Update from 1.9 to 2.0 with fail

[alterpub]

Hello !

I have updated proxmox from 1.9 to 2.0 (used article: http://pve.proxmox.com/wiki/Upgrade_from_1.9_to_2.0)
Now i have debian 6, also my virtual machines work and i can login with root user in debian console.
But i can't login via web-interface !
Help me, plz. I don't know what to do.

 

[tom]

any errors in the upgrade log?

also post the output of 'pveversion -v'

 

[alterpub]

There were errors in update log, but i have fixed them and started script again, after it was finished successfull.

pveversion -v
pve-manager: 2.0-54 (pve-manager/2.0/4b59ea39)
running kernel: 2.6.32-10-pve
proxmox-ve-2.6.32: 2.0-63
pve-kernel-2.6.32-10-pve: 2.6.32-63
lvm2: 2.02.88-2pve2
clvm: 2.02.88-2pve2
corosync-pve: 1.4.1-1
openais-pve: 1.1.4-2
libqb: 0.10.1-2
redhat-cluster-pve: 3.1.8-3
resource-agents-pve: 3.9.2-3
fence-agents-pve: 3.1.7-2
pve-cluster: 1.0-26
qemu-server: 2.0-33
pve-firmware: 1.0-15
libpve-common-perl: 1.0-23
libpve-access-control: 1.0-17
libpve-storage-perl: 2.0-16
vncterm: 1.0-2
vzctl: 3.0.30-2pve2
vzprocps: 2.0.11-2
vzquota: 3.0.12-3
pve-qemu-kvm: 1.0-8
ksm-control-daemon: 1.1-1

 

[udo]

There were errors in update log, but i have fixed them and started script again, after it was finished successfull.

pveversion -v
pve-manager: 2.0-54 (pve-manager/2.0/4b59ea39)
running kernel: 2.6.32-10-pve
proxmox-ve-2.6.32: 2.0-63
pve-kernel-2.6.32-10-pve: 2.6.32-63
lvm2: 2.02.88-2pve2
clvm: 2.02.88-2pve2
corosync-pve: 1.4.1-1
openais-pve: 1.1.4-2
libqb: 0.10.1-2
redhat-cluster-pve: 3.1.8-3
resource-agents-pve: 3.9.2-3
fence-agents-pve: 3.1.7-2
pve-cluster: 1.0-26
qemu-server: 2.0-33
pve-firmware: 1.0-15
libpve-common-perl: 1.0-23
libpve-access-control: 1.0-17
libpve-storage-perl: 2.0-16
vncterm: 1.0-2
vzctl: 3.0.30-2pve2
vzprocps: 2.0.11-2
vzquota: 3.0.12-3
pve-qemu-kvm: 1.0-8
ksm-control-daemon: 1.1-1

Hi,
what is the output of following commands?

netstat -an | grep -i listen

ps aux | grep apache

tail /var/log/apache2/*.log

If you connect to the host, you will redirect to port 8006?
Do you have any Firewall/proxy that prevent the using of port 8006?

If you connect from another linux-box to your pve-host, do you get the index.html? Like this:

wget -v --no-check-certificate https://ip.of.pve.host:8006

or any helpfull error message?

Udo

 

[alterpub]

I said that i cannot loging with the password for root via web, but i didn't say that apache doesn't work, or i haven't access.
Apache is fine, access too. I get error "Login fail" from proxmox web interface when i try to login with root and it's right password.

 

[dietmar]

I get error "Login fail" from proxmox web interface when i try to login with root and it's right password.

What realm did you select?

 

[alterpub]

What realm did you select?

Linux PAM standard authentication

 

[dietmar]

Linux PAM standard authentication

Wonder if you use any special characters in your password (or ascii only)?

And is this a cluster setup, or a single node?

 

[alterpub]

Single mode.
Only ASCII.

