Author Topic: Migration tool beta from 2.0 to 2.2 available for testing  (Read 13618 times)

tuxmania

  • Zen Apprentice
  • *
  • Posts: 45
  • Karma: +1/-0
    • View Profile
How do we handle this?
« Reply #15 on: October 10, 2011, 07:34:23 am »
I increased the number of possible users by using 'olcSizeLimit' , but now the migration tool do not like this. Should i remove it before migration?



Copying old ebox dirs to zentyal...
Importing old configuration...
Upgrading objects to new schema...
Upgrading ldap attributes (quotas from mail and users)...
root command set -e
/usr/share//zentyal-users/slapd.backup
mkdir -p /var/lib/ldap/
sh -c '/bin/rm -rf /var/lib/ldap//*'
/usr/sbin/slapadd -c  -F /etc/ldap/slapd.d -b 'cn=config' < /var/lib/zentyal/tmp/users-dump/master-config.ldif
chown -R openldap:openldap /etc/ldap/slapd.d
chown -R openldap:openldap /var/lib/ldap/ failed.
Error output: could not stat config file "/etc/ldap/slapd.conf": No such file or directory (2)
 slapcat: bad configuration file!
 Entry (olcOverlay={0}syncprov,olcDatabase={1}hdb,cn=config), attribute 'olcSizeLimit' not allowed
 slapadd: dn="olcOverlay={0}syncprov,olcDatabase={1}hdb,cn=config" (line=451): (65) attribute 'olcSizeLimit' not allowed

Command output: .
Exit value: 1run-parts: ./post-upgrade/004_upgrade_ldap exited with return code 1


Mittelerde

  • Zen Warrior
  • ***
  • Posts: 153
  • Karma: +8/-0
    • View Profile
Re: Migration tool beta from 2.0 to 2.2 available for testing
« Reply #16 on: October 10, 2011, 08:30:59 am »
Hello,
I have a master/slave architecture
1 Master 5 slaves + 1 extra computer (slave) for testing

i run the (new) migration tool on my slave 2.0.23 and get errors
File 1 in my attachement - the complete migration script output.
File 2 is the Zentyal.log

It was a fresh Zentyal 2.0.23 Installation
my test environment
Configuration:
as Slave - successful connected to Master
PDC with one configured share
1 configured user in Zarafa

after i run the migration tool i cant login to zarafa

Thanks for helping ;)


« Last Edit: October 10, 2011, 09:21:54 am by Mittelerde »

exekias

  • Zentyal Staff
  • Zen Warrior
  • *****
  • Posts: 196
  • Karma: +21/-0
    • View Profile
    • The Big Bug Theory
Re: Migration tool beta from 2.0 to 2.2 available for testing
« Reply #17 on: October 10, 2011, 10:37:17 am »
Hi Mittelerde,

I think this is your only remaining problem:

Code: [Select]
sh -c '/bin/rm -rf /var/lib/ldap-translucent//*'
/usr/sbin/slapadd -c -s -F /etc/ldap/slapd-translucent.d -b 'cn=config' < /var/lib/zentyal/tmp/users-dump/translucent-config.ldif
chown -R openldap:openldap /etc/ldap/slapd-translucent.d
chown -R openldap:openldap /var/lib/ldap-translucent/ failed.
Error output: Available database(s) do not allow slapcat
 olcTranslucentLocal: value #0: olcTranslucentLocal unable to parse attribute quota
 slapadd: could not add entry dn="olcOverlay={0}translucent,olcDatabase={1}hdb,cn=config" (line=540):
 slapadd: could not add entry dn="olcDatabase={0}ldap,olcOverlay={0}translucent,olcDatabase={1}hdb,cn=config" (line=554):

For some reason there is a syntaxis error in your users dump (/var/lib/zentyal/tmp/users-dump/translucent-config.ldif) around lines 540 and 554. Can you dump that file around these lines? Don't upload the full file, because it may contain you users passwords.

Best regards, and thank you for your feedback

topdog101

  • Zen Apprentice
  • *
  • Posts: 10
  • Karma: +0/-0
    • View Profile
Re: Migration tool beta from 2.0 to 2.2 available for testing
« Reply #18 on: October 11, 2011, 06:03:36 pm »
Sorry for late reply, I had to struggle with different hardware problem at the same time.

