Re: [Linux-HA] pingd authentification

[Jaroslav Libák]

>Jaroslav Libák wrote:
>> > I run pingd like this (from ha.cf):
>> > 
>> > respawn hacluster /usr/lib/heartbeat/pingd -m 1 -d 5s -a pingd_result
>> > 
>> > but then i get cant authentification error in log.
>> > 
>> > if I add this line
>> > apiauth pingd uid=hacluster
>> > 
>> > to ha.cf I cant start heartbeat at all, as it complains about duplicate apiauth for pingd (no other auth for pingd exists so it seems there is a default one)
>> > 
>> > I have to comment out apiauth line and run pingd as root
>>> > 
>> > respawn root /usr/lib/heartbeat/pingd -m 1 -d 5s -a pingd_result
>> > 
>> > I don't want the clone solution as then I have to write my own OCF script which is not provided for pingd.
>> > Heartbeat is 2.0.7.
>
>You don't have the "/usr/lib/ocf/resource.d/heartbeat/pingd" script in
>your installation?

No I don't, its missing. Heartbeat was complaining about it being missing when I attempted to create a clone with pingd. I installed heartbeat from debian package 2.0.7-1.1

>> > 
>> > How do I get pingd running under hacluster?
>> > What will pingd_result be if pingd isn't getting anything back? Will it be N/A or 0? This is not mentioned in the pingd tutorial as is >very important.
>> > 
>
>I also had problems running pingd with uid=hacluster, but with uid=root
>and as a clone resource it was working. The result will be 0 if there is
>no ping host available. This is my working clone config, and of course
>you need to define ping hosts in ha.cf ... as described in the wiki:
>
><clone id="pingd">
>         <instance_attributes id="pingd_instance_attrs">
>           <attributes>
>             <nvpair id="pingd-clone_max" name="clone_max" value="3"/>
>             <nvpair id="pingd-clone_node_max" name="clone_node_max"
>value="1"/>
>           </attributes>
>         </instance_attributes>
>         <primitive class="ocf" type="pingd" provider="heartbeat"
>id="pingd-child">
>           <instance_attributes id="pingd-child_instance_attrs">
>             <attributes>
>               <nvpair id="pingd-dampen" name="dampen" value="5s"/>
>               <nvpair id="pingd-multiplier" name="multiplier"
>value="1000"/>
>               <nvpair id="pingd-pidfile" name="pidfile"
>value="/var/run/pingd.pid"/>
>               <nvpair id="pingd-user" name="user" value="root"/>
>             </attributes>
>           </instance_attributes>
>           <operations>
>             <op name="monitor" id="pingd-monitor" interval="10s"
>timeout="20s"/>
>             <op id="pingd-start" name="start" prereq="nothing"/>
>             <op id="pingd-stop" name="stop" on_fail="ignore"/>
>           </operations>
>         </primitive>
>       </clone>
>
>... and an example location constraint:
>
><rsc_location rsc="gr_MySQL_01" id="reach_DEFAULTGW_02">
>         <rule score_attribute="pingd" boolean_op="and" id="pingable_02">
>           <expression id="attr_pingd_defined_02" attribute="pingd"
>operation="defined"/>
>         </rule>
 >     </rsc_location>
>
>
>Regards,
>Andi

How can that resource location constraint work? You are using boolean "and" operator and supply only 1 expression.

_______________________________________________
Linux-HA mailing list
Linux-HA at lists.linux-ha.org
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems