[rt-users] Migrating RT 3.6.5 to RT 4.2.12

[Laurent Frigault]

I am trying to migrate an old RT 3.6.5 (installed by someone else) to
new FreeBSD server running RT 4.2.12 (freebsd package) 

My problem is that after the update, the new root account lost its admin
privileges and I dont know how to restore them. I can still log with
this account, but it is not allowed to manage the server any more. This
must de related to warning/errors returned during the upgrade procedure
but I did not find how the handle them .

How can I fix this issue and what did I do wrong ?

What I did:

==============================================================================
On the old server I take a mysql dump with :
mysqldump  -c --hex-blob  --default-character-set=binary rt3 > rt3-hex-bin.sql

The dump is sent to the new server.

On the new server I create an rt4 database with :
mysqladmin create rt4

then I import the database dump with :
mysql --default-character-set=binary rt4 < /var/tmp/rt3-hex-bin.sql

after that I run the upgrade-mysql-schema.pl script with :

perl /usr/local/share/doc/rt42/upgrade/upgrade-mysql-schema.pl rt4 > /var/tmp/queries.sql

and
mysql rt4 < /var/tmp/queries.sql

then the rt-setup-database script with the upgrade action:

/usr/local/sbin/rt-setup-database --action upgrade --datadir  /usr/local/share/doc/rt42/upgrade --upgrade-from 3.6.5 |& tee /tmp/upgrade.trace

On this last step I got many warnings and errors that I don't understand
and don't know how to fix.


