<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi,</p>
<p>this cluster is running on Debian 9, that said:<br>
</p>
<p>pcs 0.9.155;</p>
<p>from whatever node I try to do that I get the very same result;</p>
<p>the log is from SRVDRSW01, but it gets identical from every other
node i tried on.</p>
<p>I tried to enter a wrong password for the hacluster user and,
obviously, I get rejected because of a wrong username/password.<br>
</p>
<div class="moz-cite-prefix">, [2020-10-29T14:23:14.447651 #1761]
INFO -- : Running: id -Gn hacluster<br>
I, [2020-10-29T14:23:14.447824 #1761] INFO -- : CIB USER:
hacluster, groups: <br>
I, [2020-10-29T14:23:14.450788 #1761] INFO -- : Return Value: 0<br>
I, [2020-10-29T14:23:14.450881 #1761] INFO -- : Running:
/usr/sbin/corosync-cmapctl totem.cluster_name<br>
I, [2020-10-29T14:23:14.450937 #1761] INFO -- : CIB USER:
hacluster, groups: <br>
I, [2020-10-29T14:23:14.458297 #1761] INFO -- : Return Value: 0<br>
172.16.37.28 - - [29/Oct/2020:14:23:14 +0100] "GET
/clusters_overview HTTP/1.1" 200 44 0.0163<br>
172.16.37.28 - - [29/Oct/2020:14:23:14 +0100] "GET
/clusters_overview HTTP/1.1" 200 44 0.0165<br>
172.16.37.28 - - [29/Oct/2020:14:23:14 CET] "GET
/clusters_overview HTTP/1.1" 200 44<br>
<a class="moz-txt-link-freetext" href="https://172.16.10.119:2224/manage">https://172.16.10.119:2224/manage</a> -> /clusters_overview<br>
I, [2020-10-29T14:23:22.531202 #1761] INFO -- : Running: id -Gn
hacluster<br>
I, [2020-10-29T14:23:22.531652 #1761] INFO -- : CIB USER:
hacluster, groups: <br>
I, [2020-10-29T14:23:22.540823 #1761] INFO -- : Return Value: 0<br>
I, [2020-10-29T14:23:22.541238 #1761] INFO -- : Running: id -Gn
hacluster<br>
I, [2020-10-29T14:23:22.541772 #1761] INFO -- : CIB USER:
hacluster, groups: <br>
I, [2020-10-29T14:23:22.550223 #1761] INFO -- : Return Value: 0<br>
I, [2020-10-29T14:23:22.550626 #1761] INFO -- : Running:
/usr/sbin/corosync-cmapctl totem.cluster_name<br>
I, [2020-10-29T14:23:22.551116 #1761] INFO -- : CIB USER:
hacluster, groups: <br>
I, [2020-10-29T14:23:22.568564 #1761] INFO -- : Return Value: 0<br>
I, [2020-10-29T14:23:22.571020 #1761] INFO -- : SRWT Node:
172.16.10.132 Request: check_auth<br>
E, [2020-10-29T14:23:22.571225 #1761] ERROR -- : Unable to connect
to node 172.16.10.132, no token available<br>
172.16.37.28 - - [29/Oct/2020:14:23:22 +0100] "GET
/manage/check_pcsd_status?nodes=172.16.10.132 HTTP/1.1" 200 42
0.0432<br>
172.16.37.28 - - [29/Oct/2020:14:23:22 +0100] "GET
/manage/check_pcsd_status?nodes=172.16.10.132 HTTP/1.1" 200 42
0.0436<br>
172.16.37.28 - - [29/Oct/2020:14:23:22 CET] "GET
/manage/check_pcsd_status?nodes=172.16.10.132 HTTP/1.1" 200 42<br>
<a class="moz-txt-link-freetext" href="https://172.16.10.119:2224/manage">https://172.16.10.119:2224/manage</a> ->
/manage/check_pcsd_status?nodes=172.16.10.132<br>
I, [2020-10-29T14:23:25.748128 #1761] INFO -- : Running: id -Gn
hacluster<br>
I, [2020-10-29T14:23:25.748597 #1761] INFO -- : CIB USER:
hacluster, groups: <br>
I, [2020-10-29T14:23:25.761041 #1761] INFO -- : Return Value: 0<br>
I, [2020-10-29T14:23:25.761327 #1761] INFO -- : Running: id -Gn
hacluster<br>
I, [2020-10-29T14:23:25.761739 #1761] INFO -- : CIB USER:
hacluster, groups: <br>
I, [2020-10-29T14:23:25.773292 #1761] INFO -- : Return Value: 0<br>
I, [2020-10-29T14:23:25.773790 #1761] INFO -- : Running:
/usr/sbin/corosync-cmapctl totem.cluster_name<br>
I, [2020-10-29T14:23:25.774162 #1761] INFO -- : CIB USER:
