Core 常见问题

    启动 jms_core 报错

    2. Creating jms_mysql ... done
    3. Creating jms_redis ... done
    4. Creating jms_core  ... done
    5. ERROR: for celery  Container "76b2e315f69d" is unhealthy.
    6. ERROR: for lina  Container "76b2e315f69d" is unhealthy.
    7. ERROR: for luna  Container "76b2e315f69d" is unhealthy.
    8. ERROR: for guacamole  Container "76b2e315f69d" is unhealthy.
    9. ERROR: for koko  Container "76b2e315f69d" is unhealthy.
    10. ERROR: Encountered errors while bringing up the project.
    1. docker logs -f jms_core --tail 200  # 如果没有报错就等表结构合并完毕后然后重新 start 即可
    1. 2021-02-08 14:58:53 Mon Feb  8 14:58:53 2021
    2. 2021-02-08 14:58:53 JumpServer version v2.9.2, more see https://www.jumpserver.org
    4. - Start Gunicorn WSGI HTTP Server
    5. 2021-02-08 14:58:53 Check database connection ...
    6. users
    7.  [ ] 0001_initial
    8.  [ ] 0002_auto_20171225_1157_squashed_0019_auto_20190304_1459 (18 squashed migrations)
    9.  [ ] 0020_auto_20190612_1825
    10.  [ ] 0021_auto_20190625_1104
    11.  [ ] 0022_auto_20190625_1105
    12.  [ ] 0023_auto_20190724_1525
    13.  [ ] 0024_auto_20191118_1612
    14.  [ ] 0025_auto_20200206_1216
    15.  [ ] 0026_auto_20200508_2105
    16.  [ ] 0027_auto_20200616_1503
    17.  [ ] 0028_auto_20200728_1805
    18.  [ ] 0029_auto_20200814_1650
    19.  [ ] 0030_auto_20200819_2041
    20.  [ ] 0031_auto_20201118_1801
    21. 2021-02-08 14:58:58 Database connect success
    22. Operations to perform:
    23.   Apply all migrations: admin, applications, assets, audits, auth, authentication, captcha, common, contenttypes, django_cas_ng, django_celery_beat, jms_oidc_rp, ops, orgs, perms, sessions, settings, terminal, tickets, users
    24. Running migrations:
    25.   Applying contenttypes.0001_initial... OK
    26.   Applying contenttypes.0002_remove_content_type_name... OK
    27.   Applying auth.0001_initial... OK
    28.   Applying auth.0002_alter_permission_name_max_length... OK
    29.   Applying auth.0003_alter_user_email_max_length... OK
    30.   Applying auth.0004_alter_user_username_opts... OK
    31.   Applying auth.0005_alter_user_last_login_null... OK
    32.   Applying auth.0006_require_contenttypes_0002... OK
    33.   Applying auth.0007_alter_validators_add_error_messages... OK
    34.   Applying auth.0008_alter_user_username_max_length... OK
    35.   Applying users.0001_initial... OK
    36.   Applying admin.0001_initial... OK
    37.   Applying admin.0002_logentry_remove_auto_add... OK
    38.   Applying admin.0003_logentry_add_action_flag_choices... OK
    39.   Applying users.0002_auto_20171225_1157_squashed_0019_auto_20190304_1459... OK
    40.   Applying users.0020_auto_20190612_1825... OK
    41.   Applying users.0021_auto_20190625_1104... OK
    42.   Applying users.0022_auto_20190625_1105... OK
    43.   Applying users.0023_auto_20190724_1525... OK
    44.   Applying users.0024_auto_20191118_1612... OK
    45.   Applying users.0025_auto_20200206_1216... OK
    46.   Applying users.0026_auto_20200508_2105... OK
    47.   Applying users.0027_auto_20200616_1503... OK
    48.   Applying users.0028_auto_20200728_1805... OK
    49.   Applying users.0029_auto_20200814_1650... OK
    50.   Applying users.0030_auto_20200819_2041... OK
    51.   Applying assets.0001_initial... OK
    52.   Applying perms.0001_initial... OK
    53.   Applying assets.0002_auto_20180105_1807_squashed_0009_auto_20180307_1212... OK
    54.   Applying assets.0010_auto_20180307_1749_squashed_0019_auto_20180816_1320... OK
    55.   Applying perms.0002_auto_20171228_0025_squashed_0009_auto_20180903_1132... OK
    56.   Applying perms.0003_action... OK
    57.   Applying perms.0004_assetpermission_actions... OK
    58.   Applying assets.0020_auto_20180816_1652... OK
    59.   Applying assets.0021_auto_20180903_1132... OK
    60.   Applying assets.0022_auto_20181012_1717... OK
    61.   Applying assets.0023_auto_20181016_1650... OK
    62.   Applying assets.0024_auto_20181219_1614... OK
    63.   Applying assets.0025_auto_20190221_1902... OK
    64.   Applying assets.0026_auto_20190325_2035... OK
    65.   Applying applications.0001_initial... OK
    66.   Applying perms.0005_auto_20190521_1619... OK
    67.   Applying perms.0006_auto_20190628_1921... OK
    68.   Applying perms.0007_remove_assetpermission_actions... OK
    69.   Applying perms.0008_auto_20190911_1907... OK
    70.   Applying assets.0027_auto_20190521_1703... OK
    71.   Applying assets.0028_protocol... OK
    72.   Applying assets.0029_auto_20190522_1114... OK
    73.   Applying assets.0030_auto_20190619_1135... OK
    74.   Applying assets.0031_auto_20190621_1332... OK
    75.   Applying assets.0032_auto_20190624_2108... OK
    76.   Applying assets.0033_auto_20190624_2108... OK
    77.   Applying assets.0034_auto_20190705_1348... OK
    78.   Applying assets.0035_auto_20190711_2018... OK
    79.   Applying assets.0036_auto_20190716_1535... OK
    80.   Applying assets.0037_auto_20190724_2002... OK
    81.   Applying assets.0038_auto_20190911_1634... OK
    82.   Applying perms.0009_remoteapppermission_system_users... OK
    83.   Applying assets.0039_authbook_is_active... OK
    84.   Applying assets.0040_auto_20190917_2056... OK
    85.   Applying assets.0041_gathereduser... OK
    86.   Applying assets.0043_auto_20191114_1111... OK
    87.   Applying assets.0044_platform... OK
    88.   Applying assets.0045_auto_20191206_1607... OK
    90.   Applying applications.0002_remove_remoteapp_system_user... OK
    91.   Applying applications.0003_auto_20191210_1659... OK
    92.   Applying applications.0004_auto_20191218_1705... OK
    93.   Applying perms.0010_auto_20191218_1705... OK
    94.   Applying perms.0011_auto_20200721_1739... OK
    95.   Applying assets.0047_assetuser... OK
    96.   Applying assets.0048_auto_20191230_1512... OK
    97.   Applying assets.0049_systemuser_sftp_root... OK
    98.   Applying assets.0050_auto_20200711_1740... OK
    99.   Applying assets.0051_auto_20200713_1143... OK
    100.   Applying assets.0052_auto_20200715_1535... OK
    101.   Applying assets.0053_auto_20200723_1232... OK
    102.   Applying assets.0054_auto_20200807_1032... OK
    103.   Applying applications.0005_k8sapp... OK
    104.   Applying perms.0012_k8sapppermission... OK
    105.   Applying assets.0055_auto_20200811_1845... OK
    106.   Applying assets.0056_auto_20200904_1751... OK
    107.   Applying assets.0057_fill_node_value_assets_amount_and_parent_key...
    109.   ................................................................. OK
    110.   Applying perms.0013_rebuildusertreetask_usergrantedmappingnode... OK
    111.   Applying perms.0014_build_users_perm_tree... OK
    112.   Applying perms.0015_auto_20200929_1728... OK
    113.   Applying assets.0058_auto_20201023_1115... OK
    114.   Applying assets.0059_auto_20201027_1905... OK
    115.   Applying applications.0006_application... OK
    116.   Applying perms.0016_applicationpermission... OK
    117.   Applying perms.0017_auto_20210104_0435... OK
    118.   Applying applications.0007_auto_20201119_1110... OK
    119.   Applying applications.0008_auto_20210104_0435... OK
    120.   Applying assets.0060_node_full_value...
