cnMaestro 2.1.0 (On-Premises)

FYI your link doesn't go to the right page on vmware's site.

please for the love of god, can you just fix the file for us and repost??

1 Like

From a security standpoint, this is a positive change by VMWare as SHA1 is no longer considered a secure hashing algorithm and a stronger version should be used. It also turns out that the vSphere C# Client can only support SHA1.

You can download the ovftool 4.2 

https://my.vmware.com/group/vmware/details?downloadGroup=OVFTOOL420&productId=491 

Rupam

1 Like

vmware’s OVF  tool for mac has an expired cert :-/

 
i’m not installing something that’s insecure.
 
PLEASE JUST FIX THE DANG OVA FILE!!!  PLEASE!!!!!!!
1 Like

Tried the upgrade to r39 with a different computer and it worked succesfully. I'm not sure what was going on, maybe a cache issue?

I'm also running ESXi 5.5 on this box and I ran the ovftool and the new vm imported fine. I don't think cambium should change the file from SHA256. We need to keep our boxes more updated. 

1 Like

Hi Sean -- we are hesitant to replace the current OVA with one leveraging SHA-1 digests, because SHA-1 is no longer considered secure (it was dropped by VMware for good reason). Instead, I am including a script written for Linux, but also tested on Mac command line, which converts the SHA-256 OVA digests to SHA-1. Just run the code as an executable (chmod +x <filename>), and point it to your downloaded OVA file (cnmaestro_sha_convert <OVA file>). If this really doesn't work for you, then ping Rupam or I by private message, and we can look at providing access to the file generated by the script below.

#!/bin/bash -e
# Script to convert a cnMaestro OVA to SHA-1 digests

SOURCE=${1}
TMPDIR=cnmaestro_tmp

if [[ -z ${SOURCE} ]]; then
  echo "Usage: ${0} <OVA file>"
  exit 1
elif [[ ! -f ${SOURCE} ]]; then
  echo "OVA file does not exist: ${SOURCE}"
  exit 1
fi

OVF_FILE=$(tar tf ${SOURCE} | grep "\.ovf")
PREFIX=${OVF_FILE%.ovf}

rm -rf ./${TMPDIR}
mkdir -p ./${TMPDIR}
echo "Unpacking OVA file"
tar xvf ${SOURCE} -C ./${TMPDIR} > /dev/null
cd ${TMPDIR}
echo "Generating SHA-1 digests"
openssl dgst -sha1 ${PREFIX}.ovf > ${PREFIX}.mf
openssl dgst -sha1 ${PREFIX}-disk1.vmdk >> ${PREFIX}.mf
openssl dgst -sha1 ${PREFIX}-disk2.vmdk >> ${PREFIX}.mf
SHA1_FILE=${PREFIX}-sha1.ova
echo "Rebuilding OVA file: ${SHA1_FILE}"
tar cvf ${SHA1_FILE} ${PREFIX}.ovf ${PREFIX}.mf ${PREFIX}-disk*.vmdk* > /dev/null
echo "SHA-1 OVA: $(pwd)/${SHA1_FILE}"

5 Likes

Re: Xen issues, I was able to get it to boot. In the emergency console at root (sudo -s) shell type:

vi /etc/fstab

Change the mount point for the 2nd disk from /sdb1 to /xvdb1

Type :wq

Reboot

Tim

3 Likes

thank you for the script, that worked and the virtual machine now boots up.

however, i can't get my backup to restore.  it acts like it is restoring and then stops around 62% and the web screen pauses and says the connection has been lost.

i tried several times and rebooted inbetween etc. with no luck.

Can you try to import using CLI.

Login to cnMaestro VM console, and run below command

sudo su

cnmaestro-import

cnmaestro-import [-h] [--scp] source

usage: cnmaestro-import [--scp] [path]

Import cnmaestro data using SCP:
sudo cnmaestro-import --scp <username>@<remotehost>:<path>
Example: sudo cnmaestro-import --scp cnmaestro@192.168.1.1:/home/cnmaestro/cnmaestro.tar.gz
(OR)
Import cnmaestro data from given path:
sudo cnmaestro-import <path>
Example: sudo cnmaestro-import /home/cnmaestro/cnmaestro.tar.gz

Regards,

Rupam

This evening we tried the scheduled Software Update to some AP + SM's.

But many, many devices not updated due "Upgrade Timedout: Device is taking longer than 5 minutes" but the devices was correctly up and running.

Same problem with the normal update ("Now" instead "Scheduled").

Updated with CNUT and no problem

P.S. Updating AP's through cnMaestro not enable Autoupdate, I think.

1 Like

@Timothy Alexander 

This method did get it to boot normally on Xenserver 6.5. Which I realize is old. Thank you for your post.

Par for the course on this ridiculously arcane and complex mess of a procedure, the backup file does not import. I'm beyond being surprised by this nightmare - not one single step has gone the way Cambium has said it should. I generated two backups using different configs of 1.6.3-r19, and neither one will complete the import on this system. I started by trying to use the GUI, but after that failed the exact same way Sean reported, I managed to get the backup files onto the local machine, and ran the CLI procedure Rupam suggests, which finished with the above failure screen. During the process itself, I see tons of "No such file or directory" and "Command failed" errors, plus a few spelling errors.

