Core 常见问题

常见问题记录

1. core 启动异常

启动 jms_core 报错

  1. ./jmsctl.sh start
  1. Creating network "jms_net" with driver "bridge"
  2. Creating jms_mysql ... done
  3. Creating jms_redis ... done
  4. Creating jms_core  ... done
  5. ERROR: for celery  Container "76b2e315f69d" is unhealthy.
  6. ERROR: for lina  Container "76b2e315f69d" is unhealthy.
  7. ERROR: for luna  Container "76b2e315f69d" is unhealthy.
  8. ERROR: for guacamole  Container "76b2e315f69d" is unhealthy.
  9. ERROR: for koko  Container "76b2e315f69d" is unhealthy.
  10. ERROR: Encountered errors while bringing up the project.
  1. docker logs -f jms_core --tail 200  # 如果没有报错就等表结构合并完毕后然后重新 start 即可
  1. 2021-02-08 14:58:53 Mon Feb  8 14:58:53 2021
  2. 2021-02-08 14:58:53 JumpServer version v2.9.2, more see https://www.jumpserver.org
  4. - Start Gunicorn WSGI HTTP Server
  5. 2021-02-08 14:58:53 Check database connection ...
  6. users
  7.  [ ] 0001_initial
  8.  [ ] 0002_auto_20171225_1157_squashed_0019_auto_20190304_1459 (18 squashed migrations)
  9.  [ ] 0020_auto_20190612_1825
  10.  [ ] 0021_auto_20190625_1104
  11.  [ ] 0022_auto_20190625_1105
  12.  [ ] 0023_auto_20190724_1525
  13.  [ ] 0024_auto_20191118_1612
  14.  [ ] 0025_auto_20200206_1216
  15.  [ ] 0026_auto_20200508_2105
  16.  [ ] 0027_auto_20200616_1503
  17.  [ ] 0028_auto_20200728_1805
  18.  [ ] 0029_auto_20200814_1650
  19.  [ ] 0030_auto_20200819_2041
  20.  [ ] 0031_auto_20201118_1801
  21. 2021-02-08 14:58:58 Database connect success
  22. Operations to perform:
  23.   Apply all migrations: admin, applications, assets, audits, auth, authentication, captcha, common, contenttypes, django_cas_ng, django_celery_beat, jms_oidc_rp, ops, orgs, perms, sessions, settings, terminal, tickets, users
  24. Running migrations:
  25.   Applying contenttypes.0001_initial... OK
  26.   Applying contenttypes.0002_remove_content_type_name... OK
  27.   Applying auth.0001_initial... OK
  28.   Applying auth.0002_alter_permission_name_max_length... OK
  29.   Applying auth.0003_alter_user_email_max_length... OK
  30.   Applying auth.0004_alter_user_username_opts... OK
  31.   Applying auth.0005_alter_user_last_login_null... OK
  32.   Applying auth.0006_require_contenttypes_0002... OK
  33.   Applying auth.0007_alter_validators_add_error_messages... OK
  34.   Applying auth.0008_alter_user_username_max_length... OK
  35.   Applying users.0001_initial... OK
  36.   Applying admin.0001_initial... OK
  37.   Applying admin.0002_logentry_remove_auto_add... OK
  38.   Applying admin.0003_logentry_add_action_flag_choices... OK
  39.   Applying users.0002_auto_20171225_1157_squashed_0019_auto_20190304_1459... OK
  40.   Applying users.0020_auto_20190612_1825... OK
  41.   Applying users.0021_auto_20190625_1104... OK
  42.   Applying users.0022_auto_20190625_1105... OK
  43.   Applying users.0023_auto_20190724_1525... OK
  44.   Applying users.0024_auto_20191118_1612... OK
  45.   Applying users.0025_auto_20200206_1216... OK
  46.   Applying users.0026_auto_20200508_2105... OK
  47.   Applying users.0027_auto_20200616_1503... OK
  48.   Applying users.0028_auto_20200728_1805... OK
  49.   Applying users.0029_auto_20200814_1650... OK
  50.   Applying users.0030_auto_20200819_2041... OK
  51.   Applying assets.0001_initial... OK
  52.   Applying perms.0001_initial... OK
  53.   Applying assets.0002_auto_20180105_1807_squashed_0009_auto_20180307_1212... OK
  54.   Applying assets.0010_auto_20180307_1749_squashed_0019_auto_20180816_1320... OK
  55.   Applying perms.0002_auto_20171228_0025_squashed_0009_auto_20180903_1132... OK
