From 455dbf960d5e95f95eff70bbdfce227b0a8e855b Mon Sep 17 00:00:00 2001 From: Mercy7777777 <54562402+Mercy7777777@users.noreply.github.com> Date: Sun, 18 Feb 2024 21:54:45 -0600 Subject: [PATCH] Fix solutions for "Lisbon". --- scenarios/lisbon/README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scenarios/lisbon/README.md b/scenarios/lisbon/README.md index b836ca5..3c40039 100644 --- a/scenarios/lisbon/README.md +++ b/scenarios/lisbon/README.md @@ -27,6 +27,6 @@ fi ## Clues -1. Running etcdctl get foo shows an error: certificate has expired or is not yet valid: current time ... is after ..., it's clear the server time is one year ahead, to fix set the server time to the actual time, for ex: sudo date -s "last year" (Next "clue" gives the solution).

+1. Running etcdctl get foo shows an error: certificate has expired or is not yet valid: current time ... is after ..., it's clear the server time is one year ahead, to fix set the server time to the actual time, for ex: sudo date -s "2023-01-01" (Next "clue" gives the solution).

2. Not easy to see unless looking for it (for example using tcpdump) but there's an iptables rule that redirects TCP traffic going to the etcd port :2379 into port :443 , and there's an Nginx server listening to that port: sudo /usr/sbin/iptables -t nat -L, deleting this rule will fix the remaining issue, for ex: sudo /usr/sbin/iptables -t nat -F \ No newline at end of file