Difference between revisions of "SME9DEV user feedback"

From SME Server
Jump to navigationJump to search
 
(44 intermediate revisions by 2 users not shown)
Line 1: Line 1:
−
{{Tip box|This page contains bits and pieces of user feedback regarding the development (and testing) of the next SME Server release based on CentOS6. <BR>See [[SME_on_CentOS_6]]. Your feedback would be appreciated too, so please share you feedback on this page. Thanks!. Please note that all the below is unstructured user feedback. Your findings that require developers attention should be logged in our Bug Tracker}}
+
{{Tip box|This page contains bits and pieces of user feedback regarding the development (and testing) of the next SME Server release based on CentOS6. <BR>See [[SME_on_CentOS_6|SME on Centos 6]]. Your feedback would be appreciated too, so please share you feedback on this page. Thanks!. Please note that all the below is unstructured user feedback. Your findings that require developers attention should be logged in our Bug Tracker}}
 +
 
 +
Back to [[SME_Server_9.0_Development|SME Server 9.0 Development]]
 +
 
 +
 
 +
{{note box| This page is now obsolete, kept for reference only. see [[SME Server:9.0|SME Server 9 Release Notes]]}}
 +
 
 +
__TOC__
  
 
You can find our Bug Tracker [http://bugs.contribs.org/bugs/buglist.cgi?product=SME%20Server%209.X&component=Cleanup&resolution=--- here]  
 
You can find our Bug Tracker [http://bugs.contribs.org/bugs/buglist.cgi?product=SME%20Server%209.X&component=Cleanup&resolution=--- here]  
  
−
== HTTPD ==
+
Based on the below user feedback the page [[SME9BuildQueue]] shows the current status of processing the user feedback and building new RPM packages
−
* mod_ssl is not installed (should be listed as a requirement for e-smith-apache)
+
 
 +
 
 +
== HTTPD / server-manager ==
 +
* mod_ssl is not installed (should be listed as a requirement for e-smith-apache), see [[bugzilla:7234|Bug #7234: e-smith-apache should require mod_ssl]]
 
  yum install mod_ssl
 
  yum install mod_ssl
  
−
* mod_auth_tkt used to provide the perl Apache::AuthTkt module. It's not the case anymore so this module is now missing, preventing the server-manager to load. A standalone perl-Apache-AuthTkt rpm is available on repoforge
+
* <strike>mod_auth_tkt used to provide the perl Apache::AuthTkt module. It's not the case anymore so this module is now missing, preventing the server-manager to load. A standalone perl-Apache-AuthTkt rpm is available on repoforge. See </strike>[[bugzilla:7236|Bug #7236: e-smith-manager should require perl(Apache::AuthTkt)]]
−
* perl-suidperl is not installed (should be added as required by e-smith-manager)
+
* <strike>perl-suidperl is not installed (should be added as required by e-smith-manager). See </strike>[[bugzilla:7235|Bug #7235: e-smith-manager should require perl-suidperl]]
 
  yum install perl-suidperl
 
  yum install perl-suidperl
  
Line 14: Line 24:
 
  [Fri Jan 25 22:59:23 2013] [error] [client 127.0.0.1] Can't locate object method "host" via package "URI::_generic" at /etc/e-smith/web/common/cgi-bin/login line 162., referer: https://192.168.7.154/server-common/cgi-bin/login?redirect=1&back=http%253a%252f%252f192.168.7.154%252fserver-manager%252f
 
  [Fri Jan 25 22:59:23 2013] [error] [client 127.0.0.1] Can't locate object method "host" via package "URI::_generic" at /etc/e-smith/web/common/cgi-bin/login line 162., referer: https://192.168.7.154/server-common/cgi-bin/login?redirect=1&back=http%253a%252f%252f192.168.7.154%252fserver-manager%252f
  
−
* If we try to access the server-manager again, it's working (as we already have our cookie). It's just the redirection after the login which is broken
+
* If we try to access the server-manager again, it's working (as we already have our cookie). It's just the redirection after the login which is broken. The problem seems to be that the URL is not encoded in the same way in the back variable. It seems that the back parameter is double encoded. We can update the regexp which detects if the parameter needs to be url unencoded in /etc/e-smith/web/common/cgi-bin/login, line 116:
 +
<pre>
 +
$back = uri_unescape($back) if $back && $back =~ m/^https?%3A%2F%2F/;
 +
</pre>
 +
needs to become:
 +
<pre>
 +
$back = uri_unescape($back) if $back && $back =~ m/^https?%(25)?3A%(25)?2F%(25)?2F/i;
 +
</pre>
 +
 
 +
Or find why the param is double encoded. See [[bugzilla:7254|Bug #7253: back URL on server-manager is double encoded]]
  
 +
* <strike>The only two panels which doesn't work (well, I'v not tested all the functionalities) are Quotas and Backups. Both dies with the following error:</strike>
 +
 +
[Sun Jan 27 19:53:29 2013] [error] [client 127.0.0.1] Can't locate Quota.pm in @INC (@INC contains: /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5) at /etc/e-smith/web/panels/manager/cgi-bin/backup line 3035., referer: https://sme9.domain.tld/server-manager/navigation
 +
 +
<strike>There is a perl-Quotas rpm installed but it's compiled for el5, so the path are not correct. We need a rebuilt rpm for perl-Quota.</strike> See [[bugzilla:7253|Bug #7253: Rebuild perl-Quota for EL6]]
  
 
==Squid ==
 
==Squid ==
Line 41: Line 65:
 
* we need to convert acl in CIDR notation (for now, they are retrieved using esmith::NetworksDB::local_access_spec, which doesn't support cidr)
 
* we need to convert acl in CIDR notation (for now, they are retrieved using esmith::NetworksDB::local_access_spec, which doesn't support cidr)
 
* we need to remove /etc/e-smith/templates/etc/squid/squid.conf/35extension_methods (extensionmethods is not supported anymore as it was not usefull anymore)
 
* we need to remove /etc/e-smith/templates/etc/squid/squid.conf/35extension_methods (extensionmethods is not supported anymore as it was not usefull anymore)
 +
 +
See [[bugzilla:7250|Bug #7250: Squid config needs to be adjusted]]
 +
  
 
== clamav ==
 
== clamav ==
−
* user created during clamd installation is now clam (used to be clamav), templates for /etc/clamd.conf need to be adjusted
+
* user created during clamd installation is now clam (used to be clamav), templates for /etc/clamd.conf and /etc/freshclam.conf need to be adjusted
−
* DatabaseDirectory is now /var/lib/clamav (used to be /var/clamav), templates for /etc/clamd.conf need to be adjusted
+
* DatabaseDirectory is now /var/lib/clamav (used to be /var/clamav), templates for /etc/clamd.conf and /etc/freshclam.conf need to be adjusted
 
* LocalSocket should now be /var/run/clamav/clamd.socket (use to be /var/clamav/clamd.socket), templates for /etc/clamd.conf need to be adjusted
 
* LocalSocket should now be /var/run/clamav/clamd.socket (use to be /var/clamav/clamd.socket), templates for /etc/clamd.conf need to be adjusted
 
* Permissions on /var/spool/qpsmtpd/ (provided by smeserver-qpsmtpd) should also be adjusted (clam instead of clamav group)
 
* Permissions on /var/spool/qpsmtpd/ (provided by smeserver-qpsmtpd) should also be adjusted (clam instead of clamav group)
 +
 +
 +
The clamav rpms (clamav, clamav-db, clamd) with these issues are the one from EPEL. I'm not sure they are the right one (I think on EL5 we get them from rpmforge), so maybe those issues are just not present if we get the package from the correct repo.
  
  
 
== qpsmtpd ==
 
== qpsmtpd ==
−
Doesn't start. See http://bugs.contribs.org/bugs/show_bug.cgi?id=7223
+
<strike>Doesn't start</strike>. See [[bugzilla:7263|Bug #7263: Rebuild qpsmtpd]]
 
  @400000005102ec023094f554 Can't locate Qpsmtpd/TcpServer.pm in @INC (@INC contains: lib /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5) at /usr/bin/qpsmtpd-forkserver line 13.
 
  @400000005102ec023094f554 Can't locate Qpsmtpd/TcpServer.pm in @INC (@INC contains: lib /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5) at /usr/bin/qpsmtpd-forkserver line 13.
 
  @400000005102ec023094fd24 BEGIN failed--compilation aborted at /usr/bin/qpsmtpd-forkserver line 13
 
  @400000005102ec023094fd24 BEGIN failed--compilation aborted at /usr/bin/qpsmtpd-forkserver line 13
  
−
* We should rebuild qpsmtpd with a simple spec file change to use /usr/share/perl5/vendor_perl instead of /usr/lib/perl5/site_perl
+
* <strike>We should rebuild qpsmtpd with a simple spec file change to use /usr/share/perl5/vendor_perl instead of /usr/lib/perl5/site_perl</strike>
−
 
 
  
 
== radius ==
 
== radius ==
 
Radiusd doesn't start with this error
 
Radiusd doesn't start with this error
 
  radiusd: Error: No log destination specified
 
  radiusd: Error: No log destination specified
−
* To fix this error, we need to add ”-l stdout” as argument to radiusd in /var/service/radiusd/run
+
* To fix this error, we need to add ”-l stdout” as argument to radiusd in /var/service/radiusd/run. See [[bugzilla:7251|Bug #7251: radiusd arg need to be adjusted]]
 
After that, the following error occures:
 
After that, the following error occures:
 
<pre>
 
<pre>
Line 69: Line 98:
 
@400000005103145937a39954 Sat Jan 26 00:25:03 2013 : Error: Failed to load virtual server <default>
 
@400000005103145937a39954 Sat Jan 26 00:25:03 2013 : Error: Failed to load virtual server <default>
 
</pre>
 
</pre>
−
* To fix this, we have to install freeradius-ldap, which is now in its own package (freeradius-ldap should be added as required by e-smith-radiusd)
+
* To fix this, we have to install freeradius-ldap, which is now in its own package (freeradius-ldap should be added as required by e-smith-radiusd). See [[bugzilla:7252|Bug #7252: e-smith-radiusd should require freeradius-ldap]]
  
  
 
== syslog ==
 
== syslog ==
−
* rsyslog is now used instead of syslog. We need to replace all occurance of syslog with rsyslog (see http://bugs.contribs.org/bugs/show_bug.cgi?id=7221)
+
* rsyslog is now used instead of syslog. We need to replace all occurance of syslog with rsyslog [[bugzilla:7221|Bug #7221: syslog -> rsyslog]]
  
  
 
== upstart/sysvinit ==
 
== upstart/sysvinit ==
−
* in EL6, SysVinit is replaced with upstart, and upstart doesn't support rc7 runlevel. One option is to move to rc4 as default runlevel. See http://bugs.contribs.org/bugs/show_bug.cgi?id=7217 and http://bugs.contribs.org/bugs/show_bug.cgi?id=7227
+
* in EL6, SysVinit is replaced with upstart, and upstart doesn't support rc7 runlevel. One option is to move to rc4 as default runlevel.
 +
[[bugzilla:7217|Bug #7217: SysVinit -> upstart]] [[bugzilla:7227|Bug #7227: rc7 -> rc4l]]
  
  
 
== LDAP ==
 
== LDAP ==
−
* openldap-servers is not installed (missing a Requires: openldap-servers in e-smith-ldap's spec file)
+
* openldap-servers is not installed (missing a Requires: openldap-servers in e-smith-ldap's spec file). See [[bugzilla:7233|Bug #7233: e-smith-ldap should require openldap-servers]]
−
* we need to add -f /etc/openldap/slapd.conf arg when launching slapd (in /var/service/ldap/run), or it will try to convert this file the the new slapd.d style
+
* we need to add -f /etc/openldap/slapd.conf arg when launching slapd (in /var/service/ldap/run), or it will try to convert this file the the new slapd.d style. See [[bugzilla:7258|Bug #7258: slapd args need to be adjusted]]
−
* schema file /etc/openldap/schema/redhat/autofs.schema is missing. In EL5, it was provided by openldap-servers. I don't think this schema is used so it may just need to be removed from the config file
+
* schema file /etc/openldap/schema/redhat/autofs.schema is missing. In EL5, it was provided by openldap-servers. I don't think this schema is used so it may just need to be removed from the config file [[bugzilla:7259|Bug #7259:  Remove autofs.schema from slapd config]]
 
* slapd fails to start with this error:
 
* slapd fails to start with this error:
 
  /etc/openldap/slapd.conf: line 27: unknown directive <schemacheck> outside backend info and database definitions
 
  /etc/openldap/slapd.conf: line 27: unknown directive <schemacheck> outside backend info and database definitions
 +
 +
See [[bugzilla:7260|Bug #7260: fix slapd.conf]]
  
 
== console ==
 
== console ==
−
* kudzu has been removed from EL6, so now this bug http://bugs.contribs.org/show_bug.cgi?id=3596 needs to be fixed so we can detect network interfaces.
+
* <strike>kudzu has been removed from EL6, so now this bug </strike>[[bugzilla:3596|Bug #3596: Stop using kudzu for NIC detection]] <strike>needs to be fixed so we can detect network interfaces. A patch is waiting to be aproved.</strike>
−
* Here's a code snipet which seems to work, the only thing missing is to retrieve the interface description from hwdata, for now, it just return the name 'eth0, eth1 etc… instead of the description (in esmith/ethernet.pm)
+
 
 +
== iptables ==
 +
* Starting the masq script (/etc/init.d/masq start) throw several warnings:
 +
<pre>
 +
[root@sme9 ~]# /etc/init.d/masq restart
 +
 
 +
Shutting down IP masquerade and firewall rules:        Done!
  
−
<syntaxhighlight lang="perl">
+
Enabling IP masquerading: WARNING: Deprecated config file /etc/modprobe.conf, all config files belong into /etc/modprobe.d/.
−
opendir(my $dh, "/sys/class/net") or die "Couldn't open /sys/class/net: $!";
+
WARNING: Deprecated config file /etc/modprobe.conf, all config files belong into /etc/modprobe.d/.
−
    my @nics = grep { $_ !~ m/\./ } readdir($dh);
+
Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`).
−
    my $adapters = '';
+
Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`).
−
    my $index = 1;
+
done
−
    foreach my $nic (@nics){
+
[root@sme9 ~]#  
−
        next if (
+
</pre>
−
            # skip loopback
+
* We need to migrate settings in /etc/modprobe.conf into /etc/modprobe.d/. See [[bugzilla:7261|Bg #7261: move /etc/modprobe.conf to /etc/modprobe.d/]]
−
            $nic eq 'lo' ||
+
* masq templates need to be adjusted to use extrapositioned negation. See [[bugzilla:7262|Bug #7262: update iptables syntaxe in masq script]]
−
            # skip non links
+
 