    121. - Start migrate node value if has /
    122. - Start migrate node full value
    123.  OK
    124.   Applying assets.0061_auto_20201116_1757... OK
    125.   Applying assets.0062_auto_20201117_1938... OK
    126.   Applying assets.0063_migrate_default_node_key...
    127. Check old default node `key=0 value=Default` not exists
    128.  OK
    129.   Applying assets.0064_auto_20201203_1100... OK
    130.   Applying assets.0065_auto_20210121_1549... OK
    131.   Applying audits.0001_initial... OK
    132.   Applying audits.0002_ftplog_org_id... OK
    133.   Applying audits.0003_auto_20180816_1652... OK
    134.   Applying audits.0004_operatelog_passwordchangelog_userloginlog... OK
    135.   Applying audits.0005_auto_20190228_1715... OK
    136.   Applying audits.0006_auto_20190726_1753... OK
    137.   Applying audits.0007_auto_20191202_1010... OK
    138.   Applying audits.0008_auto_20200508_2105... OK
    139.   Applying audits.0009_auto_20200624_1654... OK
    140.   Applying audits.0010_auto_20200811_1122... OK
    141.   Applying audits.0011_userloginlog_backend... OK
    142.   Applying auth.0009_alter_user_last_name_max_length... OK
    143.   Applying auth.0010_alter_group_name_max_length... OK
    144.   Applying auth.0011_update_proxy_permissions... OK
    145.   Applying auth.0012_alter_user_first_name_max_length... OK
    146.   Applying authentication.0001_initial... OK
    147.   Applying authentication.0002_auto_20190729_1423... OK
    148.   Applying authentication.0003_loginconfirmsetting... OK
    149.   Applying authentication.0004_ssotoken... OK
    150.   Applying captcha.0001_initial... OK
    151.   Applying common.0001_initial... OK
    152.   Applying common.0002_auto_20180111_1407... OK
    153.   Applying common.0003_setting_category... OK
    154.   Applying common.0004_setting_encrypted... OK
    155.   Applying common.0005_auto_20190221_1902... OK
    156.   Applying common.0006_auto_20190304_1515... OK
    157.   Applying django_cas_ng.0001_initial... OK
    158.   Applying django_celery_beat.0001_initial... OK
    159.   Applying django_celery_beat.0002_auto_20161118_0346... OK
    160.   Applying django_celery_beat.0003_auto_20161209_0049... OK
    161.   Applying django_celery_beat.0004_auto_20170221_0000... OK
    162.   Applying django_celery_beat.0005_add_solarschedule_events_choices... OK
    163.   Applying django_celery_beat.0006_auto_20180322_0932... OK
    164.   Applying django_celery_beat.0007_auto_20180521_0826... OK
    165.   Applying django_celery_beat.0008_auto_20180914_1922... OK
    166.   Applying django_celery_beat.0006_auto_20180210_1226... OK
    167.   Applying django_celery_beat.0006_periodictask_priority... OK
    168.   Applying django_celery_beat.0009_periodictask_headers... OK
    169.   Applying django_celery_beat.0010_auto_20190429_0326... OK
    170.   Applying django_celery_beat.0011_auto_20190508_0153... OK
    171.   Applying django_celery_beat.0012_periodictask_expire_seconds... OK
    172.   Applying jms_oidc_rp.0001_initial... OK
    173.   Applying ops.0001_initial... OK
    174.   Applying ops.0002_celerytask... OK
    175.   Applying ops.0003_auto_20181207_1744... OK
    176.   Applying ops.0004_adhoc_run_as... OK
    177.   Applying ops.0005_auto_20181219_1807... OK
    178.   Applying ops.0006_auto_20190318_1023... OK
    179.   Applying ops.0007_auto_20190724_2002... OK
    180.   Applying ops.0008_auto_20190919_2100... OK
    181.   Applying ops.0009_auto_20191217_1713... OK
    182.   Applying ops.0010_auto_20191217_1758... OK
    183.   Applying ops.0011_auto_20200106_1534... OK