Since I really do want to have cnMaestro running on my network, I'm going back to the 1.6.3-r19 version. I may try again if the bugs ever get worked out...

1 Like

I have same problem when i tried to restore database from 1.6.3-r39

Another little bug:

In "default" tree don't show anymore the Towers throughput (empty)

(see attached file)

Hi,

We have analyzed the import issue on one of the setup and it looks like an issue with data created from a version probably older than 1.6.1. Anyway we are aggressively working on the fix and planning to make a 2.1.0 patch available on priority basis.

Thanks,

Ajay

1 Like

That makes sense - I had been running 1.6.0 for a long time, and only converted to 1.6.1 and upgraded to 1.6.3 right before the switch to 2.1.0. 

I guess the relevant question is "does version 1.6.3 take a while to convert the database, perhaps in the background, or is it supposed to convert all the data at the time of the import?"

Hi,

I can't restore from back 1.6.3-r39.

I have tried via command line and i got this error:

2019-01-17 15:59:59,283 - cns.migration - INFO - Publishing json data {'value': 25, 'account': 'cnmaestro', 'action': 'restore', 'status': 'PROGRESS'}
2019-01-17 16:00:01,457 - cns.migration - ERROR - Error in extract tar file /srv/storage/tmp/migration/uploads/cnmaestro-import.tar.gz to destination dir /srv/storage/tmp/migration/dumps
2019-01-17 16:00:01,457 - cns.migration - INFO - Cleaning restore files and directories!
2019-01-17 16:00:01,458 - cns.migration - ERROR - Failed restore!
2019-01-17 16:00:01,458 - cns.migration - ERROR - Command 'tar -xvf "/srv/storage/tmp/migration/uploads/cnmaestro-import.tar.gz" -C "/srv/storage/tmp/migration"' returned non-zero exit status 2
2019-01-17 16:00:01,458 - cns.migration - INFO - Publishing json data {'code': 'RESTORE_FAILED', 'cause': 'Failed to import data!', 'account': 'cnmaestro', 'action': 'restore', 'status': 'ERROR'}
2019-01-17 16:00:01,459 - cns.redis - INFO - Flushing redis db 4 ...
2019-01-17 16:00:01,461 - cns.migration - ERROR - Command 'tar -xvf "/srv/storage/tmp/migration/uploads/cnmaestro-import.tar.gz" -C "/srv/storage/tmp/migration"' returned non-zero exit status 2
closing postgres connection! host 127.0.0.1, port 5432, database cnmaestro_server, user postgres

I have checked the file /srv/storage/tmp/migration/uploads/cnmaestro-import.tar.gz and it is a tar gz file so the comamnd line should be tar xzvf /srv/storage/tmp/migration/uploads/cnmaestro-import.tar.gz, but I got error anyway because it's seems a double gzipped file.

If i use: gzip -cd /srv/storage/tmp/migration/uploads/cnmaestro-import.tar.gz | gunzip -cd -| tar tvf -

i get a list of files

I hope this can help

Francesco

Hi,

I have tried again gunzipping the backup,. adding again .gz extension to the file and now I have restored and the server rebooted, now the gui says: "Data Migration to 2.1.0 In Progress. Do not initiate System Backup and Data Report jobs or restart the system"

I can see my network and my customers' devices

1 Like

This is expected behaviour.

Do not initiate System Backup and Data Report jobs or restart the system

1 Like

I ran the update from the CLI and I got the following error.

2019-01-17 20:46:40,512 - cns.migration - INFO - Offline connected devices!
2019-01-17 20:46:40,532 - cns.migration - INFO - Offline connected devices done in 0 (sec)
2019-01-17 20:46:40,532 - cns.migration - INFO - Cleaning restore files and directories!
2019-01-17 20:46:40,538 - cns.migration - INFO - Deleted Mongo dump files exists in path /srv/storage/tmp/migration/dumps
2019-01-17 20:46:40,539 - cns.redis - INFO - Flushing redis db 4 ...
2019-01-17 20:46:40,540 - cns.migration - INFO - Cleaning restore files and directories!
2019-01-17 20:46:40,540 - cns.migration - ERROR - Failed restore!
2019-01-17 20:46:40,540 - cns.migration - ERROR - Command '['cnmaestro-mongo-migration --ver 2.1.0 --step 2 --sver 1.6.3']' returned non-zero exit status 1
2019-01-17 20:46:40,541 - cns.migration - INFO - Publishing json data {'code': 'RESTORE_FAILED', 'action': 'restore', 'cause': 'Failed to import data!', 'status': 'ERROR', 'account': 'cnmaestro'}
2019-01-17 20:46:40,551 - cns.migration - INFO - Executing command 'service cnmaestro-router start'
2019-01-17 20:46:44,200 - cns.migration - INFO - Executing command 'service nginx restart'
2019-01-17 20:46:44,353 - cns.redis - INFO - Flushing redis db 4 ...
2019-01-17 20:46:44,354 - cns.migration - ERROR - Command '['cnmaestro-mongo-migration --ver 2.1.0 --step 2 --sver 1.6.3']' returned non-zero exit status 1

Any Idea's?