Unsuccessful NS8 migration of a simple NS7 server

capote · November 29, 2023, 2:30pm

ov 29 13:38:42 daho-nethserver systemd: Starting Cockpit Web Service...
Nov 29 13:38:42 daho-nethserver remotectl: /usr/bin/chcon: can't apply partial context to unlabeled file ‘/etc/cockpit/ws-certs.d/99-nethserver.cert’
Nov 29 13:38:42 daho-nethserver remotectl: remotectl: couldn't change SELinux type context 'etc_t' for certificate: /etc/cockpit/ws-certs.d/99-nethserver.cert: Child process exited with code 1
Nov 29 13:38:42 daho-nethserver systemd: Started Cockpit Web Service.
Nov 29 13:38:42 daho-nethserver cockpit-ws: Using certificate: /etc/cockpit/ws-certs.d/99-nethserver.cert
Nov 29 13:38:51 daho-nethserver cockpit-session: pam_ssh_add: Failed adding some keys
Nov 29 13:38:51 daho-nethserver systemd-logind: New session 6 of user root.
Nov 29 13:38:51 daho-nethserver systemd: Started Session 6 of user root.
Nov 29 13:38:54 daho-nethserver cockpit-ws: logged in user session
Nov 29 13:38:55 daho-nethserver cockpit-ws: New connection to session from 192.168.3.151
Nov 29 13:38:55 daho-nethserver dbus[708]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service'
Nov 29 13:38:55 daho-nethserver systemd: Starting Hostname Service...
Nov 29 13:38:55 daho-nethserver kernel: ndpi_net_init:ns4 OK
Nov 29 13:38:55 daho-nethserver dbus[708]: [system] Successfully activated service 'org.freedesktop.hostname1'
Nov 29 13:38:55 daho-nethserver systemd: Started Hostname Service.
Nov 29 13:38:56 daho-nethserver dbus[708]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service'
Nov 29 13:38:56 daho-nethserver systemd: Starting Time & Date Service...
Nov 29 13:38:56 daho-nethserver dbus[708]: [system] Successfully activated service 'org.freedesktop.timedate1'
Nov 29 13:38:56 daho-nethserver systemd: Started Time & Date Service.
Nov 29 13:38:56 daho-nethserver cockpit-ws: New connection to session from 192.168.3.151
Nov 29 13:38:56 daho-nethserver dbus[708]: [system] Activating via systemd: service name='org.freedesktop.realmd' unit='realmd.service'
Nov 29 13:38:56 daho-nethserver systemd: Starting Realm and Domain Configuration...
Nov 29 13:38:56 daho-nethserver dbus[708]: [system] Successfully activated service 'org.freedesktop.realmd'
Nov 29 13:38:56 daho-nethserver systemd: Started Realm and Domain Configuration.
Nov 29 13:39:27 daho-nethserver kernel: ndpi_net_exit:ns4
Nov 29 13:39:47 daho-nethserver /sbin/e-smith/db[26254]: /var/lib/nethserver/db/configuration: OLD wg-quick@wg0=service|Address||RemoteEndpoint||RemoteKey||RemoteNetwork|10.5.4.0/24|SecretKey|wNQ37qREBR7R58b3tRAIujNQ2Bi2HwIbMudd39Mos0E=|status|disabled
Nov 29 13:39:47 daho-nethserver /sbin/e-smith/db[26254]: /var/lib/nethserver/db/configuration: NEW wg-quick@wg0=service|Address|10.5.4.2|RemoteEndpoint||RemoteKey||RemoteNetwork|10.5.4.0/24|SecretKey|wNQ37qREBR7R58b3tRAIujNQ2Bi2HwIbMudd39Mos0E=|status|disabled
Nov 29 13:39:47 daho-nethserver /sbin/e-smith/db[26254]: /var/lib/nethserver/db/configuration: OLD wg-quick@wg0=service|Address|10.5.4.2|RemoteEndpoint||RemoteKey||RemoteNetwork|10.5.4.0/24|SecretKey|wNQ37qREBR7R58b3tRAIujNQ2Bi2HwIbMudd39Mos0E=|status|disabled
Nov 29 13:39:47 daho-nethserver /sbin/e-smith/db[26254]: /var/lib/nethserver/db/configuration: NEW wg-quick@wg0=service|Address|10.5.4.2|RemoteEndpoint|ns8.home.dargels.de:55820|RemoteKey||RemoteNetwork|10.5.4.0/24|SecretKey|wNQ37qREBR7R58b3tRAIujNQ2Bi2HwIbMudd39Mos0E=|status|disabled
Nov 29 13:39:47 daho-nethserver /sbin/e-smith/db[26254]: /var/lib/nethserver/db/configuration: OLD wg-quick@wg0=service|Address|10.5.4.2|RemoteEndpoint|ns8.home.dargels.de:55820|RemoteKey||RemoteNetwork|10.5.4.0/24|SecretKey|wNQ37qREBR7R58b3tRAIujNQ2Bi2HwIbMudd39Mos0E=|status|disabled
Nov 29 13:39:47 daho-nethserver /sbin/e-smith/db[26254]: /var/lib/nethserver/db/configuration: NEW wg-quick@wg0=service|Address|10.5.4.2|RemoteEndpoint|ns8.home.dargels.de:55820|RemoteKey|yp95aFVfAT5H4OVzkuZOhsb6xTKclS7R39lWn6ZDBE8=|RemoteNetwork|10.5.4.0/24|SecretKey|wNQ37qREBR7R58b3tRAIujNQ2Bi2HwIbMudd39Mos0E=|status|disabled
Nov 29 13:39:47 daho-nethserver /sbin/e-smith/db[26254]: /var/lib/nethserver/db/configuration: OLD wg-quick@wg0=service|Address|10.5.4.2|RemoteEndpoint|ns8.home.dargels.de:55820|RemoteKey|yp95aFVfAT5H4OVzkuZOhsb6xTKclS7R39lWn6ZDBE8=|RemoteNetwork|10.5.4.0/24|SecretKey|wNQ37qREBR7R58b3tRAIujNQ2Bi2HwIbMudd39Mos0E=|status|disabled
Nov 29 13:39:47 daho-nethserver /sbin/e-smith/db[26254]: /var/lib/nethserver/db/configuration: NEW wg-quick@wg0=service|Address|10.5.4.2|RemoteEndpoint|ns8.home.dargels.de:55820|RemoteKey|yp95aFVfAT5H4OVzkuZOhsb6xTKclS7R39lWn6ZDBE8=|RemoteNetwork|10.5.4.0/24|SecretKey|wNQ37qREBR7R58b3tRAIujNQ2Bi2HwIbMudd39Mos0E=|status|enabled
Nov 29 13:39:48 daho-nethserver /sbin/e-smith/db[26255]: /var/lib/nethserver/db/configuration: OLD agent=service|status|disabled
Nov 29 13:39:48 daho-nethserver /sbin/e-smith/db[26255]: /var/lib/nethserver/db/configuration: NEW agent=service|status|enabled
Nov 29 13:39:48 daho-nethserver /sbin/e-smith/db[26256]: /var/lib/nethserver/db/configuration: OLD ns8=configuration|Host||Password||TLSVerify|enabled|User|
Nov 29 13:39:48 daho-nethserver /sbin/e-smith/db[26256]: /var/lib/nethserver/db/configuration: NEW ns8=configuration|Host|ns8.home.dargels.de|Password||TLSVerify|enabled|User|
Nov 29 13:39:48 daho-nethserver /sbin/e-smith/db[26256]: /var/lib/nethserver/db/configuration: OLD ns8=configuration|Host|ns8.home.dargels.de|Password||TLSVerify|enabled|User|
Nov 29 13:39:48 daho-nethserver /sbin/e-smith/db[26256]: /var/lib/nethserver/db/configuration: NEW ns8=configuration|Host|ns8.home.dargels.de|LeaderIpAddress|10.5.4.1|Password||TLSVerify|enabled|User|
Nov 29 13:39:48 daho-nethserver /sbin/e-smith/db[26256]: /var/lib/nethserver/db/configuration: OLD ns8=configuration|Host|ns8.home.dargels.de|LeaderIpAddress|10.5.4.1|Password||TLSVerify|enabled|User|
Nov 29 13:39:48 daho-nethserver /sbin/e-smith/db[26256]: /var/lib/nethserver/db/configuration: NEW ns8=configuration|Host|ns8.home.dargels.de|LeaderIpAddress|10.5.4.1|Password|Mada2020-01|TLSVerify|enabled|User|