  56.   Applying perms.0003_action... OK
  57.   Applying perms.0004_assetpermission_actions... OK
  58.   Applying assets.0020_auto_20180816_1652... OK
  59.   Applying assets.0021_auto_20180903_1132... OK
  60.   Applying assets.0022_auto_20181012_1717... OK
  61.   Applying assets.0023_auto_20181016_1650... OK
  62.   Applying assets.0024_auto_20181219_1614... OK
  63.   Applying assets.0025_auto_20190221_1902... OK
  64.   Applying assets.0026_auto_20190325_2035... OK
  65.   Applying applications.0001_initial... OK
  66.   Applying perms.0005_auto_20190521_1619... OK
  67.   Applying perms.0006_auto_20190628_1921... OK
  68.   Applying perms.0007_remove_assetpermission_actions... OK
  69.   Applying perms.0008_auto_20190911_1907... OK
  70.   Applying assets.0027_auto_20190521_1703... OK
  71.   Applying assets.0028_protocol... OK
  72.   Applying assets.0029_auto_20190522_1114... OK
  73.   Applying assets.0030_auto_20190619_1135... OK
  74.   Applying assets.0031_auto_20190621_1332... OK
  75.   Applying assets.0032_auto_20190624_2108... OK
  76.   Applying assets.0033_auto_20190624_2108... OK
  77.   Applying assets.0034_auto_20190705_1348... OK
  78.   Applying assets.0035_auto_20190711_2018... OK
  79.   Applying assets.0036_auto_20190716_1535... OK
  80.   Applying assets.0037_auto_20190724_2002... OK
  81.   Applying assets.0038_auto_20190911_1634... OK
  82.   Applying perms.0009_remoteapppermission_system_users... OK
  83.   Applying assets.0039_authbook_is_active... OK
  84.   Applying assets.0040_auto_20190917_2056... OK
  85.   Applying assets.0041_gathereduser... OK
  86.   Applying assets.0042_favoriteasset... OK
  87.   Applying assets.0043_auto_20191114_1111... OK
  88.   Applying assets.0044_platform... OK
  89.   Applying assets.0045_auto_20191206_1607... OK
  90.   Applying assets.0046_auto_20191218_1705... OK
  91.   Applying applications.0002_remove_remoteapp_system_user... OK
  92.   Applying applications.0003_auto_20191210_1659... OK
  93.   Applying applications.0004_auto_20191218_1705... OK
  94.   Applying perms.0010_auto_20191218_1705... OK
  95.   Applying perms.0011_auto_20200721_1739... OK
  96.   Applying assets.0047_assetuser... OK
  97.   Applying assets.0048_auto_20191230_1512... OK
  98.   Applying assets.0049_systemuser_sftp_root... OK
  99.   Applying assets.0050_auto_20200711_1740... OK
  100.   Applying assets.0051_auto_20200713_1143... OK
  101.   Applying assets.0052_auto_20200715_1535... OK
  102.   Applying assets.0053_auto_20200723_1232... OK
  103.   Applying assets.0054_auto_20200807_1032... OK
  104.   Applying applications.0005_k8sapp... OK
  105.   Applying perms.0012_k8sapppermission... OK
  106.   Applying assets.0055_auto_20200811_1845... OK
  107.   Applying assets.0056_auto_20200904_1751... OK
  108.   Applying assets.0057_fill_node_value_assets_amount_and_parent_key...
  110.   ................................................................. OK
  111.   Applying perms.0013_rebuildusertreetask_usergrantedmappingnode... OK
  112.   Applying perms.0014_build_users_perm_tree... OK
  113.   Applying perms.0015_auto_20200929_1728... OK
  114.   Applying assets.0058_auto_20201023_1115... OK
  115.   Applying assets.0059_auto_20201027_1905... OK
  116.   Applying applications.0006_application... OK
  117.   Applying perms.0016_applicationpermission... OK
  118.   Applying perms.0017_auto_20210104_0435... OK
  119.   Applying applications.0007_auto_20201119_1110... OK
  120.   Applying applications.0008_auto_20210104_0435... OK
