Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ConfigSync Does not work - solved again

    Scheduled Pinned Locked Moved 2.2 Snapshot Feedback and Problems - RETIRED
    14 Posts 3 Posters 2.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C Offline
      cmb
      last edited by

      what log do you get when it fails?

      1 Reply Last reply Reply Quote 0
      • N Offline
        neuernick
        last edited by

        Sorry, this is a little bit annoyance for me, i do not see log entries regarding this Topic

        i try a lot of config changes, adding rules remove rule (firewall) adding and removing users….

        out of System section is get this.

        Nov 7 18:27:20 check_reload_status: Syncing firewall
        Nov 7 18:27:20 php-fpm[95925]: /system_usermanager.php: The command '/usr/sbin/pw groupadd -g -M 2001,2002,2003 2>&1' returned exit code '65', the output was 'pw: group name required'
        Nov 7 18:27:20 php-fpm[95925]: /system_usermanager.php: Tried to remove user but got user pw instead. Bailing.
        Nov 7 18:26:27 php-fpm[95925]: /rc.filter_configure_sync: Could not find IPv6 gateway for interface(lan).

        From the master. nothing on the Slave
        Firewall low volume of the usual stuff. nothing on the pfsync interface

        by any chance, do i need to have the System Password the same as the CARP password?
        Carp is working, in order to get Carp i configured on both Host manually

        1 Reply Last reply Reply Quote 0
        • C Offline
          cmb
          last edited by

          You don't seem to have config sync enabled at all, no logs there attempting anything.

          1 Reply Last reply Reply Quote 0
          • N Offline
            neuernick
            last edited by

            hi

            i have it enabled

            Config snippet from Slave
            <hasync><pfsyncpeerip><pfsyncinterface>opt1</pfsyncinterface>
                            <synchronizetoip><username><password></password>
                            <pfsyncenabled>on</pfsyncenabled></username></synchronizetoip></pfsyncpeerip></hasync>

            config snippet master

            <hasync><pfsyncpeerip>10.x.x.2</pfsyncpeerip>
            <pfsyncinterface>opt1</pfsyncinterface>
            <synchronizetoip>10.x.x.2</synchronizetoip>
            <username>admin</username>
            <password>[prefer to keep it in my place ;)</password>
            <synchronizeusers>on</synchronizeusers>
            <synchronizerules>on</synchronizerules>
            <synchronizecerts>on</synchronizecerts>
            <synchronizeschedules>on</synchronizeschedules>
            <synchronizealiases>on</synchronizealiases>
            <synchronizevirtualip>on</synchronizevirtualip>
            <synchronizecaptiveportal>on</synchronizecaptiveportal>
            <synchronizednsforwarder>on</synchronizednsforwarder>
            <synchronizeauthservers>on</synchronizeauthservers>
            <synchronizedhcpd>on</synchronizedhcpd>
            <synchronizewol>on</synchronizewol>
            <synchronizestaticroutes>on</synchronizestaticroutes>
            <synchronizelb>on</synchronizelb>
            <synchronizenat>on</synchronizenat>
            <synchronizeipsec>on</synchronizeipsec>
            <synchronizeopenvpn>on</synchronizeopenvpn>
            <pfsyncenabled>on</pfsyncenabled></hasync>
            [/tt]

            just for reference, here is the ps output

            [2.2-BETA][root@c3po.wks20.de]/root: ps auxx
            USER      PID  %CPU %MEM    VSZ  RSS TT  STAT STARTED      TIME COMMAND
            root      11 199.0  0.0      0    32  -  RL    9:40AM 1705:58.19 [idle]
            root        0  0.0  0.0      0  144  -  DLs  9:40AM    0:00.15 [kernel]
            root        1  0.0  0.1  9472  760  -  ILs  9:40AM    0:00.03 /sbin/init –
            root        2  0.0  0.0      0    16  -  DL    9:40AM    0:00.00 [crypto]
            root        3  0.0  0.0      0    16  -  DL    9:40AM    0:00.00 [crypto returns]
            root        4  0.0  0.0      0    32  -  DL    9:40AM    0:00.29 [cam]
            root        5  0.0  0.0      0    16  -  DL    9:40AM    0:18.22 [pf purge]
            root        6  0.0  0.0      0    16  -  DL    9:40AM    0:00.00 [balloon]
            root        7  0.0  0.0      0    16  -  DL    9:40AM    0:00.00 [sctp_iterator]
            root        8  0.0  0.0      0    16  -  DL    9:40AM    0:00.82 [pagedaemon]
            root        9  0.0  0.0      0    16  -  DL    9:40AM    0:00.00 [vmdaemon]
            root      10  0.0  0.0      0    16  -  DL    9:40AM    0:00.00 [audit]
            root      12  0.0  0.0      0  352  -  WL    9:40AM    2:53.23 [intr]
            root      13  0.0  0.0      0    32  -  DL    9:40AM    0:00.00 [ng_queue]
            root      14  0.0  0.0      0    48  -  DL    9:40AM    0:02.20 [geom]
            root      15  0.0  0.0      0    16  -  DL    9:40AM    0:18.52 [rand_harvestq]
            root      16  0.0  0.0      0    64  -  DL    9:40AM    0:03.55 [usb]
            root      17  0.0  0.0      0    16  -  SL    9:40AM    0:03.90 [xenwatch]
            root      18  0.0  0.0      0    16  -  IL    9:40AM    0:00.08 [xenstore_rcv]
            root      19  0.0  0.0      0    16  -  DL    9:40AM    0:00.10 [idlepoll]
            root      20  0.0  0.0      0    16  -  DL    9:40AM    0:00.00 [pagezero]
            root      21  0.0  0.0      0    16  -  DL    9:40AM    0:00.40 [bufdaemon]
            root      22  0.0  0.0      0    16  -  DL    9:40AM    0:06.70 [syncer]
            root      23  0.0  0.0      0    16  -  DL    9:40AM    0:00.41 [vnlru]
            root      59  0.0  0.0      0    16  -  DL    9:40AM    0:00.85 [md0]
            root      248  0.0  2.3 222072 23468  -  Ss    9:40AM    0:03.12 php-fpm: master process (/usr/local/lib/php-fpm.conf) (php-fpm)
            root      264  0.0  0.3  19024  2560  -  INs  9:40AM    0:00.03 /usr/local/sbin/check_reload_status
            root      266  0.0  0.2  19024  2408  -  IN    9:40AM    0:00.00 check_reload_status: Monitoring daemon of check_reload_status
            root      276  0.0  0.4  13164  4424  -  Is    9:40AM    0:00.05 /sbin/devd
            root    1823  0.0  0.7  46668  6612  -  S    5:21PM    0:01.29 /usr/local/sbin/lighttpd -f /var/etc/lighty-webConfigurator.conf
            root    4613  0.0  0.2  14664  2300  -  Is    9:40AM    0:00.27 /usr/sbin/syslogd -s -c -c -l /var/dhcpd/var/run/log -P /var/run/syslog.pid -f /var/etc/syslog.conf
            root    9280  0.0  0.5  32428  5228  -  Is    9:40AM    0:00.00 /usr/sbin/sshd
            root    9298  0.0  0.2  14756  2224  -  Is    9:40AM    0:00.01 /usr/local/sbin/sshlockout_pf 15
            root    13706  0.0  0.2  16812  2340  -  Ss    9:40AM    0:01.66 /usr/local/sbin/filterlog -i pflog0 -p /var/run/filterlog.pid
            root    14640  0.0  0.2  18788  2348  -  Is    9:40AM    0:00.01 /usr/sbin/inetd -wW -R 0 -a 127.0.0.1 /var/etc/inetd.conf
            root    15405  0.0  0.5  21720  5264  -  Ss    9:40AM    0:00.48 /usr/local/sbin/openvpn –config /var/etc/openvpn/server1.conf
            root    18624  0.0  0.2  12460  2180  -  Ss    9:40AM    0:12.62 /usr/local/sbin/apinger -c /var/etc/apinger.conf
            root    18650  0.0  0.3  28316  3004  -  I    9:40AM    0:00.51 rrdtool -
            root    27651  0.0  3.9 222072 39704  -  I    11:45PM    0:00.05 php-fpm: pool lighty (php-fpm)
            root    47414  0.0  1.8  28168 18052  -  Ss    9:42AM    0:04.87 /usr/local/sbin/ntpd -g -c /var/etc/ntpd.conf -p /var/run/ntpd.pid
            root    49311  0.0  0.2  8312  1960  -  SN  11:58PM    0:00.00 sleep 60
            root    49983  0.0  0.6  55632  6124  -  Ss  11:00PM    0:00.16 sshd: root@pts/0 (sshd)
            root    51653  0.0  0.2  8312  1960  -  S    11:58PM    0:00.00 sleep 55
            root    55975  0.0  0.2  17144  2488  -  S    9:46AM    0:00.74 /bin/sh /usr/local/pkg/sqpmon.sh
            root    60436  0.0  0.6  32240  6472  -  Is    9:46AM    0:00.00 /usr/local/sbin/squid -D
            proxy  60942  0.0  0.9  44528  9464  -  S    9:46AM    0:04.90 (squid) -D (squid)
            proxy  60997  0.0  0.2  10416  2016  -  I    9:46AM    0:00.00 (unlinkd) (unlinkd)
            unbound 62716  0.0  1.1  41400 10768  -  Is    6:58PM    0:00.40 /usr/sbin/unbound -c /var/unbound/unbound.conf
            root    67843  0.0  0.3  17144  2700  -  SN    6:58PM    0:02.40 /bin/sh /var/db/rrd/updaterrd.sh
            root      24  0.0  0.2  17144  2180 v0  Is+  9:40AM    0:00.03 sh /etc/rc autoboot
            root      269  0.0  4.7 230164 47436 v0  I+    9:40AM    0:00.56 /usr/local/bin/php -f /etc/rc.bootup
            root    28423  0.0  0.2  8312  1960 v0  I+  11:58PM    0:00.00 sleep 60
            root    91693  0.0  0.0      0    0 v0  Z+    9:40AM    0:00.01 <defunct>root    92287  0.0  0.2  17144  2400 v0  I+    9:40AM    0:00.17 /bin/sh /usr/local/sbin/xe-daemon -p /var/run/xe-daemon.pid
            root    50834  0.0  0.3  17144  2784  0  Is  11:00PM    0:00.01 -sh (sh)
            root    51156  0.0  0.3  17144  2672  0  I    11:00PM    0:00.00 /bin/sh /etc/rc.initial
            root    52860  0.0  0.2  18816  2384  0  R+  11:58PM    0:00.00 ps auxx
            root    74437  0.0  0.4  17484  3708  0  S    11:00PM    0:00.06 /bin/tcsh
            [2.2-BETA][root@c3po.wks20.de]/root:

            If i read the XML config correctly, the ha sync should be enabled

            thanks a million for your help

            cheers
            volki</defunct>

            1 Reply Last reply Reply Quote 0
            • C Offline
              cmb
              last edited by

              yeah that seems fine. How'd you get Xen tools on there? Anything else you've manually installed? Can you ping the secondary's 10.x.x.x IP from the primary?

              1 Reply Last reply Reply Quote 0
              • N Offline
                neuernick
                last edited by

                pkg install xe-guest-utilty

                ping works fine
                telnet 10.10.1.2 80 GET give a valid HTML output
                installed anc configured so far is squid and openvpn

                i will reinstall out of the box again, and try to accomplish pfsunc/configsync before i do all the fancy stuff, it might be a sequenze issue

                1 Reply Last reply Reply Quote 0
                • E Offline
                  eri--
                  last edited by

                  Normally you should have some output on the system logs containing sync or XMLRPC on it.
                  Can you show that?

                  Or even run /etc/rc.filter_synchronize manually and see how it goes.

                  1 Reply Last reply Reply Quote 0
                  • N Offline
                    neuernick
                    last edited by

                    Hi

                    i run /etc/rc.filter_synchronize  manually and it did no change at all

                    i reinstalled both instances and now the config sync is working fine

                    i did not reinstall the xe utills
                    i did not reinstall squid and the openvpnclientpack

                    keep you postet

                    1 Reply Last reply Reply Quote 0
                    • N Offline
                      neuernick
                      last edited by

                      Hi is reinstaleld, setup the Config/pfsync, and startet with the Config afterwards

                      this it works… ish

                      and after playing with squid, i checked the slave , and all of a sudden, it was not syncing any more ..

                      i used the squid 2 package

                      1 Reply Last reply Reply Quote 0
                      • N Offline
                        neuernick
                        last edited by

                        and it is not working agai :/

                        i updated via webgui to the latest version, and reinstalled shellcmd + openvpnClientExport package

                        invoking
                        /etc/rc.filter_synchronize
                        does not help

                        1 Reply Last reply Reply Quote 0
                        • N Offline
                          neuernick
                          last edited by

                          just a bump. to highlight that i am back in proplem land :)

                          1 Reply Last reply Reply Quote 0
                          • N Offline
                            neuernick
                            last edited by

                            hi

                            i dump the log files and went over every sungli entry

                            this one got my attention

                            php-fpm[70539]: /xmlrpc.php: The command '/usr/sbin/pw groupadd -g -M 2001 2>&1' returned exit code '65', the output was 'pw: group name required'

                            there is one user without a group, i fixed this and all of a suden the PFsync is working again

                            1 Reply Last reply Reply Quote 0
                            • C Offline
                              cmb
                              last edited by

                              Thanks, pretty sure Ermal fixed that one earlier today.

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.