smann at azteknetworks
Oct 31, 2007, 11:35 AM
Post #5 of 5
(264 views)
Permalink
|
Yes. I did log the user out and in. Then, verified membership in the group with the "groups" command. And, thanks, for pointing out the obvious. That is often what gets overlooked!
By the way, I'd like to verify that I understand casual/non-casual. A non-casual client is one that is listed as an argument to node in the ha.cf, correct? The apiauth entries are only required for casual clients, correct?
On 10/31/07, Scott Mann <smann [at] azteknetworks> wrote:
>
> Sadly, this does not correct the problem. I added the user to the haclient group. I then tried running heartbeat both with and without "apiauth ping gid=haclient" in the ha.cf file. Nothing changes, I get the exact same error message.
Just to cover the obvious... you logged the user in and out after
adding them to the group right?
>
> I am currently running 2.0.8 (from an RPM), but I will now build 2.1.2 from scratch and see if I can't make progress that way.
>
> Thanks, again!
>
> Scott Mann
> Sr Software Engineer
> Aztek Networks
>
>
>
> -----Original Message-----
> From: linux-ha-bounces [at] lists on behalf of Andrew Beekhof
> Sent: Wed 10/31/2007 5:25 AM
> To: General Linux-HA mailing list
> Subject: Re: [Linux-HA] newbie trying to use api_test
>
> On 10/30/07, Scott Mann <smann [at] azteknetworks> wrote:
> > Hello,
> >
> > I have a very simple two-node cluster setup not using crm. My goal is to use the API to pass messages between the two nodes. I think I've got a decent understanding of how to set things up using the API as I have looked at the ipfail.c and api_test.c files as examples.
> >
> > After having looked through things, I decided to try to run api_test. When I run it, I get a "failed authorization." Here's the output from the log file:
> > <snip>
> > Oct 30 15:54:54 az5ki01 /usr/lib/heartbeat/api_test: [16387]: info: PID=16387
> > Oct 30 15:54:54 az5ki01 /usr/lib/heartbeat/api_test: [16387]: info: Signing in with heartbeat
> > Oct 30 15:54:54 az5ki01 heartbeat: [15557]: WARN: Client [ping] pid 16387 failed authorization [client failed authorization]
> > Oct 30 15:54:54 az5ki01 heartbeat: [15557]: ERROR: api_process_registration_msg: cannot add client(ping)
> > <snip>
>
> http://linux-ha.org/ha.cf#apiauth
>
> the user you run api_test as needs to be in the haclient group
>
> > Here's my ha.cf file (right now, I am only using the serial connection):
> > logfacility local0
> > keepalive 2
> > deadtime 30
> > warntime 10
> > initdead 120
> > baud 19200
> > serial /dev/ttyS0 # Linux
> > auto_failback off
> > node az5ki01
> > node az5ki02
> > crm no
> >
> >
> > I began looking into the code (hb_api.c, etc), but I thought "I must be missing something obvious" ;-)
> >
> > Any help is greatly appreciated!
> >
> > TIA,
> >
> > Scott Mann
> > Sr Software Engineer
> > Aztek Networks
> >
> > _______________________________________________
> > Linux-HA mailing list
> > Linux-HA [at] lists
> > http://lists.linux-ha.org/mailman/listinfo/linux-ha
> > See also: http://linux-ha.org/ReportingProblems
> >
> _______________________________________________
> Linux-HA mailing list
> Linux-HA [at] lists
> http://lists.linux-ha.org/mailman/listinfo/linux-ha
> See also: http://linux-ha.org/ReportingProblems
>
>
> _______________________________________________
> Linux-HA mailing list
> Linux-HA [at] lists
> http://lists.linux-ha.org/mailman/listinfo/linux-ha
> See also: http://linux-ha.org/ReportingProblems
>
>
_______________________________________________
Linux-HA mailing list
Linux-HA [at] lists
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems
|
