Profile Details

Toggle Sidebar
Recent updates
  • Dave Loper
    Dave Loper replied to a discussion, Web console not accessible

    I think I found it.

    http://koji.clearos.com/koji/taskinfo?taskID=24146

    If you can, please test this on your environments by updating clearos-framework from updates-testing and let me know if this fixes your issues:

    yum --enablerepo=clearos-updates-testing update clearos-framework

    This is related to some issue that we needed to address to validate that cookies were only fetchable/sendable via HTTPS. There is no http method but that doesn't mean that on a penetration test (pen test) that the capabilities of the apache server will still register a complaint. So if you have a pen test run against ClearOS it will read the abilities from the apache service (webconfig) and inform you that the site allows for http only cookies. This is a false positive since there is no non-SSL available except to localhost (gconsole) which doesn't kill you with a certificate warning because it actually accesses Webconfig via HTTP via localhost. This is the only place that that is bound.

    Nevertheless, I reported a the pen test and this was put through as a patch. And it seems to work in many conditions because when you launch the console, it comes up, the problem is that if it doesn't go directly to the network.php page it will try to log you in. It is when it tries to do a login function that the cookie thing comes up and since you don't have one, you cannot access the site.

    Let me know if the build fixes it for you and we will push this through generally. The other issue that exists is that since this package is part of the DVD installer, it is possible (though rare) that a user could encounter this bug if they do certain things in on their system before the updates occur. As such we will need to release a 7.6.1 DVD ISO.

  • Dave Loper
    Dave Loper replied to a discussion, Web console not accessible

    Sorry for the long wait. This really has taken quite a bit of time to narrow down. The file in error is:

    /usr/clearos/framework/application/config/config.php

    There is a bunch of things enigmatic with this bug. One of them is that the gconsole can actually 'seem' to work but won't for example, on a system where the interface comes up, it can actually bug out only if you make a change such as re-applying the DNS servers. So for a while my tests were upgrades seem to work only 'seemed' that way.

    I'm going through the commits to see when the bug was introduced:

    https://gitlab.com/clearos/clearfoundation/clearos-framework/commits/master/application/config/config.php

  • We actually talked about this on Saturday at the Community meeting. Basically the app-ilo package uses the app-redfish layer to read out the API from the redfish DMTF. The layout of the directory can vary from implementation to implementation and you would need to make another layer to process the older ilo4 information.

    This guide has some useful URLs at the bottom of the document to illustrate the issue. If you are interested in ilo4, we can try to put together a working group to see if we can extend the current Redfish implementation.

    https://www.clearos.com/resources/documentation/clearos/content:en_us:7_ug_ilo

  • Nick is correct. The problem is that these dependencies come from an upstream sclo structure that is fixed by the app-base package. Our new method of breaking these packages out to individual php version is the way to fix it since older version will just deprecate and newer versions can be made available independent of the app- package.

  • Dave Loper
    Dave Loper's reply was accepted as an answer

    Re: ClearOS 6.9.0-Final Nearing End of Life with No Updates for Months

    Final refers to the minor version number, not the major. Meaning you are not running the beta or release candidate of 6.9.

    We do plan for a parting update. Now that 7.6 is out, we have some cycles to work on it. However, one of my lead engineers is on vacation for a few weeks and will only be able to work on it towards the end of June - July. If we can resolve a particular issue then we may extend support for 6 but currently it is much more difficult to push updates to 6 than 7 due to certain issue we are working to resolve.

    It is a good idea though to make plans to move to 7 or to at least test it.

  • Dave Loper
    Dave Loper's reply was accepted as an answer

    Re: ClearOS 6.9.0-Final Nearing End of Life with No Updates for Months

    Final refers to the minor version number, not the major. Meaning you are not running the beta or release candidate of 6.9.

    We do plan for a parting update. Now that 7.6 is out, we have some cycles to work on it. However, one of my lead engineers is on vacation for a few weeks and will only be able to work on it towards the end of June - July. If we can resolve a particular issue then we may extend support for 6 but currently it is much more difficult to push updates to 6 than 7 due to certain issue we are working to resolve.

    It is a good idea though to make plans to move to 7 or to at least test it.

  • Final refers to the minor version number, not the major. Meaning you are not running the beta or release candidate of 6.9.

    We do plan for a parting update. Now that 7.6 is out, we have some cycles to work on it. However, one of my lead engineers is on vacation for a few weeks and will only be able to work on it towards the end of June - July. If we can resolve a particular issue then we may extend support for 6 but currently it is much more difficult to push updates to 6 than 7 due to certain issue we are working to resolve.

    It is a good idea though to make plans to move to 7 or to at least test it.

  • Dave Loper
    Dave Loper replied to a discussion, USB 3 supported ...?

    Does it fail to recognize the device after a reboot and having never attached to the other device? I ask because there is a potential issue with locked UUIDs from it being disconnected. That is, connected to USB 2.0, removed without dismount, connected to USB 3.0.

    Let me know if it is still an issue after a fresh restart and only connected to USB 3.0. There should not be a limitation.

  • Dave Loper
    Dave Loper replied to a discussion, Web console not accessible

    Here is my commit:

    https://gitlab.com/clearos/upstream/centos/gconsole/issues/1

    I also added continuous integration and updated the steps to build. I couldn't find any centos sources on their git so I took the Fedora 20 sources. If there are better git source for Centos, let me know where you find them.

  • Dave Loper
    Dave Loper replied to a discussion, Web console not accessible

    On my system where I can experience the problem, the console comes up with a white screen. Is this the case with your bug or are we talking about two different things?

    Here are some things I've done to diagnose the issue on my system (where the graphics console comes up with a white screen)

    1) Only happens post registration
    2) Happens on first reboot after registration

    If I restart the webconfig service before launching the graphical console, all works well:

    systemctl restart webconfig

    I have a build in updates-testing that tries this out. If this is NOT what you are experiencing, I cannot reproduce any other issue than this.