[ClusterLabs] Change hacluster password

[Jérôme BECOT]

Thank you Tomas,

The article (here <https://access.redhat.com/articles/1396123>) at 
RedHat tells to remove the tokens folder and re-authenticate. As I found 
no folder I asked, but I indeed have a known-hosts file instead. If it 
does not need re-authentication (Pacemaker 2.0.5-2) that's fine.

Regards

Le 14/06/2023 à 18:24, Tomas Jelinek a écrit :
> Hi Jérôme,
>
> Assuming you are asking about changing 'hacluster' password and its 
> impact to pcs authentication, the answer is that there is no impact 
> and you don't need to re-authenticate your nodes. If you have no 
> tokens or known-hosts in /var/lib/pcsd, then your nodes are not 
> authenticated to begin with, anyway.
>
> To re-authenticate pcs on your cluster nodes, run 'pcs cluster auth'. 
> This will authenticate all nodes in the local cluster. Alternatively, 
> you can use 'pcs host auth' command, which allows you to specify nodes 
> manually. None of these commands have impact on resources running in 
> the cluster.
>
> If you are using pcs web UI, you need to use new passwords when 
> logging in, obviously.
>
> Regards,
> Tomas
>
>
> Dne 13. 06. 23 v 11:43 Jérôme BECOT napsal(a):
>> Hello,
>>
>> On a running cluster, if I want to change the users password on all 
>> nodes, would I need to re-authenticate the nodes to correctly apply 
>> this change in Pacemaker ? How to gently re-authenticate on Debian ? 
>> Would this need a maintenance ?
>>
>> I found this link: https://access.redhat.com/articles/1396123
>>
>> But I have no tokens in /var/lib/pcsd on my nodes
>>
>> Thank you
>>
>> -- 
>> *Jérôme BECOT*<https://www.deveryware.com>
>>
>> _______________________________________________
>> Manage your subscription:
>> https://lists.clusterlabs.org/mailman/listinfo/users
>>
>> ClusterLabs home: https://www.clusterlabs.org/
>
> _______________________________________________
> Manage your subscription:
> https://lists.clusterlabs.org/mailman/listinfo/users
>
> ClusterLabs home: https://www.clusterlabs.org/
-- 
*Jérôme BECOT*
Ingénieur DevOps Infrastructure

Téléphone fixe: 01 82 28 37 06
Mobile : +33 757 173 193
Deveryware - 43 rue Taitbout - 75009 PARIS
https://www.deveryware.com <https://www.deveryware.com>

Deveryware_Logo
<https://www.deveryware.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clusterlabs.org/pipermail/users/attachments/20230616/00ccc57c/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: baniere_signature_dw_2022.png
Type: image/png
Size: 471995 bytes
Desc: not available
URL: <https://lists.clusterlabs.org/pipermail/users/attachments/20230616/00ccc57c/attachment-0001.png>