Thanks Guys,  this helped a lot.  I can now have access to my administration console.  problem related to this topic :-)

http://forum.zentyal.org/index.php/topic,8295.msg34228.html#msg34228

Topdog101

pcperfect

  • Zen Apprentice
  • *
  • Posts: 13
  • Karma: +1/-0
    • View Profile
Re: Migration tool beta from 2.0 to 2.2 available for testing
« Reply #19 on: October 14, 2011, 06:32:58 pm »
Migration went ok except for the webserver not starting after the migration due to the apache ssl config changing the ssl cert from /etc/apache/ssl/apache.pem to /etc/apache/ssl/ssl.pem, but the file itself wasn't renamed by the script.

mervyn

  • Zen Apprentice
  • *
  • Posts: 40
  • Karma: +0/-0
    • View Profile
Re: Migration tool beta from 2.0 to 2.2 available for testing
« Reply #20 on: October 16, 2011, 08:34:04 pm »
Migration seems to complete correctly but when I went to Module Status to enable Users and Groups an error was returned. These are the relevant entries from /var/log/zentyal/zentyal.log.
Quote

Linux ngnet-last 2.6.32-34-server #77-Ubuntu SMP Tue Sep 13 20:54:38 UTC 2011 x8                                                                                         6_64 GNU/Linux Ubuntu 10.04.3 LTS

GNU nano 2.2.2                                             File: zentyal.log

2011/10/16 14:32:45 INFO> Base.pm:250 EBox::Module::Base::__ANON__ - Saving config for module: objects
2011/10/16 14:32:45 INFO> Base.pm:250 EBox::Module::Base::__ANON__ - Saving config for module: network
2011/10/16 14:32:45 INFO> Base.pm:250 EBox::Module::Base::__ANON__ - Saving config for module: services
2011/10/16 14:32:46 INFO> Base.pm:250 EBox::Module::Base::__ANON__ - Saving config for module: firewall
2011/10/16 14:32:46 INFO> Base.pm:250 EBox::Module::Base::__ANON__ - Saving config for module: samba
2011/10/16 14:32:47 INFO> Service.pm:716 EBox::Module::Service::restartService - Restarting service for module: samba
2011/10/16 14:32:48 INFO> Base.pm:250 EBox::Module::Base::__ANON__ - Saving config for module: squid
2011/10/16 14:32:49 INFO> Service.pm:716 EBox::Module::Service::restartService - Restarting service for module: squid
2011/10/16 14:32:55 INFO> Service.pm:716 EBox::Module::Service::restartService - Restarting service for module: apache
2011/10/16 14:32:55 INFO> Service.pm:716 EBox::Module::Service::restartService - Restarting service for module: logs
2011/10/16 14:32:55 INFO> apache-restart:53 main:: - Waiting for apache to shutdown, attempt 0
2011/10/16 14:32:56 INFO> Service.pm:716 EBox::Module::Service::restartService - Restarting service for module: events
2011/10/16 14:32:56 WARN> Events.pm:507 EBox::Events::_adminDumbness - No event watchers have been enabled
2011/10/16 14:32:56 INFO> install-packages:116 main::__ANON__ - Package installation process finished
2011/10/16 14:33:08 INFO> Users.pm:44 EBox::CGI::UsersAndGroups::Wizard::Users::_processWizard - enabling usersandgroups module
2011/10/16 14:33:22 INFO> GlobalImpl.pm:539 EBox::GlobalImpl::saveAllModules - Saving config and restarting services: firewall mail logs
2011/10/16 14:33:22 INFO> Base.pm:228 EBox::Module::Base::save - Restarting service for module: firewall
2011/10/16 14:33:24 INFO> Base.pm:228 EBox::Module::Base::save - Restarting service for module: logs
2011/10/16 14:33:24 INFO> GlobalImpl.pm:653 EBox::GlobalImpl::saveAllModules - Changes saved successfully
2011/10/16 14:34:10 INFO> GlobalImpl.pm:539 EBox::GlobalImpl::saveAllModules - Saving config and restarting services: firewall mailfilter users mail samba logs
2011/10/16 14:34:10 INFO> Base.pm:228 EBox::Module::Base::save - Restarting service for module: firewall
2011/10/16 14:34:12 INFO> Base.pm:228 EBox::Module::Base::save - Restarting service for module: users
2011/10/16 14:34:12 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying
2011/10/16 14:34:13 ERROR> Sudo.pm:213 EBox::Sudo::_rootError - root command set -e
auth-client-config -a -p ebox
auth-client-config -a -p ebox -r
auth-client-config -t nss -p ebox failed.
Error output: Error in resetting 'nss': No previous settings found in current file
 --
 Errors found.  Aborting (no changes made)