  121.   Applying assets.0060_node_full_value...
  122. - Start migrate node value if has /
  123. - Start migrate node full value
  124.  OK
  125.   Applying assets.0061_auto_20201116_1757... OK
  126.   Applying assets.0062_auto_20201117_1938... OK
  127.   Applying assets.0063_migrate_default_node_key...
  128. Check old default node `key=0 value=Default` not exists
  129.  OK
  130.   Applying assets.0064_auto_20201203_1100... OK
  131.   Applying assets.0065_auto_20210121_1549... OK
  132.   Applying audits.0001_initial... OK
  133.   Applying audits.0002_ftplog_org_id... OK
  134.   Applying audits.0003_auto_20180816_1652... OK
  135.   Applying audits.0004_operatelog_passwordchangelog_userloginlog... OK
  136.   Applying audits.0005_auto_20190228_1715... OK
  137.   Applying audits.0006_auto_20190726_1753... OK
  138.   Applying audits.0007_auto_20191202_1010... OK
  139.   Applying audits.0008_auto_20200508_2105... OK
  140.   Applying audits.0009_auto_20200624_1654... OK
  141.   Applying audits.0010_auto_20200811_1122... OK
  142.   Applying audits.0011_userloginlog_backend... OK
  143.   Applying auth.0009_alter_user_last_name_max_length... OK
  144.   Applying auth.0010_alter_group_name_max_length... OK
  145.   Applying auth.0011_update_proxy_permissions... OK
  146.   Applying auth.0012_alter_user_first_name_max_length... OK
  147.   Applying authentication.0001_initial... OK
  148.   Applying authentication.0002_auto_20190729_1423... OK
  149.   Applying authentication.0003_loginconfirmsetting... OK
  150.   Applying authentication.0004_ssotoken... OK
  151.   Applying captcha.0001_initial... OK
  152.   Applying common.0001_initial... OK
  153.   Applying common.0002_auto_20180111_1407... OK
  154.   Applying common.0003_setting_category... OK
  155.   Applying common.0004_setting_encrypted... OK
  156.   Applying common.0005_auto_20190221_1902... OK
  157.   Applying common.0006_auto_20190304_1515... OK
  158.   Applying django_cas_ng.0001_initial... OK
  159.   Applying django_celery_beat.0001_initial... OK
  160.   Applying django_celery_beat.0002_auto_20161118_0346... OK
  161.   Applying django_celery_beat.0003_auto_20161209_0049... OK
  162.   Applying django_celery_beat.0004_auto_20170221_0000... OK
  163.   Applying django_celery_beat.0005_add_solarschedule_events_choices... OK
  164.   Applying django_celery_beat.0006_auto_20180322_0932... OK
  165.   Applying django_celery_beat.0007_auto_20180521_0826... OK
  166.   Applying django_celery_beat.0008_auto_20180914_1922... OK
  167.   Applying django_celery_beat.0006_auto_20180210_1226... OK
  168.   Applying django_celery_beat.0006_periodictask_priority... OK
  169.   Applying django_celery_beat.0009_periodictask_headers... OK
  170.   Applying django_celery_beat.0010_auto_20190429_0326... OK
  171.   Applying django_celery_beat.0011_auto_20190508_0153... OK
  172.   Applying django_celery_beat.0012_periodictask_expire_seconds... OK
  173.   Applying jms_oidc_rp.0001_initial... OK
  174.   Applying ops.0001_initial... OK
  175.   Applying ops.0002_celerytask... OK
  176.   Applying ops.0003_auto_20181207_1744... OK
  177.   Applying ops.0004_adhoc_run_as... OK
  178.   Applying ops.0005_auto_20181219_1807... OK
  179.   Applying ops.0006_auto_20190318_1023... OK
  180.   Applying ops.0007_auto_20190724_2002... OK
  181.   Applying ops.0008_auto_20190919_2100... OK
  182.   Applying ops.0009_auto_20191217_1713... OK
  183.   Applying ops.0010_auto_20191217_1758... OK
  184.   Applying ops.0011_auto_20200106_1534... OK
  185.   Applying ops.0012_auto_20200108_1659... OK
