[Pacemaker] Strange "bad permissions" issue when starting pacemaker

[Andrew Beekhof]

On 19/09/2013, at 5:10 PM, Саша Александров <shurrman at gmail.com> wrote:

> Hi!
> 
> I had to add additional logging to sources and build a custom version to figure out what is the problem. 

There is also ways to get tons of trace logging without recompiling:
   http://blog.clusterlabs.org/blog/2013/pacemaker-logging/

> It turned out that on the problem node root user had GID not 0 but 501. 
> Very odd. :-)

Very :)

> 
> 
> 2013/9/19 Andrew Beekhof <andrew at beekhof.net>
> 
> On 17/09/2013, at 4:30 PM, Саша Александров <shurrman at gmail.com> wrote:
> 
> > Andrew,
> >
> > Sorry, here it is:
> > [root at premium2 ~]# ls -la /var/lib/pacemaker/cib
> > total 204
> > drwxrwxr-x. 2 hacluster haclient 4096 Jul 21 22:04 .
> > drwxr-x---. 6 root      root     4096 Jul 14 18:02 ..
> > -rw-------  1 hacluster root      232 Jul 14 18:17 cib-0.raw
> > -rw-------  1 hacluster root       32 Jul 14 18:17 cib-0.raw.sig
> >
> > Best regards,
> > AAA
> > This is the same and correct permissions.
> > The only difference I see that hacluster user has different UIDs on these nodes. But my understanding is this should not affect the situation (the name is that matters)
> 
> That _might_ not be true for some older versions.
> I would definitely try making them the same
> 
> >
> >
> > 2013/9/17 Andrew Beekhof <andrew at beekhof.net>
> >
> > On 17/09/2013, at 3:42 AM, Саша Александров <shurrman at gmail.com> wrote:
> >
> > > Hi, everyone!
> > >
> > > I have a pretty strange issue. When starting pacemaker, I get
> > >
> > > Sep 16 21:21:03 premium2 cib[27510]:   notice: main: Using new config location: /var/lib/pacemaker/cib
> > > Sep 16 21:21:03 premium2 cib[27510]:    error: crm_is_writable: /var/lib/pacemaker/cib must exist and be a directory
> > > Sep 16 21:21:03 premium2 cib[27510]:    error: main: Bad permissions on /var/lib/pacemaker/cib. Terminating
> > >
> > > However,
> > >
> > > [root at premium2 cib]# ls -l /var/lib/pacemaker/cib
> >
> > You forgot -a on this one, so we can't see the directory itself.
> >
> > > total 196
> > > -rw------- 1 hacluster root  232 Jul 14 18:17 cib-0.raw
> > > -rw------- 1 hacluster root   32 Jul 14 18:17 cib-0.raw.sig
> > > skip-skip-skip
> > > -rw-r----- 1 hacluster root    2 Jul 21 22:04 cib.last
> > > -rw------- 1 hacluster root 6676 Jul 21 22:04 cib.xml
> > > -rw------- 1 hacluster root   32 Jul 21 22:04 cib.xml.sig
> > >
> > >
> > > Moreover, on the first server I have the same rights (and versions):
> > >
> > > [root at premium1 ~]# ls -la /var/lib/pacemaker/cib
> > > total 240
> > > drwxr-x---. 2 hacluster haclient 4096 Sep 13 22:13 .
> > > drwxr-x---. 6 root      root     4096 Jul 14 17:54 ..
> > > -rw-------  1 hacluster root      232 Jul 14 18:13 cib-0.raw
> > > -rw-------  1 hacluster root       32 Jul 14 18:13 cib-0.raw.sig
> > > skip-skip-skip
> > > -rw-r-----  1 hacluster root        2 Sep 13 22:13 cib.last
> > > -rw-------  1 hacluster root     6656 Sep 13 22:13 cib.xml
> > > -rw-------  1 hacluster root       32 Sep 13 22:13 cib.xml.sig
> > >
> > > [root at premium1 ~]# pacemakerd -$
> > > Pacemaker 1.1.8
> > >
> > > [root at premium2 ~]# pacemakerd -$
> > > Pacemaker 1.1.8
> > >
> > > It is my own rpms, build from sources. However, they were installed identically on both nodes. How can I trace down this problem?
> > >
> > > --
> > > Best regards,
> > > AAA
> > > _______________________________________________
> > > Pacemaker mailing list: Pacemaker at oss.clusterlabs.org
> > > http://oss.clusterlabs.org/mailman/listinfo/pacemaker
> > >
> > > Project Home: http://www.clusterlabs.org
> > > Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
> > > Bugs: http://bugs.clusterlabs.org
> >
> >
> > _______________________________________________
> > Pacemaker mailing list: Pacemaker at oss.clusterlabs.org
> > http://oss.clusterlabs.org/mailman/listinfo/pacemaker
> >
> > Project Home: http://www.clusterlabs.org
> > Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
> > Bugs: http://bugs.clusterlabs.org
> >
> >
> >
> >
> > --
> > С уважением, ААА.
> > _______________________________________________
> > Pacemaker mailing list: Pacemaker at oss.clusterlabs.org
> > http://oss.clusterlabs.org/mailman/listinfo/pacemaker
> >
> > Project Home: http://www.clusterlabs.org
> > Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
> > Bugs: http://bugs.clusterlabs.org
> 
> 
> _______________________________________________
> Pacemaker mailing list: Pacemaker at oss.clusterlabs.org
> http://oss.clusterlabs.org/mailman/listinfo/pacemaker
> 
> Project Home: http://www.clusterlabs.org
> Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
> Bugs: http://bugs.clusterlabs.org
> 
> 
> 
> 
> -- 
> С уважением, ААА.
> _______________________________________________
> Pacemaker mailing list: Pacemaker at oss.clusterlabs.org
> http://oss.clusterlabs.org/mailman/listinfo/pacemaker
> 
> Project Home: http://www.clusterlabs.org
> Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
> Bugs: http://bugs.clusterlabs.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.clusterlabs.org/pipermail/pacemaker/attachments/20130919/1b15570a/attachment-0003.sig>