Edit

‎Troubleshoot installation issues

BI services drop connection to APP

Expand to learn more

Symptoms

When BI services are running, they drop the connection to the APP server.

Resolution

To resolve the issue, execute the following script:

sysctl -w net.ipv4.tcp_tw_recycle=0

As stated by the tcp(7) manual, the net.ipv4.tcp_tw_recycle option is problematic for public-facing servers as it won’t handle connections from two different computers behind the same NAT device.

SSL check cannot verify CA certificate

Expand to learn more

Symptoms

An SSL check cannot verify the CA certificate.

SSL check is unable to verify CA certificate
[wfsadmt@wfapp workfusion]$ openssl s_client -showcerts -connect wfbi.example.com:443 
...
SSL handshake has read 1698 bytes and written 415 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: 7DB33295ED365F489D1D953076A04C95D1A9A76E14648526666AD3A0B90FFE5F
Session-ID-ctx:
Master-Key: ECB17FE663720814E973AC3A576A32E217757174CDBC9F39C4E2A423AF6D0E22D45A2809A5AC972D44AE4B627A2627C8
Key-Arg : None

Timeout : 300 (sec)
Verify return code: 21 (unable to verify the first certificate)

Resolution

Add CA.cert to the OpenSSL system main file:

# openssl version -d
OPENSSLDIR: "/etc/pki/tls"

cat CA.cert >> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

ls -lah /etc/pki/ca-trust/extracted/pem/
lrwxrwxrwx. 1 root root 49 Apr 18 2017 cert.pem -> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

vds-standalone/vds-master installation fails with kernel.exec-shield

Expand to learn more

Symptoms

During the vds-standalone or vds-master installation, Ansible fails on the Connected with NFS step.

Resolution

Follow the steps below:

1. Open the /etc/sysctl.conf file or files in the /etc/sysctl.d/ folder.

2. Find the kernel.exec-shield option and change its value to 0:

   kernel.exec-shield=0
   

3. Upload the options from the /etc/sysctl.conf file to the Linux kernel once again:

   sysctl -p /etc/sysctl.conf
   

4. Restart nfs-server.service:

   systemctl restart nfs-server.service
   

5. Rerun the Ansible installation step:

   ./install.sh install vds-standalone