Nov 29 13:39:48 daho-nethserver /sbin/e-smith/db[26256]: /var/lib/nethserver/db/configuration: OLD ns8=configuration|Host|ns8.home.dargels.de|LeaderIpAddress|10.5.4.1|Password|Mada2020-01|TLSVerify|enabled|User|
Nov 29 13:39:48 daho-nethserver /sbin/e-smith/db[26256]: /var/lib/nethserver/db/configuration: NEW ns8=configuration|Host|ns8.home.dargels.de|LeaderIpAddress|10.5.4.1|Password|Mada2020-01|TLSVerify|disabled|User|
Nov 29 13:39:48 daho-nethserver /sbin/e-smith/db[26256]: /var/lib/nethserver/db/configuration: OLD ns8=configuration|Host|ns8.home.dargels.de|LeaderIpAddress|10.5.4.1|Password|Mada2020-01|TLSVerify|disabled|User|
Nov 29 13:39:48 daho-nethserver /sbin/e-smith/db[26256]: /var/lib/nethserver/db/configuration: NEW ns8=configuration|Host|ns8.home.dargels.de|LeaderIpAddress|10.5.4.1|Password|Mada2020-01|TLSVerify|disabled|User|admin
Nov 29 13:39:48 daho-nethserver esmith::event[26257]: Event: nethserver-ns8-migration-save
Nov 29 13:39:48 daho-nethserver esmith::event[26257]: expanding /etc/httpd/conf.d/00ns8migration.conf
Nov 29 13:39:48 daho-nethserver esmith::event[26257]: expanding /etc/wireguard/wg0.conf
Nov 29 13:39:48 daho-nethserver esmith::event[26257]: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [0.343166]
Nov 29 13:39:48 daho-nethserver systemd: Reloading.
Nov 29 13:39:50 daho-nethserver systemd: Started NS8 agent.
Nov 29 13:39:50 daho-nethserver esmith::event[26257]: [INFO] agent has been started
Nov 29 13:39:50 daho-nethserver systemd: Reloading.
Nov 29 13:39:50 daho-nethserver esmith::event[26257]: [INFO] service httpd reload
Nov 29 13:39:50 daho-nethserver systemd: Reloading The Apache HTTP Server.
Nov 29 13:39:51 daho-nethserver systemd: Reloaded The Apache HTTP Server.
Nov 29 13:39:51 daho-nethserver systemd: Reloading.
Nov 29 13:39:51 daho-nethserver systemd: Reached target Host and Network Name Lookups.
Nov 29 13:39:51 daho-nethserver systemd: Created slice system-wg\x2dquick.slice.
Nov 29 13:39:51 daho-nethserver systemd: Starting WireGuard via wg-quick(8) for wg0...
Nov 29 13:39:51 daho-nethserver wg-quick: [#] ip link add wg0 type wireguard
Nov 29 13:39:52 daho-nethserver kernel: Request for unknown module key 'The ELRepo Project (http://elrepo.org): ELRepo.org Secure Boot Key: f365ad3481a7b20e3427b61b2a26635b83fe427b' err -11
Nov 29 13:39:52 daho-nethserver kernel: wireguard: WireGuard 1.0.20211208 loaded. See www.wireguard.com for information.
Nov 29 13:39:52 daho-nethserver kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
Nov 29 13:39:52 daho-nethserver wg-quick: [#] wg setconf wg0 /dev/fd/63
Nov 29 13:39:52 daho-nethserver wg-quick: [#] ip -4 address add 10.5.4.2 dev wg0
Nov 29 13:39:52 daho-nethserver wg-quick: [#] ip link set mtu 1420 up dev wg0
Nov 29 13:39:52 daho-nethserver wg-quick: [#] ip -4 route add 10.5.4.0/24 dev wg0
Nov 29 13:39:52 daho-nethserver systemd: Started WireGuard via wg-quick(8) for wg0.
Nov 29 13:39:52 daho-nethserver esmith::event[26257]: [INFO] wg-quick@wg0 has been started
Nov 29 13:39:52 daho-nethserver esmith::event[26257]: Action: /etc/e-smith/events/actions/adjust-services SUCCESS [3.543621]
Nov 29 13:39:52 daho-nethserver esmith::event[26257]: Event: nethserver-ns8-migration-save SUCCESS
Nov 29 13:40:07 daho-nethserver cockpit-bridge: % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Nov 29 13:40:07 daho-nethserver cockpit-bridge: Dload  Upload   Total   Spent    Left  Speed
Nov 29 13:40:08 daho-nethserver cockpit-bridge: 0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0#015  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0#015  0     0    0     0    0     0      0      0 --:--:--  0:00:01 --:--:--     0#015  0     0    0     0    0     0      0      0 --:--:--  0:00:01 --:--:--     0
Nov 29 13:40:08 daho-nethserver cockpit-bridge: % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Nov 29 13:40:08 daho-nethserver cockpit-bridge: Dload  Upload   Total   Spent    Left  Speed
Nov 29 13:40:09 daho-nethserver cockpit-bridge: 0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0#015  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
Nov 29 13:40:29 daho-nethserver nms: Services will be checked every 300 seconds...
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=rsyslog type=stopped severity=okay time=1701253511 message="rsyslog is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=nsdc type=stopped severity=okay time=1701253511 message="nsdc is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=collectd type=stopped severity=okay time=1701253511 message="collectd is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=vsftpd type=stopped severity=okay time=1701253511 message="vsftpd is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=smartd type=stopped severity=okay time=1701253511 message="smartd is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=fail2ban type=stopped severity=okay time=1701253511 message="fail2ban is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=netdata type=stopped severity=okay time=1701253511 message="netdata is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=snmpd type=stopped severity=okay time=1701253511 message="snmpd is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=zabbix-agent type=stopped severity=okay time=1701253511 message="zabbix-agent is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=httpd-admin type=stopped severity=okay time=1701253511 message="httpd-admin is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=shorewall type=stopped severity=okay time=1701253511 message="shorewall is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=virgilio type=stopped severity=okay time=1701253511 message="virgilio is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=httpd type=stopped severity=okay time=1701253511 message="httpd is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=sshd type=stopped severity=okay time=1701253511 message="sshd is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=nms type=stopped severity=okay time=1701253511 message="nms is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=chronyd type=stopped severity=okay time=1701253511 message="chronyd