Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ConfigSync Does not work - solved again

    Scheduled Pinned Locked Moved 2.2 Snapshot Feedback and Problems - RETIRED
    14 Posts 3 Posters 2.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C Offline
      cmb
      last edited by

      You don't seem to have config sync enabled at all, no logs there attempting anything.

      1 Reply Last reply Reply Quote 0
      • N Offline
        neuernick
        last edited by

        hi

        i have it enabled

        Config snippet from Slave
        <hasync><pfsyncpeerip><pfsyncinterface>opt1</pfsyncinterface>
                        <synchronizetoip><username><password></password>
                        <pfsyncenabled>on</pfsyncenabled></username></synchronizetoip></pfsyncpeerip></hasync>

        config snippet master

        <hasync><pfsyncpeerip>10.x.x.2</pfsyncpeerip>
        <pfsyncinterface>opt1</pfsyncinterface>
        <synchronizetoip>10.x.x.2</synchronizetoip>
        <username>admin</username>
        <password>[prefer to keep it in my place ;)</password>
        <synchronizeusers>on</synchronizeusers>
        <synchronizerules>on</synchronizerules>
        <synchronizecerts>on</synchronizecerts>
        <synchronizeschedules>on</synchronizeschedules>
        <synchronizealiases>on</synchronizealiases>
        <synchronizevirtualip>on</synchronizevirtualip>
        <synchronizecaptiveportal>on</synchronizecaptiveportal>
        <synchronizednsforwarder>on</synchronizednsforwarder>
        <synchronizeauthservers>on</synchronizeauthservers>
        <synchronizedhcpd>on</synchronizedhcpd>
        <synchronizewol>on</synchronizewol>
        <synchronizestaticroutes>on</synchronizestaticroutes>
        <synchronizelb>on</synchronizelb>
        <synchronizenat>on</synchronizenat>
        <synchronizeipsec>on</synchronizeipsec>
        <synchronizeopenvpn>on</synchronizeopenvpn>
        <pfsyncenabled>on</pfsyncenabled></hasync>
        [/tt]

