Topic: After restore from V9.2 to V10 horde Login no more possible

[ReetP]

Hi ReetP
Hi TerryF

First thank you for you patience with me

No worries.

ReetP you're telling me to regenerate the letsencrypt certificates - i can't because i have the productive SME 9.2 still on public IP and the Test V10 computer still on localhost working. So if i havent a port-forward to the test V10 machin an regeneration of certificates can't be done.

Uninstalling letsencrypt and working by openssl given from V10 should be the right way for me.
After all is working fine i can go to forward the ports to the new V10 machin, install letsencrypt and generate new certificates. Can you confirm that way can work?

Yes - follow the wiki to revert to the Self Signed cert - you can then run letsencrypt once you have migrated.

https://wiki.koozali.org/Letsencrypt#Certificate_Errors

[TerryF]

Uninstalling letsencrypt and working by openssl given from V10 should be the right way for me.
After all is working fine i can go to forward the ports to the new V10 machin, install letsencrypt and generate new certificates. Can you confirm that way can work?

A plan, always have a plan, it might be crap but at least you know how you got in it

TerryF:  im not using VMW its a real machin...   2 machins  1x V9.2 still productive with hurting blocked IMAP access and 1x V10 in testmode migrated only in intranet mode (not reachable from outside).

You should get yourself an old cast aside desktop PC, plenty of RAM and put proxmox on and have some fun, sooths the soul in times of stress

[umbi]

Hi Guys

I promised you an update and here it is:

1.) on the v10 Test Server i removed letsencrypt ->  server-manager allso no more reachable
2.) i deinstalled and reinstalled the sme openssl -> server-manager AND webmail works again perfect 

I think ReetP's advice to regenerate letsencrypt's certificate with dehydrate -c should then fix the problem in productive mode.

For now in testing use in the V10 the selfsigned certificate is OK for me.


Now another question: 
Do i have any chance to connect  to my intranet testserver by IMAP client on a internal ip instead of mail.myserver.com:993  ?  I tried by 192.168.x.x  but it looks as the sme V10 Testserver doesnt allow a such connection. The same is i want to test the websites allso in intranet mode. This maybe i can solve over proxy resp. gateway settings in browser.


Btw, big respect what you are doing here.

I give my word that after successfull migration and stable working of my V10 in productive mode, i will push the donate button.

stay healthy and thank you again !

umbi

[TerryF]

Hi Guys

I promised you an update and here it is:

1.) on the v10 Test Server i removed letsencrypt ->  server-manager allso no more reachable
2.) i deinstalled and reinstalled the sme openssl -> server-manager AND webmail works again perfect 

I think ReetP's advice to regenerate letsencrypt's certificate with dehydrate -c should then fix the problem in productive mode.

For now in testing use in the V10 the selfsigned certificate is OK for me.


Now another question: 
Do i have any chance to connect  to my intranet testserver by IMAP client on a internal ip instead of mail.myserver.com:993  ?  I tried by 192.168.x.x  but it looks as the sme V10 Testserver doesnt allow a such connection. The same is i want to test the websites allso in intranet mode. This maybe i can solve over proxy resp. gateway settings in browser.

Firstly, rememeber dehydrated -c just generates  a test, dehydrated -c -x  does the real deal, READ the wiki carefully all explained there

Re imap, simple answer Yes

[umbi]

Hello TerryF

Thx for your reply.

Yes for me it's clear that i first put in dehydrate -c   and when its runned over without fails, i'll repeat it with -c -x to regenerate the masterkey.

Re imap, simple answer YesYou can make me the day sweeter if you can give me hint

greez
umbi

[ReetP]

i will push the donate button.

You don't have to wait - you can do that ANY time

[TerryF]

Re imap, simple answer Yes
You can make me the day sweeter if you can give me hint

I will have to get it up and going on a test VM to validate my hint..VMs, use em, burn em, blow em up doesnt hurt anything just increases ones knowledge base

[umbi]

Hi there

another phenomena i saw in the last weeks :
After migration of v9 datas, the V10 doesnt show me any V10 Updates anymore.

It doesnt mather how i configure the Updatesettings in server-manager.

Is that a known issue or do i something wrong?

[TerryF]

Is that a known issue or do i something wrong?

Yes, Suspect number 1, you are not doing something

Have you configured updates in the SM, or have you been playing and disabled them?

What is result of a straight # yum update  from a terminal? maybe you have installed all and any updates already?

Now I am off to have xmas lunch with family..have fun

[umbi]

http://mirror.de-labrusse.fr/smeserver/7/repodata/repomd.xml: [Errno 14] HTTPS Error 404 - Not Found
Anderer Spiegelserver wird versucht.
To address this issue please refer to the below wiki article

i have deactivated labrusse.fr in SM and it makes updates now.

The only thing he hangs up here since 1 hour:

Feb 14 01:26:40 server esmith::event[22868]: S80ldap-update=action|Event|temp|Action|S80ldap-update|Start|1644798399 933712|End|1644798400 173908|Elapsed|0.240196

[ReetP]

That repo is no longer valid.

Remove it.

[umbi]

yes but he hangs now here:

 Migrating existing database wbl
 Creating temporary event 'temp' and populating it...
  Adding actions to execute
  Adding templates to expand
  Adding services to adjust
 Executing signal-event temp ...........


Feb 14 01:26:40 server esmith::event[22868]: S80ldap-update=action|Event|temp|Action|S80ldap-update|Start|1644798399 933712|End|1644798400 173908|Elapsed|0.240196


After a reboot he passed the updates...  strange

[ReetP]

Can you confirm it is fixed?

[umbi]

It was fixed as i forced a reboot while the endless loop mentioned in my last post.

1.) i have rebootet the server in SM
2.) i went to software updates in SM and it was at the same point but that time it passed
3.) i pushed the reconfigure button

All seems to be ok now

thx
hope you allso can get a little bit sleep tonight

greez
umbi

[ReetP]

Cool. Glad it is ok.

Tonight? Sleep? It's Super Bowl.... !!