is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=rh-php73-php-fpm type=stopped severity=okay time=1701253511 message="rh-php73-php-fpm is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=yum-cron type=stopped severity=okay time=1701253511 message="yum-cron is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=ddclient type=stopped severity=okay time=1701253511 message="ddclient is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=postfix type=stopped severity=okay time=1701253511 message="postfix is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=dnsmasq type=stopped severity=okay time=1701253511 message="dnsmasq is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=sssd type=stopped severity=okay time=1701253813 message="sssd is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=zabbix-server type=stopped severity=okay time=1701253813 message="zabbix-server is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=postgresql type=stopped severity=okay time=1701253813 message="postgresql is running"
Nov 29 13:40:29 daho-nethserver nms: PUTNOTIF host=daho-nethserver.home.dargels.de plugin=service plugin_instance=agent type=stopped severity=okay time=1701261629 message="agent is running"
Nov 29 13:42:01 daho-nethserver dbus[708]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service'
Nov 29 13:42:01 daho-nethserver systemd: Starting Time & Date Service...
Nov 29 13:42:01 daho-nethserver dbus[708]: [system] Successfully activated service 'org.freedesktop.timedate1'
Nov 29 13:42:01 daho-nethserver systemd: Started Time & Date Service.
Nov 29 13:43:40 daho-nethserver dbus[708]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service'
Nov 29 13:43:40 daho-nethserver systemd: Starting Time & Date Service...
Nov 29 13:43:40 daho-nethserver dbus[708]: [system] Successfully activated service 'org.freedesktop.timedate1'
Nov 29 13:43:40 daho-nethserver systemd: Started Time & Date Service.
Nov 29 13:45:01 daho-nethserver systemd: Started Session 7 of user root.
Nov 29 13:45:03 daho-nethserver esmith::event[28094]: Event: pre-backup-data dokuwiki-komplett
Nov 29 13:45:03 daho-nethserver esmith::event[28094]: ===== Report for configuration backup =====
Nov 29 13:45:03 daho-nethserver esmith::event[28094]: Backup started at 2023-11-29 13:45:03
Nov 29 13:45:03 daho-nethserver esmith::event[28098]: Event: pre-backup-config
Nov 29 13:45:03 daho-nethserver esmith::event[28098]: expanding /etc/backup-config.d/nethserver-sssd.include
Nov 29 13:45:03 daho-nethserver esmith::event[28098]: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [0.335329]
Nov 29 13:45:04 daho-nethserver esmith::event[28098]: Action: /etc/e-smith/events/pre-backup-config/S40nethserver-dc-pre-backup SUCCESS [0.917927]
Nov 29 13:45:04 daho-nethserver esmith::event[28098]: Action: /etc/e-smith/events/pre-backup-config/S40nethserver-sssd-backup-tdb SUCCESS [0.028644]
Nov 29 13:45:07 daho-nethserver esmith::event[28098]: Action: /etc/e-smith/events/pre-backup-config/S50nethserver-backup-config-list-packages SUCCESS [2.887737]
Nov 29 13:45:07 daho-nethserver esmith::event[28098]: Event: pre-backup-config SUCCESS
Nov 29 13:45:07 daho-nethserver esmith::event[28094]: Event pre-backup-config: SUCCESS
Nov 29 13:45:20 daho-nethserver esmith::event[28094]: Action backup-config-execute: SUCCESS
Nov 29 13:45:20 daho-nethserver esmith::event[28392]: Event: post-backup-config
Nov 29 13:45:20 daho-nethserver esmith::event[28392]: Action: /etc/e-smith/events/post-backup-config/S40nethserver-dc-post-backup SUCCESS [0.133468]
Nov 29 13:45:20 daho-nethserver esmith::event[28392]: Event: post-backup-config SUCCESS
Nov 29 13:45:20 daho-nethserver esmith::event[28094]: Event post-backup-config: SUCCESS
Nov 29 13:45:20 daho-nethserver esmith::event[28094]: Backup status: SUCCESS
Nov 29 13:45:20 daho-nethserver esmith::event[28094]: Backup ended at 2023-11-29 13:45:20
Nov 29 13:45:20 daho-nethserver esmith::event[28094]: Time elapsed: 0 hours, 0 minutes, 17 seconds
Nov 29 13:45:20 daho-nethserver esmith::event[28094]: Action: /etc/e-smith/events/pre-backup-data/S20nethserver-backup-config-predatabackup SUCCESS [17.516689]
Nov 29 13:45:20 daho-nethserver su: (to postgres) root on none
Nov 29 13:46:39 daho-nethserver cockpit-bridge: % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Nov 29 13:46:39 daho-nethserver cockpit-bridge: Dload  Upload   Total   Spent    Left  Speed
Nov 29 13:46:40 daho-nethserver cockpit-bridge: 0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0#015  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
Nov 29 13:46:40 daho-nethserver cockpit-bridge: % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
Nov 29 13:46:40 daho-nethserver cockpit-bridge: Dload  Upload   Total   Spent    Left  Speed
Nov 29 13:46:40 daho-nethserver cockpit-bridge: 0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0#015  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
Nov 29 13:46:56 daho-nethserver esmith::event[28094]: Action: /etc/e-smith/events/pre-backup-data/S50nethserver-zabbix-backup SUCCESS [95.697214]
Nov 29 13:46:56 daho-nethserver esmith::event[28094]: Event: pre-backup-data SUCCESS
Nov 29 13:47:08 daho-nethserver esmith::event[28838]: Event: post-backup-data dokuwiki-komplett
Nov 29 13:47:12 daho-nethserver esmith::event[28838]: Action: /etc/e-smith/events/post-backup-data/S20nethserver-backup-config-push2history SUCCESS [4.107135]
Nov 29 13:47:12 daho-nethserver esmith::event[28838]: Action: /etc/e-smith/events/post-backup-data/S70cleanup-data-duplicity SUCCESS [0.183202]
Nov 29 13:47:12 daho-nethserver esmith::event[28838]: Event: post-backup-data SUCCESS
Nov 29 13:48:11 daho-nethserver dbus[708]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service'
Nov 29 13:48:11 daho-nethserver systemd: Starting Time & Date Service...
Nov 29 13:48:11 daho-nethserver dbus[708]: [system] Successfully activated service 'org.freedesktop.timedate1'
Nov 29 13:48:11 daho-nethserver systemd: Started Time & Date Service.
Nov 29 13:50:07 daho-nethserver dbus[708]: [system] Activating via systemd: service name='org.freedesktop.timedate1' unit='dbus-org.freedesktop.timedate1.service'