hacluster, groups: <br>
I, [2020-10-29T14:23:25.790479 #1761] INFO -- : Return Value: 0<br>
I, [2020-10-29T14:23:25.925090 #1761] INFO -- : Running:
/usr/sbin/pcs status nodes corosync<br>
I, [2020-10-29T14:23:25.925561 #1761] INFO -- : CIB USER:
hacluster, groups: <br>
I, [2020-10-29T14:23:26.775316 #1761] INFO -- : Return Value: 0<br>
I, [2020-10-29T14:23:26.776739 #1761] INFO -- : Sending config
'tokens' version 1 95f8f1a2595da4058e3653957e7d474e9ef39935 to
nodes: <br>
172.16.37.28 - - [29/Oct/2020:14:23:26 +0100] "POST
/manage/auth_gui_against_nodes HTTP/1.1" 200 39 1.0314<br>
172.16.37.28 - - [29/Oct/2020:14:23:26 +0100] "POST
/manage/auth_gui_against_nodes HTTP/1.1" 200 39 1.0318<br>
172.16.37.28 - - [29/Oct/2020:14:23:25 CET] "POST
/manage/auth_gui_against_nodes HTTP/1.1" 200 39<br>
<a class="moz-txt-link-freetext" href="https://172.16.10.119:2224/manage">https://172.16.10.119:2224/manage</a> ->
/manage/auth_gui_against_nodes<br>
I, [2020-10-29T14:23:26.835958 #1761] INFO -- : Running: id -Gn
hacluster<br>
I, [2020-10-29T14:23:26.836466 #1761] INFO -- : CIB USER:
hacluster, groups: <br>
I, [2020-10-29T14:23:26.845873 #1761] INFO -- : Return Value: 0<br>
I, [2020-10-29T14:23:26.846329 #1761] INFO -- : Running: id -Gn
hacluster<br>
I, [2020-10-29T14:23:26.846650 #1761] INFO -- : CIB USER:
hacluster, groups: <br>
I, [2020-10-29T14:23:26.854779 #1761] INFO -- : Return Value: 0<br>
I, [2020-10-29T14:23:26.855893 #1761] INFO -- : Running:
/usr/sbin/corosync-cmapctl totem.cluster_name<br>
I, [2020-10-29T14:23:26.856244 #1761] INFO -- : CIB USER:
hacluster, groups: <br>
I, [2020-10-29T14:23:26.872526 #1761] INFO -- : Return Value: 0<br>
I, [2020-10-29T14:23:26.874768 #1761] INFO -- : SRWT Node:
172.16.10.132 Request: check_auth<br>
E, [2020-10-29T14:23:26.874952 #1761] ERROR -- : Unable to connect
to node 172.16.10.132, no token available<br>
172.16.37.28 - - [29/Oct/2020:14:23:26 +0100] "GET
/manage/check_pcsd_status?nodes=172.16.10.132 HTTP/1.1" 200 42
0.0420<br>
172.16.37.28 - - [29/Oct/2020:14:23:26 +0100] "GET
/manage/check_pcsd_status?nodes=172.16.10.132 HTTP/1.1" 200 42
0.0424<br>
172.16.37.28 - - [29/Oct/2020:14:23:26 CET] "GET
/manage/check_pcsd_status?nodes=172.16.10.132 HTTP/1.1" 200 42<br>
<a class="moz-txt-link-freetext" href="https://172.16.10.119:2224/manage">https://172.16.10.119:2224/manage</a> ->
/manage/check_pcsd_status?nodes=172.16.10.132<br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">right after you can find the log when I
deliberately entered a wrong password for the hacluster user:</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">I, [2020-10-29T14:55:25.603445 #405]
INFO -- : Running: /usr/sbin/corosync-cmapctl totem.cluster_name<br>
I, [2020-10-29T14:55:25.603687 #405] INFO -- : CIB USER:
hacluster, groups: <br>
I, [2020-10-29T14:55:25.614132 #405] INFO -- : Return Value: 0<br>
I, [2020-10-29T14:55:25.614907 #405] INFO -- : Attempting login
by 'hacluster'<br>
I, [2020-10-29T14:55:27.879665 #405] INFO -- : Failed login by
'hacluster' (bad username or password)<br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">Thanks<br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">On 29/10/20 14:10, Tomas Jelinek wrote:</div>
<blockquote type="cite"
cite="mid:bac23c2a-0bda-855e-5694-2ab3405fdfd2@redhat.com">Hi
Raffaele,
<br>
<br>
We'll need to know more details:
<br>
* What is your pcs version?