−
            !-l "/sys/class/net/$nic" ||
+
== ntp ==
−
            # skip wireless nics
+
* the ntp daemon doesn't start, and prints this error in its log (/var/log/ntpd/current)
−
            -d "/sys/class/net/$nic/wireless" ||
+
<pre>
−
            -l "/sys/class/net/$nic/phy80211" ||
+
@40000000510573140c2615a4 27 Jan 19:33:46 ntpdate[22096]: step time server 213.251.172.92 offset -0.002228 sec
−
            # skip bridges
+
@40000000510573140c43658c ntpd: error while loading shared libraries: libc.so.6: failed to map segment from shared object: Cannot allocate memory
−
            -d "/sys/class/net/$nic/bridge" ||
+
</pre>
−
            # skip vlans
+
The problem is the memory limit which is too low. The default is set to 12000000 (db configuration getprop ntpd MemLimit). Rising this value fixes the issue (we need to find the best value here, Ive tried 22000000). See [[bugzilla:7243|Bug #7243: Memory limit is too low for ntpd]]
−
            -f "/proc/net/vlan/$nic" ||
+
 
−
            # skip bonds
+
 
−
            -d "/sys/class/net/$nic/bonding" ||
+
== yum ==
−
            # skip tun/tap
+
* <strike>The package smeserver-yum requires yum-fastestmirror, but in EL6, this plugin is renamed to yum-plugin-fastestmirror. We need to update the spec file for smeserver-yum. See </strike>[[bugzilla:7241|Bug #7241: update smeserver-yum dependancies to use yum-plugin-fastestmirror]]
−
            -f "/sys/class/net/$nic/tun_flags" ||
+
 
−
            # skip dummy
+
== samba ==
−
            -d "/sys/devices/virtual/net/$nic"
+
* <strike>In EL6, the default samba version is 3.5.10 (and will be 3.6 in the upcoming CentOS 6.4), so we need to update the dependancies set in e-smith-samba to use samba instead of samba3x. See [[bugzilla:7242|Bug #7242: update e-smith-samba dependancies]]</strike>
−
        );
 
−
        # Now we should be left only wth ethernet adapters
 
−
        my $mac = `cat /sys/class/net/$nic/address`;
 
−
        chomp($mac);
 
−
        my $driver = `readlink /sys/class/net/$nic/device/driver`;
 
−
        $driver = `basename $driver`;
 
−
        chomp($driver);
 
−
        $adapters .= "EthernetDriver" . $index++ . "\t" . $driver . "\t" .
 
−
                    $mac . "\t" . "$nic" . "\n";
 
−
    }
 
−
    return $adapters;
 
−
</syntaxhighlight>
 
  
 
== various ==
 
== various ==
−
* manually running expand-templates has no effect (but the command exit with success). Templates expanded in signal-event are working
+
* manually running expand-templates has no effect (but the command exit with success). Templates expanded in signal-event are working [[bugzilla:7324|Bug #7324]]
 +
 
 +
<noinclude>[[Category:SME9-Development]]</noinclude>

Latest revision as of 06:06, 12 April 2014

Information.png Tip:
This page contains bits and pieces of user feedback regarding the development (and testing) of the next SME Server release based on CentOS6.
See SME on Centos 6. Your feedback would be appreciated too, so please share you feedback on this page. Thanks!. Please note that all the below is unstructured user feedback. Your findings that require developers attention should be logged in our Bug Tracker


Back to SME Server 9.0 Development


Important.png Note:
This page is now obsolete, kept for reference only. see SME Server 9 Release Notes


You can find our Bug Tracker here

Based on the below user feedback the page SME9BuildQueue shows the current status of processing the user feedback and building new RPM packages


HTTPD / server-manager

yum install mod_ssl

yum install perl-suidperl
  • after fixing those two issues, we get a blank page after login on the server-manager, logs (admin_error_log) print the following error:
[Fri Jan 25 22:59:23 2013] [error] [client 127.0.0.1] Can't locate object method "host" via package "URI::_generic" at /etc/e-smith/web/common/cgi-bin/login line 162., referer: https://192.168.7.154/server-common/cgi-bin/login?redirect=1&back=http%253a%252f%252f192.168.7.154%252fserver-manager%252f
  • If we try to access the server-manager again, it's working (as we already have our cookie). It's just the redirection after the login which is broken. The problem seems to be that the URL is not encoded in the same way in the back variable. It seems that the back parameter is double encoded. We can update the regexp which detects if the parameter needs to be url unencoded in /etc/e-smith/web/common/cgi-bin/login, line 116:
$back = uri_unescape($back) if $back && $back =~ m/^https?%3A%2F%2F/;

needs to become: 

