Hi.

I made a yum upgrade, I upgraded to CentOS 6.5, and obiously there were
updates related to spacewalk as well,  I did not see any ssl regeneration,
if that happened in background do not know.

Clients have:
osad-5.11.27-1.el6.noarch

Server has:
osa-dispatcher-5.11.27-1.el6.noarch
osa-dispatcher-selinux-5.11.27-1.el6.noarch

In the server I get
Starting osa-dispatcher:
 The server log

2013/12/11 10:28:52 -03:00 26709 0.0.0.0:
osad/jabber_lib.setup_connection('ERROR', 'Traceback (most recent call
last):\n  File "/usr/share/rhn/osad/jabber_lib.py", line 252, in
setup_connection\n    c = self._get_jabber_client(js)\n  File
"/usr/share/rhn/osad/jabber_lib.py", line 309, in _get_jabber_client\n
 c.connect()\n  File "/usr/share/rhn/osad/jabber_lib.py", line 567, in
connect\n    jabber.Client.connect(self)\n  File
"/usr/lib/python2.6/site-packages/jabber/xmlstream.py", line 488, in
connect\n    raise socket.error("Unable to connect to the host and port
specified")\nerror: Unable to connect to the host and port specified\n')
2013/12/11 10:28:52 -03:00 26709 0.0.0.0:
osad/jabber_lib.sertup_connection('Could not connect to any jabber server',)
2013/12/11 10:28:52 -03:00 26709 0.0.0.0: osad/jabber_lib.main('Unable to
connect to jabber servers, sleeping 10 seconds',)
2013/12/11 10:29:02 -03:00 26709 0.0.0.0: osad/jabber_lib.__init__
2013/12/11 10:29:02 -03:00 26709 0.0.0.0:
osad/jabber_lib.print_message('socket error',)
2013/12/11 10:29:02 -03:00 26709 0.0.0.0:
osad/jabber_lib.print_message('Could not connect to jabber server', '
spacewalk.domain.com')
2013/12/11 10:29:02 -03:00 26709 0.0.0.0:
osad/jabber_lib.setup_connection('ERROR', 'Traceback (most recent call
last):\n  File "/usr/share/rhn/osad/jabber_lib.py", line 252, in
setup_connection\n    c = self._get_jabber_client(js)\n  File
"/usr/share/rhn/osad/jabber_lib.py", line 309, in _get_jabber_client\n
 c.connect()\n  File "/usr/share/rhn/osad/jabber_lib.py", line 567, in
connect\n    jabber.Client.connect(self)\n  File
"/usr/lib/python2.6/site-packages/jabber/xmlstream.py", line 488, in
connect\n    raise socket.error("Unable to connect to the host and port
specified")\nerror: Unable to connect to the host and port specified\n')
2013/12/11 10:29:02 -03:00 26709 0.0.0.0:
osad/jabber_lib.setup_connection('Could not connect to any jabber server',)
2013/12/11 10:29:02 -03:00 26709 0.0.0.0: osad/jabber_lib.main('Unable to
connect to jabber servers, sleeping 10 seconds',)

These are the c2s diff.:

[root@spacewalk jabberd]# diff -u /etc/jabberd/c2s.xml
 /root/temp/jabberd/c2s.xml-orig

--- /etc/jabberd/c2s.xml        2013-12-11 10:14:06.000000000 -0300
+++ /root/temp/jabberd/c2s.xml-orig     2013-12-09 11:34:15.000000000 -0300
@@ -10,12 +10,12 @@
   <!-- Router connection configuration -->
   <router>
     <!-- IP/port the router is waiting for connections on -->
-    <ip>::1</ip>            <!-- default: 127.0.0.1 -->
+    <ip>127.0.0.1</ip>            <!-- default: 127.0.0.1 -->
     <port>5347</port>             <!-- default: 5347 -->

     <!-- Username/password to authenticate as -->
     <user>jabberd</user>          <!-- default: jabberd -->
-    <pass>9b6d8078f992346e0537a6e5514def7ffc28374b</pass>           <!--
default: secret -->
+    <pass>71d26fd8f21c6cf9660217f363613a45d3a28e9d</pass>           <!--
default: secret -->

