<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi,<br>
<br>
I can't issue 'crm configure' commands under a designated privileged user (via: crm options user priv_user) - pacemaker seems to be only be able to be configured via the 'root' user. Run with sudo it gives this error: 'cibadmin not available, check your installation'<br>
<br>
Steps taken:<br>
<b><br>
I installed pacemaker/corosync as root (details below):</b><br>
<font face="Courier New, Courier, monospace">Pacemaker version 1.0.12, release 1.el5.centos, x86_64<br>
Corosync version 1.2.7, release 1.1.el5, x86_64</font><br>
<br>
<b>Started corosync under root:</b><br>
<font face="Courier New, Courier, monospace">service corosync start</font><br>
<br>
<b>Made config changes under root (for single-node setup):</b><br>
<font face="Courier New, Courier, monospace">crm configure property stonith-enabled=false<br>
crm configure property no-quorum-policy=ignore<br>
crm configure property start-failure-is-fatal=false</font><br>
<br>
<b>Allow user with privileged access to configure the node:</b><br>
<font face="Courier New, Courier, monospace">crm options user colinlinux</font><br>
<br>
Now when i try to configure under my 'privileged user' a sample xclock & gnome-calculator process dependancy - it just hangs...<br>
<br>
<font face="Courier New, Courier, monospace">colinlinux# crm configure primitive xclock ocf:tester:xclock op monitor interval=20 timeout=20 start-delay=30s params run_user=colinlinux meta failure-timeout="360" migration-threshold=5</font> (<b>HANGS HERE!</b>)<br>
<br>
<font face="Courier New, Courier, monospace">colinlinux# crm configure primitive gnome-calculator ocf:openet:gnome-calculator op monitor interval=60s timeout=60s start-delay=30s op start timeout=90 op stop timeout=60 params run_user=colinlinux meta failure-timeout="360"
migration-threshold=5</font> (never executes due to hang above)<br>
<br>
<b>WITH SUDO:</b><br>
<font face="Courier New, Courier, monospace">colinlinux# sudo crm configure primitive xclock ocf:tester:xclock op monitor interval=20 timeout=20 start-delay=30s params run_user=colinlinux meta failure-timeout="360" migration-threshold=5</font>
<br>
error given:<br>
# cibadmin not available, check your installation<br>
<br>
<br>
<br>
<br>
<b>Sudoers file:</b><br>
<font face="Courier New, Courier, monospace">root ALL=(ALL) ALL<br>
colinlinux ALL=(ALL) NOPASSWD: ALL</font><br>
<br>
<b>User groups for <font face="Courier New, Courier, monospace">colinlinux</font></b><b> user:</b><br>
<font face="Courier New, Courier, monospace"># groups colinlinux<br>
colinlinux : colinlinux haclient</font><br>
<br>
<b>PATH:</b><br>
PATH=$PATH:$HOME/bin:/usr/sbin:/sbin<br>
<font face="Courier New, Courier, monospace">#which cibadmin<br>
/usr/sbin/cibadmin</font><br>
<br>
<b>Corosync config file:</b><br>
<small><font face="Courier New, Courier, monospace"># Please read the corosync.conf.5 manual page<br>
compatibility: whitetank<br>
<br>
totem {<br>
version: 2<br>
secauth: off<br>
threads: 0<br>
interface {<br>
ringnumber: 0<br>
bindnetaddr: 127.0.0.1<br>
mcastaddr: 0.0.0.0<br>
mcastport: 4000<br>
}<br>
}<br>
<br>
logging {<br>
fileline: off<br>
to_stderr: no<br>
to_logfile: yes<br>
to_syslog: no<br>
logfile: /tmp/corosync/log/coroLog.log<br>
debug: on<br>
timestamp: on<br>
logger_subsys {<br>
subsys: AMF<br>
debug: off<br>
}<br>
}<br>
<br>
amf {<br>
mode: disabled<br>
}<br>
aisexec {<br>
user: root<br>
group: root<br>
}<br>
service {<br>
name: pacemaker<br>
ver: 0<br>
}</font></small><br>
<br>
<b>Resource files:</b><br>
See attached (basically the start action starts and returns success - then all other actions are dummies and just return success)<br>
But we never get to the start action or any action because the first crm command hangs<br>
<b><br>
Log files?:</b><br>
No activity in the log files. <br>
<br>
<br>
<hr>
<font face="Arial" color="Gray" size="1">This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient, please note that any review,
dissemination, disclosure, alteration, printing, circulation, retention or transmission of this e-mail and/or any file or attachment transmitted with it, is prohibited and may be unlawful. If you have received this e-mail or any file or attachment transmitted
with it in error please notify postmaster@openet.com. Although Openet has taken reasonable precautions to ensure no viruses are present in this email, we cannot accept responsibility for any loss or damage arising from the use of this email or attachments.<br>
</font>
</body>
</html>