<br>
* Which node is used to access web UI?
<br>
* Which node is the log from?
<br>
<br>
The part of pcsd log you provided doesn't seem to cover the issue
you are experiencing. If the node is not authenticated, which
seems to be the case as pcsd is asking for a password, then the
log simply states the node is not authenticated.
<br>
<br>
We would need a bigger portion of the log to see what's happening
when you are trying to add the cluster to the web UI.
<br>
<br>
<br>
Thanks,
<br>
Tomas
<br>
<br>
<br>
Dne 29. 10. 20 v 8:02 Raffaele Pantaleoni napsal(a):
<br>
<blockquote type="cite">The node is already part of that cluster
indeed. That's why I clicked on
<br>
<br>
"+Add Existing"
<br>
<br>
the pop-up form says:
<br>
<br>
"Enter the hostname/IP of a node in a cluster that you would
like to manage:"
<br>
<br>
But I can't add it into the pcsd web gui.
<br>
<br>
That is the cluster list is empty.
<br>
<br>
On 28/10/20 21:59, Strahil Nikolov wrote:
<br>
<blockquote type="cite">Are you sure that the node you want to
join is not one of the listed here:
<br>
<br>
Online: [ SRVDRSW01 SRVDRSW02 SRVDRSW03 SRVDRSW04 SRVDRSW05
SRVDRSW06 ]
<br>
<br>
The hostname looks pretty much the same.
<br>
<br>
Best Regards,
<br>
Strahil Nikolov
<br>
<br>
<br>
<br>
<br>
<br>
<br>
В сряда, 28 октомври 2020 г., 11:18:11 Гринуич+2, Raffaele
Pantaleoni <a class="moz-txt-link-rfc2396E" href="mailto:r.pantaleoni@seko.com"><r.pantaleoni@seko.com></a> написа:
<br>
<br>
<br>
<br>
<br>
<br>
Hello everybody,
<br>
<br>
I'm trying to add an existing cluster into the pcsd web gui.
<br>
<br>
When I try to add it, I select a node (SRVDRSW01.seko.com) and
right
<br>
after I am requested to enter the password for the hacluster
user but
<br>
from the pcsd log file I can see this:
<br>
<br>
I, [2020-10-28T09:58:26.213638 #12661] INFO -- : Running: id
-Gn hacluster
<br>
I, [2020-10-28T09:58:26.214091 #12661] INFO -- : CIB USER:
hacluster,
<br>
groups:
<br>
I, [2020-10-28T09:58:26.222338 #12661] INFO -- : Return
Value: 0
<br>
I, [2020-10-28T09:58:26.222730 #12661] INFO -- : Running: id
-Gn hacluster
<br>
I, [2020-10-28T09:58:26.222887 #12661] INFO -- : CIB USER:
hacluster,
<br>
groups:
<br>
I, [2020-10-28T09:58:26.230203 #12661] INFO -- : Return
Value: 0
<br>
I, [2020-10-28T09:58:26.230424 #12661] INFO -- : Running:
<br>
/usr/sbin/corosync-cmapctl totem.cluster_name
<br>
I, [2020-10-28T09:58:26.230587 #12661] INFO -- : CIB USER:
hacluster,
<br>
groups:
<br>
I, [2020-10-28T09:58:26.251826 #12661] INFO -- : Return
Value: 0
<br>
I, [2020-10-28T09:58:26.253144 #12661] INFO -- : SRWT Node:
<br>
SRVDRSW01.seko.com Request: check_auth
<br>
E, [2020-10-28T09:58:26.253603 #12661] ERROR -- : Unable to
connect to
<br>
node SRVDRSW01.seko.com, no token available
<br>
<br>
I tried it using the node name only (SRVDRSW01) or the IP
address. The
<br>
error message doesn't change.