     <!-- File containing an SSL certificate and private key to use when
          setting up an encrypted channel with the router. From
@@ -50,7 +50,7 @@
   </router>

   <!-- Log configuration - type is "syslog", "file" or "stdout" -->
-  <log type="syslog">
+  <log type='syslog'>
     <!-- If logging to syslog, this is the log ident -->
     <ident>jabberd/c2s</ident>

@@ -133,7 +133,7 @@
          you want this, add this attribute with any value, when you need
          registration disabled.
           -->
-    <id require-starttls="false"
pemfile="/etc/pki/spacewalk/jabberd/server.pem" realm=""
register-enable="true">spacewalk</id>
+    <id register-enable='mu'>localhost.localdomain</id>
     <!-- or
     <id realm='company.int'
         pemfile='/etc/jabberd/server.pem'
@@ -149,7 +149,7 @@
     <id password-change='mu' /> -->

     <!-- IP address to bind to (default: 0.0.0.0) -->
-    <ip>::</ip>
+    <ip>0.0.0.0</ip>

     <!-- Port to bind to, or 0 to disable unencrypted access to the
          server (default: 5222) -->
@@ -301,7 +301,7 @@
            the following checks applied.

            0 disables all checks.                       (default: 0) -->
-      <interval>60</interval>
+      <interval>0</interval>

       <!-- Idle connection checks.

@@ -319,7 +319,7 @@
            disconnected without us knowing about it.

            0 disables keepalives.                       (default: 0) -->
-      <keepalive>60</keepalive>
+      <keepalive>0</keepalive>

     </check>

@@ -348,7 +348,7 @@
     <path>/usr/lib64/jabberd</path>

     <!-- Backend module to use -->
-    <module>db</module>
+    <module>sqlite</module>

     <!-- Available authentication mechanisms -->
     <mechanisms>
@@ -421,7 +421,7 @@

       <!-- Database username and password -->
       <user>jabberd2</user>
-      <pass>9b6d8078f992346e0537a6e5514def7ffc28374b</pass>
+      <pass>71d26fd8f21c6cf9660217f363613a45d3a28e9d</pass>

       <!-- Passwords in DB may be stored in plain or hashed format -->
       <!-- NOTE: If you are using hashed passwords, the only auth
@@ -456,7 +456,7 @@

       <!-- Database username and password -->
       <user>jabberd2</user>
-      <pass>9b6d8078f992346e0537a6e5514def7ffc28374b</pass>
+      <pass>71d26fd8f21c6cf9660217f363613a45d3a28e9d</pass>
     </pgsql>

     <!-- Oracle driver configuration -->
@@ -470,7 +470,7 @@

       <!-- Database username and password -->
       <user>jabberd2</user>
-      <pass>9b6d8078f992346e0537a6e5514def7ffc28374b</pass>
+      <pass>71d26fd8f21c6cf9660217f363613a45d3a28e9d</pass>
     </oracle>

     <!-- Berkeley DB module configuration -->
@@ -543,7 +543,7 @@
       <!-- base DN of the tree. You should specify a DN for each
            authentication realm declared in the <local/> section above,
            by using the realm attribute. -->
-      <basedn realm="company">o=Company.com</basedn>
+      <basedn realm='company'>o=Company.com</basedn>
       <basedn>o=Example Corp.</basedn>
     </ldapfull>

@@ -605,7 +605,7 @@
       <!-- base DN of the tree. You should specify a DN for each
            authentication realm declared in the <local/> section above,
            by using the realm attribute. -->
-      <basedn realm="company">o=Company.com</basedn>
+      <basedn realm='company'>o=Company.com</basedn>
       <basedn>o=Example Corp.</basedn>
     </ldap>
     <!-- if you want to configure more than one LDAP server
@@ -623,6 +623,7 @@

   </authreg>

-</c2s><!--
+</c2s>
+<!--
   vim: syntax=xml
 -->

Thanks for your time and support.
Regards.