    184.   Applying ops.0012_auto_20200108_1659... OK
    185.   Applying ops.0013_auto_20200108_1706... OK
    186.   Applying ops.0014_auto_20200108_1749... OK
    187.   Applying ops.0016_commandexecution_org_id... OK
    189.   Applying ops.0018_auto_20200509_1434... OK
    190.   Applying ops.0019_adhocexecution_celery_task_id... OK
    191.   Applying orgs.0001_initial... OK
    192.   Applying orgs.0002_auto_20180903_1132... OK
    193.   Applying orgs.0003_auto_20190916_1057... OK
    194.   Applying orgs.0004_organizationmember... OK
    195.   Applying orgs.0005_auto_20200721_1937... OK
    196.   Applying orgs.0006_auto_20200721_1937... OK
    197.   Applying orgs.0007_auto_20200728_1805... OK
    198.   Applying orgs.0008_auto_20200819_2041... OK
    199.   Applying orgs.0009_auto_20201023_1628... OK
    200.   Applying sessions.0001_initial... OK
    201.   Applying settings.0001_initial... OK
    202.   Applying terminal.0001_initial... OK
    203.   Applying terminal.0002_auto_20171228_0025_squashed_0009_auto_20180326_0957... OK
    204.   Applying terminal.0010_auto_20180423_1140... OK
    205.   Applying terminal.0011_auto_20180807_1116... OK
    206.   Applying terminal.0012_auto_20180816_1652... OK
    207.   Applying terminal.0013_auto_20181123_1113... OK
    208.   Applying terminal.0014_auto_20181226_1441... OK
    209.   Applying terminal.0015_auto_20190923_1529... OK
    210.   Applying terminal.0016_commandstorage_replaystorage... OK
    211.   Applying terminal.0017_auto_20191125_0931... OK
    212.   Applying terminal.0018_auto_20191202_1010... OK
    213.   Applying terminal.0019_auto_20191206_1000... OK
    214.   Applying terminal.0020_auto_20191218_1721... OK
    215.   Applying terminal.0021_auto_20200213_1316... OK
    216.   Applying terminal.0022_session_is_success... OK
    217.   Applying terminal.0023_command_risk_level... OK
    218.   Applying terminal.0024_auto_20200715_1713... OK
    219.   Applying terminal.0025_auto_20200810_1735... OK
    220.   Applying terminal.0026_auto_20201027_1905... OK
    221.   Applying terminal.0027_auto_20201102_1651... OK
    222.   Applying terminal.0028_auto_20201110_1918... OK
    223.   Applying terminal.0029_auto_20201116_1757... OK
    224.   Applying terminal.0030_terminal_type... OK
    225.   Applying terminal.0031_auto_20210113_1356... OK
    226.   Applying tickets.0001_initial... OK
    227.   Applying tickets.0002_auto_20200728_1146... OK
    228.   Applying tickets.0003_auto_20200804_1551... OK
    229.   Applying tickets.0004_ticket_comment... OK
    230.   Applying tickets.0005_ticket_meta_confirmed_system_users... OK
    231.   Applying tickets.0006_auto_20201023_1628... OK
    232.   Applying tickets.0007_auto_20201224_1821... OK
    233.   Applying users.0031_auto_20201118_1801... OK
    234. 2021-02-08 14:59:31 [cache INFO] CACHE: Send refresh task <orgs.caches.OrgResourceStatisticsCache object at 0x7fb9122ce0d0>.('nodes_amount',)
    235. Operations to perform:
    236.   Apply all migrations: admin, applications, assets, audits, auth, authentication, captcha, common, contenttypes, django_cas_ng, django_celery_beat, jms_oidc_rp, ops, orgs, perms, sessions, settings, terminal, tickets, users
    237. Running migrations:
    238.   No migrations to apply.
    240. - Start Flower as Task Monitor
    242. - Start Daphne ASGI WS Server
    243. 2021-02-08 15:01:02 Check service status: gunicorn -> running at 38
    244. 2021-02-08 15:01:02 Check service status: flower -> running at 44
    245. 2021-02-08 15:01:02 Check service status: daphne -> running at 54
    1. ./jmsctl.sh start