  186.   Applying ops.0013_auto_20200108_1706... OK
  187.   Applying ops.0014_auto_20200108_1749... OK
  188.   Applying ops.0015_auto_20200108_1809... OK
  189.   Applying ops.0016_commandexecution_org_id... OK
  190.   Applying ops.0017_auto_20200306_1747... OK
  191.   Applying ops.0018_auto_20200509_1434... OK
  192.   Applying ops.0019_adhocexecution_celery_task_id... OK
  193.   Applying orgs.0001_initial... OK
  194.   Applying orgs.0002_auto_20180903_1132... OK
  195.   Applying orgs.0003_auto_20190916_1057... OK
  196.   Applying orgs.0004_organizationmember... OK
  197.   Applying orgs.0005_auto_20200721_1937... OK
  198.   Applying orgs.0006_auto_20200721_1937... OK
  199.   Applying orgs.0007_auto_20200728_1805... OK
  200.   Applying orgs.0008_auto_20200819_2041... OK
  201.   Applying orgs.0009_auto_20201023_1628... OK
  202.   Applying sessions.0001_initial... OK
  203.   Applying settings.0001_initial... OK
  204.   Applying terminal.0001_initial... OK
  205.   Applying terminal.0002_auto_20171228_0025_squashed_0009_auto_20180326_0957... OK
  206.   Applying terminal.0010_auto_20180423_1140... OK
  207.   Applying terminal.0011_auto_20180807_1116... OK
  208.   Applying terminal.0012_auto_20180816_1652... OK
  209.   Applying terminal.0013_auto_20181123_1113... OK
  210.   Applying terminal.0014_auto_20181226_1441... OK
  211.   Applying terminal.0015_auto_20190923_1529... OK
  212.   Applying terminal.0016_commandstorage_replaystorage... OK
  213.   Applying terminal.0017_auto_20191125_0931... OK
  214.   Applying terminal.0018_auto_20191202_1010... OK
  215.   Applying terminal.0019_auto_20191206_1000... OK
  216.   Applying terminal.0020_auto_20191218_1721... OK
  217.   Applying terminal.0021_auto_20200213_1316... OK
  218.   Applying terminal.0022_session_is_success... OK
  219.   Applying terminal.0023_command_risk_level... OK
  220.   Applying terminal.0024_auto_20200715_1713... OK
  221.   Applying terminal.0025_auto_20200810_1735... OK
  222.   Applying terminal.0026_auto_20201027_1905... OK
  223.   Applying terminal.0027_auto_20201102_1651... OK
  224.   Applying terminal.0028_auto_20201110_1918... OK
  225.   Applying terminal.0029_auto_20201116_1757... OK
  226.   Applying terminal.0030_terminal_type... OK
  227.   Applying terminal.0031_auto_20210113_1356... OK
  228.   Applying tickets.0001_initial... OK
  229.   Applying tickets.0002_auto_20200728_1146... OK
  230.   Applying tickets.0003_auto_20200804_1551... OK
  231.   Applying tickets.0004_ticket_comment... OK
  232.   Applying tickets.0005_ticket_meta_confirmed_system_users... OK
  233.   Applying tickets.0006_auto_20201023_1628... OK
  234.   Applying tickets.0007_auto_20201224_1821... OK
  235.   Applying users.0031_auto_20201118_1801... OK
  236. 2021-02-08 14:59:31 [cache INFO] CACHE: Send refresh task <orgs.caches.OrgResourceStatisticsCache object at 0x7fb9122ce0d0>.('nodes_amount',)
  237. Operations to perform:
  238.   Apply all migrations: admin, applications, assets, audits, auth, authentication, captcha, common, contenttypes, django_cas_ng, django_celery_beat, jms_oidc_rp, ops, orgs, perms, sessions, settings, terminal, tickets, users
  239. Running migrations:
  240.   No migrations to apply.
  242. - Start Flower as Task Monitor
  244. - Start Daphne ASGI WS Server
  245. 2021-02-08 15:01:02 Check service status: gunicorn -> running at 38
  246. 2021-02-08 15:01:02 Check service status: flower -> running at 44
  247. 2021-02-08 15:01:02 Check service status: daphne -> running at 54
  1. ./jmsctl.sh start

