Hi,
I checked the password from /etc/foreman/database.yml and it's
completely wrong. Who is using the data from this file?
There are no problems with the system, so I was wondering is anything
is using the password from there. Foreman user can connect to the db
without any password.
Best regards,
Cristian Falcas
> Hi,
>
> I checked the password from /etc/foreman/database.yml and it's
> completely wrong. Who is using the data from this file?
>
> There are no problems with the system, so I was wondering is anything
> is using the password from there. Foreman user can connect to the db
> without any password.
>
Foreman does, but be aware that there are multiple Rails envs, foreman
should be using the production one.
Also, double check that in your system ~foreman/config/database.yml is a
symlink to /etc/foreman.
Ohad
Best regards,
Cristian Falcas–
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/groups/opt_out.
The file is a symlink:
/usr/share/foreman/config/database.yml -> /etc/foreman/database.yml
But the password for production is not correct. When I try to login as
root (with psql -h localhost -U foreman) it doesn't work with the one
from the file.
Please send me output tarball from foreman-debug tool.
Double check the installation is compliant with our puppet manifests:
foreman-installer -v -n
LZ
–
Later,
Lukas “lzap” Zapletal
irc: lzap #theforeman
Hi,
Attached is the foreman-debug and foreman-installer.log files.
Output from both commands:
foreman-debug
HOSTNAME: puppet.synygy.net
OS: redhat
RELEASE: Red Hat Enterprise Linux Server release 6.5 (Santiago)
FOREMAN: 1.3.1
RUBY: ruby 1.8.7 (2011-06-30 patchlevel 352) [x86_64-linux]
PUPPET: 3.3.2
A debug file has been created: /tmp/foreman-debug-2PzP8.tar.xz (112308 bytes)
[root@puppet hieradata]# foreman-installer -v -n
[ INFO 2013-12-12 08:12:40 verbose] Running validation checks
[ INFO 2013-12-12 08:12:42 verbose] Loading facts in
/usr/share/foreman-installer/modules/postgresql/lib/facter/postgres_default_version.rb
[ INFO 2013-12-12 08:12:42 verbose] Loading facts in
/usr/share/foreman-installer/modules/stdlib/lib/facter/puppet_vardir.rb
[ INFO 2013-12-12 08:12:42 verbose] Loading facts in
/usr/share/foreman-installer/modules/stdlib/lib/facter/root_home.rb
[ INFO 2013-12-12 08:12:42 verbose] Loading facts in
/usr/share/foreman-installer/modules/stdlib/lib/facter/facter_dot_d.rb
[ INFO 2013-12-12 08:12:42 verbose] Loading facts in
/usr/share/foreman-installer/modules/stdlib/lib/facter/pe_version.rb
[ INFO 2013-12-12 08:12:42 verbose] Loading facts in
/usr/share/foreman-installer/modules/concat/lib/facter/concat_basedir.rb
[ INFO 2013-12-12 08:12:42 verbose] Loading facts in
/var/lib/puppet/lib/facter/ip6tables_version.rb
[ INFO 2013-12-12 08:12:42 verbose] Loading facts in
/var/lib/puppet/lib/facter/facts_puppetmaster.rb
[ INFO 2013-12-12 08:12:42 verbose] Loading facts in
/var/lib/puppet/lib/facter/facts_system.rb
[ INFO 2013-12-12 08:12:43 verbose] Loading facts in
/var/lib/puppet/lib/facter/puppet_vardir.rb
[ INFO 2013-12-12 08:12:43 verbose] Loading facts in
/var/lib/puppet/lib/facter/auditd_arch.rb
[ INFO 2013-12-12 08:12:43 verbose] Loading facts in
/var/lib/puppet/lib/facter/concat_basedir.rb
[ INFO 2013-12-12 08:12:43 verbose] Loading facts in
/var/lib/puppet/lib/facter/root_home.rb
[ INFO 2013-12-12 08:12:43 verbose] Loading facts in
/var/lib/puppet/lib/facter/facts_vmware.rb
[ INFO 2013-12-12 08:12:43 verbose] Loading facts in
/var/lib/puppet/lib/facter/facts_oracle_db.rb
[ INFO 2013-12-12 08:12:43 verbose] Loading facts in
/var/lib/puppet/lib/facter/facts_graphviz.rb
[ INFO 2013-12-12 08:12:43 verbose] Loading facts in
/var/lib/puppet/lib/facter/iptables_version.rb
[ INFO 2013-12-12 08:12:43 verbose] Loading facts in
/var/lib/puppet/lib/facter/iptables_persistent_version.rb
