Description of problem: When you set allow_kill to 0, the qdiskd master no longer asks CMAN to evict/fence the presumed-dead host. However, it will still write an eviction notice to disk. If the presumed-dead host reads in the eviction notice, it will reboot itself. If storage is flaky (for example, exhibiting long delays for I/O), users may wish to disable all qdiskd failure-recovery actions in order to sabilize the cluster - this includes both CMAN *and* disk eviction. Today, the former is possible, but the latter is not. We need the ability to disable disk-based eviction.
There are two possibilities: 1) Simply do not write eviction notices, or 2) Do not act on eviction notices by reboot -- instead, restart qdiskd with a new incarnation #.
*** This bug has been marked as a duplicate of bug 602731 ***