Command output: .
Exit value: 1
2011/10/16 14:34:13 ERROR> GlobalImpl.pm:612 EBox::GlobalImpl::__ANON__ - Failed to save changes in module users: root command set -e
auth-client-config -a -p ebox
auth-client-config -a -p ebox -r
auth-client-config -t nss -p ebox failed.
Error output: Error in resetting 'nss': No previous settings found in current file
 --
 Errors found.  Aborting (no changes made)

Command output: .
Exit value: 1
2011/10/16 14:34:13 INFO> Base.pm:228 EBox::Module::Base::save - Restarting service for module: logs
2011/10/16 14:34:14 ERROR> GlobalImpl.pm:664 EBox::GlobalImpl::saveAllModules - The following modules failed while saving their changes, their state is unknown: users


So following the migration everything works except for all the modules that depend on an LDAP connection. 

jonathanpham

  • Zen Apprentice
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Re: Migration tool beta from 2.0 to 2.2 available for testing
« Reply #21 on: October 18, 2011, 05:46:06 am »
Hi all,
I ran this script on testing virtual machine and production server.
Please sure that when you ran the script on Zentyal has function as DNS server. The script was failed after step remove DNS server package. After my server can not resolve domain name for download new packages
Don't be afraid about you should do those step if Upgrade process was failed. I'd like to show you all steps in my upgrade Zentyal 2.0 to 2.2

1. On Zentyal 2.0 you need apt-get update and apt-get upgrade
2. Run migrate script
3. My case after remove DNS server. Server can not resolve dns name to download necessary packages for upgrade.
4. I rebooted server.
5. I re run migrate .sh script but it doesn't run upgrade Zentyal
6. I must run "apt-get install zentyal to install all Zentyal package then We could go to https://localhost for install other roles :-D

By the way I really love our Zentyal 2.2 server :-D

Phú, greeting from Vietnam :-D






mervyn

  • Zen Apprentice
  • *
  • Posts: 40
  • Karma: +0/-0
    • View Profile
Re: Migration tool beta from 2.0 to 2.2 available for testing
« Reply #22 on: October 18, 2011, 01:59:00 pm »
I can't say the issue is resolved but I have file sharing and ftp back working again.

I changed the Access Control rule for LDAP access from:

dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth to  dn.exact=cn=localroot,cn=config.

This was the original rule from Zentyal 2.0.  I'm not sure of the impact of this change on other modules but for me all the modules I need are working.

J. A. Calvo

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1986
  • Karma: +67/-3
    • View Profile
    • http://blogs.zentyal.org/jacalvo
Re: Migration tool beta from 2.0 to 2.2 available for testing
« Reply #23 on: October 18, 2011, 05:53:11 pm »
Hi all,

The tool has been updated with some fixes for ldap and ssl certificates problems you have reported. Thank you everybody for your feedback, any other feedback will be also welcome!
Zentyal Server Lead Developer

Mittelerde

  • Zen Warrior
  • ***
  • Posts: 153
  • Karma: +8/-0
    • View Profile
Re: Migration tool beta from 2.0 to 2.2 available for testing
« Reply #24 on: October 20, 2011, 10:36:21 am »
Hello,
I used the new migration script on my slave and get some errors again
ldap failure
zarafa is still version v6.40-8-27223 -> zarafa-admin -V
samba wont startup

my configuration http://forum.zentyal.org/index.php/topic,8263.msg34388.html#msg34388

Quote
Copying old ebox dirs to zentyal...
Importing old configuration...
Upgrading objects to new schema...
Upgrading ldap attributes (quotas from mail and users)...
root command set -e
/usr/share//zentyal-users/slapd.backup
mkdir -p /var/lib/ldap-translucent/
sh -c '/bin/rm -rf /var/lib/ldap-translucent//*'
/usr/sbin/slapadd -c -s -F /etc/ldap/slapd-translucent.d -b 'cn=config' < /var/lib/zentyal/tmp/users-dump/translucent-config.ldif
chown -R openldap:openldap /etc/ldap/slapd-translucent.d
chown -R openldap:openldap /var/lib/ldap-translucent/ failed.
Error output: Available database(s) do not allow slapcat
 olcTranslucentLocal: value #0: olcTranslucentLocal unable to parse attribute quota
 slapadd: could not add entry dn="olcOverlay={0}translucent,olcDatabase={1}hdb,cn=config" (line=540):
 slapadd: could not add entry dn="olcDatabase={0}ldap,olcOverlay={0}translucent,olcDatabase={1}hdb,cn=config" (line=554):