2. Server error occur, contact administrator

Server Internal Error

  1. docker logs -f jms_core --tail 200
  2. # 查看是否有报错，如果没有或者不完整请进入容器查看日志
  1. docker exec -it jms_core /bin/bash
  2. cat logs/jumpserver.log
  3. # 根据报错处理

3. Web 登录失败

忘记密码, 密码过期

如果忘了密码或者密码过期, 可以点击找回密码通过邮件找回
如果无法通过邮件找回, 可以通过控制台重置

  1. docker exec -it jms_core /bin/bash
  2. cd /opt/jumpserver/apps
  3. python manage.py shell
  1. from users.models import User
  2. u = User.objects.get(username='admin')
  3. u.reset_password('password')
  4. u.save()

admin 为你要修改的账户名称, password 为你要修改的密码

登录频繁账号被锁定

找管理员重置, 管理员可以在对应用户的个人页面重置
或者通过下面的 shell 解决

  1. docker exec -it jms_core /bin/bash
  2. cd /opt/jumpserver/apps
  3. python manage.py shell
  1. from django.core.cache import cache
  2. cache.delete_pattern('_LOGIN_BLOCK_*')
  3. cache.delete_pattern('_LOGIN_LIMIT_*')

如果是设置了 LDAP 后无法登录, 请登录数据库禁用 ldap 登录, 然后重新设置 LDAP

  1. mysql -uroot -p
  1. use jumpserver;
  2. update settings_setting set value='false' where name='AUTH_LDAP';
  1. redis-cli -a $REDIS_PASSWORD
  1. select 4
  2. keys *LDAP*
  3. del :1:_SETTING_AUTH_LDAP

如果是设置 其他身份认证 后无法登录, 注释掉 jumpserver/config/config.txt 里面的身份认证设置重启即可

4. 管理用户 和 系统用户

资产测试可连接性、更新硬件信息 报 Permission denied 或者 Authentication failure

一般都是管理用户账户密码不正确

资产测试可连接性、更新硬件信息 报 /usr/bin/python: not found

在一般是资产 python 未安装或者 python 异常, 一般出现在 ubuntu 资产上

系统用户测试资产可连接性错误

确定系统用户是否正确, 如果系统用户使用了自动推送, 确保管理用户正确
系统用户设置为 root 的情况下, 请关闭自动推送, 并输入正确的 root 密码

提示 timeout

  1. vi /etc/ssh/sshd_config
  1. UseDNS no
  1. systemctl restart docker
  2. docker restart jms_koko

Connect websocket server error

kill 掉进程再重启 core
如果仍然一样, 表示 nginx 也有错误, 根据安装文档进行修改后重启 nginx 即可

5. 更新 Core 报错

启动报错 Cannot add foreign key constraint

这是因为旧版本的数据库字符集和新版本数据库字符集不一样导致，备份好数据库，然后进行如下操作

  1. alter database jumpserver character set utf8 collate utf8_bin;
  2. use jumpserver;
  3. SET FOREIGN_KEY_CHECKS = 0;
  4. alter table applications_remoteapp convert to character set utf8 collate utf8_bin;
  5. SET FOREIGN_KEY_CHECKS = 1;

把所有表都修改一下，重启 core 即可(applications_remoteapp 就是表名，把 jumpserver 数据库的所有表都改一下，注意备份)

  1. # 表很多，可以用 shell 快速生成 sql 语句
  2. sql=`mysql -uroot -e "use jumpserver; show tables;" | grep -v "Tables_in" | awk '{print $1}'`
  3. for i in $sql; do echo "alter table $i convert to character set utf8 collate utf8_bin;"; done
  4. # 然后登陆 mysql 服务参考上面的教程处理即可
  5. mysql -uroot
  1. alter database jumpserver character set utf8 collate utf8_bin;
  2. use jumpserver;
  3. SET FOREIGN_KEY_CHECKS = 0;
  4. alter table applications_databaseapp convert to character set utf8 collate utf8_bin;
  5. alter table applications_remoteapp convert to character set utf8 collate utf8_bin;
  6. alter table assets_adminuser convert to character set utf8 collate utf8_bin;
  7. alter table assets_asset convert to character set utf8 collate utf8_bin;
  8. ... 把刚才查询到 sql 语句执行完
  9. SET FOREIGN_KEY_CHECKS = 1;