NS8 Migration Failure for Mail, firewall rules?

Support
, ,
1

NethServer Version: NS8
Module: Mail and/or Migration

I’m trying to troubleshoot my migration issues. I get an error almost immediately on sync start (synchronization failed). When I paste the command to get the details, it seems it is is firewall issue. rsync gets a connection refused, and I can’t ping the address it is trying to sync to.

  "progress": "0.00",
  "time": "0.0",
  "exit": 0,
  "event": "migration-sync",
  "state": "running",
  "step": 0,
  "pid": 0,
  "action": ""
}
rsync: failed to connect to 10.5.4.1 (10.5.4.1): Connection refused (111)
rsync error: error in socket IO (code 10) at clientserver.c(126) [sender=3.1.2]
Traceback (most recent call last):
  File "/usr/sbin/ns8-action", line 120, in <module>
    task_id = run_task(api_endpoint, payload['token'], args.agent, args.action, input_data)
  File "/usr/sbin/ns8-action", line 46, in run_task
    post = request.urlopen(req)
  File "/usr/lib64/python3.6/urllib/request.py", line 223, in urlopen
    return opener.open(url, data, timeout)
  File "/usr/lib64/python3.6/urllib/request.py", line 532, in open
    response = meth(req, response)
  File "/usr/lib64/python3.6/urllib/request.py", line 642, in http_response
    'http', request, response, code, msg, hdrs)
  File "/usr/lib64/python3.6/urllib/request.py", line 570, in error
    return self._call_chain(*args)
  File "/usr/lib64/python3.6/urllib/request.py", line 504, in _call_chain
    result = func(*args)
  File "/usr/lib64/python3.6/urllib/request.py", line 650, in http_error_default
    raise HTTPError(req.full_url, code, msg, hdrs, fp)
urllib.error.HTTPError: HTTP Error 403: Forbidden

I checked the firewall on the NS8 box using firewall-cmd --list-all, ns-wireguard is listed as a service, but I don’t get many details there. The GUI shows ns-wireguard as port 55820

Any ideas to try?

2

The connection is being “refused,” so it doesn’t seem to be blocked by the NS8 firewall. I suspect the Rsync server isn’t running on the NS8 side.

There might be a prior error in the NS8 log. Can you check for that?

A “Forbidden” error indicates an issue with the authentication token. I suggest restarting the migration from scratch, if possible. Also, clean up the NS8 cluster from any installed modules and user domains.

3

The forbidden message lead me to the same conclusion. I was able to ping the NS8 IP, but I couldn’t get rsync to work.

It seems like a re-do of the migration module is in order…