<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Thank you Tomas,</p>
<p>The article (<a moz-do-not-send="true"
href="https://access.redhat.com/articles/1396123">here</a>) at
RedHat tells to remove the tokens folder and re-authenticate. As I
found no folder I asked, but I indeed have a known-hosts file
instead. If it does not need re-authentication (Pacemaker 2.0.5-2)
that's fine.</p>
<p>Regards<br>
</p>
<div class="moz-cite-prefix">Le 14/06/2023 à 18:24, Tomas Jelinek a
écrit :<br>
</div>
<blockquote type="cite"
cite="mid:4cdb3d69-c3c0-aa4c-860c-d348525e2a83@redhat.com">Hi
Jérôme,
<br>
<br>
Assuming you are asking about changing 'hacluster' password and
its impact to pcs authentication, the answer is that there is no
impact and you don't need to re-authenticate your nodes. If you
have no tokens or known-hosts in /var/lib/pcsd, then your nodes
are not authenticated to begin with, anyway.
<br>
<br>
To re-authenticate pcs on your cluster nodes, run 'pcs cluster
auth'. This will authenticate all nodes in the local cluster.
Alternatively, you can use 'pcs host auth' command, which allows
you to specify nodes manually. None of these commands have impact
on resources running in the cluster.
<br>
<br>
If you are using pcs web UI, you need to use new passwords when
logging in, obviously.
<br>
<br>
Regards,
<br>
Tomas
<br>
<br>
<br>
Dne 13. 06. 23 v 11:43 Jérôme BECOT napsal(a):
<br>
<blockquote type="cite">Hello,
<br>
<br>
On a running cluster, if I want to change the users password on
all nodes, would I need to re-authenticate the nodes to
correctly apply this change in Pacemaker ? How to gently
re-authenticate on Debian ? Would this need a maintenance ?
<br>
<br>
I found this link: <a class="moz-txt-link-freetext" href="https://access.redhat.com/articles/1396123">https://access.redhat.com/articles/1396123</a>
<br>
<br>
But I have no tokens in /var/lib/pcsd on my nodes
<br>
<br>
Thank you
<br>
<br>
-- <br>
*Jérôme BECOT*<a class="moz-txt-link-rfc2396E" href="https://www.deveryware.com"><https://www.deveryware.com></a>
<br>
<br>
_______________________________________________
<br>
Manage your subscription:
<br>
<a class="moz-txt-link-freetext" href="https://lists.clusterlabs.org/mailman/listinfo/users">https://lists.clusterlabs.org/mailman/listinfo/users</a>
<br>
<br>
ClusterLabs home: <a class="moz-txt-link-freetext" href="https://www.clusterlabs.org/">https://www.clusterlabs.org/</a>
<br>
</blockquote>
<br>
_______________________________________________
<br>
Manage your subscription:
<br>
<a class="moz-txt-link-freetext" href="https://lists.clusterlabs.org/mailman/listinfo/users">https://lists.clusterlabs.org/mailman/listinfo/users</a>
<br>
<br>
ClusterLabs home: <a class="moz-txt-link-freetext" href="https://www.clusterlabs.org/">https://www.clusterlabs.org/</a>
<br>
</blockquote>
<div class="moz-signature">-- <br>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title></title>
<div class="moz-signature"><b><span style="color:#002060">Jérôme
BECOT</span></b> <span style="color:#002060"></span><br>
<span style="color:#002060">Ingénieur DevOps Infrastructure </span><br>
<br>
<span style="color:#002060">Téléphone fixe: </span> <span
style="color:#002060;mso-fareast-language:FR">01 82 28 37 06</span><br>
<span style="color:#002060">Mobile : +33 757 173 193</span><br>
<span style="color:#002060">Deveryware - 43 rue Taitbout - 75009
PARIS</span><br>
<a moz-do-not-send="true" href="https://www.deveryware.com"> <span
style="color:#002060"><span tyle="color:#002060">
https://www.deveryware.com</span></span></a></div>
<div class="moz-signature"> <span
style="color:#002060;mso-fareast-language:FR"></span><br>
<img moz-do-not-send="false"
src="cid:part1.LqY2s4vY.81hiy8z5@deveryware.com"
alt="Deveryware_Logo" width="402" height="107"><br>
<a href="https://www.deveryware.com"> <span
style="font-size:10.0pt;color:#08638F;mso-fareast-language:FR;text-decoration:none"></span></a></div>
</div>
</body>
</html>