[ClusterLabs] Unable to connect to node , no token available

[Tomas Jelinek]

Hi Raffaele,

Several bugs related to node authentication have been fixed in between 
Debian 9 and Debian 10 version of pcs. I think you were hitting one of 
those.

Regards,
Tomas


Dne 02. 11. 20 v 11:06 Raffaele Pantaleoni napsal(a):
> Hi,
> 
> I have solved the issue, well...not really though.
> 
> I "simply" migrated the VMs from Debian 9 to Debian 10 and updated the 
> Pacemaker stack to the latest versions available in Debian Buster.
> 
> The problems simply disappeared and everything is working as expected 
> now, out of the box.
> 
> 
> On 28/10/20 10:17, Raffaele Pantaleoni wrote:
>> Hello everybody,
>>
>> I'm trying to add an existing cluster into the pcsd web gui.
>>
>> When I try to add it, I select a node (SRVDRSW01.seko.com) and right 
>> after I am requested to enter the password for the hacluster user but 
>> from the pcsd log file I can see this:
>>
>> I, [2020-10-28T09:58:26.213638 #12661]  INFO -- : Running: id -Gn 
>> hacluster
>> I, [2020-10-28T09:58:26.214091 #12661]  INFO -- : CIB USER: hacluster, 
>> groups:
>> I, [2020-10-28T09:58:26.222338 #12661]  INFO -- : Return Value: 0
>> I, [2020-10-28T09:58:26.222730 #12661]  INFO -- : Running: id -Gn 
>> hacluster
>> I, [2020-10-28T09:58:26.222887 #12661]  INFO -- : CIB USER: hacluster, 
>> groups:
>> I, [2020-10-28T09:58:26.230203 #12661]  INFO -- : Return Value: 0
>> I, [2020-10-28T09:58:26.230424 #12661]  INFO -- : Running: 
>> /usr/sbin/corosync-cmapctl totem.cluster_name
>> I, [2020-10-28T09:58:26.230587 #12661]  INFO -- : CIB USER: hacluster, 
>> groups:
>> I, [2020-10-28T09:58:26.251826 #12661]  INFO -- : Return Value: 0
>> I, [2020-10-28T09:58:26.253144 #12661]  INFO -- : SRWT Node: 
>> SRVDRSW01.seko.com Request: check_auth
>> E, [2020-10-28T09:58:26.253603 #12661] ERROR -- : Unable to connect to 
>> node SRVDRSW01.seko.com, no token available
>>
>> I tried it using the node name only (SRVDRSW01) or the IP address. The 
>> error message doesn't change.
>>
>> Since this is a test installation inside our LAN there is no firewall 
>> configured at all.
>>
>> This is the actual status of the cluster:
>> root at SRVDRSW01:~# pcs status
>> Cluster name: debian
>> Stack: corosync
>> Current DC: SRVDRSW01 (version 1.1.16-94ff4df) - partition with quorum
>> Last updated: Wed Oct 28 09:55:20 2020
>> Last change: Mon Oct 19 17:07:33 2020 by root via crm_attribute on 
>> SRVDRSW01
>>
>> 6 nodes configured
>> 5 resources configured
>>
>> Online: [ SRVDRSW01 SRVDRSW02 SRVDRSW03 SRVDRSW04 SRVDRSW05 SRVDRSW06 ]
>>
>> Full list of resources:
>>
>>  ClusterIP      (ocf::heartbeat:IPaddr2):       Started SRVDRSW01
>>  CouchIP        (ocf::heartbeat:IPaddr2):       Started SRVDRSW03
>>  NodeJSIP       (ocf::heartbeat:IPaddr2):       Started SRVDRSW04
>>  FrontEnd       (ocf::heartbeat:nginx): Started SRVDRSW01
>>  ITATESTSERVER-DIP      (ocf::nodejs:pm2):      Started SRVDRSW04
>>
>> Daemon Status:
>>   corosync: active/enabled
>>   pacemaker: active/enabled
>>   pcsd: active/disabled
>>
>>
>> I went through hundreds of tries with no luck.
>> Is it something I am doing wrong or I forgot to do?
>> I tried to google it but no solution was good.
>> I have no ideas left.
>>
>> Thank you in advance.
>> ---
>> Raffaele Pantaleoni
>>
>> /
>> /
>>
>> _______________________________________________
>> Manage your subscription:
>> https://lists.clusterlabs.org/mailman/listinfo/users
>>
>> ClusterLabs home: https://www.clusterlabs.org/
> -- 
> Signature
> 
> *Raffaele Pantaleoni*
> 
> *IOT Design R&D Unit*
> 
> Tel.     +39 0746 605885
> 
> Fax.    +39 0746 607072
> 
> Mail *r.pantaleoni at seko.com <mailto:r.pantaleoni at seko.com>*
> 
> Skype r.pantaleoni.seko
> 
> *www.seko.com* <https://www.seko.com/> **
> 
> /This e-mail (including attachments) is intended only for the 
> recipient(s) named above. It may contain confidential or privileged 
> information. If you are not the named addressee you should not 
> disseminate, distribute or copy this e-mail. Please notify the sender 
> immediately by e-mail if you have received this e-mail by mistake and 
> delete this e-mail from your system. E-mail transmission cannot be 
> guaranteed to be secure or error-free as information could be 
> intercepted, corrupted, lost, destroyed, arrive late or incomplete, or 
> contain viruses. The sender therefore does not accept liability for any 
> errors or omissions in the contents of this message, which arise as a 
> result of e-mail transmission. If verification is required please 
> request a hard-copy version. Your personal data will be processed in 
> compliance with the EU General Data Protection Regulation n. 2016/679 
> ("GDPR"), applicable since May 25th, 2018. For further information, 
> please see our Privacy Policy <https://www.seko.com/page/privacy-policy>/
> 
> 
> _______________________________________________
> Manage your subscription:
> https://lists.clusterlabs.org/mailman/listinfo/users
> 
> ClusterLabs home: https://www.clusterlabs.org/
>