$back = uri_unescape($back) if $back && $back =~ m/^https?%(25)?3A%(25)?2F%(25)?2F/i;

Or find why the param is double encoded. See Bug #7253: back URL on server-manager is double encoded

  • The only two panels which doesn't work (well, I'v not tested all the functionalities) are Quotas and Backups. Both dies with the following error:
[Sun Jan 27 19:53:29 2013] [error] [client 127.0.0.1] Can't locate Quota.pm in @INC (@INC contains: /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5) at /etc/e-smith/web/panels/manager/cgi-bin/backup line 3035., referer: https://sme9.domain.tld/server-manager/navigation

There is a perl-Quotas rpm installed but it's compiled for el5, so the path are not correct. We need a rebuilt rpm for perl-Quota. See Bug #7253: Rebuild perl-Quota for EL6

Squid

squid doesn't start, and the following errors are printed in /var/log/messages 

2013/01/25 22:17:35| WARNING: -D command-line option is obsolete.
2013/01/25 22:17:35| ERROR: '0.0.0.0/0.0.0.0' needs to be replaced by the term 'all'.
2013/01/25 22:17:35| SECURITY NOTICE: Overriding config setting. Using 'all' instead.
2013/01/25 22:17:35| WARNING: (B) '::/0' is a subnetwork of (A) '::/0'
2013/01/25 22:17:35| WARNING: because of this '::/0' is ignored to keep splay tree searching predictable
2013/01/25 22:17:35| WARNING: You should probably remove '::/0' from the ACL named 'all'
2013/01/25 22:17:35| WARNING: Netmasks are deprecated. Please use CIDR masks instead.
2013/01/25 22:17:35| WARNING: IPv4 netmasks are particularly nasty when used to compare IPv6 to IPv4 ranges.
2013/01/25 22:17:35| WARNING: For now we will assume you meant to write /24
2013/01/25 22:17:35| WARNING: Netmasks are deprecated. Please use CIDR masks instead.
2013/01/25 22:17:35| WARNING: IPv4 netmasks are particularly nasty when used to compare IPv6 to IPv4 ranges.
2013/01/25 22:17:35| WARNING: For now we will assume you meant to write /24
2013/01/25 22:17:35| ERROR: Directive 'extension_methods' is obsolete.

So several problems here:

  • We need to remove the -D arg from /var/services/squid/run
  • We need to remove the file /etc/e-smith/templates/etc/squid/squid.conf/20ACL00all (which just contains acl all src 0.0.0.0/0.0.0.0 and is not needed anymore)
  • we need to convert acl in CIDR notation (for now, they are retrieved using esmith::NetworksDB::local_access_spec, which doesn't support cidr)
  • we need to remove /etc/e-smith/templates/etc/squid/squid.conf/35extension_methods (extensionmethods is not supported anymore as it was not usefull anymore)

See Bug #7250: Squid config needs to be adjusted


clamav

  • user created during clamd installation is now clam (used to be clamav), templates for /etc/clamd.conf and /etc/freshclam.conf need to be adjusted
  • DatabaseDirectory is now /var/lib/clamav (used to be /var/clamav), templates for /etc/clamd.conf and /etc/freshclam.conf need to be adjusted
  • LocalSocket should now be /var/run/clamav/clamd.socket (use to be /var/clamav/clamd.socket), templates for /etc/clamd.conf need to be adjusted
  • Permissions on /var/spool/qpsmtpd/ (provided by smeserver-qpsmtpd) should also be adjusted (clam instead of clamav group)


