Problem during installation Configuration System as a replica (Unauthorized query)

[IgorPelevanyuk]

I am trying to install IHEP DIRAC replica for Configuration System in JINR. It was working before version update on python 2. Current version is 7.3.20.
To do that I use install.cfg with the following content:

LocalInstallation
{
  ConfigurationServer = dips://prod-dirac.ihep.ac.cn:9135/Configuration/Server
  ConfigurationServer += dips://dirac-ihep-replica.jinr.ru:9135/Configuration/Server
  InstallType = server
  SiteName = ihep.ac.cn
  SkipCADonwload = yes
  RootPath = /opt/dirac/pro
  UseVersionsDir = True
  WebApp = no
  ConfigurationMaster = no
  UseServerCertificate = yes
  Host = dirac-ihep-replica.jinr.ru
  AdminGroupName = dirac_admin
  ConfigurationName = CAS_Prod
  Services = Configuration/Server
  #Services += Framework/SystemAdministrator
  #Services += RequestManagement/ReqProxy
  WebPortal = no
  InstancePath = /opt/dirac
  Setup = CAS_Production
  Project = IHEP
  #Extensions = WebAppDIRAC
  #Extensions += VMDIRAC
  #ExtraModules = WebAppDIRAC
  #ExtraModules += VMDIRAC
  SkipCAChecks = no
  LcgVer = v14r1
  InstanceName = Production
  InstallMySQL = False
  HostDN = /C=RU/O=RDIG/OU=hosts/OU=jinr.ru/CN=dirac-ihep-replica.jinr.ru
  TargetPath = /opt/dirac
}

To install it I use command:
./install_site.sh -i /opt/dirac -v 7.3.20 /home/dirac/DIRAC/install.cfg

During installation I observe several occurances of the following error: ERROR: Can't commit new configuration data Unauthorized query ( 1111 : Unauthorized query). But installation continues. In the end it says:

2022-08-15 11:12:45 UTC dirac-setup-site [140441541211968] DEBUG: New connection -> 202.122.33.103:9135
2022-08-15 11:12:48 UTC dirac-setup-site [140441541211968] DEBUG: Updating configuration internals
2022-08-15 11:12:53 UTC dirac-setup-site/DIRAC.Core.Tornado.Client.ClientSelector [140441541211968] DEBUG: Trying to autodetect client for dips://prod-dirac.ihep.ac.cn:9135/Configuration/Server
2022-08-15 11:12:53 UTC dirac-setup-site [140441541211968] DEBUG: Already given a valid url dips://prod-dirac.ihep.ac.cn:9135/Configuration/Server
2022-08-15 11:12:53 UTC dirac-setup-site [140441541211968] DEBUG: Trying to connect to: dips://prod-dirac.ihep.ac.cn:9135/Configuration/Server
2022-08-15 11:12:53 UTC dirac-setup-site [140441541211968] DEBUG: Connected to: dips://prod-dirac.ihep.ac.cn:9135/Configuration/Server
2022-08-15 11:12:53 UTC dirac-setup-site [140441541211968] DEBUG: New connection -> 202.122.33.103:9135
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] ERROR: Can't commit new configuration data Unauthorized query ( 1111 : Unauthorized query)
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: Can't write to central CS, so adding to the specific component CFG for Configuration : Server
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] NOTICE: Loading configuration template from DIRAC.ConfigurationSystem
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] VERBOSE: Using Runit Dir at /opt/dirac/runit
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] VERBOSE: Using Startup Dir at /opt/dirac/startup
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] VERBOSE: Using Control Dir at /opt/dirac/control
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: MySQL root password not found
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] VERBOSE: Reading MySQL User from local configuration
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: MySQL password not found
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: Using the same host for MySQL as dirac services
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: Using port '3306' as MySQL port
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: Using 'root' as root MySQL user
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: Using the same host for NoSQL as dirac services
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: Using the default port 9200
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: NoSQL user not found
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: NoSQL password not found
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: NoSQL SSL choice not found
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] VERBOSE: Client configured for Component Monitoring
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] INFO: Loading Configuration/Server
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] INFO: Trying to autodiscover Configuration/Server
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] VERBOSE: Trying to load DIRAC.ConfigurationSystem.Service.ServerHandler
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] ERROR: Software for service Configuration/Server is not installed
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] VERBOSE: Using Runit Dir at /opt/dirac/runit
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] VERBOSE: Using Startup Dir at /opt/dirac/startup
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] VERBOSE: Using Control Dir at /opt/dirac/control
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: MySQL root password not found
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] VERBOSE: Reading MySQL User from local configuration
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: MySQL password not found
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: Using the same host for MySQL as dirac services
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: Using port '3306' as MySQL port
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: Using 'root' as root MySQL user
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: Using the same host for NoSQL as dirac services
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: Using the default port 9200
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: NoSQL user not found
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: NoSQL password not found
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] WARN: NoSQL SSL choice not found
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] VERBOSE: Client configured for Component Monitoring
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] DEBUG: Executing command ['runsvstat'] with timeout 0
2022-08-15 11:12:54 UTC dirac-setup-site/Subprocess [140441541211968] VERBOSE: systemCall: ['runsvstat']
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] ERROR: Failed to execute runsvstat
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] ERROR: Exit code: 1

usage: runsvstat [ -l ] service ...


2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] ERROR: Failed to start the component Configuration Server
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] DEBUG: Executing command ['runsvstat'] with timeout 0
2022-08-15 11:12:54 UTC dirac-setup-site/Subprocess [140441541211968] VERBOSE: systemCall: ['runsvstat']
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] ERROR: Failed to execute runsvstat
2022-08-15 11:12:54 UTC dirac-setup-site [140441541211968] ERROR: Exit code: 1

usage: runsvstat [ -l ] service ...


ERROR: Failed to execute

And the folder /opt/dirac/startup is empty. I still can manually start Configuration System with command:
/opt/dirac/versions/v7.3.20-1660561627/Linux-x86_64/bin/python3.9 /opt/dirac/versions/v7.3.20-1660561627/Linux-x86_64/bin/dirac-service Configuration/Server --cfg /opt/dirac/etc/Configuration_Server.cfg

I am not sure if I am installing replica service correctly. Can it be that host which holds replica of Configuration System should have some specific access rights. Right now it is written in central CS in the following way:

    dirac-ihep-replica.jinr.ru
    {
      DN = /C=RU/O=RDIG/OU=hosts/OU=jinr.ru/CN=dirac-ihep-replica.jinr.ru
      Properties = TrustedHost
    }

Or may be I do not recognize some serious error in log of the installation. I am attaching the full log here:
install.log

Kind regards,
Igor Pelevanyuk

[fstagni]

The main issue is in this line, as you already wrote:

2022-08-15 11:12:27 UTC dirac-setup-site [140441541211968] ERROR: Can't commit new configuration data Unauthorized query ( 1111 : Unauthorized query)

You should get more info from the log of the server, and I would say that you should add the property "CSAdministrator"

[zhangxiaomei]

In v7.1, the "CSAdministrator" property is not required for the replicas server. Is it new feature for v7.3? Why need that for a replicas server which is read-only for users?

[IgorPelevanyuk]

With that priviledge Configuration service installed correctly.