Bug 1069618

Summary:	fence_apc does not work with APC AP8965 with SSH
Product:	Red Hat Enterprise Linux 6	Reporter:	Tony Stocker <tony.stocker>
Component:	fence-agents	Assignee:	Marek Grac <mgrac>
Status:	CLOSED ERRATA	QA Contact:	Cluster QE <mspqa-list>
Severity:	high	Docs Contact:
Priority:	high
Version:	6.5	CC:	cluster-maint, fdinitto, jharriga, jherrman, mjuricek, rbalakri, rmccabe, sbradley, slevine
Target Milestone:	rc	Keywords:	ZStream
Target Release:	---
Hardware:	Unspecified
OS:	Linux
Whiteboard:
Fixed In Version:	fence-agents-3.1.5-40.el6	Doc Type:	Bug Fix
Doc Text:	Previously, the fence_apc program was hard-coded with SSH1 connectivity. As a consequence, fence-agents was unable to connect to power distribution units that require SSH2 connectivity. This update introduces the "--ssh-options" option, which makes it possible to specify SSH connectivity options in fence-agents. Thus, all fencing agents that support SSH can now be adjusted to meet the SSH requirements of the fencing device.	Story Points:	---
Clone Of:
Clones:	1092730 1116990 (view as bug list)		Environment:
Last Closed:	2014-10-14 07:49:24 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1055424, 1070297, 1092730, 1116990

Description Tony Stocker 2014-02-25 12:08:07 UTC

Description of problem:
The version of the fence-agents does not work with the newer APC AP8965 PDU strips as these strips seem to require SSH 2 connectivity, despite their GUI interface which seems to indicate that they only support version 1.

Version-Release number of selected component (if applicable):
fence-agents-3.1.5-35.el6_5.3.x86_64

How reproducible:
Attempt to use fence_apc to access PDU

Steps to Reproduce:
1. Use fence_apc with ssh option like so:
fence_apc --ssh --ip=hydra-2-pdu1 --plug=1 --username=apc --password=apc --action=status

Actual results:
Unable to connect/login to fencing device

Expected results:
Status: ON

Additional info:
It appears that the version is hard coded in the fence_apc program, on my copy it is line 232 containing this entry:
options["ssh_options"] = "-1 -c blowfish"
If I modify this entry to be this:
options["ssh_options"] = "-2"
OR simply comment out the line entirely, then the script works as expected and I get the expected result.

Comment 2 Marek Grac 2014-02-26 14:25:13 UTC

Thanks for a report.

Upstream version already has --ssh-options, so this should be an easy fix.

Comment 3 Marek Grac 2014-02-26 14:26:57 UTC

Upstream patch:

https://git.fedorahosted.org/cgit/fence-agents.git/commit/?id=3cc91f4c6e7aec98bd6f4e1dddaa08876ae893d0

Comment 12 errata-xmlrpc 2014-10-14 07:49:24 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2014-1562.html

Comment 13 Red Hat Bugzilla 2023-09-14 02:04:14 UTC

The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days