Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionLast revisionBoth sides next revision | ||
cloudappliance/appliance-troubleshooting [2020_05_04 16:13] – [Error Log] steven | cloudappliance:appliance-troubleshooting [2024_04_03 21:30] – [Process Check] steven | ||
---|---|---|---|
Line 1: | Line 1: | ||
# Appliance Troubleshooting | # Appliance Troubleshooting | ||
- | Last updated on April 6, 2020. | ||
- | This document covers troubleshooting of the Enterprise File Fabric | + | #### Last updated on March 15, 2024 |
+ | |||
+ | This document covers troubleshooting of the Nasuni Access Anywhere | ||
The virtual appliance is a hardened CentOS image with: | The virtual appliance is a hardened CentOS image with: | ||
- | | + | |
* MariaDB database server | * MariaDB database server | ||
* Apache Solr search engine | * Apache Solr search engine | ||
The most common deployment scenarios are: | The most common deployment scenarios are: | ||
- | * Single server with database - with the File Fabric | + | * Single server with database - with Access Anywhere |
- | * Single server separate database - The File Fabric | + | * Single server separate database - The Access Anywhere |
- | * High availability - The File Fabric | + | * High availability - The Access Anywhere |
* The Apache Solr service is optional, but required to support content search. It should run on a separate machine instance. | * The Apache Solr service is optional, but required to support content search. It should run on a separate machine instance. | ||
## Prerequisites | ## Prerequisites | ||
- | Before you begin troubleshooting and checking | + | Before you begin troubleshooting and checking |
* Server domain name | * Server domain name | ||
Line 26: | Line 27: | ||
* Is ClamAV being used? | * Is ClamAV being used? | ||
* Passwords: | * Passwords: | ||
- | * smeconfigure | + | * smeconfiguser |
* root password(s) | * root password(s) | ||
* database credentials (optional) | * database credentials (optional) | ||
Line 162: | Line 163: | ||
df -kh | df -kh | ||
| | ||
- | If a table has run out of memory you will see errors in the SME Error Logs | + | If a table has run out of memory you will see errors in the NAAError |
- | / | + | / |
If you have configured a notification email, then you will receive notification email with the errors. | If you have configured a notification email, then you will receive notification email with the errors. | ||
- | If you ran out of diskspace please see the instruction below: | + | If you ran out of diskspace please see: [[: |
- | DB! Table ' | + | |
- | Symptom - You open the configured | + | Symptom - You open the configured |
## Action to Bring up the Appliance | ## Action to Bring up the Appliance | ||
Line 177: | Line 178: | ||
### Increase Disk Size | ### Increase Disk Size | ||
- | To increase the diskspace on SME appliance see the recipe to increase disk space: https:// | + | To increase the diskspace on NAA appliance see the recipe to increase disk space: https:// |
### Repair the Database | ### Repair the Database | ||
Line 207: | Line 208: | ||
### Delete compiled templates | ### Delete compiled templates | ||
- | SME uses compiled templates. If disk space is low the templates can become corrupted. To fix this: | + | NAAuses |
ssh in to appliance as smeconfiguser | ssh in to appliance as smeconfiguser | ||
Line 231: | Line 232: | ||
find / -xdev -type f -size +10M -exec du -sh {} ';' | find / -xdev -type f -size +10M -exec du -sh {} ';' | ||
- | |||
## Process Check | ## Process Check | ||
Line 241: | Line 241: | ||
systemctl status crond | systemctl status crond | ||
systemctl status mariadb | systemctl status mariadb | ||
- | | + | |
## PHP-FPM Service | ## PHP-FPM Service | ||
Line 260: | Line 260: | ||
/ | / | ||
+ | |||
+ | ### Configuration | ||
+ | |||
+ | The configuration file is located here: | ||
+ | |||
+ | / | ||
+ | | ||
+ | Please do not change settings without working with support. | ||
## Apache HTTP Server (Web Server) | ## Apache HTTP Server (Web Server) | ||
Line 308: | Line 316: | ||
This means a record could not be added to memcached and because of that the upload failed. | This means a record could not be added to memcached and because of that the upload failed. | ||
- | To solve this as a root issue the following command: | + | Another indication of a memcached |
- | systemctl restart memcached | + | {{: |
- | After that you can also check the service status: | + | or see a message in the browser |
- | systemctl status memcached | + | {{: |
- | You should see something similar to the below: | + | and Access Anywhere may not be usable. |
- | Active: active (running) since Thu 2016-08-25 13:30:00 BST; 1s ago | + | To solve any of these memcached issues, as root issue the following command: |
+ | |||
