|
Hey Andrew,
So I've rebuilt one more time, this time I was able to block IPv6 traffic at the network port. At least this time, IPv6 wasn't installed.
What happened, however, was that no networking was installed, even though I went through the configuration during build.
I then ran the /opt/perfsonar_ps/toolkit/scripts/nptoolkit-configure.py and put in networking settings - again - and then rebooted. I could then ping the host but still, even though httpd is definitely running based on a ps -ef, I can't pull up the web
page.
Any more ideas? At this point it really seems like the net install is broken.
On Apr 17, 2014, at 2:53 PM, Andrew Lake <> wrote:
Hi,
I don't remember all the CentOS prompts but I believe there is one prompt where you define the network settings for what you want it to use to download all the packages and separate one for what you want the hosts networking to be. I know that was the
case at least some point in the past because I forgot and got bit by it a few times. It's possible that's what happened during install.
Now that it is installed, you should just be able to edit /etc/sysconfig/network-scripts/ifcfg-eth0 to get things the way you want. Make sure NM_CONTROLLED is set to "no" or else there is a good chance CentOS will keep overriding your settings every time
you reboot. I don't usually turn-off IPV6 on interfaces, but I believe just setting IPV6INIT="no" in /etc/sysconfig/network-scripts/ifcfg-eth0 is enough.
Thanks,
Andy
On Apr 17, 2014, at 9:57 AM, "Florio, Christopher N" <> wrote:
So I think I know what happened.
Sorry, before you sent this I had rebuilt already.
It looks like, even though I chose to turn of IPv6 in the install, it still preferred IPv6 and didn't bring up the IPv4 that I did configure. The vlan this one is in has IPv6 enabled.
So, I'm back to the state I was in, http is still NOT responding, I think maybe it's not listening on the IPv4 address. I manually edited the /etc/sysconfig/network-scripts/ifcfg-eth0 file.
Is there a way to re-run the configuration of apache, etc? There used to be that, in a much older version of the toolkit that I remember.
Otherwise, how do I force no IPv6 in the install? I un-starred the IPv6 and it still configured it.
On Apr 17, 2014, at 9:21 AM, Andrew Lake <> wrote:
Hi,
Before you rebuild, you want to check if a firewall or similar is blocking access to port 80/443. If httpd is running you should be able to connect. You could try temporarily disabling iptables and seeing if that helps. If it does, you'll need to adjust
the rules to allow those ports through. If it doesn't, is it possible there are any router ACLs or firewall devices in the way?
Thanks,
Andu
On Apr 17, 2014, at 9:11 AM, "Florio, Christopher N" <> wrote:
I'll rebuild again and see if maybe something just didn't work right.... Will let you know. httpd was running, nothing in the error log.
On Apr 17, 2014, at 8:35 AM, Andrew Lake <> wrote:
Hi,
I just did a new imaged install and it worked. I also get the warning messages, so I don't think they are causing the server to crash. Anything in /var/log/httpd/error_log? Also, if you run 'ps auxw | grep httpd' do you see any httpd processes?
Thanks,
Andy
On Apr 16, 2014, at 4:52 PM, "Florio, Christopher N" <> wrote:
It might be unrelated, but I'm seeing this in the ssl_error_log -
[root@ndt101 httpd]# tail -f ssl_error_log
[Wed Apr 16 16:16:58 2014] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 16 16:16:59 2014] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 16 16:22:13 2014] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 16 16:22:13 2014] [warn] RSA server certificate CommonName (CN) ` ndt101.itcc.unc.edu' does NOT match server name!?
[Wed Apr 16 16:22:14 2014] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 16 16:22:14 2014] [warn] RSA server certificate CommonName (CN) ` ndt101.itcc.unc.edu' does NOT match server name!?
[Wed Apr 16 16:31:51 2014] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 16 16:31:53 2014] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 16 16:41:06 2014] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 16 16:41:06 2014] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
On Apr 16, 2014, at 4:46 PM, Florio, Christopher N <> wrote:
Hey guys,
I just rebuilt a box from scratch with the pS-Performance_Toolkit-3.3.2-NetInstall-x86_64.iso ...
It comes up and I can ping it, but the web server doesn't seem to load or I can't pull it up.
Anyone else having any problems with a newly imaged net install?
Thanks!
-Chris
|