[ INFO 2013-12-12 08:12:43 verbose] Loading facts in
/var/lib/puppet/lib/facter/facter_dot_d.rb
[ INFO 2013-12-12 08:12:43 verbose] Loading facts in
/var/lib/puppet/lib/facter/facts_java.rb
[ INFO 2013-12-12 08:12:43 verbose] Loading facts in
/var/lib/puppet/lib/facter/glassfish_logs.rb
[ INFO 2013-12-12 08:12:43 verbose] Loading facts in
/var/lib/puppet/lib/facter/facts_glassfish.rb
[ INFO 2013-12-12 08:12:43 verbose] Loading facts in
/var/lib/puppet/lib/facter/pe_version.rb
[ WARN 2013-12-12 08:12:51 verbose] Compiled catalog for
puppet.synygy.net in environment production in 7.37 seconds
[ INFO 2013-12-12 08:12:53 verbose] Loading facts in
/usr/share/foreman-installer/modules/postgresql/lib/facter/postgres_default_version.rb
[ INFO 2013-12-12 08:12:53 verbose] Loading facts in
/usr/share/foreman-installer/modules/stdlib/lib/facter/puppet_vardir.rb
[ INFO 2013-12-12 08:12:53 verbose] Loading facts in
/usr/share/foreman-installer/modules/stdlib/lib/facter/root_home.rb
[ INFO 2013-12-12 08:12:53 verbose] Loading facts in
/usr/share/foreman-installer/modules/stdlib/lib/facter/facter_dot_d.rb
[ INFO 2013-12-12 08:12:53 verbose] Loading facts in
/usr/share/foreman-installer/modules/stdlib/lib/facter/pe_version.rb
[ INFO 2013-12-12 08:12:53 verbose] Loading facts in
/usr/share/foreman-installer/modules/concat/lib/facter/concat_basedir.rb
[ INFO 2013-12-12 08:12:53 verbose] Loading facts in
/var/lib/puppet/lib/facter/ip6tables_version.rb
[ INFO 2013-12-12 08:12:53 verbose] Loading facts in
/var/lib/puppet/lib/facter/facts_puppetmaster.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/facts_system.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/puppet_vardir.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/auditd_arch.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/concat_basedir.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/root_home.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/facts_vmware.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/facts_oracle_db.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/facts_graphviz.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/iptables_version.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/iptables_persistent_version.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/facter_dot_d.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/facts_java.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/glassfish_logs.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/facts_glassfish.rb
[ INFO 2013-12-12 08:12:54 verbose] Loading facts in
/var/lib/puppet/lib/facter/pe_version.rb
[ INFO 2013-12-12 08:12:56 verbose] Applying configuration version '1386853963'
[ WARN 2013-12-12 08:12:56 verbose]
/File[/var/lib/puppet/concat/bin/concatfragments.sh]/content:
[ INFO 2013-12-12 08:12:56 verbose] —
/var/lib/puppet/concat/bin/concatfragments.sh 2013-12-09
04:15:51.391560585 -0500
[ INFO 2013-12-12 08:12:56 verbose] +++
/tmp/puppet-file20131212-445-wkgn5y-0 2013-12-12 08:12:56.670697321
-0500
[ INFO 2013-12-12 08:12:56 verbose] @@ -44,7 +44,6 @@
[ INFO 2013-12-12 08:12:56 verbose] FORCE=""
[ INFO 2013-12-12 08:12:56 verbose] WARN=""
[ INFO 2013-12-12 08:12:56 verbose] SORTARG=""
[ INFO 2013-12-12 08:12:56 verbose] -ENSURE_NEWLINE=""
[ INFO 2013-12-12 08:12:56 verbose]
[ INFO 2013-12-12 08:12:56 verbose] PATH=/sbin:/usr/sbin:/bin:/usr/bin
[ INFO 2013-12-12 08:12:56 verbose]
[ INFO 2013-12-12 08:12:56 verbose] @@ -52,7 +51,7 @@
[ INFO 2013-12-12 08:12:56 verbose] ##
http://nexenta.org/projects/site/wiki/Personalities
[ INFO 2013-12-12 08:12:56 verbose] unset SUN_PERSONALITY
[ INFO 2013-12-12 08:12:56 verbose]
[ INFO 2013-12-12 08:12:56 verbose] -while getopts "o:s:d:tnw:fl" options; do
[ INFO 2013-12-12 08:12:56 verbose] +while getopts "o:s:d:tnw:f" options; do
