[Linux-HA] ipmilan stonith auth error
Frederik Schueler
fs at debian.org
Mon Sep 24 10:14:03 MDT 2007
Hello,
I am trying to figure out why ipmilan STONITH loops on the following
error:
heartbeat[20237]: 2007/09/19_23:11:40 info: Resetting node castor with [IPMI Over LAN]
heartbeat[20237]: 2007/09/19_23:11:40 ERROR: glib: Unable to setup connection: 16
heartbeat[20237]: 2007/09/19_23:11:50 ERROR: glib: IPMI operation timed out... :(
heartbeat[20237]: 2007/09/19_23:11:50 info: glib: Host castor ipmilan-reset error. Error = 6.
the config looks as follow:
in /etc/ha.d/ha.cf:
stonith ipmilan /etc/ha.d/conf/stonith.ipmilan
and in /etc/ha.d/conf/stonith.ipmilan:
castor 192.168.7.3 623 md5 admin USER PASS
pollux 192.168.7.4 623 md5 admin USER PASS
querying the BMCs using ipmitool works fine:
pollux:~# ipmitool -I lan -H 192.168.7.3 -A MD5 -U USER -P PASS chassis power status
Chassis Power is on
pollux:~#
doing the STONITH by hand breaks does not:
pollux:/tmp# stonith -t ipmilan -F /etc/ha.d/conf/stonith.ipmilan -T
reset castor
18:08:11.372069 IP 192.168.7.2.32774 > 192.168.7.3.623: UDP, length 23
18:08:11.372073 IP 192.168.7.2.32774 > 192.168.7.3.623: UDP, length 23
18:08:11.373061 IP 192.168.7.3.623 > 192.168.7.2.32774: UDP, length 22
18:08:11.373061 IP 192.168.7.3.623 > 192.168.7.2.32774: UDP, length 22
** (process:27593): CRITICAL **: Unable to setup connection: 16
** (process:27593): CRITICAL **: IPMI operation timed out... :(
** INFO: Host castor ipmilan-reset error. Error = 6.
I captured the chat between stonith and the BMC with tcpdump and
looked into it using wireshark: stonith seems to not use authtype MD5 but
PLAIN, and gets an AUTH_FAILED from the IPMI card.
Setting both the stonith config and the BMC to authtype NONE does not do
the trick, neither PLAIN/PASSWORD - it keeps throwing the errors above.
Heartbeat used is 2.1.2, built against openipmi 2.0.7, architecture is
amd64 with 64bit userland.
Best regards
Frederik Schüler
--
ENOSIG
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.community.tummy.com/pipermail/linux-ha/attachments/20070924/fc2a2420/attachment.pgp
More information about the Linux-HA
mailing list