Fence HA setup on Intel Modular Server

[fortechitsolutions]

Hi,

I am setting up a 3-node HA ProxVE 2 setup on Intel Modular Server hardware.

I'm attempting to test fencing, as per hints from the setup docs, but get an error back; just curious if anyone recognizes this or could comment what I've done wrong (if obvious?)

--paste--
root@prox1:/etc/pve# fence_intelmodular -l snmpv3user -p RebootTheServer -a 10.82.141.18 -o status -n 3 -v
/usr/bin/snmpget -m '' -Oeqn '10.82.141.18:161' '.1.3.6.1.4.1.343.2.19.1.2.10.202.1.1.6.3'
snmpget: No securityName specified

---end-paste---

Many thanks!


Tim Chipman

 

[udo]

Hi,
don't know such servers, but it's looks like wrong credentials for snmpv3.

Udo

 

[tom]

did you follow the wiki?

http://pve.proxmox.com/wiki/Intel_Modular_Server_HA#Configure_IMS_fence_device

 

[fortechitsolutions]

Hi, yes, I followed the wiki. I'm now trying to just do a single test command line sanity check. Below is what I'm seeing... still seems I have a problem with my syntax I think (?)

root@prox1:/etc/pve# fence_intelmodular -l snmpv3user -p RebootTheServer -a 10.82.141.18 -o status -n 3 -v -d 3 -b SHA

/usr/bin/snmpget -m '' -Oeqn -v '3' -a 'SHA' -A 'RebootTheServer' -u 'snmpv3user' '10.82.141.18:161' '.1.3.6.1.4.1.343.2.19.1.2.10.202.1.1.6.3'

Error in packet
Reason: authorizationError (access denied to that object)

Returned 2: Error in packet
Reason: authorizationError (access denied to that object)

Please use '-h' for usage
root@prox1:/etc/pve#

Note in this case, I've got SNMP v3 configured with the stock user on the intel modular server (snmpv3user) and set a passphrase, "RebootTheServer"


I've also setup the cluster.conf as shown below, which is (I believe) suitable for intel modular server as per HA setup docs in wiki for ProxVE2.X

root@prox1:/etc/pve# more cluster.conf

<?xml version="1.0"?>
<cluster config_version="6" name="CLIENTSITE">
<cman keyfile="/var/lib/pve-cluster/corosync.authkey"/>
<fencedevices>
<fencedevice agent="fence_intelmodular" ipaddr="10.82.141.18" login="snmpv3user" name="ims" passwd="RebootTheServer" snmp_auth_prot="SHA" snmp_sec_level="authNoPriv" snmp_version="3"/>
</fencedevices>
<clusternodes>
<clusternode name="prox1" nodeid="1" votes="1">
<fence>
<method name="1">
<device name="ims" port="2"/>
</method>
</fence>
</clusternode>
<clusternode name="prox2" nodeid="2" votes="1">
<fence>
<method name="1">
<device name="ims" port="3"/>
</method>
</fence>
</clusternode>
<clusternode name="prox3" nodeid="3" votes="1">
<fence>
<method name="1">
<device name="ims" port="1"/>
</method>
</fence>
</clusternode>
</clusternodes>
<rm/>
</cluster>

root@prox1:/etc/pve# pwd
/etc/pve
root@prox1:/etc/pve#

Any comments are certainly appreciated.

Thanks!

Tim

 

[fortechitsolutions]

I am debugging this, have some observations, wondering if anyone else can comment.

To me, it looks like the intel_modular fence agent is not working as I think it should.

Note outcome of test below, first using fence_intelmodular, and then manually running snmpget with more complete CLI syntax based on what fence_intelmodular is trying to do. The first returns an error while second returns non-error (success I think):

FIRST:

root@prox1:/etc/pve#   fence_intelmodular  --action=status --ip=10.82.141.18 --username=snmpv3user --password=12345678 --plug=1 --snmp-auth-prot=SHA -v
/usr/bin/snmpget -m '' -Oeqn  '10.82.141.18:161' '.1.3.6.1.4.1.343.2.19.1.2.10.202.1.1.6.1'

snmpget: No securityName specified   

Returned 1: snmpget: No securityName specified   <<< ERROR RETURNED
Please use '-h' for usage

SECOND:


root@prox1:/etc/pve# /usr/bin/snmpget -v3 -l auth -a SHA -A 12345678 -u snmpv3user 10.82.141.18 '.1.3.6.1.4.1.343.2.19.1.2.10.202.1.1.6.1'

iso.3.6.1.4.1.343.2.19.1.2.10.202.1.1.6.1 = INTEGER: 2   <<< NON ERROR RETURNED

Looks to me like some options are being dropped by script, fence_intelmodular, but if I build correct syntax for snmpget manually, it works better.

Any thoughts are appreciated. Does anyone else use fencing on intel modular server ?


Thanks,


Tim Chipman