[ INFO 2013-12-12 08:12:56 verbose] case $options in
[ INFO 2013-12-12 08:12:56 verbose] o ) OUTFILE=$OPTARG;;
[ INFO 2013-12-12 08:12:56 verbose] d ) WORKDIR=$OPTARG;;
[ INFO 2013-12-12 08:12:56 verbose] @@ -60,7 +59,6 @@
[ INFO 2013-12-12 08:12:56 verbose] w ) WARNMSG="$OPTARG";;
[ INFO 2013-12-12 08:12:56 verbose] f ) FORCE="true";;
[ INFO 2013-12-12 08:12:56 verbose] t ) TEST="true";;
[ INFO 2013-12-12 08:12:56 verbose] - l ) ENSURE_NEWLINE="true";;
[ INFO 2013-12-12 08:12:56 verbose] * ) echo "Specify
output file with -o and fragments directory with -d"
[ INFO 2013-12-12 08:12:56 verbose] exit 1;;
[ INFO 2013-12-12 08:12:56 verbose] esac
[ INFO 2013-12-12 08:12:56 verbose] @@ -107,25 +105,16 @@
[ INFO 2013-12-12 08:12:56 verbose]
[ INFO 2013-12-12 08:12:56 verbose] cd ${WORKDIR}
[ INFO 2013-12-12 08:12:56 verbose]
[ INFO 2013-12-12 08:12:56 verbose] -if [ "x${WARNMSG}" = "x" ]; then
[ INFO 2013-12-12 08:12:56 verbose] +if [ x${WARNMSG} = "x" ]; then
[ INFO 2013-12-12 08:12:56 verbose] : > "fragments.concat"
[ INFO 2013-12-12 08:12:56 verbose] else
[ INFO 2013-12-12 08:12:56 verbose] printf '%s\n' "$WARNMSG" >
"fragments.concat"
[ INFO 2013-12-12 08:12:56 verbose] fi
[ INFO 2013-12-12 08:12:56 verbose]
[ INFO 2013-12-12 08:12:56 verbose] -if [ x${ENSURE_NEWLINE} != x ]; then
[ INFO 2013-12-12 08:12:56 verbose] - find fragments/ -type f
-follow -print0 | xargs -0 -I '{}' sh -c 'if [ -n "$(tail -c 1 < {} )"
]; then echo >> {} ; fi'
[ INFO 2013-12-12 08:12:56 verbose] -fi
[ INFO 2013-12-12 08:12:56 verbose] -
[ INFO 2013-12-12 08:12:56 verbose] # find all the files in the
fragments directory, sort them numerically and concat to
fragments.concat in the working dir
[ INFO 2013-12-12 08:12:56 verbose] -IFS_BACKUP=$IFS
[ INFO 2013-12-12 08:12:56 verbose] -IFS='
[ INFO 2013-12-12 08:12:56 verbose] -'
[ INFO 2013-12-12 08:12:56 verbose] -for fragfile in find fragments/ -type f -follow | LANG=C sort ${SORTARG}
[ INFO 2013-12-12 08:12:56 verbose] -do
[ INFO 2013-12-12 08:12:56 verbose] - cat $fragfile >> "fragments.concat"
[ INFO 2013-12-12 08:12:56 verbose] +find fragments/ -type f -follow |
sort ${SORTARG} | while read -r fragfile; do
[ INFO 2013-12-12 08:12:56 verbose] + cat "$fragfile" >> "fragments.concat"
[ INFO 2013-12-12 08:12:56 verbose] done
[ INFO 2013-12-12 08:12:56 verbose] -IFS=$IFS_BACKUP
[ INFO 2013-12-12 08:12:56 verbose]
[ INFO 2013-12-12 08:12:56 verbose] if [ x${TEST} = "x" ]; then
[ INFO 2013-12-12 08:12:56 verbose] # This is a real run, copy the
file to outfile
[ WARN 2013-12-12 08:12:56 verbose]
/File[/var/lib/puppet/concat/bin/concatfragments.sh]/content:
current_value {md5}2fbba597a1513eb61229551d35d42b9f, should be
{md5}88a59747f75834fad4827c4ab6087a81 (noop)
[ WARN 2013-12-12 08:12:57 verbose]
/File[/usr/lib/ruby/site_ruby/1.8/puppet/reports/foreman.rb]/content:
[ INFO 2013-12-12 08:12:57 verbose] —
/usr/lib/ruby/site_ruby/1.8/puppet/reports/foreman.rb 2013-12-09
03:32:23.670983855 -0500
[ INFO 2013-12-12 08:12:57 verbose] +++
/tmp/puppet-file20131212-445-18qcv4c-0 2013-12-12 08:12:57.006694124
-0500
[ INFO 2013-12-12 08:12:57 verbose] @@ -3,7 +3,7 @@
[ INFO 2013-12-12 08:12:57 verbose] # reports=log, foreman # (or any
other reports you want)
[ INFO 2013-12-12 08:12:57 verbose]
[ INFO 2013-12-12 08:12:57 verbose] # URL of your Foreman installation
[ INFO 2013-12-12 08:12:57 verbose] -$foreman_url='https://puppet.synygy.net'
[ INFO 2013-12-12 08:12:57 verbose] +$foreman_url='puppet.synygy.net'
[ INFO 2013-12-12 08:12:57 verbose] # if CA is specified, remote
Foreman host will be verified
[ INFO 2013-12-12 08:12:57 verbose] $foreman_ssl_ca =
"/var/lib/puppet/ssl/certs/ca.pem"
[ INFO 2013-12-12 08:12:57 verbose] # ssl_cert and key are required
if require_ssl_puppetmasters is enabled in Foreman
[ WARN 2013-12-12 08:12:57 verbose]
/File[/usr/lib/ruby/site_ruby/1.8/puppet/reports/foreman.rb]/content:
