JSON Validation Fails During setup_irods.sh

[reaction...@gmail.com]

After running setup_irods.sh and providing the required information, I'm confronted with this error message:

============================================================================

Could not start iRODS server.
Starting iRODS server...
Confirming catalog_schema_version... Success
WARNING: Validation Failed for [/var/lib/irods/.irods/irods_environment.json]
: against [https://schemas.irods.org/configuration/v2/service_account_environment.json]
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765)
WARNING: Validation Failed for [/etc/irods/server_config.json]
: against [https://schemas.irods.org/configuration/v2/server_config.json]
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765)
WARNING: Validation Failed for [/etc/irods/hosts_config.json]
: against [https://schemas.irods.org/configuration/v2/hosts_config.json]
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765)
WARNING: Validation Failed for [/etc/irods/host_access_control_config.json]
: against [https://schemas.irods.org/configuration/v2/host_access_control_config.json]
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765)
WARNING: Validation Failed for [/etc/irods/database_config.json]
: against [https://schemas.irods.org/configuration/v2/database_config.json]
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:765)
iRODS server failed to start.


Install problem:
Cannot start iRODS server.
Found 0 processes:
There are no iRODS servers running.

Abort.

============================================================================

So the next time through, when prompted for 'Schema Validation Base URI', I set it to off and got this error message:

============================================================================


Could not start iRODS server.
Starting iRODS server...
Confirming catalog_schema_version... Success
Skipped JSON Configuration Validation [off]
iRODS server failed to start.


Install problem:
Cannot start iRODS server.

============================================================================


While comparing my file in /var/lib/irods/.irods/irods_environment.json to [https://schemas.irods.org/configuration/v2/service_account_environment.json], I noticed that my file includes attributes that start with irods_server_*, but the file on irods.org does not. This is my best guess at what is going wrong, but have don't have any ideas about how to fix it.

Attached is a picture of my complete irods_environment.json file.

Thanks in advance.

TL;DR - Why won't the JSON validate? :/

[Terrell Russell]

What version of iRODS is this?

What operating system and version?

Is there anything helpful in the /var/lib/irods/iRODS/server/log/rodsLog*

I'm not sure about the SSL error - the certificate we have on schemas.irods.org is issued by www.digicert.com and currently valid for two more years.

Terrell

--
--
"iRODS: the Integrated Rule-Oriented Data-management System; A community driven, open source, data grid software solution"   https://www.irods.org

 iROD-Chat:  http://groups.google.com/group/iROD-Chat

---
You received this message because you are subscribed to the Google Groups "iRODS-Chat" group.
To unsubscribe from this group and stop receiving emails from it, send an email to irod-chat+...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[reaction...@gmail.com]

• iRODS Version is 4.1.8
• CentOS 7.2.1511 (Core)
• I'll attach a copy of the log.

Another thing that could be causing the error is my version of python-jsonschema.  

CentOS doesn't allow you to install it through yum, so I had to find an rpm online and I don't know if it was good.

Also, I don't know if this is relevant, but I'm doing this on a VM.

[Ben Keller]

FYI, we use the python-jsonschema package found in EPEL

[Terrell Russell]

You'll need to install lib_mysqludf_preg.

https://docs.irods.org/4.1.8/manual/architecture/#installing-lib_mysqludf_preg

Terrell

[reaction...@gmail.com]

Okay, I've installed lib_mysqludf_preg and the version of python-jsonschema available on EPEL.

Along the way I lost permissions of my /var/lib/irods/iRODS/server/log directory, the icatSetupValues.sql file inside it, and the /var/lib/irods/iRODS/server/log directory, so I had to give myself permissions back to proceed with the installation.

Anyway, now I'm getting a new error.  I'll attach it as well as my log.

[Terrell Russell]

It seems a different user was already in the catalog from the prior install attempt...

If there is nothing else in the database, I'd suggest dropping and recreating your database to make sure you've got a clean install.

I'm still concerned about the SSL: CERTIFICATE_VERIFY_FAILED - Any further idea about that?

 

Terrell

--

[reaction...@gmail.com]

No ideas about the SSL: CERTIFICATE_VERIFY_FAILED.  I did just notice this line in the log though:

Jul 28 16:20:33 pid:20679 ERROR: server_control_executor - icat_host_name is localhost, not a fqdn

It seems to be complaining that I used 'localhost' instead of a fully qualified domain name.  Think this could be because I'm on a VM?  I could use the VM's ip instead.

[Terrell Russell]

You can safely ignore that error.  We have a robust fix in place for 4.2.0 when it is released - but it was not worth the trouble to fix it in the 4.1.x series.

If you were to use a 'real' name and have it in /etc/hosts on the VM, the error would go away.

Terrell

 

[reaction...@gmail.com]

After recreating the database iRODS is finally starting!  Still won't validate the JSON, but I'll work on that on my own.  Just for future reference, do you also use the python-repoze-lru and python-psutil found on EPEL?

Thanks so much for the help, folks

[Terrell Russell]

Yes, YUM should satisfy the python-psutil dependency itself, if EPEL is installed.

Where are you seeing the dependency on python-repoze-lru?

Terrell

On Fri, Jul 29, 2016 at 9:24 AM, <reaction...@gmail.com> wrote:

After recreating the database iRODS is finally starting!  Still won't validate the JSON, but I'll work on that on my own.  Just for future reference, do you also use the python-repoze-lru and python-psutil found on EPEL?

Thanks so much for the help, folks

--

[reaction...@gmail.com]

It was a dependency for the iCAT rpm.

[Terrell Russell]

I have not seen that dependency.  Please double check and provide some output that shows where it's coming from.

If it has snuck in, I think it is a mistake and should be removed.

Thanks,

Terrell