> INFO  [cloud.server.ConfigurationServerImpl] (Timer-2:) Going to
>> >>> update systemvm iso with generated keypairs if needed
>> >>> Password:
>> >>>
>> >>> ?
>> >>>
>> >>> -sebastien
>> >>
>

Reply via email to