Log migration tool:

<f+++++++++ private/sam.ldb.d/DC=FORESTDNSZONES,DC=AD,DC=HOME,DC=DARGELS,DC=DE.ldb.export
<f+++++++++ private/sam.ldb.d/metadata.tdb.export
cd+++++++++ private/smbd.tmp/
<f+++++++++ private/smbd.tmp/bad_password.tdb.export
cd+++++++++ private/tls/
<f+++++++++ private/tls/ca.pem
<f+++++++++ private/tls/cert.pem
<f+++++++++ private/tls/key.pem
cd+++++++++ winbindd_privileged/
<f+++++++++ accounts.json
<f+++++++++ nbalias.txt
.d..t...... ./
cd+++++++++ admin/
<f+++++++++ admin/.bash_logout
<f+++++++++ admin/.bash_profile
<f+++++++++ admin/.bashrc
<f+++++++++ admin/.rnd
rsync: change_dir "/var/lib/nethserver/ibay" failed: No such file or directory (2)
rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1179) [sender=3.1.2]
----------- sync account-provider Wed, 29 Nov 2023 13:51:33 +0100
<f..T...... import.env
.d..t...... ./
skipping non-regular file "ntp_signd/socket"
skipping non-regular file "private/ldapi"
skipping non-regular file "private/ldap_priv/ldapi"
skipping non-regular file "private/msg.sock/25"
skipping non-regular file "private/msg.sock/26"
skipping non-regular file "private/msg.sock/29"
skipping non-regular file "private/msg.sock/31"
skipping non-regular file "private/msg.sock/32"
skipping non-regular file "private/msg.sock/33"
skipping non-regular file "private/msg.sock/34"
skipping non-regular file "private/msg.sock/35"
skipping non-regular file "private/msg.sock/38"
skipping non-regular file "private/msg.sock/39"
skipping non-regular file "private/msg.sock/42"
skipping non-regular file "private/msg.sock/43"
skipping non-regular file "private/msg.sock/44"
skipping non-regular file "private/msg.sock/46"
skipping non-regular file "private/msg.sock/47"
skipping non-regular file "private/msg.sock/50"
skipping non-regular file "private/msg.sock/51"
skipping non-regular file "private/msg.sock/52"
skipping non-regular file "private/msg.sock/53"
skipping non-regular file "private/msg.sock/54"
skipping non-regular file "private/msg.sock/55"
skipping non-regular file "private/msg.sock/56"
skipping non-regular file "private/msg.sock/57"
skipping non-regular file "private/msg.sock/58"
skipping non-regular file "private/msg.sock/59"
skipping non-regular file "private/msg.sock/61"
skipping non-regular file "private/msg.sock/62"
skipping non-regular file "private/msg.sock/63"
skipping non-regular file "private/msg.sock/64"
skipping non-regular file "private/msg.sock/65"
skipping non-regular file "private/msg.sock/67"
skipping non-regular file "private/msg.sock/68"
skipping non-regular file "private/msg.sock/70"
skipping non-regular file "private/msg.sock/71"
skipping non-regular file "private/msg.sock/72"
skipping non-regular file "private/msg.sock/73"
skipping non-regular file "private/msg.sock/76"
skipping non-regular file "private/msg.sock/80"
skipping non-regular file "private/msg.sock/81"
skipping non-regular file "private/msg.sock/82"
skipping non-regular file "private/msg.sock/83"
skipping non-regular file "private/msg.sock/84"
skipping non-regular file "private/msg.sock/85"
skipping non-regular file "private/msg.sock/86"
skipping non-regular file "private/msg.sock/88"
skipping non-regular file "private/msg.sock/90"
skipping non-regular file "private/msg.sock/91"
skipping non-regular file "private/msg.sock/92"
<f..t...... account_policy.tdb.export
<f..t...... registry.tdb.export
<f..t...... share_info.tdb.export
<f..t...... winbindd_cache.tdb.export
.d..t...... private/
<f..t...... private/hklm.ldb.export
<f..t...... private/idmap.ldb.export
<f..t...... private/privilege.ldb.export
<f..t...... private/sam.ldb.export
<f..t...... private/schannel_store.tdb.export
<f..t...... private/secrets.ldb.export
<f..t...... private/secrets.tdb.export
<f..t...... private/share.ldb.export
.d..t...... private/sam.ldb.d/
<f..t...... private/sam.ldb.d/CN=CONFIGURATION,DC=AD,DC=HOME,DC=DARGELS,DC=DE.ldb.export
<f..t...... private/sam.ldb.d/CN=SCHEMA,CN=CONFIGURATION,DC=AD,DC=HOME,DC=DARGELS,DC=DE.ldb.export
<f..t...... private/sam.ldb.d/DC=AD,DC=HOME,DC=DARGELS,DC=DE.ldb.export
<f..t...... private/sam.ldb.d/DC=DOMAINDNSZONES,DC=AD,DC=HOME,DC=DARGELS,DC=DE.ldb.export
skipping non-regular file "winbindd_privileged/pipe"
<f..t...... private/sam.ldb.d/DC=FORESTDNSZONES,DC=AD,DC=HOME,DC=DARGELS,DC=DE.ldb.export
<f..t...... private/sam.ldb.d/metadata.tdb.export
.d..t...... private/smbd.tmp/
<f..t...... private/smbd.tmp/bad_password.tdb.export
<f..T...... accounts.json
<f..T...... nbalias.txt
rsync: change_dir "/var/lib/nethserver/ibay" failed: No such file or directory (2)
rsync error: some files/attrs were not transferred (see previous errors) (code 23) at main.c(1179) [sender=3.1.2]