Command output: .
Exit value: 1run-parts: ./post-upgrade/004_upgrade_ldap exited with return code 1


thanks for your help
« Last Edit: October 21, 2011, 09:22:07 am by Mittelerde »

exekias

  • Zentyal Staff
  • Zen Warrior
  • *****
  • Posts: 196
  • Karma: +21/-0
    • View Profile
    • The Big Bug Theory
Re: Migration tool beta from 2.0 to 2.2 available for testing
« Reply #25 on: October 21, 2011, 12:31:08 pm »
Hi Mittelerde,

Can you copy here the offending lines? The file should be /var/lib/zentyal/tmp/users-dump/translucent-config.ldif

I'm interested in these lines (and their environment):

Code: [Select]
slapadd: could not add entry dn="olcOverlay={0}translucent,olcDatabase={1}hdb,cn=config" (line=540):
 slapadd: could not add entry dn="olcDatabase={0}ldap,olcOverlay={0}translucent,olcDatabase={1}hdb,cn=config" (line=554):

Best regards

master

  • Zen Apprentice
  • *
  • Posts: 8
  • Karma: +0/-0
    • View Profile
Re: Migration tool beta from 2.0 to 2.2 available for testing
« Reply #26 on: October 30, 2011, 12:17:38 am »
I upgraded today from Zentyal 2.0 to 2.2. Everything worked fine except for 'User quota'. Using the migration tool.
After the upgrade 'User quota' parameter were reset to 0 to all existing users. And it seems not possible to change it. When you try to change the value and then click on the change button it resets back to 0.
But when you create a new users the 'User quota' is working fine!.

Is there a solution or a workaround on how to change User quota on old users (users before the upgrade)?
Do I need to create all users again?

When I try to change the quota I see this in the syslog file:
"slapd[3871]: entry failed schema check: attribute 'quota' not allowed"

So does that mean the attribute quota needs to be defined for all users in LDAP?
Is that a new function to handle quotas?

Thanks in advance!

Kind regards,
/Master

exekias

  • Zentyal Staff
  • Zen Warrior
  • *****
  • Posts: 196
  • Karma: +21/-0
    • View Profile
    • The Big Bug Theory
Re: Migration tool beta from 2.0 to 2.2 available for testing
« Reply #27 on: October 31, 2011, 04:26:38 pm »
Master,

I updated your issue at:

http://forum.zentyal.org/index.php/topic,8539.new.html

Best regards

J. A. Calvo

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1986
  • Karma: +67/-3
    • View Profile
    • http://blogs.zentyal.org/jacalvo
Re: Migration tool beta from 2.0 to 2.2 available for testing
« Reply #28 on: October 31, 2011, 07:00:48 pm »
Hi all!

We have modified the migration script to migrate also the user quotas. Let us know if you find any problem.

Thanks again for your testing efforts!
Zentyal Server Lead Developer

kentavzor

  • Zen Apprentice
  • *
  • Posts: 7
  • Karma: +0/-0
    • View Profile
Re: Migration tool beta from 2.0 to 2.2 available for testing
« Reply #29 on: November 02, 2011, 08:43:14 am »
Hello!
I'm trying to make migration to the test server from 2.0 to 2.2.
First, getting a similar error described above (Can't call method "valueByName" on an undefined value at /usr/share/perl5/EBox/Network.pm line 2257).
 After correction of the script migration module try again from scratch. Now I have error:
Moving apache ssl files to new name
mv: cannot stat '/etc/apache/ssl/apache.pem:: No such file or directory
Access to the Web console does not.

I have worked out! After some manipulation.
1. Created the missing files.
2. Reconnect to the Internet.
3. Alternately ran the scripts from the directory post-upgrade
4. The script 070_move_ssl_certs changed the way instead of apache apache2 since finished the received an error message.
5. Completed remainder migrate script from # purge Zentyal 2.0

Web-based interface and all is well ok!
Hope this helps someone!
« Last Edit: November 03, 2011, 06:44:27 am by kentavzor »