Difference between revisions of "Nhmbif"

From nhm.sfs.gbif
Jump to: navigation, search
Line 29: Line 29:
 
* Is tomcat running? If not, do <tt>service tomcat start</tt>
 
* Is tomcat running? If not, do <tt>service tomcat start</tt>
 
* Is lighttpd running? If not, do <tt>lighttpd -f /etc/lighttpd/lighttpd.conf</tt>
 
* Is lighttpd running? If not, do <tt>lighttpd -f /etc/lighttpd/lighttpd.conf</tt>
 +
 +
=== IPT/Tomcat is not allowed to write to the IPT data directory ===
 +
 +
Probably an SELinux thing - try the following:
 +
 +
* <tt>grep tomcat /var/log/audit/audit.log | audit2allow -M ipt</tt>
 +
* <tt>semodule -i ipt.pp</tt>

Revision as of 00:02, 8 August 2017

nhmbif is a virtual machine running RHEL 7.3

List of services

The following services are provided on nhmbif (incomplete list):

Renewing SSL certificates

We use dehydrated to renew the letsencrypt certificates for data.gbif.no. Everything should just happen automatically (on the 1st of every month), but if something goes wrong, simply run /opt/bin/renew to renew the certificates. This script will also concatenate privkey.pem and cert.pem so lighttpd can use the certificates. Remember to restart lighttpd!

Troubleshooting

Help, the IPT is down!!!

  • Is tomcat running? If not, do service tomcat start
  • Is lighttpd running? If not, do lighttpd -f /etc/lighttpd/lighttpd.conf

IPT/Tomcat is not allowed to write to the IPT data directory

Probably an SELinux thing - try the following:

  • grep tomcat /var/log/audit/audit.log | audit2allow -M ipt
  • semodule -i ipt.pp