<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-15">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 1/15/20 12:31 PM, Raffaele
Pantaleoni wrote:<br>
</div>
<blockquote type="cite"
cite="mid:b7e7c750-ad5f-ddc3-b88c-f8f5223c8034@seko.com">
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-15">
<p><font face="Arial">Hello,</font></p>
<p><font face="Arial">I'm trying to setup a cluster made up by
three servers.</font></p>
<p><font face="Arial">Two of them runs on Debian 10 and they are
already part of the cluster and marked online.</font></p>
<p><font face="Arial">I can't join the third machine running on
Debian 9.</font></p>
<p><font face="Arial">I can see the following error when trying to
authenticate the third machine:</font></p>
<p><font face="Arial">pcs host auth vracktenjin<br>
</font></p>
<p><font face="Arial">Username: hacluster<br>
Password:<br>
Running: /usr/bin/ruby -I/usr/share/pcsd/
/usr/share/pcsd/pcsd-cli.rb auth<br>
Environment:<br>
HOME=/root<br>
LANG=en_US.UTF-8<br>
LC_ALL=C<br>
LOGNAME=root<br>
MAIL=/var/mail/root<br>
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin<br>
PCSD_DEBUG=true<br>
PCSD_NETWORK_TIMEOUT=60<br>
PWD=/root<br>
SHELL=/bin/bash<br>
SHLVL=1<br>
SSH_CLIENT=xx.xx.xx.xx 1612 22<br>
SSH_CONNECTION=xx.xx.xx.xx 1612 46.105.107.214 22<br>
SSH_TTY=/dev/pts/0<br>
TERM=xterm<br>
USER=root<br>
XDG_RUNTIME_DIR=/run/user/0<br>
XDG_SESSION_CLASS=user<br>
XDG_SESSION_ID=19<br>
XDG_SESSION_TYPE=tty<br>
_=/usr/sbin/pcs<br>
--Debug Input Start--<br>
{"nodes": {"vracktenjin": {"dest_list": [{"addr":
"vracktenjin", "port": 2224}], "username": "hacluster",
"password": "INE -> S_IDLE | input=I_TE_SUCCESS
cause=C_FSA_INTERNAL origin=notify_crmd"}}}<br>
--Debug Input End--<br>
<br>
<br>
Finished running: /usr/bin/ruby -I/usr/share/pcsd/
/usr/share/pcsd/pcsd-cli.rb auth<br>
Return value: 0<br>
--Debug Stdout Start--<br>
{<br>
"status": "ok",<br>
"data": {<br>
"auth_responses": {<br>
"vracktenjin": {<br>
"status": "noresponse"<br>
}<br>
},<br>
"sync_successful": true,<br>
"sync_nodes_err": [<br>
<br>
],<br>
"sync_responses": {<br>
}<br>
},<br>
"log": [<br>
"I, [2020-01-15T11:22:20.649294 #17621] INFO -- : PCSD
Debugging enabled\n",<br>
"D, [2020-01-15T11:22:20.649320 #17621] DEBUG -- :
Detected systemd is in use\n",<br>
"I, [2020-01-15T11:22:20.699475 #17621] INFO -- :
Connecting to: <a class="moz-txt-link-freetext"
href="https://vracktenjin:2224/remote/auth\n"
moz-do-not-send="true">https://vracktenjin:2224/remote/auth\n</a>",<br>
"I, [2020-01-15T11:22:20.704920 #17621] INFO -- : No
response from: vracktenjin request: auth, error:
ssl_connect_error\n"<br>
]<br>
}<br>
<br>
--Debug Stdout End--<br>
--Debug Stderr Start--<br>
<br>
--Debug Stderr End--<br>
<br>
Error: Unable to communicate with vracktenjin<br>
<br>
</font></p>
<p><font face="Arial">And the follwing error on the target machine
pcsd.log file:<br>
</font></p>
<p><font face="Arial">ERROR OpenSSL::SSL::SSLError: SSL_accept
returned=1 errno=0 state=error: sslv3 alert handshake failure<br>
/usr/lib/ruby/2.3.0/openssl/ssl.rb:404:in `accept'<br>
</font></p>
<p>Debian 10 versions:</p>
<p> corosync 3.0.1</p>
<p> pacemaker 2.0.1</p>
<p>Debian 9 versions:</p>
<p> corosync 2.4.2</p>
<p> pacemaker 1.1.6<br>
</p>
<p>Any hints?</p>
</blockquote>
What you are seeing looks like issues of different versions<br>
of pcsd connecting.<br>
But even if that would work this version mix wouldn't<br>
make you happy.<br>
Left alone corosync 2 & 3 afaik aren't wire-compatible<br>
even if you are using udpu on 3 (knet recommended).<br>
In general key-requirements have been raised with<br>
pacemaker 2 and, and, ....<br>
Only place where you might be able to mix these<br>
versions is if you are e.g. using Debian 10 for the<br>
cluster-nodes and Debian 9 on a remote node.<br>
<br>
Regards,<br>
Klaus<br>
<blockquote type="cite"
cite="mid:b7e7c750-ad5f-ddc3-b88c-f8f5223c8034@seko.com">
<p>(I previously setup a six machines test plant with no errors
like this one. All those machines are running on Debian 9)<br>
</p>
<p>Thank you!</p>
<p>Raffaele Pantaleoni<br>
</p>
<div class="moz-signature"><font face="Arial">
<p class="MsoNormal"><span
style="font-size:8.0pt;color:#1F497D"><em><br>
</em><o:p></o:p></span> </p>
</font><font face="Arial"> </font></div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Manage your subscription:
<a class="moz-txt-link-freetext" href="https://lists.clusterlabs.org/mailman/listinfo/users">https://lists.clusterlabs.org/mailman/listinfo/users</a>
ClusterLabs home: <a class="moz-txt-link-freetext" href="https://www.clusterlabs.org/">https://www.clusterlabs.org/</a></pre>
</blockquote>
<br>
</body>
</html>