Bug 1477563

By the way, when having no "script_user" line, the message

Aug  2 13:50:08 tux1 Keepalived[6650]: Unable to resolve default script username 'keepalived_script' - ignoring

is still confusing or misleading to administrators, because it makes them
assuming this is a configuration mistake - which is not, just bad logging.

Cross-filed ticket 01903060 on the Red Hat customer portal.

Please attached a scrubbed config file when reporting bugs such as this one.

https://github.com/acassen/keepalived/commit/1c5bfa293a0827fbfb7d70e499129676fbdf1d09

Sorry, here we go (IMHO our situation is slighly different than your
referenced commit/fix):

--- snipp ---
global_defs {
    router_id tux1
    enable_script_security  # Keepalived yells about scripts?!
#    script_user root root  # Keepalived yells anyway?! RHBZ#1477563
    vrrp_iptables  # Empty to avoid iptables rules
#    vrrp_ipset  # Empty to avoid ipsets; does not work, RHBZ#1477572
}

vrrp_sync_group VRRP_GROUP {
    group {
        VRRP_INSTANCE
    }
    notify_master "/etc/conntrackd/primary-backup.sh primary"
    notify_backup "/etc/conntrackd/primary-backup.sh backup"
    notify_fault "/etc/conntrackd/primary-backup.sh fault"
}

vrrp_instance VRRP_INSTANCE {
    interface em2
    state BACKUP
    virtual_router_id 51
    priority 150
    track_interface {
        bond0
        bond1
    }
    native_ipv6
    unicast_src_ip 2001:db8::1
    unicast_peer {
        2001:db8::2
    }
    virtual_ipaddress {
        192.0.2.1/30 dev bond1.1000
        fe80::1/64 dev bond1.1000
        2001:db8:0:1000::1/64 dev bond1.1000
        192.0.2.250/29 dev bond0
        2001:db8:0:4003::2/64 dev bond0
    }
    virtual_routes {
        blackhole 192.0.2.0/24
        blackhole 2001:db8::/32
    }
    advert_int 1
    nopreempt
    garp_master_delay 0
    dont_track_primary
}
--- snapp ---

You posted a confif but you failed to post any logs and/or error messages, so I have no idea what the problem is.

The following log line is always thrown, no matter if "script_user" is
there or not:

Aug  2 13:46:55 tux1 Keepalived[6580]: Unable to resolve default script username 'keepalived_script' - ignoring

(In reply to Robert Scheck from comment #9)
> The following log line is always thrown, no matter if "script_user" is
> there or not:
> 
> Aug  2 13:46:55 tux1 Keepalived[6580]: Unable to resolve default script
> username 'keepalived_script' - ignoring

Sorry, I'm not sure how you can make this comment when the build it not yet available. What exactly were you testing?

(In reply to Ryan O'Hara from comment #10)
> Sorry, I'm not sure how you can make this comment when the build it not yet
> available. What exactly were you testing?

Sorry, misunderstanding. I indeed can only use keepalived-1.3.5-1.el7.x86_64
and report results from that. But I'm happy to test a newer package, if e.g.
GSS provides one.

*** Bug 1564047 has been marked as a duplicate of this bug. ***

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2018:0972