<br>
<br>
Since this is a test installation inside our LAN there is no
firewall
<br>
configured at all.
<br>
<br>
This is the actual status of the cluster:
<br>
root@SRVDRSW01:~# pcs status
<br>
Cluster name: debian
<br>
Stack: corosync
<br>
Current DC: SRVDRSW01 (version 1.1.16-94ff4df) - partition
with quorum
<br>
Last updated: Wed Oct 28 09:55:20 2020
<br>
Last change: Mon Oct 19 17:07:33 2020 by root via
crm_attribute on SRVDRSW01
<br>
<br>
6 nodes configured
<br>
5 resources configured
<br>
<br>
Online: [ SRVDRSW01 SRVDRSW02 SRVDRSW03 SRVDRSW04 SRVDRSW05
SRVDRSW06 ]
<br>
<br>
Full list of resources:
<br>
<br>
ClusterIP (ocf::heartbeat:IPaddr2): Started
SRVDRSW01
<br>
CouchIP (ocf::heartbeat:IPaddr2): Started
SRVDRSW03
<br>
NodeJSIP (ocf::heartbeat:IPaddr2): Started
SRVDRSW04
<br>
FrontEnd (ocf::heartbeat:nginx): Started SRVDRSW01
<br>
ITATESTSERVER-DIP (ocf::nodejs:pm2): Started
SRVDRSW04
<br>
<br>
Daemon Status:
<br>
corosync: active/enabled
<br>
pacemaker: active/enabled
<br>
pcsd: active/disabled
<br>
<br>
<br>
I went through hundreds of tries with no luck.
<br>
Is it something I am doing wrong or I forgot to do?
<br>
I tried to google it but no solution was good.
<br>
I have no ideas left.
<br>
<br>
Thank you in advance.
<br>
---
<br>
Raffaele Pantaleoni
<br>
<br>
/
<br>
/
<br>
<br>
_______________________________________________
<br>
Manage your subscription:
<br>
<a class="moz-txt-link-freetext" href="https://lists.clusterlabs.org/mailman/listinfo/users">https://lists.clusterlabs.org/mailman/listinfo/users</a>
<br>
<br>
ClusterLabs home: <a class="moz-txt-link-freetext" href="https://www.clusterlabs.org/">https://www.clusterlabs.org/</a>
<br>
_______________________________________________
<br>
Manage your subscription:
<br>
<a class="moz-txt-link-freetext" href="https://lists.clusterlabs.org/mailman/listinfo/users">https://lists.clusterlabs.org/mailman/listinfo/users</a>
<br>
<br>
ClusterLabs home: <a class="moz-txt-link-freetext" href="https://www.clusterlabs.org/">https://www.clusterlabs.org/</a>
<br>
<br>
_______________________________________________
<br>
Manage your subscription:
<br>
<a class="moz-txt-link-freetext" href="https://lists.clusterlabs.org/mailman/listinfo/users">https://lists.clusterlabs.org/mailman/listinfo/users</a>
<br>
<br>
ClusterLabs home: <a class="moz-txt-link-freetext" href="https://www.clusterlabs.org/">https://www.clusterlabs.org/</a>
<br>
</blockquote>
</blockquote>
<br>
_______________________________________________
<br>
Manage your subscription:
<br>
<a class="moz-txt-link-freetext" href="https://lists.clusterlabs.org/mailman/listinfo/users">https://lists.clusterlabs.org/mailman/listinfo/users</a>
<br>
<br>
ClusterLabs home: <a class="moz-txt-link-freetext" href="https://www.clusterlabs.org/">https://www.clusterlabs.org/</a>
<br>
</blockquote>
<div class="moz-signature">-- <br>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title>Signature</title>
<style><!--
/* Font Definitions */
@font-face
{font-family:Arial;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Arial","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Testo fumetto Carattere";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
mso-fareast-language:EN-US;}
span.TestofumettoCarattere
{mso-style-name:"Testo fumetto Carattere";
