Bug 1374916

Summary: Ceph installation fails if RHEL is configured in FIPS mode
Product: Red Hat Ceph Storage Reporter: Terry Bowling <tbowling>
Component: CalamariAssignee: Boris Ranto <branto>
Calamari sub component: Back-end QA Contact: ceph-qe-bugs <ceph-qe-bugs>
Status: CLOSED CURRENTRELEASE Docs Contact:
Severity: high    
Priority: unspecified CC: adeza, aschoen, branto, ceph-eng-bugs, flucifre, gmeno, hnallurv, kdreyer, tpetr
Version: 1.3.2   
Target Milestone: rc   
Target Release: 3.1   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-08-02 19:04:21 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
error logs of installation none

Description Terry Bowling 2016-09-10 11:04:18 UTC 
Created attachment 1199757 [details]
error logs of installation

Description of problem:

Error when installing Ceph 1.3 [ERROR] (OperationalError) FATAL: password authentication failed for user "calamari"

Version-Release number of selected component (if applicable):


How reproducible:

Clean install of RHEL 7.2 with FIPS mode enabled.


Steps to Reproduce:
1.  Enable FIPS
https://access.redhat.com/solutions/137833

2.  Install instructions from here: https://access.redhat.com/documentation/en/red-hat-ceph-storage/1.3/single/installation-guide-for-rhel-x86-64/. Here is the error message we are getting:


Actual results:

# sudo calamari-ctl initialize
[INFO] Loading configuration..
[INFO] Starting/enabling salt...
[INFO] Starting/enabling postgres...
[ERROR] (OperationalError) FATAL:  password authentication failed for user "calamari"
 None None
[ERROR] We are sorry, an unexpected error occurred.  Debugging information has
been written to a file at '/tmp/2016-08-30_1620.txt', please include this when seeking technical
support.

/tmp/2016-08-30_1620.txt is attached.


Expected results:
Install to complete succesfully.

Additional info:
Comment 4 Christina Meno 2016-09-20 19:38:44 UTC 
The attached logs suggest that the problem is related to https://access.redhat.com/articles/2548661

the problem is happening some time after 
https://github.com/ceph/calamari/blob/1.3/cthulhu/cthulhu/calamari_ctl.py#L219
Comment 7 Christina Meno 2017-04-04 17:45:37 UTC 
Boris,

Would you please see what we can do about this issue?
Comment 8 Boris Ranto 2017-04-05 11:02:00 UTC 
I have retested with the latest calamari (2.2) and it worked fine for me.

There might be several things that come to mind that could fix this:

- we switched a cipher and so we are no longer seeing this issue
- one of the underlying libraries got fixed (switched its defaults) and so we are no longer seeing this issue

We can nominate this as a Test Only bz for 2.3.


btw: I have had much more problems with ceph itself in FIPS mode -- ceph cli did not work because fips prevented it from reading the client config file, osd did not get up & in, ...
Comment 11 Boris Ranto 2017-08-02 19:04:21 UTC 
We don't ship calamari in 3.x. Also, this was already fixed in 2.x and was supposed to be a test only bugzilla -> closing.