Hide Forgot
Lon, even the *main* bug in corosync is fixed, there is still one issue with rgmanager/resource script/... (please reassign to component you feel it should be). Problem is, that rpc.statd calls /usr/share/cluster/nfsserver.sh with parameter add-client/del-client. This calls ocf_log and clulog is trying to do IPC connection with corosync, but not as a root user account, but as a *rpcuser*. This may be problem, because such connection is prohibited as long as rpcuser doesn't exists in corosync uid/gid entries. In other words, users may not get message if they want it. My proposed solution is one of following: - force clulog to always run as some user which is allowed for corosync ipc - don't use clulog for add/del-client - force cman to always add rpcuser to corosync uid/gid entries (but keep in mind, that this may be security problem... maybe) - document rpc.statd behavior and recommendation to add rpcuser to corosync uid/gid entries.
Created attachment 566156 [details] Fix for resource-agents
I confirm that the fix works. Thanks a lot
Technical note added. If any revisions are required, please edit the "Technical Notes" field accordingly. All revisions will be proofread by the Engineering Content Services team. New Contents: No documentation needed
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2012-0947.html