 

[dietmar]

What is the output of

# ls -l /etc/pve

 

[alterpub]

What is the output of

# ls -l /etc/pve

la pve
итого 48K
drwxr-xr-x 3 root root 4,0K Апр 4 13:48 ./
drwxr-xr-x 91 root root 4,0K Апр 4 13:43 ../
-rw-r--r-- 1 root root 16 Мар 31 01:34 datacenter.cfg
drwxr-xr-x 2 root root 4,0K Дек 13 12:18 openvz/
-rw-r--r-- 1 root root 26 Окт 12 16:14 pve.cfg
-rw------- 1 root root 887 Июл 19 2011 pve-root-ca.key
-rw-r--r-- 1 root root 1,2K Июл 19 2011 pve-root-ca.pem
-rw------- 1 root root 3 Июл 19 2011 pve-root-ca.srl
-rw------- 1 root root 891 Июл 19 2011 pve-ssl.key
-rw-r--r-- 1 root root 973 Июл 19 2011 pve-ssl.pem
-rw-r--r-- 1 root root 16 Июл 19 2011 qemu-server.cfg
-rw-r--r-- 1 root root 196 Июл 26 2011 storage.cfg

la pve.old-1.9
итого 40K
drwxr-xr-x 2 root root 4,0K Окт 12 16:14 ./
drwxr-xr-x 91 root root 4,0K Апр 4 13:43 ../
-rw-r--r-- 1 root root 0 Июл 26 2011 .lock-storage.cfg
-rw-r--r-- 1 root root 26 Окт 12 16:14 pve.cfg
-rw------- 1 root root 887 Июл 19 2011 pve-root-ca.key
-rw-r--r-- 1 root root 1,2K Июл 19 2011 pve-root-ca.pem
-rw------- 1 root root 3 Июл 19 2011 pve-root-ca.srl
-rw------- 1 root root 891 Июл 19 2011 pve-ssl.key
-rw-r--r-- 1 root root 973 Июл 19 2011 pve-ssl.pem
-rw-r--r-- 1 root root 16 Июл 19 2011 qemu-server.cfg
-rw-r--r-- 1 root root 196 Июл 26 2011 storage.cfg



I have copied data from .old to the new one.

 

[dietmar]

I have copied data from .old to the new one.

Maybe you also copied old x509 file. Try

# pvecm updatecerts --force

Then reboot to make sure all services gets new data - does that help?

 

[alterpub]

pvecm updatecerts --force
unable to get IP for node 'nozdrik' - node offline?

man pvecm |grep DESC -A1
DESCRIPTION
pvecm is a program to manage the cluster configuration. It can be used to create a new cluster, join nodes to a cluster, leave the cluster, get status information and do various other cluster related tasks.

I don't use cluster.

I use the same .key and .pem files that were in 1.9 version.

 

[dietmar]

What is the output of

# cat /etc/hostname
# cat /etc/hosts

 

[alterpub]

cat /etc/hosts
127.0.0.1 localhost.local localhost pvelocalhost

cat /etc/hostname
nozdrik.ru

 

[Thijs Simonis]

Is the user root in your /etc/pve/user.cfg ?

Like this:
user:root@pam:1:0:::::

 

[alterpub]

I don't have user.cfg(and priv/shadow too), because these files are necessary for realm "Proxmox VE authentication server", but not for "Linux PAM standard authentication".

 

[dietmar]

cat /etc/hosts
127.0.0.1 localhost.local localhost pvelocalhost

You need an entry for your hostname there ('nozdrik') - we extract the IP address from that file.
Then execute:

# /etc/init.d/pve-cluster stop
# /etc/init.d/pve-cluster stop

cat /etc/hostname
nozdrik.ru

Please do not add a FQDN here - instead use 'nozdrik' (see 'man hostname')

 

[alterpub]

I have added 'nozdrik' to hosts

cat /etc/hosts
127.0.0.1 localhost.local localhost pvelocalhost
172.16.0.1 nozdrik


/etc/init.d/pve-cluster stop
Stopping pve cluster filesystem: pve-cluster apparently not running.

I can't use not FQDN name here, because i haven't static external ip. I use dyndns service for static name for dynamic ip and i use zoneedit.com service for CNAME nozdrik.ru to my dyndns domainname.
PS: besides proxmox 1.9 worked fine.

 

[dietmar]

I can't use not FQDN name here, because i haven't static external ip.

It is simply a requirement that you use a static ip if you want a cluster (corosync).