[gpfsug-discuss] Authorized Key Messages
Felipe Knop
knop at us.ibm.com
Fri Jan 13 23:48:37 GMT 2017
"! ccrEnabled 0" does indicate that CCR is disabled on the (server)
cluster. In fact, instances of this
'/var/mmfs/ssl/authorized_ccr_keys' does not exist
message have been seen in clusters where CCR was disabled. It's just
somewhat puzzling that the error message is appears in 4.2.1 .
Felipe
----
Felipe Knop knop at us.ibm.com
GPFS Development and Security
IBM Systems
IBM Building 008
2455 South Rd, Poughkeepsie, NY 12601
(845) 433-9314 T/L 293-9314
From: "J. Eric Wonderley" <eric.wonderley at vt.edu>
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Date: 01/13/2017 06:30 PM
Subject: Re: [gpfsug-discuss] Authorized Key Messages
Sent by: gpfsug-discuss-bounces at spectrumscale.org
Our intent was to have ccr turned off since all nodes are quorum in the
server cluster:
Considering this:
[root at cl001 ~]# mmfsadm dump config | grep -i ccr
! ccrEnabled 0
ccrMaxChallengeCheckRetries 4
ccr : 0 (cluster configuration repository)
ccr : 1 (cluster configuration repository)
Will this disable ccr?
On Fri, Jan 13, 2017 at 5:58 PM, Felipe Knop <knop at us.ibm.com> wrote:
Brian,
I had to check again whether the fix in question was in 4.2.0.0 (as
opposed to a newer mod release), but confirmed that it seems to be. So
this could be a new or different problem than the one I was thinking
about.
Researching a bit further, I found another potential match (internal
defect number 981469), but that should be fixed in 4.2.1 as well. I have
not seen recent reports of this problem.
Perhaps this could be pursued via a PMR.
Felipe
----
Felipe Knop knop at us.ibm.com
GPFS Development and Security
IBM Systems
IBM Building 008
2455 South Rd, Poughkeepsie, NY 12601
(845) 433-9314 T/L 293-9314
From: Brian Marshall <mimarsh2 at vt.edu>
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Date: 01/13/2017 03:21 PM
Subject: Re: [gpfsug-discuss] Authorized Key Messages
Sent by: gpfsug-discuss-bounces at spectrumscale.org
We are running 4.2.1 (there may be some point fixes we don't have)
Any report of it being in this version?
Brian
On Fri, Jan 13, 2017 at 3:14 PM, Felipe Knop <knop at us.ibm.com> wrote:
Brian,
This seems to match a problem which was fixed in 4.1.1.7 and 4.2.0.0.
Regards,
Felipe
----
Felipe Knop knop at us.ibm.com
GPFS Development and Security
IBM Systems
IBM Building 008
2455 South Rd, Poughkeepsie, NY 12601
(845) 433-9314 T/L 293-9314
From: Brian Marshall <mimarsh2 at vt.edu>
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Date: 01/13/2017 02:50 PM
Subject: [gpfsug-discuss] Authorized Key Messages
Sent by: gpfsug-discuss-bounces at spectrumscale.org
All,
I just saw this message start popping up constantly on one our NSD
Servers.
[N] Auth: '/var/mmfs/ssl/authorized_ccr_keys' does not exist
CCR Auth is disabled on all the NSD Servers.
What other features/checks would look for the ccr keys?
Thanks,
Brian Marshall
Virginia Tech_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20170113/832aab4c/attachment-0002.htm>
More information about the gpfsug-discuss
mailing list