    Server Internal Error

    1. docker logs -f jms_core --tail 200
    2. # 查看是否有报错，如果没有或者不完整请进入容器查看日志
    1. docker exec -it jms_core /bin/bash
    2. cat logs/jumpserver.log
    3. # 根据报错处理

    忘记密码, 密码过期

    如果忘了密码或者密码过期, 可以点击找回密码通过邮件找回
    如果无法通过邮件找回, 可以通过控制台重置

    1. from users.models import User
    2. u = User.objects.get(username='admin')
    3. u.reset_password('password')
    4. u.save()

    admin 为你要修改的账户名称, password 为你要修改的密码

    登录频繁账号被锁定

    1. docker exec -it jms_core /bin/bash
    2. cd /opt/jumpserver/apps
    3. python manage.py shell
    1. from django.core.cache import cache
    2. cache.delete_pattern('_LOGIN_BLOCK_*')
    3. cache.delete_pattern('_LOGIN_LIMIT_*')

    如果是设置了 LDAP 后无法登录, 请登录数据库禁用 ldap 登录, 然后重新设置 LDAP

    1. mysql -uroot -p
    1. use jumpserver;
    2. update settings_setting set value='false' where name='AUTH_LDAP';
    1. redis-cli -a $REDIS_PASSWORD

    如果是设置 其他身份认证 后无法登录, 注释掉 jumpserver/config/config.txt 里面的身份认证设置重启即可

    资产测试可连接性、更新硬件信息 报 Permission denied 或者 Authentication failure

    一般都是管理用户账户密码不正确

    资产测试可连接性、更新硬件信息 报 /usr/bin/python: not found

    在一般是资产 python 未安装或者 python 异常, 一般出现在 ubuntu 资产上

    确定系统用户是否正确, 如果系统用户使用了自动推送, 确保管理用户正确
    系统用户设置为 root 的情况下, 请关闭自动推送, 并输入正确的 root 密码

    提示 timeout

    1. vi /etc/ssh/sshd_config
    1. UseDNS no
    1. systemctl restart docker
    2. docker restart jms_koko

    Connect websocket server error

    kill 掉进程再重启 core
    如果仍然一样, 表示 nginx 也有错误, 根据安装文档进行修改后重启 nginx 即可

    启动报错 Cannot add foreign key constraint

    这是因为旧版本的数据库字符集和新版本数据库字符集不一样导致，备份好数据库，然后进行如下操作

    1. alter database jumpserver character set utf8 collate utf8_bin;
    2. use jumpserver;
    3. SET FOREIGN_KEY_CHECKS = 0;
    4. alter table applications_remoteapp convert to character set utf8 collate utf8_bin;
    5. SET FOREIGN_KEY_CHECKS = 1;
    1. # 表很多，可以用 shell 快速生成 sql 语句
    2. sql=`mysql -uroot -e "use jumpserver; show tables;" | grep -v "Tables_in" | awk '{print $1}'`
    3. for i in $sql; do echo "alter table $i convert to character set utf8 collate utf8_bin;"; done
    4. # 然后登陆 mysql 服务参考上面的教程处理即可
    5. mysql -uroot
    1. alter database jumpserver character set utf8 collate utf8_bin;
    2. use jumpserver;
    3. SET FOREIGN_KEY_CHECKS = 0;
    4. alter table applications_databaseapp convert to character set utf8 collate utf8_bin;
    5. alter table applications_remoteapp convert to character set utf8 collate utf8_bin;
    6. alter table assets_adminuser convert to character set utf8 collate utf8_bin;
    7. alter table assets_asset convert to character set utf8 collate utf8_bin;
    8. ... 把刚才查询到 sql 语句执行完