2013/12/11 Balint Szigeti <[email protected]>

> How was the upgrade? Which version to where?
>
> Does client use the same version as server?
> Wasn't there SSL regenerating?
>
> Balint
>
>
> On 11/12/13 12:48, Net Warrior wrote:
>
>> Hi guys.
>>
>> I'm seeing this errors on the server logs after I upgraded my system:
>> 2013/12/11 09:36:36 -03:00 27397 0.0.0.0: osad/jabber_lib.__init__
>> 2013/12/11 09:36:36 -03:00 27397 0.0.0.0:
>> osad/jabber_lib.connect('Server did not return a <features /> stanza,
>> reconnecting',)
>> 2013/12/11 09:36:37 -03:00 27397 0.0.0.0:
>> osad/jabber_lib.connect('Server did not return a <features /> stanza,
>> reconnecting',)
>> 2013/12/11 09:36:38 -03:00 27397 0.0.0.0:
>> osad/jabber_lib.connect('Server did not return a <features /> stanza,
>> reconnecting',)
>> 2013/12/11 09:36:39 -03:00 27397 0.0.0.0:
>> osad/jabber_lib.connect('ERROR', 'Not able to reconnect')
>> 2013/12/11 09:36:39 -03:00 27397 0.0.0.0:
>> osad/jabber_lib.print_message('SSLError',)
>> 2013/12/11 09:36:39 -03:00 27397 0.0.0.0:
>> osad/jabber_lib.print_message('Could not connect to jabber server',
>> 'spacewalk.domain.com')
>> 2013/12/11 09:36:39 -03:00 27397 0.0.0.0:
>> osad/jabber_lib.setup_connection('ERROR', 'Traceback (most recent call
>> last):\n  File "/usr/share/rhn/osad/jabber_lib.py", line 252, in
>> setup_connection\n    c = self._get_jabber_client(js)\n  File
>> "/usr/share/rhn/osad/jabber_lib.py", line 309, in _get_jabber_client\n
>>     c.connect()\n  File "/usr/share/rhn/osad/jabber_lib.py", line 589,
>> in connect\n    raise SSLDisabledError\nSSLDisabledError\n')
>> 2013/12/11 09:36:39 -03:00 27397 0.0.0.0:
>> osad/jabber_lib.setup_connection('Could not connect to any jabber
>> server',)
>> 2013/12/11 09:36:39 -03:00 27397 0.0.0.0: osad/jabber_lib.main('Unable
>> to connect to jabber servers, sleeping 10 seconds',)
>>
>> It seems SSL was disabled and no c2s service is started at all in port
>> 5222, It seems there were lots of modifications in the c2s.xml but
>> cannot tell which one is causing the error or if the certificate got
>> corrupted, I restore the original configuration file and c2s starts,
>> but but the clients cannot connect to jabber server anymore:
>>
>> 013-12-11 09:36:59 jabber_lib.main: Unable to connect to jabber
>> servers, sleeping 108 seconds
>> 2013-12-11 09:38:50 jabber_lib.main: Unable to connect to jabber
>> servers, sleeping 119 seconds
>> 2013-12-11 09:40:53 jabber_lib.main: Unable to connect to jabber
>> servers, sleeping 109 seconds
>> 2013-12-11 09:42:45 jabber_lib.main: Unable to connect to jabber
>> servers, sleeping 68 seconds
>> 2013-12-11 09:43:56 jabber_lib.main: Unable to connect to jabber
>> servers, sleeping 71 seconds
>> 2013-12-11 09:45:10 jabber_lib.main: Unable to connect to jabber
>> servers, sleeping 110 seconds
>>
>>
>>
>>
>> Any help appreciated.
>> Regards
>>
>> _______________________________________________
>> Spacewalk-list mailing list
>> [email protected]
>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>>
>
> _______________________________________________
> Spacewalk-list mailing list
> [email protected]
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
_______________________________________________
Spacewalk-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/spacewalk-list

Reply via email to