Andy_Wismer · November 29, 2023, 2:34pm

The AD also has a nsdc- name, you also need that in DNS…

nsdc-XXXX-5cd25.ad.domain.tld

as CNAME pointing to the DNS entry…

As I don’t know which of both is actually used, I make sure both are correctly resolved…

My 2 cents
Andy

capote · November 29, 2023, 2:43pm

ahhh, I see.

NS7-AD:

dig +short A nsdc-daho-d5dbc.ad.home.dargels.de                                                                  
192.168.3.11

I cannot see the Information on the NS8 side

Maybe I should restart of the migration from the PVE-backups again and check the DNS-Resolution of the account provider for the leader node.

Andy_Wismer · November 29, 2023, 2:45pm

You may run into the same problem I had, maybe @davidep patch will help…

capote · November 29, 2023, 2:47pm

Ok, so I didn’t fall into the trap alone, it’s comforting when it happens even to you

Andy_Wismer · November 29, 2023, 2:50pm

The Trap is not the AD, but that NS7 say’s it’s connected, but NS8 is still virgin, no AD, no connection…

See here:

Andy_Wismer · November 29, 2023, 2:51pm

The Migrated NS7 now shows as “Account Provider”:

AD on NS8 as “remote AD”…

davidep · November 29, 2023, 3:03pm

For a new attempt, I can provide a migration-tool with many fixes! Do you want to try it?

capote · November 29, 2023, 3:16pm

yes,

capote · November 29, 2023, 3:21pm

Hi @Andy_Wismer , after restoring the ns8-Vm I see, that I dindn’t create an account provider before.
I took the advice in the migration guide …a new server containing a freshly installed NethServer 8 cluster literally and started with a quasi virgin installation.

