Bug 1328870 - pcs+service: `pcs cluster auth` fails immediately after `service pcsd start`, succeeds few seconds later
Summary: pcs+service: `pcs cluster auth` fails immediately after `service pcsd start`,...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: pcs
Version: 6.8
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: rc
: ---
Assignee: Tomas Jelinek
QA Contact: cluster-qe@redhat.com
URL:
Whiteboard:
Depends On: 968877
Blocks: 1428392
TreeView+ depends on / blocked
 
Reported: 2016-04-20 12:58 UTC by Miroslav Lisik
Modified: 2017-03-21 11:03 UTC (History)
8 users (show)

Fixed In Version: pcs-0.9.154-1.el6
Doc Type: Bug Fix
Doc Text:
Cause: User tries to communicate with pcsd right after it has been started. Consequence: Unable to connect to pcsd instance. Fix: Make pcsd init script wait for pcsd to fully start. Result: It is possible to connect to pcsd right after start command finishes.
Clone Of: 968877
: 1428392 (view as bug list)
Environment:
Last Closed: 2017-03-21 11:03:38 UTC
Target Upstream Version:


Attachments (Terms of Use)
proposed fix (701 bytes, patch)
2016-09-09 14:37 UTC, Tomas Jelinek
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2017:0707 0 normal SHIPPED_LIVE pcs bug fix update 2017-03-21 12:40:33 UTC

Description Miroslav Lisik 2016-04-20 12:58:24 UTC
+++ This bug was initially created as a clone of Bug #968877 +++

Description of problem:
`pcs cluster auth` fails with "Unable to communicate with $node" when run soon after the pcsd service is started on all nodes. With little delay it works fine.

Version-Release number of selected component (if applicable):
pcs-0.9.148-7.el6

How reproducible:
always

Steps to Reproduce:

1. Start pcsd service on all nodes.

2. On one node stop pcsd service and delete files that regards pcsd authorization.
[root@virt-254 ~]# service pcsd stop && rm -rf /var/lib/pcsd/{pcs_users.conf,tokens}

3. On chosen node start pcsd service and run pcs authorization.
[root@virt-254 ~]# service pcsd start && pcs cluster auth -u hacluster -p password virt-{254,256,259}
Starting pcsd: [  OK  ]
virt-259: Authorized
virt-256: Authorized
Error: Unable to communicate with virt-254
Error: Unable to synchronize and save tokens on nodes: virt-254. Are they authorized?
[root@virt-254 ~]# echo $?
1
 
Actual results:
pcs cluster auth failing with:
Error: Unable to communicate with virt-254

Expected results:
pcs cluster auth should pass.

Additional info:
The subsequent auth call pass:

[root@virt-254 ~]# pcs cluster auth -u hacluster -p password virt-{254,256,259}
virt-259: Authorized
virt-256: Authorized
virt-254: Authorized

Comment 2 Tomas Jelinek 2016-09-09 14:37:59 UTC
Created attachment 1199497 [details]
proposed fix

Test:

[root@rh68-node1:~]# service pcsd stop
Stopping pcsd:                                             [  OK  ]
[root@rh68-node1:~]# service pcsd start && pcs cluster auth rh68-node1 rh68-node2 rh68-node3 -u hacluster -p beslo --force
Starting pcsd:                                             [  OK  ]
rh68-node1: Authorized
rh68-node3: Authorized
rh68-node2: Authorized
[root@rh68-node1:~]# echo $?
0

Comment 3 Ivan Devat 2016-10-19 07:08:08 UTC
Before Fix:

[vm-rhel67-1 ~] $ rpm -q pcs
pcs-0.9.148-7.el6_8.1.x86_64
[vm-rhel67-1 ~] $ service pcsd stop
Stopping pcsd:                                             [  OK  ]
[vm-rhel67-1 ~] $ service pcsd start && pcs cluster auth vm-rhel67-1 vm-rhel67-2 -u hacluster -p hh --force
Starting pcsd:                                             [  OK  ]
Error: Unable to communicate with vm-rhel67-1
vm-rhel67-2: Authorized


After Fix:

[vm-rhel67-1 ~] $ rpm -q pcs
pcs-0.9.154-1.el6.x86_64
[vm-rhel67-1 ~] $ service pcsd stop
Stopping pcsd:                                             [  OK  ]
[vm-rhel67-1 ~] $ service pcsd start && pcs cluster auth vm-rhel67-1 vm-rhel67-2 -u hacluster -p hh --force
Starting pcsd:                                             [  OK  ]
vm-rhel67-1: Authorized
vm-rhel67-2: Authorized

Comment 7 errata-xmlrpc 2017-03-21 11:03:38 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2017-0707.html


Note You need to log in before you can comment on or make changes to this bug.