Hide Forgot
> Description of problem: If cman is not installed on a RHEL6 system together with pcs, the pcs authentication will never really succeed although it reports otherwise. > Version-Release number of selected component (if applicable): pcs-0.9.155-1.el6.x86_64 > How reproducible: Always > Steps to Reproduce: 1. install the pcs package without installing cman 2. start the pcsd daemon 3. authenticate locally or remotely 'pcs cluster auth <address>' 4. verify authentication with 'pcs status pcsd <address>' > Actual results: [root@virt-011 ~]# pcs status pcsd virt-011 virt-011: Unable to authenticate > Expected results: [root@virt-011 ~]# pcs status pcsd virt-011 virt-011: Authorized > Additional info: [root@virt-011 ~]# ll /var/lib/pcsd/tokens ls: cannot access /var/lib/pcsd/tokens: No such file or directory [root@virt-011 ~]# pcs cluster auth virt-011 -uhacluster Password: virt-011: Authorized [root@virt-011 ~]# pcs status pcsd virt-011 virt-011: Unable to authenticate [root@virt-011 ~]# ll /var/lib/pcsd/tokens ls: cannot access /var/lib/pcsd/tokens: No such file or directory [root@virt-011 ~]# pcs cluster auth virt-011 -uhacluster --debug Password: Running: /usr/bin/ruby -I/usr/lib/pcsd/ /usr/lib/pcsd/pcsd-cli.rb auth --Debug Input Start-- {"username": "hacluster", "local": false, "nodes": ["virt-011"], "password": "password", "force": false} --Debug Input End-- Return Value: 0 --Debug Output Start-- { "status": "ok", "data": { "auth_responses": { "virt-011": { "token": "6a98ec2e-fd17-431d-8e17-9353e86839ed", "status": "ok" } }, "sync_responses": { }, "sync_successful": true, "sync_nodes_err": [ ] }, "log": [ "I, [2016-11-14T16:14:14.816115 #27063] INFO -- : PCSD Debugging enabled\n", "D, [2016-11-14T16:14:14.816215 #27063] DEBUG -- : Detected RHEL 6\n", "I, [2016-11-14T16:14:14.816274 #27063] INFO -- : Running: /usr/sbin/corosync-objctl cluster\n", "I, [2016-11-14T16:14:14.816333 #27063] INFO -- : CIB USER: hacluster, groups: \n", "D, [2016-11-14T16:14:14.819064 #27063] DEBUG -- : []\n", "D, [2016-11-14T16:14:14.819137 #27063] DEBUG -- : [\"Failed to initialize the objdb API. Error 6\\n\"]\n", "D, [2016-11-14T16:14:14.819199 #27063] DEBUG -- : Duration: 0.002741s\n", "I, [2016-11-14T16:14:14.819305 #27063] INFO -- : Return Value: 1\n", "I, [2016-11-14T16:14:14.823707 #27063] INFO -- : SRWT Node: virt-011 Request: check_auth\n", "E, [2016-11-14T16:14:14.823847 #27063] ERROR -- : Unable to connect to node virt-011, no token available\n", "I, [2016-11-14T16:14:15.098971 #27063] INFO -- : Running: /usr/sbin/pcs status nodes corosync\n", "I, [2016-11-14T16:14:15.099117 #27063] INFO -- : CIB USER: hacluster, groups: \n", "D, [2016-11-14T16:14:15.598652 #27063] DEBUG -- : [\"No such file or directory\\n\"]\n", "D, [2016-11-14T16:14:15.598850 #27063] DEBUG -- : [\"Error: unable to locate command: /usr/sbin/cman_tool\\n\"]\n", "D, [2016-11-14T16:14:15.598909 #27063] DEBUG -- : Duration: 0.499524s\n", "I, [2016-11-14T16:14:15.599080 #27063] INFO -- : Return Value: 1\n", "I, [2016-11-14T16:14:15.599677 #27063] INFO -- : Sending config 'tokens' version 1 2b271c6bc3fa4036869556c5ca2f33e485afffa7 to nodes: \n" ] } --Debug Output End-- virt-011: Authorized
cman_tool is also required for reloading cluster.conf and stopping cluster nodes.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHBA-2017-0707.html