It was not specified to create an AD.

davidep · November 29, 2023, 4:14pm

To install the testing package

yum install http://packages.nethserver.org/nethserver/7.9.2009/autobuild/x86_64/Packages/nethserver-ns8-migration-1.0.4-1.26.pr48.ge53d60d.ns7.x86_64.rpm

The RPM comes from this PR: Migration tool fixes and enhancements by DavidePrincipi · Pull Request #48 · NethServer/nethserver-ns8-migration · GitHub

To avoid this problem

mkdir -pv /var/lib/nethserver/ibay/fake

capote · November 29, 2023, 10:24pm

O.K. I will make my next attempt, but I need more detailed information about the preparation on the leader node.

is it necessary to install an Active Directory there before migration?
if yes, what are important configuration parameters?
what information do I need to transfer to my DSN? The CNAME should direct to the leader node IP? I’m asking because in NS7 it was a different IP.

davidep · November 29, 2023, 10:31pm

This is a draft of the migration page documentation: NethServer 7 migration — NS8 documentation

It has been updated with more details about AD.

No, the cluster must be new.

It depends on what you are migrating. DNS is not a requirement for the migration procedure, you can adjust it later.

capote · November 30, 2023, 8:50am

next attempt:

completely fresh installed NS8, based on Debian12
new migration script
created `/var/lib/nethserver/ibay/fake
no account provider installed

`

Multiple sync with

Try to finish migration with selcted IP-Adress 192.168.3.21:

echo ‘{“app”:“account-provider”,“action”:“finish”,“migrationConfig”:{“sambaIpAddress”:“192.168.3.21”}}’ | /usr/bin/setsid /usr/bin/sudo /usr/libexec/nethserver/api/nethserver-ns8-migration/migration/update | jq

ns8-migration-log

Search
<f..t...... private/sam.ldb.d/DC=FORESTDNSZONES,DC=AD,DC=HOME,DC=DARGELS,DC=DE.ldb.export
<f..t...... private/sam.ldb.d/metadata.tdb.export
.d..t...... private/smbd.tmp/
<f..t...... private/smbd.tmp/bad_password.tdb.export
<f..T...... accounts.json
<f..T...... nbalias.txt
----------- finish account-provider Thu, 30 Nov 2023 10:05:35 +0100
<f..T...... import.env
.d..t...... ./
skipping non-regular file "ntp_signd/socket"
skipping non-regular file "private/ldapi"
skipping non-regular file "private/ldap_priv/ldapi"
skipping non-regular file "private/msg.sock/26"
skipping non-regular file "private/msg.sock/29"
skipping non-regular file "private/msg.sock/31"
skipping non-regular file "private/msg.sock/32"
skipping non-regular file "private/msg.sock/33"
skipping non-regular file "private/msg.sock/35"
skipping non-regular file "private/msg.sock/38"
skipping non-regular file "private/msg.sock/39"
skipping non-regular file "private/msg.sock/42"
skipping non-regular file "private/msg.sock/43"
skipping non-regular file "private/msg.sock/44"
skipping non-regular file "private/msg.sock/45"
skipping non-regular file "private/msg.sock/46"
skipping non-regular file "private/msg.sock/47"
skipping non-regular file "private/msg.sock/48"
skipping non-regular file "private/msg.sock/49"
skipping non-regular file "private/msg.sock/50"
skipping non-regular file "private/msg.sock/51"
skipping non-regular file "private/msg.sock/52"
skipping non-regular file "private/msg.sock/53"
skipping non-regular file "private/msg.sock/54"
skipping non-regular file "private/msg.sock/55"
skipping non-regular file "private/msg.sock/56"
skipping non-regular file "private/msg.sock/57"
skipping non-regular file "private/msg.sock/58"
skipping non-regular file "private/msg.sock/59"
skipping non-regular file "private/msg.sock/61"
skipping non-regular file "private/msg.sock/62"
skipping non-regular file "private/msg.sock/63"
skipping non-regular file "private/msg.sock/64"
skipping non-regular file "private/msg.sock/65"
skipping non-regular file "private/msg.sock/67"
skipping non-regular file "private/msg.sock/68"
skipping non-regular file "private/msg.sock/70"
skipping non-regular file "private/msg.sock/71"
skipping non-regular file "private/msg.sock/72"
skipping non-regular file "private/msg.sock/73"
skipping non-regular file "private/msg.sock/74"
skipping non-regular file "private/msg.sock/77"
skipping non-regular file "private/msg.sock/80"
skipping non-regular file "private/msg.sock/81"
skipping non-regular file "private/msg.sock/82"
skipping non-regular file "private/msg.sock/83"
skipping non-regular file "private/msg.sock/84"
skipping non-regular file "private/msg.sock/85"
skipping non-regular file "private/msg.sock/86"
skipping non-regular file "private/msg.sock/88"
skipping non-regular file "private/msg.sock/90"
skipping non-regular file "private/msg.sock/91"
skipping non-regular file "private/msg.sock/92"
<f..t...... account_policy.tdb.export
<f..t...... registry.tdb.export
<f..t...... share_info.tdb.export
<f..t...... winbindd_cache.tdb.export
.d..t...... private/
<f..t...... private/hklm.ldb.export
<f..t...... private/idmap.ldb.export
<f..t...... private/privilege.ldb.export
<f..t...... private/sam.ldb.export
<f..t...... private/schannel_store.tdb.export
<f..t...... private/secrets.ldb.export
<f..t...... private/secrets.tdb.export
<f..t...... private/share.ldb.export
.d..t...... private/msg.sock/
.d..t...... private/sam.ldb.d/
<f..t...... private/sam.ldb.d/CN=CONFIGURATION,DC=AD,DC=HOME,DC=DARGELS,DC=DE.ldb.export
<f..t...... private/sam.ldb.d/CN=SCHEMA,CN=CONFIGURATION,DC=AD,DC=HOME,DC=DARGELS,DC=DE.ldb.export
<f..t...... private/sam.ldb.d/DC=AD,DC=HOME,DC=DARGELS,DC=DE.ldb.export
<f..t...... private/sam.ldb.d/DC=DOMAINDNSZONES,DC=AD,DC=HOME,DC=DARGELS,DC=DE.ldb.export
skipping non-regular file "winbindd_privileged/pipe"
<f..t...... private/sam.ldb.d/DC=FORESTDNSZONES,DC=AD,DC=HOME,DC=DARGELS,DC=DE.ldb.export
<f..t...... private/sam.ldb.d/metadata.tdb.export
.d..t...... private/smbd.tmp/
<f..t...... private/smbd.tmp/bad_password.tdb.export
<f..T...... accounts.json
<f..T...... nbalias.txt
""receiving file list ... done
dr-xr-xr-x          4,096 2023/09/28 13:18:46 .