The clamav rpms (clamav, clamav-db, clamd) with these issues are the one from EPEL. I'm not sure they are the right one (I think on EL5 we get them from rpmforge), so maybe those issues are just not present if we get the package from the correct repo.


qpsmtpd

Doesn't start. See Bug #7263: Rebuild qpsmtpd 

@400000005102ec023094f554 Can't locate Qpsmtpd/TcpServer.pm in @INC (@INC contains: lib /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5) at /usr/bin/qpsmtpd-forkserver line 13.
@400000005102ec023094fd24 BEGIN failed--compilation aborted at /usr/bin/qpsmtpd-forkserver line 13
  • We should rebuild qpsmtpd with a simple spec file change to use /usr/share/perl5/vendor_perl instead of /usr/lib/perl5/site_perl

radius

Radiusd doesn't start with this error 

radiusd: Error: No log destination specified

After that, the following error occures: 

@400000005103145934920bc4 Sat Jan 26 00:25:03 2013 : Info: Starting - reading configuration files ...
@400000005103145937a239c4 Sat Jan 26 00:25:03 2013 : Error: /etc/raddb/radiusd.conf[115]: Failed to link to module 'rlm_ldap': file not found 
@400000005103145937a2c27c Sat Jan 26 00:25:03 2013 : Error: /etc/raddb/radiusd.conf[177]: Failed to load module "ldap".
@400000005103145937a2fd14 Sat Jan 26 00:25:03 2013 : Error: /etc/raddb/radiusd.conf[177]: Failed to parse "ldap" entry.
@400000005103145937a39954 Sat Jan 26 00:25:03 2013 : Error: Failed to load virtual server <default>


syslog


upstart/sysvinit

  • in EL6, SysVinit is replaced with upstart, and upstart doesn't support rc7 runlevel. One option is to move to rc4 as default runlevel.

Bug #7217: SysVinit -> upstart Bug #7227: rc7 -> rc4l


LDAP

/etc/openldap/slapd.conf: line 27: unknown directive <schemacheck> outside backend info and database definitions

See Bug #7260: fix slapd.conf

console

iptables

  • Starting the masq script (/etc/init.d/masq start) throw several warnings:
[root@sme9 ~]# /etc/init.d/masq restart

Shutting down IP masquerade and firewall rules:         Done!

Enabling IP masquerading: WARNING: Deprecated config file /etc/modprobe.conf, all config files belong into /etc/modprobe.d/.
WARNING: Deprecated config file /etc/modprobe.conf, all config files belong into /etc/modprobe.d/.
Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`).
Using intrapositioned negation (`--option ! this`) is deprecated in favor of extrapositioned (`! --option this`).
done
[root@sme9 ~]#

ntp

  • the ntp daemon doesn't start, and prints this error in its log (/var/log/ntpd/current)
@40000000510573140c2615a4 27 Jan 19:33:46 ntpdate[22096]: step time server 213.251.172.92 offset -0.002228 sec
@40000000510573140c43658c ntpd: error while loading shared libraries: libc.so.6: failed to map segment from shared object: Cannot allocate memory

The problem is the memory limit which is too low. The default is set to 12000000 (db configuration getprop ntpd MemLimit). Rising this value fixes the issue (we need to find the best value here, Ive tried 22000000). See Bug #7243: Memory limit is too low for ntpd


yum

samba

  • In EL6, the default samba version is 3.5.10 (and will be 3.6 in the upcoming CentOS 6.4), so we need to update the dependancies set in e-smith-samba to use samba instead of samba3x. See Bug #7242: update e-smith-samba dependancies

various

  • manually running expand-templates has no effect (but the command exit with success). Templates expanded in signal-event are working Bug #7324
Retrieved from "https://wiki.koozali.org/index.php?title=SME9DEV_user_feedback&oldid=24037"