+ | < | ||
+ | yum install sme-containers-memcached | ||
+ | cd / | ||
+ | docker-compose restart | ||
+ | </ | ||
## Jetty / Apache Solr / PDF Annotation | ## Jetty / Apache Solr / PDF Annotation | ||
Line 341: | Line 355: | ||
See https:// | See https:// | ||
- | |||
### Logs | ### Logs | ||
/ | / | ||
+ | | ||
+ | / | ||
### Production | ### Production | ||
- | Note: For production Apache Solr should be running on a separate instance to the Enterprise File Fabric | + | Note: For production Apache Solr should be running on a separate instance to Access Anywhere |
### Access Solr Admin GUI Remotely | ### Access Solr Admin GUI Remotely | ||
- | To access the Solr admin from another machine: | + | SSH can be used to create an HTTP tunnel to access the Solr admin from another machine. For example, |
- | Add this line to / | + | ssh -L 8983:files.example.com:8983 smeconfiguser@files.example.com |
- | + | ||
- | -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 7070 -j ACCEPT | + | |
- | + | ||
- | Restart iptables | + | |
- | + | ||
- | systemctl reload iptables | + | |
- | + | ||
- | Comment out the line in / | + | |
- | + | ||
- | #jetty.host=127.0.0.1 | + | |
From a browser: | From a browser: | ||
- | http://hostname:7070/ with user solr password drom6etsh9Onk | + | http://localhost:8983/solr |
+ | |||
+ | The default username is " | ||
## Cloud FTP Service (CloudFTP/ | ## Cloud FTP Service (CloudFTP/ | ||
- | By default the File Fabric Cloud FTP service is configured to run an FTP service on port 21 and FTPS (FTP over SSL) service on port 990. See [[cloudappliance/ | + | See [[cloudappliance/ |
- | + | ||
- | Check the health of the Cloud FTP service using the service command: | + | |
- | + | ||
- | systemctl status cloudftp | + | |
- | + | ||
- | You should see a few lines of output including one that says, " | + | |
- | + | ||
- | To start the service: | + | |
- | + | ||
- | systemctl start cloudftp | + | |
- | + | ||
- | To stop the service: | + | |
- | + | ||
- | systemctl stop cloudftp | + | |
### Client Testing | ### Client Testing | ||
sftp -v user@hostname | sftp -v user@hostname | ||
- | |||
- | ### Configuration | ||
- | |||
- | / | ||
- | |||
- | ### Log | ||
- | |||
- | / | ||
- | |||
- | ## Cloud SFTP Service | ||
- | |||
- | The Cloud SFTP service implements the SSH File Transfer Protocol for File Fabric. By default it's available on port 2200. See [[cloudappliance/ | ||
- | |||
- | ### Configuration | ||
- | |||
- | / | ||
- | |||
- | ### Restart | ||
- | | ||
- | To restart the service after a configuration change: | ||
- | |||
- | systemctl start cloudftp | ||
- | |||
- | ### Log | ||
- | |||
- | / | ||
## Local FTP Service | ## Local FTP Service | ||
Line 459: | Line 425: | ||
### Logs | ### Logs | ||
+ | |||
+ | A log of cron jobs being started can be found at: | ||
/ | / | ||
+ | |||
+ | A detailed log of the task manager can be found at: | ||
+ | |||
/ | / | ||
Line 482: | Line 453: | ||
## CloudDAV | ## CloudDAV | ||
- | CloudDAV is our implementation of WebDAV on top of the File Fabric. It runs as a CGI script from / | + | CloudDAV is our implementation of WebDAV on top of Access Anywhere. It runs as a CGI script from / |
### Log | ### Log | ||
Line 494: | Line 465: | ||
## Cloud S3 | ## Cloud S3 | ||
- | Cloud S3 is our implementation of an Amazon S3 compatible API on top of the File Fabric. | + | Cloud S3 is our implementation of an Amazon S3 compatible API on top of Access Anywhere. |
### Log | ### Log | ||
- | / | + | / |
### Configuration | ### Configuration | ||
Line 567: | Line 538: | ||
/ | / | ||
- | ## License (Enterprise File Fabric) | + | ## License (Access Anywhere) |
This error on attempted login indicates problems with the license key including not present or expired. | This error on attempted login indicates problems with the license key including not present or expired. | ||
Line 598: | Line 569: | ||
1) From the shell use the System Package Manager | 1) From the shell use the System Package Manager | ||
- | + | ||
yum info sme-ff-filefabric.x86_64 | yum info sme-ff-filefabric.x86_64 | ||
2) From the database | 2) From the database | ||
- | mysql> | + | |
3) From the shell as smeconfiguser run the alias: | 3) From the shell as smeconfiguser run the alias: | ||
Line 661: | Line 632: | ||
## Fail2Ban | ## Fail2Ban | ||
- | The SME Appliance ships with a customized version of Fail2Ban (http:// | + | The NAA Appliance ships with a customized version of Fail2Ban (http:// |
Fail2Ban scans logs file for malicious patterns ie. DoS attacks, too many password failures, SSH logins, seeking exploits, trying to scan for download links etc. | Fail2Ban scans logs file for malicious patterns ie. DoS attacks, too many password failures, SSH logins, seeking exploits, trying to scan for download links etc. |