[62816] [Mon Feb 15 16:38:04 2016] [warning]: IMPORTANT: We're going to delete all scrips in Approvals queue and save them in 'rt-approvals-scrips-VrOO' file. (/usr/local/share/doc/rt42/upgrade/3.8.2/content:191)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Couldn't validate right name 'ExecuteCode' for object of RT::System class (/usr/local/lib/perl5/site_perl/RT/ACE.pm:254)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Unable to grant ExecuteCode on principal 30: Invalid right (/usr/local/share/doc/rt42/upgrade/3.9.1/content:63)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Couldn't validate right name 'ExecuteCode' for object of RT::System class (/usr/local/lib/perl5/site_perl/RT/ACE.pm:254)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Unable to grant ExecuteCode on principal 29: Invalid right (/usr/local/share/doc/rt42/upgrade/3.9.1/content:63)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Couldn't validate right name 'ExecuteCode' for object of RT::System class (/usr/local/lib/perl5/site_perl/RT/ACE.pm:254)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Unable to grant ExecuteCode on principal 32: Invalid right (/usr/local/share/doc/rt42/upgrade/3.9.1/content:63)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Couldn't validate right name 'ExecuteCode' for object of RT::System class (/usr/local/lib/perl5/site_perl/RT/ACE.pm:254)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Unable to grant ExecuteCode on principal 31: Invalid right (/usr/local/share/doc/rt42/upgrade/3.9.1/content:63)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Couldn't validate right name 'ExecuteCode' for object of RT::System class (/usr/local/lib/perl5/site_perl/RT/ACE.pm:254)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Unable to grant ExecuteCode on principal 9: Invalid right (/usr/local/share/doc/rt42/upgrade/3.9.1/content:63)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Couldn't validate right name 'ExecuteCode' for object of RT::System class (/usr/local/lib/perl5/site_perl/RT/ACE.pm:254)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Unable to grant ExecuteCode on principal 8: Invalid right (/usr/local/share/doc/rt42/upgrade/3.9.1/content:63)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Couldn't validate right name 'ExecuteCode' for object of RT::System class (/usr/local/lib/perl5/site_perl/RT/ACE.pm:254)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Unable to grant ExecuteCode on principal 6: Invalid right (/usr/local/share/doc/rt42/upgrade/3.9.1/content:63)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Couldn't validate right name 'ExecuteCode' for object of RT::System class (/usr/local/lib/perl5/site_perl/RT/ACE.pm:254)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Unable to grant ExecuteCode on principal 30: Invalid right (/usr/local/share/doc/rt42/upgrade/3.9.1/content:63)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Couldn't validate right name 'ExecuteCode' for object of RT::System class (/usr/local/lib/perl5/site_perl/RT/ACE.pm:254)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Unable to grant ExecuteCode on principal 29: Invalid right (/usr/local/share/doc/rt42/upgrade/3.9.1/content:63)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Couldn't validate right name 'ExecuteCode' for object of RT::System class (/usr/local/lib/perl5/site_perl/RT/ACE.pm:254)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Unable to grant ExecuteCode on principal 32: Invalid right (/usr/local/share/doc/rt42/upgrade/3.9.1/content:63)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Couldn't validate right name 'ExecuteCode' for object of RT::System class (/usr/local/lib/perl5/site_perl/RT/ACE.pm:254)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Unable to grant ExecuteCode on principal 31: Invalid right (/usr/local/share/doc/rt42/upgrade/3.9.1/content:63)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Couldn't validate right name 'ExecuteCode' for object of RT::System class (/usr/local/lib/perl5/site_perl/RT/ACE.pm:254)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Unable to grant ExecuteCode on principal 9: Invalid right (/usr/local/share/doc/rt42/upgrade/3.9.1/content:63)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Couldn't validate right name 'ExecuteCode' for object of RT::System class (/usr/local/lib/perl5/site_perl/RT/ACE.pm:254)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Unable to grant ExecuteCode on principal 8: Invalid right (/usr/local/share/doc/rt42/upgrade/3.9.1/content:63)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Couldn't validate right name 'ExecuteCode' for object of RT::System class (/usr/local/lib/perl5/site_perl/RT/ACE.pm:254)
[62816] [Mon Feb 15 16:38:04 2016] [warning]: Unable to grant ExecuteCode on principal 6: Invalid right (/usr/local/share/doc/rt42/upgrade/3.9.1/content:63)
[62816] [Mon Feb 15 16:38:08 2016] [error]: We found RTFM tables in your database.  Checking for content. (/usr/local/share/doc/rt42/upgrade/3.9.8/content:17)
[62816] [Mon Feb 15 16:38:08 2016] [error]: You appear to have RTFM Articles.  You can upgrade using the /opt/rt4/etc/upgrade/upgrade-articles script.  Read more about it in docs/UPGRADING-4.0 (/usr/local/share/doc/rt42/upgrade/3.9.8/content:22)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminAllPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminAllPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminAllPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminAllPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminAllPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminAllPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminAllPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminAllPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminAllPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminAllPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminAllPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminAllPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminOwnPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminOwnPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminOwnPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminOwnPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminOwnPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminOwnPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminOwnPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminOwnPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminOwnPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminOwnPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminOwnPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'AdminOwnPersonalGroups' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'DelegateRights' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'DelegateRights' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'DelegateRights' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'DelegateRights' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'DelegateRights' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'DelegateRights' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'DelegateRights' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'DelegateRights' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'DelegateRights' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'DelegateRights' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'DelegateRights' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:08 2016] [error]: Invalid right. Couldn't canonicalize right 'DelegateRights' (/usr/local/lib/perl5/site_perl/RT/ACE.pm:456)
[62816] [Mon Feb 15 16:38:10 2016] [error]: Scrip #2 has template set to #3, but it's not in DB, setting it 'Blank' (/usr/local/share/doc/rt42/upgrade/4.1.5/content:22)
[62816] [Mon Feb 15 16:38:10 2016] [error]: Scrip #4 has template set to #3, but it's not in DB, setting it 'Blank' (/usr/local/share/doc/rt42/upgrade/4.1.5/content:22)
[62816] [Mon Feb 15 16:38:13 2016] [info]: Going to delete all SMIMEKeyNotAfter attributes (/usr/local/share/doc/rt42/upgrade/4.1.22/content:61)


And then :

perl  /usr/local/share/doc/rt42/upgrade/upgrade-articles

outputs many warnings like :
[62988] [Mon Feb 15 16:55:03 2016] [warning]: Fixing ACL 969 to refer to RT::System: The new value has been set. at /usr/local/share/doc/rt42/upgrade/upgrade-articles line 146. (/usr/local/share/doc/rt42/upgrade/upgrade-articles:146)
...
[62988] [Mon Feb 15 16:55:03 2016] [warning]: Fixing Topic 2 to refer to RT::Class: The new value has been set. at /usr/local/share/doc/rt42/upgrade/upgrade-articles line 184. (/usr/local/share/doc/rt42/upgrade/upgrade-articles:184)
...
[62988] [Mon Feb 15 16:55:03 2016] [warning]: Updated Transaction 109718 to point to RT::Article at /usr/local/share/doc/rt42/upgrade/upgrade-articles line 237. (/usr/local/share/doc/rt42/upgrade/upgrade-articles:237)


And the latest step :

perl   /usr/local/share/doc/rt42/upgrade/vulnerable-passwords --fix

=========================================================================
 
-- 
Laurent Frigault | Free.org