This message was deleted.
# puppet-enterprises
Slackbot
10/19/2022, 3:06 PMThis message was deleted.
t
tuxmea
10/19/2022, 3:06 PMconsole-services.log:
tuxmea
10/19/2022, 3:06 PM Copy code
qtp406947619-448] ERROR [p.p.r.ds] Failed request to get directory server settings via GET /api/rbac/ds. Status code: 500, Message: {:kind "puppetlabs.rbac/server-error", :msg "An uncaught server error was thrown. Check the log for details."}tuxmea
10/19/2022, 3:07 PMsystem was installed using recover from backup. secrets have been copied, services have been restarted.
tuxmea
10/19/2022, 3:10 PMold puppetserver had ldap connection configured.
m
Marty Ewings
10/19/2022, 3:16 PMMarty Ewings
10/19/2022, 3:16 PMits a different parameter
Marty Ewings
10/19/2022, 3:16 PMbut the solution to dump and reimport the ds settings may help you?
Marty Ewings
10/19/2022, 3:17 PMmaybe try to blank it out
t
tuxmea
10/19/2022, 3:25 PMDump worked (on old server)
tuxmea
10/19/2022, 3:26 PMTranferred ds.txt file to new server.
tuxmea
10/19/2022, 3:26 PMRunnning test produces an error:
tuxmea
10/19/2022, 3:26 PMerror: ds_pw_obfuscated: disallowed-key
m
Marty Ewings
10/19/2022, 3:27 PMim just sort of spitballing here,
Marty Ewings
10/19/2022, 3:27 PMbut try removing that key from the file and importing it
t
tuxmea
10/19/2022, 3:27 PMHo do we blank out LDAP config? WebUI not working.
m
Marty Ewings
10/19/2022, 3:27 PMedit the ds file manually then post it in
t
tuxmea
10/19/2022, 3:29 PMremoved the key. test work.
tuxmea
10/19/2022, 3:29 PMpost not working.
tuxmea
10/19/2022, 3:29 PMpsql exception: wrong key or data
m
Marty Ewings
10/19/2022, 3:30 PMthe format of the file must ave change significantly in these versions,
Marty Ewings
10/19/2022, 3:31 PMi can maybe get you ablank one from the same version in my lab?
Marty Ewings
10/19/2022, 3:31 PMyou would have to reconfigure LDAP in the UI
t
tuxmea
10/19/2022, 3:32 PMnot possible. ldap is empty with an error message.
tuxmea
10/19/2022, 3:32 PMwe followed the pe backup and restore procedure, including back and restore of the secrets.
m
Marty Ewings
10/19/2022, 3:32 PMyeah im in break fix mode here, there is obviously a bug here
t
tuxmea
10/19/2022, 3:33 PMshould we file a support ticket?
tuxmea
10/19/2022, 3:42 PMHow can we empty the ldap config, so that we can configure LDAP using the WebUI?
m
Marty Ewings
10/19/2022, 3:42 PMI would file a ticket
Marty Ewings
10/19/2022, 3:43 PMim thinking the most likey solution is to post in an empty “template” ds file
Marty Ewings
10/19/2022, 3:43 PMbut this is new and unique and worth a ticket
t
tuxmea
10/19/2022, 4:02 PMj
jonathan.newman
10/19/2022, 4:50 PMThere are database migrations from the old version to the new version, and the keys are now encrypted. The easiest way is to delete the corresponding table rows and put all the DS settings back in manually.
jonathan.newman
10/19/2022, 4:52 PMYou may be able to use https://puppet.com/docs/pe/2021.7/rbac_api_v1_directory.html#put_ds with an empty payload
{}t
tuxmea
10/20/2022, 6:55 AMIssue was solved by the customer. Documentation needs an update that the orchestration services also has a secrets key which must also be transferred to the new server.
2 Views