mso-style-priority:99;
mso-style-link:"Testo fumetto";
font-family:"Tahoma","sans-serif";
mso-fareast-language:EN-US;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.StileMessaggioDiPostaElettronica20
{mso-style-type:personal;
font-family:"Arial","sans-serif";
color:windowtext;}
span.StileMessaggioDiPostaElettronica21
{mso-style-type:personal;
font-family:"Arial","sans-serif";
color:#1F497D;}
span.StileMessaggioDiPostaElettronica22
{mso-style-type:personal-reply;
font-family:"Arial","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
a:link
{text-decoration: none;}
--></style>
<p class="MsoNormal"><span><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><font
face="Arial"><img alt=""
src="cid:part1.8056C714.DDA74A1A@seko.com" width="99"
height="30" border="0"></font></p>
<p><font face="Arial"> </font></p>
<font face="Arial">
<p class="MsoNormal" style="text-autospace:none"> <b><span
style="font-size:11.0pt;color:#2E74B5">Raffaele Pantaleoni<o:p></o:p></span></b>
</p>
<p class="MsoNormal" style="text-autospace:none"> <b><span
style="font-size:11.0pt;color:#2E74B5">IOT Design R&D
Unit<o:p></o:p></span></b> </p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"> <span
style="font-size:10.0pt;color:#AEAAAA">Tel. +39 0746
605885</span><span><o:p></o:p></span> </p>
<p class="MsoNormal"> <span
style="font-size:10.0pt;color:#AEAAAA">Fax. +39 0746
607072</span><span><o:p></o:p></span> </p>
<p class="MsoNormal"> <span style="color:#AEAAAA">Mail </span>
<b><span style="font-size:10.0pt;color:#2E74B5"><a
style="text-decoration:none"
href="mailto:r.pantaleoni@seko.com"><span
style="color:blue">r.pantaleoni@seko.com</span></a></span></b><span><o:p></o:p></span>
</p>
<p class="MsoNormal"> <span
style="font-size:10.0pt;color:#AEAAAA">Skype
r.pantaleoni.seko<o:p></o:p></span> </p>
<p class="MsoNormal"> <span style="color:#1F497D"><a
style="text-decoration:none" href="https://www.seko.com/"><b><span
style="font-size:10.0pt;color:blue">www.seko.com</span></b></a></span>
<b><span><o:p></o:p></span></b> </p>
<p class="MsoNormal"><span style="font-size:8.0pt;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"> <span
style="font-size:8.0pt;color:#1F497D"><em>This e-mail
(including attachments) is intended only for the
recipient(s) named above. It may contain confidential or
privileged information. If you are not the named addressee
you should not disseminate, distribute or copy this
e-mail. Please notify the sender immediately by e-mail if
you have received this e-mail by mistake and delete this
e-mail from your system. E-mail transmission cannot be
guaranteed to be secure or error-free as information could
be intercepted, corrupted, lost, destroyed, arrive late or
incomplete, or contain viruses. The sender therefore does
not accept liability for any errors or omissions in the
contents of this message, which arise as a result of
e-mail transmission. If verification is required please
request a hard-copy version. Your personal data will be
processed in compliance with the EU General Data
Protection Regulation n. 2016/679 ("GDPR"), applicable
since May 25th, 2018. For further information, please see
our <a href="https://www.seko.com/page/privacy-policy">Privacy
Policy</a></em><o:p></o:p></span> </p>
</font></div>
</body>
</html>