<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Let me first thank this community for being so active. I have learned a lot by watching the discussions.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have noticed that in our environment, I am seeing high rate of my RHEL 7 fence agent (fence_ipmilan) timing out on monitoring operations. We use HP iLO 3/4/5 power fencing. I have attempted to figure out why we are seeing timeouts,
but nothing appears to be miss-configured and there is not a pattern to the fence agent failures.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The timeout then shows up on pcs status output and the fence agent resource, if it does not relocate or restart, moves to a Stopped state. I have tried to lengthen the monitoring to 15 minutes and start timeout to 125 seconds, but still
are getting complaints from the System Admins. They want a nice clean pcs status output and tend to freak out with the pcs stontih cleanup --node <node> command as it shows a false cycling of all resources (vip, fs, app, etc) for the node.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Wondering if anyone has real-world experience with some of the timeouts provided by fence_ipmilan with HP iLO devices. In particular, I was looking at pcmk_status_timeout and pcmk_status_retries from pcs stonith describe fence_ipmilan
–full.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">How critical is the monitoring for the fence resources inside of pacemaker? Can I simply disable the monitoring operation? We have an independent job that periodically verifies HP iLO setup for fencing (did this in RHEL 6).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">From internal R&D testing, it appears that if the fence agent is “failed” or “stopped”, and the cluster actually needs to fence a node, then the cluster will re-attempt the fence agent start and fence the node.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Here is the config<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Stonith Devices:<o:p></o:p></p>
<p class="MsoNormal">Resource: fence_tval13 (class=stonith type=fence_ipmilan)<o:p></o:p></p>
<p class="MsoNormal"> Attributes: ipaddr=X.X.X.X lanplus=1 login=XXXXX method=onoff passwd=XXXXX pcmk_host_list=tval13 power_wait=20 privlvl=OPERATOR<o:p></o:p></p>
<p class="MsoNormal"> Operations: monitor interval=15m (fence_tval13-monitor-interval-15m)<o:p></o:p></p>
<p class="MsoNormal"> start interval=0s timeout=125s (fence_tval13-start-interval-0s)<o:p></o:p></p>
<p class="MsoNormal">Resource: fence_tval14 (class=stonith type=fence_ipmilan)<o:p></o:p></p>
<p class="MsoNormal"> Attributes: ipaddr=Y.Y.Y.Y lanplus=1 login= YYYYY method=onoff passwd=YYYYY pcmk_host_list=tval14 power_wait=20 privlvl=OPERATOR<o:p></o:p></p>
<p class="MsoNormal"> Operations: monitor interval=15m (fence_tval14-monitor-interval-15m)<o:p></o:p></p>
<p class="MsoNormal"> start interval=0s timeout=125s (fence_tval14-start-interval-0s)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks<o:p></o:p></p>
<p class="MsoNormal">Robert<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p style="font-family: arial, sans-serif; font-size: 8pt; color: #6A737B">CONFIDENTIALITY NOTICE This message and any included attachments are from Cerner Corporation and are intended only for the addressee. The information contained in this message is confidential
and may constitute inside or non-public information under international, federal, or state securities laws. Unauthorized forwarding, printing, copying, distribution, or use of such information is strictly prohibited and may be unlawful. If you are not the
addressee, please promptly delete this message and notify the sender of the delivery error by e-mail or you may call Cerner's corporate offices in Kansas City, Missouri, U.S.A at (+1) (816)221-1024.</p>
</div>
</body>
</html>