Bug 1636364

Summary: [ceph-Container] Containerized Ceph installation fails if the host is configured in FIPS mode
Product: [Red Hat Storage] Red Hat Ceph Storage Reporter: subhash <vpoliset>
Component: RADOSAssignee: Josh Durgin <jdurgin>
Status: CLOSED DUPLICATE QA Contact: ceph-qe-bugs <ceph-qe-bugs>
Severity: high Docs Contact:
Priority: unspecified    
Version: 3.2CC: aschoen, ceph-eng-bugs, dzafman, gmeno, hnallurv, jbrier, jcall, kchai, nojha, nthomas, sankarshan, shan, vpoliset
Target Milestone: rcKeywords: Reopened
Target Release: 3.2   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-10-22 14:58:56 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Comment 2 Sébastien Han 2018-10-10 16:09:02 UTC
Can we access the env that this issue?
Thanks

Comment 5 Sébastien Han 2018-10-19 08:06:07 UTC
Initial observations:

debug 2018-10-12 03:44:29.414833 7f44f1ad3700  0 mon.magna021@0(probing) e0 ms_verify_authorizer cephx enabled, but no authorizer (required for mon)
debug 2018-10-12 03:44:29.414851 7f44f1ad3700  0 -- 10.8.128.21:6789/0 >> 10.8.128.28:6789/0 conn(0x559bd7da2000 :6789 s=STATE_ACCEPTING_WAIT_CONNECT_MSG_AUTH pgs=0 cs=0 l=0).handle_connect_msg: got bad authorizer
debug 2018-10-12 03:44:29.414908 7f44f12d2700  0 -- 10.8.128.21:6789/0 >> 10.8.128.28:6789/0 conn(0x559bd5e74000 :-1 s=STATE_CONNECTING_WAIT_CONNECT_REPLY_AUTH pgs=0 cs=0 l=0).handle_connect_reply connect got BADAUTHORIZER
debug 2018-10-12 03:44:29.415065 7f44f1ad3700  0 mon.magna021@0(probing) e0 ms_verify_authorizer cephx enabled, but no authorizer (required for mon)
debug 2018-10-12 03:44:29.415077 7f44f1ad3700  0 -- 10.8.128.21:6789/0 >> 10.8.128.28:6789/0 conn(0x559bd7da2000 :6789 s=STATE_ACCEPTING_WAIT_CONNECT_MSG_AUTH pgs=0 cs=0 l=0).handle_connect_msg: got bad authorizer
debug 2018-10-12 03:44:29.814033 7f44f72de700  0 mon.magna021@0(probing).data_health(0) update_stats avail 94% total 917GiB, used 4.58GiB, avail 866GiB
debug 2018-10-12 03:44:42.177920 7f44f1ad3700  0 mon.magna021@0(probing) e0 ms_verify_authorizer cephx enabled, but no authorizer (required for mon)
debug 2018-10-12 03:44:42.177934 7f44f1ad3700  0 -- 10.8.128.21:6789/0 >> 10.8.128.29:6789/0 conn(0x559bd6196800 :6789 s=STATE_ACCEPTING_WAIT_CONNECT_MSG_AUTH pgs=0 cs=0 l=0).handle_connect_msg: got bad authorizer
debug 2018-10-12 03:44:42.178217 7f44f1ad3700  0 mon.magna021@0(probing) e0 ms_verify_authorizer cephx enabled, but no authorizer (required for mon)
debug 2018-10-12 03:44:42.178229 7f44f1ad3700  0 -- 10.8.128.21:6789/0 >> 10.8.128.29:6789/0 conn(0x559bd6196800 :6789 s=STATE_ACCEPTING_WAIT_CONNECT_MSG_AUTH pgs=0 cs=0 l=0).handle_connect_msg: got bad authorizer
debug 2018-10-12 03:44:42.762991 7f44f1ad3700 -1 cephx: cephx_build_service_ticket_blob failed with error invalid key
debug 2018-10-12 03:44:42.763001 7f44f1ad3700  0 mon.magna021@0(probing) e0 ms_get_authorizer failed to build service ticket
debug 2018-10-12 03:44:42.763138 7f44f1ad3700  0 -- 10.8.128.21:6789/0 >> 10.8.128.29:6789/0 conn(0x559bd5e75800 :-1 s=STATE_CONNECTING_WAIT_CONNECT_REPLY_AUTH pgs=0 cs=0 l=0).handle_connect_reply connect got BADAUTHORIZER
debug 2018-10-12 03:44:42.763186 7f44f1ad3700 -1 cephx: cephx_build_service_ticket_blob failed with error invalid key
debug 2018-10-12 03:44:42.763188 7f44f1ad3700  0 mon.magna021@0(probing) e0 ms_get_authorizer failed to build service ticket
debug 2018-10-12 03:44:42.763214 7f44f1ad3700 -1 cephx: cephx_build_service_ticket_blob failed with error invalid key
debug 2018-10-12 03:44:42.763216 7f44f1ad3700  0 mon.magna021@0(probing) e0 ms_get_authorizer failed to build service ticket
debug 2018-10-12 03:44:42.763345 7f44f1ad3700  0 -- 10.8.128.21:6789/0 >> 10.8.128.29:6789/0 conn(0x559bd5e75800 :-1 s=STATE_CONNECTING_WAIT_CONNECT_REPLY_AUTH pgs=0 cs=0 l=0).handle_connect_reply connect got BADAUTHORIZER
debug 2018-10-12 03:44:44.415733 7f44f12d2700 -1 cephx: cephx_build_service_ticket_blob failed with error invalid key
debug 2018-10-12 03:44:44.415744 7f44f12d2700  0 mon.magna021@0(probing) e0 ms_get_authorizer failed to build service ticket
debug 2018-10-12 03:44:44.415890 7f44f12d2700  0 -- 10.8.128.21:6789/0 >> 10.8.128.28:6789/0 conn(0x559bd5e74000 :-1 s=STATE_CONNECTING_WAIT_CONNECT_REPLY_AUTH pgs=0 cs=0 l=0).handle_connect_reply connect got BADAUTHORIZER
debug 2018-10-12 03:44:44.415957 7f44f12d2700 -1 cephx: cephx_build_service_ticket_blob failed with error invalid key
debug 2018-10-12 03:44:44.415967 7f44f1ad3700  0 mon.magna021@0(probing) e0 ms_verify_authorizer cephx enabled, but no authorizer (required for mon)
debug 2018-10-12 03:44:44.415971 7f44f12d2700  0 mon.magna021@0(probing) e0 ms_get_authorizer failed to build service ticket


The mons are still probing and the transport layer does not seem to work.
We need to escalate that to the rados core team.

This does not appear to be a ceph-ansible bug and our team cannot assist further.
Thanks.

Comment 6 Sébastien Han 2018-10-19 15:16:11 UTC
After discussion, this is not a ceph-ansible bug, closing this.

Comment 8 Josh Durgin 2018-10-22 14:58:56 UTC

*** This bug has been marked as a duplicate of bug 1636251 ***