sent 20 bytes  received 30 bytes  100.00 bytes/sec
total size is 0  speedup is 0.00
.d....og... admin/
.f....og... admin/.bash_logout
.f....og... admin/.bash_profile
.f....og... admin/.bashrc
.f....og... admin/.rnd
.d..t...... ./
Failed to execute operation: No such file or directory

In the meanwhile, I checked the leader node:
The account provider is created, but not finished

user and groups are migrated
some errors occurs

image2304×1648 174 KB

Andy_Wismer · November 30, 2023, 9:14am

Hi @capote

If you want an AD on your LAN, there is only one IP to choose from…
If you only need it for Apps on your Cluster, you can choose the VPN IP, in my opinion not a valid choice for you or me…

My 2 cents
Andy

capote · November 30, 2023, 9:16am

I’ve chosen the leader node IP 192.168.3.21

capote · November 30, 2023, 9:22am

in the samba1-log (NS8) found

2023-11-30T10:06:15+01:00 [1:samba1:samba-dc] dnsupdate_nameupdate_done: Failed DNS update with exit code 15
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] IPs: ['192.168.3.21']
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] need cache add: A nsdc-daho-d5dbc.ad.home.dargels.de 192.168.3.21
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Looking for DNS entry A nsdc-daho-d5dbc.ad.home.dargels.de 192.168.3.21 as nsdc-daho-d5dbc.ad.home.dargels.de.
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Lookup of nsdc-daho-d5dbc.ad.home.dargels.de. succeeded, but we failed to find a matching DNS entry for A nsdc-daho-d5dbc.ad.home.dargels.de 192.168.3.21
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Looking for DNS entry NS ad.home.dargels.de nsdc-daho-d5dbc.ad.home.dargels.de as ad.home.dargels.de.
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Looking for DNS entry NS _msdcs.ad.home.dargels.de nsdc-daho-d5dbc.ad.home.dargels.de as _msdcs.ad.home.dargels.de.
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Checking 0 100 389 nsdc-daho-d5dbc.ad.home.dargels.de. against SRV _ldap._tcp.6f913eda-988b-4c01-85db-b1831fe014ef.domains._msdcs.ad.home.dargels.de nsdc-daho-d5dbc.ad.home.dargels.de 389
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Looking for DNS entry SRV _kerberos._udp.ad.home.dargels.de nsdc-daho-d5dbc.ad.home.dargels.de 88 as _kerberos._udp.ad.home.dargels.de.
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Looking for DNS entry A ad.home.dargels.de 192.168.3.21 as ad.home.dargels.de.
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] need update: A nsdc-daho-d5dbc.ad.home.dargels.de 192.168.3.21
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Looking for DNS entry SRV _kerberos._tcp.ad.home.dargels.de nsdc-daho-d5dbc.ad.home.dargels.de 88 as _kerberos._tcp.ad.home.dargels.de.
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Checking 0 100 389 nsdc-daho-d5dbc.ad.home.dargels.de. against SRV _ldap._tcp.ad.home.dargels.de nsdc-daho-d5dbc.ad.home.dargels.de 389
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Checking 0 100 389 nsdc-daho-d5dbc.ad.home.dargels.de. against SRV _ldap._tcp.dc._msdcs.ad.home.dargels.de nsdc-daho-d5dbc.ad.home.dargels.de 389
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Looking for DNS entry SRV _ldap._tcp.ad.home.dargels.de nsdc-daho-d5dbc.ad.home.dargels.de 389 as _ldap._tcp.ad.home.dargels.de.
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Looking for DNS entry SRV _ldap._tcp.dc._msdcs.ad.home.dargels.de nsdc-daho-d5dbc.ad.home.dargels.de 389 as _ldap._tcp.dc._msdcs.ad.home.dargels.de.
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Lookup of ad.home.dargels.de. succeeded, but we failed to find a matching DNS entry for A ad.home.dargels.de 192.168.3.21