current_value {md5}d3582ac496796d077667774d88217dee, should be
{md5}c26bd6ce171038911c29a0835cedd01b (noop)
[ WARN 2013-12-12 08:12:57 verbose] Class[Foreman::Puppetmaster]:
Would have triggered 'refresh' from 1 events
[ WARN 2013-12-12 08:12:58 verbose] Class[Concat::Setup]: Would have
triggered 'refresh' from 1 events
[ WARN 2013-12-12 08:13:00 verbose] /File[/etc/puppet/node.rb]/content:
[ INFO 2013-12-12 08:13:00 verbose] — /etc/puppet/node.rb
2013-12-06 12:13:31.313035038 -0500
[ INFO 2013-12-12 08:13:00 verbose] +++
/tmp/puppet-file20131212-445-538kgz-0 2013-12-12 08:13:00.114664584
-0500
[ INFO 2013-12-12 08:13:00 verbose] @@ -2,7 +2,7 @@
[ INFO 2013-12-12 08:13:00 verbose]
[ INFO 2013-12-12 08:13:00 verbose] # If copying this template by
hand, replace the settings below including the angle brackets
[ INFO 2013-12-12 08:13:00 verbose] SETTINGS = {
[ INFO 2013-12-12 08:13:00 verbose] - :url =>
"https://puppet.synygy.net", # e.g. https://foreman.example.com
[ INFO 2013-12-12 08:13:00 verbose] + :url =>
"puppet.synygy.net", # e.g. https://foreman.example.com
[ INFO 2013-12-12 08:13:00 verbose] :puppetdir =>
"/var/lib/puppet", # e.g. /var/lib/puppet
[ INFO 2013-12-12 08:13:00 verbose] :facts => true,
[ INFO 2013-12-12 08:13:00 verbose] :timeout => 10,
[ WARN 2013-12-12 08:13:00 verbose]
/File[/etc/puppet/node.rb]/content: current_value
{md5}e7692bf3532b5c7e19e62b129a273bab, should be
{md5}c62dd276d84bf46c3eb2c25045d2782f (noop)
[ WARN 2013-12-12 08:13:00 verbose]
/Stage[main]/Puppet::Service/Service[puppet]/ensure: current_value
stopped, should be running (noop)
[ INFO 2013-12-12 08:13:00 verbose]
/Stage[main]/Puppet::Service/Service[puppet]: Unscheduling refresh on
Service[puppet]
[ WARN 2013-12-12 08:13:00 verbose] Class[Puppet::Service]: Would
have triggered 'refresh' from 1 events
Success!
foreman-debug-2PzP8.tar.xz (408 Bytes)
Hey,
your postgres configuration is correct:
host all all 127.0.0.1/32 md5
It accepts users with passwords on localhost. Unfortunately we are
missing the database.yaml file in the debug output (I will fix that).
You should have something like:
production:
adapter: postgresql
database: foreman
username: foreman
password: As6miRuWkCAmQJoy6XN8c2uNiJaLwEXt
This must work. Can you send exact errors you see? I don't see anything
in the production.log.
LZ
–
Later,
Lukas “lzap” Zapletal
irc:
Sorry for the delay in responding.
What I was asking initially was why does my configuration work with w
wrong password in database.yaml.
Using the password from the database.yaml file and trying to connect
from root I get this:
psql -h localhost -U foreman
Password for user foreman:
psql: FATAL: password authentication failed for user "foreman"
If I try to connect with the correct password, a get a postgresql command line.
So I was wondering WHY is foreman working? I noticed that I can put
anything in database.yaml on the password and everything will still
work.
Hello,
it looks like you found a bug! 
http://projects.theforeman.org/issues/3918
It looks like the pg adapter in Rails uses UNIX sockets, which we
configure to trust when ident is set properly.
Here is my pgsql configuration (this is what puppet configured):
local all postgres ident
local all all ident
host all postgres 0.0.0.0/0 reject
host all all 127.0.0.1/32 md5
host all all ::1/128 md5
As you can see, we allow ident authentication for local (UNIX) sockets
for all users and then we allow password authentication for TCP on
localhost (last two lines). The TCP connection is never used, at least
not for me on RHEL6 / Foreman 1.3.
It's not a security incident luckily, we should get this sorted for
sure by either disallowing all ident, or removing the (confusing)
password from the database.yaml file.
Thanks!
Thank you for sorting this out.
Best regards,