[SOLVED] ERROR: 401 permission denied - invalid PMG ticket

[SCM]

Hi,Team,When I created the cluster, I couldn’t synchronize, this kind of problem occurred, please help.



Nov 20 17:21:45 pmg1 pmgmirror[15919]: database sync 'pmg2' failed - DBI connect('dbname=Proxmox_ruledb;host=/run/pmgtunnel;port=2;','root',...) failed: could not connect to server: No such file or directory#012#011Is the server running locally and accepting#012#011connections on Unix domain socket "/run/pmgtunnel/.s.PGSQL.2"? at /usr/share/perl5/PMG/DBTools.pm line 68.

# pmgversion -v
proxmox-mailgateway: 6.2-1 (API: 6.2-3/dd58a339, running kernel: 5.4.30-1-pve)
pmg-api: 6.2-3
pmg-gui: 2.2-1

 

[Stoiko Ivanov]

Please post the output of:
`pmgcm status`
from both nodes.

 

[SCM]

Please post the output of:
`pmgcm status`
from both nodes.

I used xxxx instead of the IP address, please know.

root@pmg1:/var/log# pmgcm status
NAME(CID)--------------IPADDRESS----ROLE-STATE---------UPTIME---LOAD----MEM---DISK
pmg2(2) xxxx node ERROR: 401 permission denied - invalid PMG ticket - - -% -%
pmg1(1) xxxx master S 25 days 01:34 0.01 66% 2%

root@pmg2:~# pmgcm status
NAME(CID)--------------IPADDRESS----ROLE-STATE---------UPTIME---LOAD----MEM---DISK
pmg2(2) xxxx node S 00:00 0.77 58% 4%
pmg1(1) xxxx master ERROR: 401 permission denied - invalid PMG ticket - - -% -%

 

[dcsapak]

do both nodes have the same time? (ntp) synchronized?

 

[SCM]

do both nodes have the same time? (ntp) synchronized?

hello,dcsapak,
root@pmg1:/var/log# date
Sat 21 Nov 2020 09:47:11 AM CST
root@pmg2:~# date
Sat 21 Nov 2020 09:47:12 AM CST

 

[SCM]

do both nodes have the same time? (ntp) synchronized?

I think I found the reason. I changed the port of the ssh service, and I don’t have root remote authority. I can modify it back, but can you tell me whether this synchronization depends on which service? If I want to change the ssh port, Which service should be restarted to take effect instead of restarting the server, thank you.

 

[dcsapak]

the cluster sync depends on ssh to be reachable... if you change the sshd port, you also have to change the default ssh port for the client (/etc/ssh/ssh_config)