        just for reference, here is the ps output

        [2.2-BETA][root@c3po.wks20.de]/root: ps auxx
        USER      PID  %CPU %MEM    VSZ  RSS TT  STAT STARTED      TIME COMMAND
        root      11 199.0  0.0      0    32  -  RL    9:40AM 1705:58.19 [idle]
        root        0  0.0  0.0      0  144  -  DLs  9:40AM    0:00.15 [kernel]
        root        1  0.0  0.1  9472  760  -  ILs  9:40AM    0:00.03 /sbin/init –
        root        2  0.0  0.0      0    16  -  DL    9:40AM    0:00.00 [crypto]
        root        3  0.0  0.0      0    16  -  DL    9:40AM    0:00.00 [crypto returns]
        root        4  0.0  0.0      0    32  -  DL    9:40AM    0:00.29 [cam]
        root        5  0.0  0.0      0    16  -  DL    9:40AM    0:18.22 [pf purge]
        root        6  0.0  0.0      0    16  -  DL    9:40AM    0:00.00 [balloon]
        root        7  0.0  0.0      0    16  -  DL    9:40AM    0:00.00 [sctp_iterator]
        root        8  0.0  0.0      0    16  -  DL    9:40AM    0:00.82 [pagedaemon]
        root        9  0.0  0.0      0    16  -  DL    9:40AM    0:00.00 [vmdaemon]
        root      10  0.0  0.0      0    16  -  DL    9:40AM    0:00.00 [audit]
        root      12  0.0  0.0      0  352  -  WL    9:40AM    2:53.23 [intr]
        root      13  0.0  0.0      0    32  -  DL    9:40AM    0:00.00 [ng_queue]
        root      14  0.0  0.0      0    48  -  DL    9:40AM    0:02.20 [geom]
        root      15  0.0  0.0      0    16  -  DL    9:40AM    0:18.52 [rand_harvestq]
        root      16  0.0  0.0      0    64  -  DL    9:40AM    0:03.55 [usb]
        root      17  0.0  0.0      0    16  -  SL    9:40AM    0:03.90 [xenwatch]
        root      18  0.0  0.0      0    16  -  IL    9:40AM    0:00.08 [xenstore_rcv]
        root      19  0.0  0.0      0    16  -  DL    9:40AM    0:00.10 [idlepoll]
        root      20  0.0  0.0      0    16  -  DL    9:40AM    0:00.00 [pagezero]
        root      21  0.0  0.0      0    16  -  DL    9:40AM    0:00.40 [bufdaemon]
        root      22  0.0  0.0      0    16  -  DL    9:40AM    0:06.70 [syncer]
        root      23  0.0  0.0      0    16  -  DL    9:40AM    0:00.41 [vnlru]
        root      59  0.0  0.0      0    16  -  DL    9:40AM    0:00.85 [md0]
        root      248  0.0  2.3 222072 23468  -  Ss    9:40AM    0:03.12 php-fpm: master process (/usr/local/lib/php-fpm.conf) (php-fpm)
        root      264  0.0  0.3  19024  2560  -  INs  9:40AM    0:00.03 /usr/local/sbin/check_reload_status
        root      266  0.0  0.2  19024  2408  -  IN    9:40AM    0:00.00 check_reload_status: Monitoring daemon of check_reload_status
        root      276  0.0  0.4  13164  4424  -  Is    9:40AM    0:00.05 /sbin/devd
        root    1823  0.0  0.7  46668  6612  -  S    5:21PM    0:01.29 /usr/local/sbin/lighttpd -f /var/etc/lighty-webConfigurator.conf
        root    4613  0.0  0.2  14664  2300  -  Is    9:40AM    0:00.27 /usr/sbin/syslogd -s -c -c -l /var/dhcpd/var/run/log -P /var/run/syslog.pid -f /var/etc/syslog.conf
        root    9280  0.0  0.5  32428  5228  -  Is    9:40AM    0:00.00 /usr/sbin/sshd
        root    9298  0.0  0.2  14756  2224  -  Is    9:40AM    0:00.01 /usr/local/sbin/sshlockout_pf 15
        root    13706  0.0  0.2  16812  2340  -  Ss    9:40AM    0:01.66 /usr/local/sbin/filterlog -i pflog0 -p /var/run/filterlog.pid
        root    14640  0.0  0.2  18788  2348  -  Is    9:40AM    0:00.01 /usr/sbin/inetd -wW -R 0 -a 127.0.0.1 /var/etc/inetd.conf
        root    15405  0.0  0.5  21720  5264  -  Ss    9:40AM    0:00.48 /usr/local/sbin/openvpn –config /var/etc/openvpn/server1.conf
        root    18624  0.0  0.2  12460  2180  -  Ss    9:40AM    0:12.62 /usr/local/sbin/apinger -c /var/etc/apinger.conf
        root    18650  0.0  0.3  28316  3004  -  I    9:40AM    0:00.51 rrdtool -
        root    27651  0.0  3.9 222072 39704  -  I    11:45PM    0:00.05 php-fpm: pool lighty (php-fpm)
        root    47414  0.0  1.8  28168 18052  -  Ss    9:42AM    0:04.87 /usr/local/sbin/ntpd -g -c /var/etc/ntpd.conf -p /var/run/ntpd.pid
        root    49311  0.0  0.2  8312  1960  -  SN  11:58PM    0:00.00 sleep 60
        root    49983  0.0  0.6  55632  6124  -  Ss  11:00PM    0:00.16 sshd: root@pts/0 (sshd)
        root    51653  0.0  0.2  8312  1960  -  S    11:58PM    0:00.00 sleep 55
        root    55975  0.0  0.2  17144  2488  -  S    9:46AM    0:00.74 /bin/sh /usr/local/pkg/sqpmon.sh
        root    60436  0.0  0.6  32240  6472  -  Is    9:46AM    0:00.00 /usr/local/sbin/squid -D
        proxy  60942  0.0  0.9  44528  9464  -  S    9:46AM    0:04.90 (squid) -D (squid)
        proxy  60997  0.0  0.2  10416  2016  -  I    9:46AM    0:00.00 (unlinkd) (unlinkd)
        unbound 62716  0.0  1.1  41400 10768  -  Is    6:58PM    0:00.40 /usr/sbin/unbound -c /var/unbound/unbound.conf
        root    67843  0.0  0.3  17144  2700  -  SN    6:58PM    0:02.40 /bin/sh /var/db/rrd/updaterrd.sh
        root      24  0.0  0.2  17144  2180 v0  Is+  9:40AM    0:00.03 sh /etc/rc autoboot
        root      269  0.0  4.7 230164 47436 v0  I+    9:40AM    0:00.56 /usr/local/bin/php -f /etc/rc.bootup
        root    28423  0.0  0.2  8312  1960 v0  I+  11:58PM    0:00.00 sleep 60
        root    91693  0.0  0.0      0    0 v0  Z+    9:40AM    0:00.01 <defunct>root    92287  0.0  0.2  17144  2400 v0  I+    9:40AM    0:00.17 /bin/sh /usr/local/sbin/xe-daemon -p /var/run/xe-daemon.pid
        root    50834  0.0  0.3  17144  2784  0  Is  11:00PM    0:00.01 -sh (sh)
        root    51156  0.0  0.3  17144  2672  0  I    11:00PM    0:00.00 /bin/sh /etc/rc.initial
        root    52860  0.0  0.2  18816  2384  0  R+  11:58PM    0:00.00 ps auxx
        root    74437  0.0  0.4  17484  3708  0  S    11:00PM    0:00.06 /bin/tcsh
        [2.2-BETA][root@c3po.wks20.de]/root:

        If i read the XML config correctly, the ha sync should be enabled

        thanks a million for your help

        cheers
        volki</defunct>

        1 Reply Last reply Reply Quote 0
        • C Offline
          cmb
          last edited by

          yeah that seems fine. How'd you get Xen tools on there? Anything else you've manually installed? Can you ping the secondary's 10.x.x.x IP from the primary?

          1 Reply Last reply Reply Quote 0
          • N Offline
            neuernick
            last edited by

            pkg install xe-guest-utilty

            ping works fine
            telnet 10.10.1.2 80 GET give a valid HTML output
            installed anc configured so far is squid and openvpn

            i will reinstall out of the box again, and try to accomplish pfsunc/configsync before i do all the fancy stuff, it might be a sequenze issue

            1 Reply Last reply Reply Quote 0
            • E Offline
              eri--
              last edited by

              Normally you should have some output on the system logs containing sync or XMLRPC on it.
              Can you show that?

              Or even run /etc/rc.filter_synchronize manually and see how it goes.

              1 Reply Last reply Reply Quote 0
              • N Offline
                neuernick
                last edited by

                Hi

                i run /etc/rc.filter_synchronize  manually and it did no change at all

                i reinstalled both instances and now the config sync is working fine

                i did not reinstall the xe utills
                i did not reinstall squid and the openvpnclientpack

                keep you postet

                1 Reply Last reply Reply Quote 0
                • N Offline
                  neuernick
                  last edited by

                  Hi is reinstaleld, setup the Config/pfsync, and startet with the Config afterwards

                  this it works… ish

                  and after playing with squid, i checked the slave , and all of a sudden, it was not syncing any more ..

                  i used the squid 2 package

                  1 Reply Last reply Reply Quote 0
                  • N Offline
                    neuernick
                    last edited by

                    and it is not working agai :/

                    i updated via webgui to the latest version, and reinstalled shellcmd + openvpnClientExport package

                    invoking
                    /etc/rc.filter_synchronize
                    does not help

                    1 Reply Last reply Reply Quote 0
                    • N Offline
                      neuernick
                      last edited by

                      just a bump. to highlight that i am back in proplem land :)

                      1 Reply Last reply Reply Quote 0
                      • N Offline
                        neuernick
                        last edited by

                        hi

                        i dump the log files and went over every sungli entry

                        this one got my attention

                        php-fpm[70539]: /xmlrpc.php: The command '/usr/sbin/pw groupadd -g -M 2001 2>&1' returned exit code '65', the output was 'pw: group name required'

                        there is one user without a group, i fixed this and all of a suden the PFsync is working again

                        1 Reply Last reply Reply Quote 0
                        • C Offline
                          cmb
                          last edited by

                          Thanks, pretty sure Ermal fixed that one earlier today.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.