Checking 0 100 3268 nsdc-daho-d5dbc.ad.home.dargels.de. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.ad.home.dargels.de nsdc-daho-d5dbc.ad.home.dargels.de 3268
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Lookup of DomainDnsZones.ad.home.dargels.de. succeeded, but we failed to find a matching DNS entry for A DomainDnsZones.ad.home.dargels.de 192.168.3.21
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] nsdc-daho-d5dbc.ad.home.dargels.de. 0 NONE A	192.168.3.11
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] nsdc-daho-d5dbc.ad.home.dargels.de. 0 NONE AAAA	fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ad.home.dargels.de.	0	NONE	A	192.168.3.11
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ad.home.dargels.de.	0	NONE	AAAA	fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:16+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] gc._msdcs.ad.home.dargels.de. 0	NONE	A	192.168.3.11
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] gc._msdcs.ad.home.dargels.de. 0	NONE	AAAA	fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] DomainDnsZones.ad.home.dargels.de. 0 NONE A	192.168.3.11
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] DomainDnsZones.ad.home.dargels.de. 0 NONE AAAA	fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ForestDnsZones.ad.home.dargels.de. 0 NONE A	192.168.3.11
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ForestDnsZones.ad.home.dargels.de. 0 NONE AAAA	fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:17+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] nsdc-daho-d5dbc.ad.home.dargels.de. 900	IN A	192.168.3.21
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ad.home.dargels.de.	900	IN	A	192.168.3.21
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] gc._msdcs.ad.home.dargels.de. 900 IN	A	192.168.3.21
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] DomainDnsZones.ad.home.dargels.de. 900 IN A	192.168.3.21
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; UPDATE SECTION:
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ForestDnsZones.ad.home.dargels.de. 900 IN A	192.168.3.21
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Outgoing update query:
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] ; TSIG error with server: tsig verify failure
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Looking for DNS entry A nsdc-daho-d5dbc.ad.home.dargels.de 192.168.3.11 as nsdc-daho-d5dbc.ad.home.dargels.de.
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need cache remove: AAAA nsdc-daho-d5dbc.ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Checking 0 100 389 nsdc-daho-d5dbc.ad.home.dargels.de. against SRV _ldap._tcp.ForestDnsZones.ad.home.dargels.de nsdc-daho-d5dbc.ad.home.dargels.de 389
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Looking for DNS entry A ad.home.dargels.de 192.168.3.11 as ad.home.dargels.de.
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need delete: A ad.home.dargels.de 192.168.3.11
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Looking for DNS entry SRV _ldap._tcp.ForestDnsZones.ad.home.dargels.de nsdc-daho-d5dbc.ad.home.dargels.de 389 as _ldap._tcp.ForestDnsZones.ad.home.dargels.de.
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need delete: A nsdc-daho-d5dbc.ad.home.dargels.de 192.168.3.11
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.ad.home.dargels.de nsdc-daho-d5dbc.ad.home.dargels.de 389 as _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.ad.home.dargels.de.
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need cache remove: A ad.home.dargels.de 192.168.3.11
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Looking for DNS entry AAAA ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342 as ad.home.dargels.de.
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Checking 0 100 389 nsdc-daho-d5dbc.ad.home.dargels.de. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.ad.home.dargels.de nsdc-daho-d5dbc.ad.home.dargels.de 389
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need cache remove: A nsdc-daho-d5dbc.ad.home.dargels.de 192.168.3.11
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need update: A ForestDnsZones.ad.home.dargels.de 192.168.3.21
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Looking for DNS entry AAAA nsdc-daho-d5dbc.ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342 as nsdc-daho-d5dbc.ad.home.dargels.de.
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Looking for DNS entry A ForestDnsZones.ad.home.dargels.de 192.168.3.21 as ForestDnsZones.ad.home.dargels.de.
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need cache remove: AAAA ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Lookup of ForestDnsZones.ad.home.dargels.de. succeeded, but we failed to find a matching DNS entry for A ForestDnsZones.ad.home.dargels.de 192.168.3.21
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need delete: AAAA nsdc-daho-d5dbc.ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need delete: AAAA gc._msdcs.ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need delete: AAAA ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Looking for DNS entry AAAA gc._msdcs.ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342 as gc._msdcs.ad.home.dargels.de.
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need cache remove: A gc._msdcs.ad.home.dargels.de 192.168.3.11
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need delete: AAAA ForestDnsZones.ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need cache remove: A ForestDnsZones.ad.home.dargels.de 192.168.3.11
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need cache remove: A DomainDnsZones.ad.home.dargels.de 192.168.3.11
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need delete: AAAA DomainDnsZones.ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need delete: A gc._msdcs.ad.home.dargels.de 192.168.3.11
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] 5 DNS updates and 10 DNS deletes needed
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Looking for DNS entry AAAA ForestDnsZones.ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342 as ForestDnsZones.ad.home.dargels.de.
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Looking for DNS entry AAAA DomainDnsZones.ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342 as DomainDnsZones.ad.home.dargels.de.
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need cache remove: AAAA gc._msdcs.ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Looking for DNS entry A gc._msdcs.ad.home.dargels.de 192.168.3.11 as gc._msdcs.ad.home.dargels.de.
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need delete: A ForestDnsZones.ad.home.dargels.de 192.168.3.11
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Looking for DNS entry A ForestDnsZones.ad.home.dargels.de 192.168.3.11 as ForestDnsZones.ad.home.dargels.de.
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Looking for DNS entry A DomainDnsZones.ad.home.dargels.de 192.168.3.11 as DomainDnsZones.ad.home.dargels.de.
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Calling nsupdate for A nsdc-daho-d5dbc.ad.home.dargels.de 192.168.3.11 (delete)
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need delete: A DomainDnsZones.ad.home.dargels.de 192.168.3.11
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Successfully obtained Kerberos ticket to DNS/nsdc-daho-d5dbc.ad.home.dargels.de as NSDC-DAHO-D5DBC$
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] delete (nsupdate): A nsdc-daho-d5dbc.ad.home.dargels.de 192.168.3.11
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need cache remove: AAAA DomainDnsZones.ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] need cache remove: AAAA ForestDnsZones.ad.home.dargels.de fd09:2045:6f49:4381:dc1a:adff:feb8:4342
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Failed nsupdate: 2
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Failed nsupdate: 2
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Calling nsupdate for A DomainDnsZones.ad.home.dargels.de 192.168.3.11 (delete)
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Failed nsupdate: 2
2023-11-30T10:06:18+01:00 [1:samba1:agent@samba1] Failed nsupdate: 2

Thtats it. Thats end of my second attempt.

capote · November 30, 2023, 9:29am

I wonder about this section in the migration guide

There was no list of installed applications.
No applications are installed on the leader node.

davidep · November 30, 2023, 9:34am

The migration tool migrates a limited set of applications. By now we have

nethserver-ejabberd
nethserver-mail-getmail
nethserver-mail
nethserver-mattermost
nethserver-nextcloud
nethserver-roundcubemail
nethserver-webtop5

…and the account provider, which is the only one that matches in your case.

capote · November 30, 2023, 9:41am

in this case I don’t need a migration.
I can install new and have to think about a manual migration of dokuwiki.