[Linux-HA] apiauth directive error
horms at verge.net.au
Tue Mar 23 03:49:01 MST 2004
On Tue, Mar 23, 2004 at 11:32:39AM +0100, g.lams at itcilo.it wrote:
> Hi all
> I just finished installing heartbeat 1.2.0 on a suse 9 server (kernel
> 2.4.21) and I'm playing a little bit with it before integrating it with my
> already working drbd configuration.
> When I start heartbeat, I can ping the virtual IP address, but I see on
> the log the following errors:
> heartbeat: 2004/03/23_09:08:20 ERROR: Invalid user id name [hacluster]
> heartbeat: 2004/03/23_09:08:20 ERROR: Bad uid list [hacluster] in apiauth
> heartbeat: 2004/03/23_09:08:20 ERROR: Invalid apiauth directive [ipfail
> heartbeat: 2004/03/23_09:08:20 info: Syntax: apiauth [uid=uidlist]
> heartbeat: 2004/03/23_09:08:20 info: Where uidlist is a comma-separated
> list of uids,
> heartbeat: 2004/03/23_09:08:20 info: and gidlist is a comma-separated list
> of gids
> heartbeat: 2004/03/23_09:08:20 info: One or the other must be specified.
> I searched for some information on how to configure it and what it's used
> for in the documentation, in the FAQ, and in the mailing list archive but
> I didn't find anything relevant.
> Does anyone know where I can find more information on it?
First I agree that the documentation is somewhat lacking.
I would be more than happy to see a documentation patch for this
(and other newly added configuration directories). I am sure Alan would
In a nutshell the apiauth direcive determines the uid that named processes
must be running as in order to connect to heartbeat.
This is used to identify authorised clients.
The sample ha.cf file has some information:
# API Authentication - replaces the fifo-permissions-based system
# of the past
# You can put a uid list and/or a gid list.
# If you put both, then a process is authorized if it qualifies
# under either
# the uid list, or under the gid list.
# The groupname "default" has special meaning. If it is specified, then
# this will be used for authorizing groupless clients, and any client groups
# not otherwise specified.
#apiauth ipfail uid=hacluster
#apiauth ccm uid=hacluster
#apiauth ping gid=haclient uid=alanr,root
#apiauth default gid=haclient
More information about the Linux-HA