Re: [Pacemaker] drbd under pacemaker - always get split brain

2012-07-10 Thread Nikola Ciprich
Hello Andreas, Why not using the RA that comes with the resource-agent package? well, I've historically used my scripts, haven't even noticed when LVM resource appeared.. I switched to it now.., thanks for the hint.. this become-primary-on was never activated? nope. Is the drbd init script

[Pacemaker] OpenVPN in HA, sharing client connections

2012-07-10 Thread Arturo Borrero Gonzalez
Hi there! OpenVPN server has an 'management interface' that allows the admin to delete, add, modify, authorize client connections. As far as I know, it doesn't exist any preestablished method for sharing connections between openvpn servers, so in issues like failover and/or active-active

Re: [Pacemaker] OpenVPN in HA, sharing client connections

2012-07-10 Thread Michael Schwartzkopff
Hi there! OpenVPN server has an 'management interface' that allows the admin to delete, add, modify, authorize client connections. As far as I know, it doesn't exist any preestablished method for sharing connections between openvpn servers, so in issues like failover and/or active-active

Re: [Pacemaker] OpenVPN in HA, sharing client connections

2012-07-10 Thread Arturo Borrero Gonzalez
* Hi there!** ** OpenVPN server has an 'management interface' that allows the admin to** delete, add, modify, authorize client connections.** ** As far as I know, it doesn't exist any preestablished method for** sharing connections between openvpn servers, so in issues like** failover

Re: [Pacemaker] OpenVPN in HA, sharing client connections

2012-07-10 Thread emmanuel segura
conntrackd - Connection tracking daemon 2012/7/10 Michael Schwartzkopff mi...@clusterbau.com Hi there! OpenVPN server has an 'management interface' that allows the admin to delete, add, modify, authorize client connections. As far as I know, it doesn't exist any preestablished method

Re: [Pacemaker] OpenVPN in HA, sharing client connections

2012-07-10 Thread Lars Marowsky-Bree
On 2012-07-10T14:58:31, emmanuel segura emi2f...@gmail.com wrote: conntrackd - Connection tracking daemon Syncing the state of a VPN is, due to the encryption, significantly more difficult than just TCP/IP state. The reconnect/keepalive option is really the best path forward. Regards,

Re: [Pacemaker] OpenVPN in HA, sharing client connections

2012-07-10 Thread Arnold Krille
This is what we did (spoiler: no pacemaker) We connect the openvpn-hosts via tinc (could also be openvpn but tinc is more flexible when servers both initiate the connection) and put these tunnels into a bridge (with stp). Then all these nodes have openvpn with server-certificates from the same ca

Re: [Pacemaker] drbd under pacemaker - always get split brain

2012-07-10 Thread Andreas Kurz
On Tue, Jul 10, 2012 at 8:12 AM, Nikola Ciprich nikola.cipr...@linuxbox.cz wrote: Hello Andreas, Why not using the RA that comes with the resource-agent package? well, I've historically used my scripts, haven't even noticed when LVM resource appeared.. I switched to it now.., thanks for the

[Pacemaker] Behavior booth when the network failure between ACT site and SBY site happened.

2012-07-10 Thread Yuichi SEINO
Hi Jiaju, My environment consist of Site A, Site B, and Site C(Arbitrator). And I granted a ticket to Site A. And then I caused the network failure between Site A and Site B. Then the following behavior became. Firstly, all site is revoked. Secondly, Site A is granted. I would like to know if

Re: [Pacemaker] An error occurs in build of Pacemaker-1.1 in RHEL6

2012-07-10 Thread Andrew Beekhof
On Wed, Jul 4, 2012 at 7:22 PM, noza...@gmail.com wrote: Hi, Is RHEL6 in the target platform of pacemaker-1.1 ? The following errors occur when they build in RHEL6. -- cc1: warnings being treated as errors xml.c: In function 'sorted_xml': xml.c:1967: error: implicit declaration of

[Pacemaker] Behavior booth when the temporary ACT site down happened.

2012-07-10 Thread Yuichi SEINO
Hi Jiaju, My environment consist of Site A, Site B, and Site C(Arbitrator). And I granted a ticket to Site A. And then I execute Site A down. Secondly, I start up Site A within the expire date. then the state of Site A is that the ticket is revoked. So Site B is granted after the ticket expired.

Re: [Pacemaker] drbd under pacemaker - always get split brain

2012-07-10 Thread Andrew Beekhof
On Wed, Jul 11, 2012 at 8:06 AM, Andreas Kurz andr...@hastexo.com wrote: On Tue, Jul 10, 2012 at 8:12 AM, Nikola Ciprich nikola.cipr...@linuxbox.cz wrote: Hello Andreas, Why not using the RA that comes with the resource-agent package? well, I've historically used my scripts, haven't even

Re: [Pacemaker] OpenAIS and CoroIPC shared library

2012-07-10 Thread Andrew Beekhof
I don't believe openais is supported (or indeed possible) with corosync 2.x The corosync mailing list should be able to advise you on your options. On Wed, Jul 4, 2012 at 8:10 AM, Errol Neal en...@businessgrade.com wrote: Hi. I'm following the instructions on the clusterlabs site to build all

Re: [Pacemaker] An error occurs in build of Pacemaker-1.1 in RHEL6

2012-07-10 Thread nozawat
Hi Andrew, I think you already did right? Yes, it has been already applied with the following histories by a patch of Matsuo-san. https://github.com/ClusterLabs/pacemaker/commit/a92958fc16dc196b8024294be23a6142b6f21479 Regards, tomo On Wed, 11 Jul 2012 12:46:20 +1000 Andrew Beekhof

Re: [Pacemaker] Behavior booth when the network failure between ACT site and SBY site happened.

2012-07-10 Thread Jiaju Zhang
On Wed, 2012-07-11 at 11:01 +0900, Yuichi SEINO wrote: Hi Jiaju, My environment consist of Site A, Site B, and Site C(Arbitrator). And I granted a ticket to Site A. And then I caused the network failure between Site A and Site B. Then the following behavior became. Firstly, all site is

Re: [Pacemaker] Behavior booth when the temporary ACT site down happened.

2012-07-10 Thread Jiaju Zhang
On Wed, 2012-07-11 at 11:47 +0900, Yuichi SEINO wrote: Hi Jiaju, My environment consist of Site A, Site B, and Site C(Arbitrator). And I granted a ticket to Site A. And then I execute Site A down. Secondly, I start up Site A within the expire date. then the state of Site A is that the

Re: [Pacemaker] [RFC PATCH] Try to fix startup-fencing not happening

2012-07-10 Thread Andrew Beekhof
I know this thread is over a year old and you may not care anymore, but I was never satisfied with the answers I gave, so it stayed on my todo list. I've done some work recently improving the function for detecting when to fence nodes and gracefully handling any non-pacemaker nodes that are part

Re: [Pacemaker] Behavior booth when the network failure between ACT site and SBY site happened.

2012-07-10 Thread Yuichi SEINO
Hi Jiaju, This problem log put in bugzilla. http://bugs.clusterlabs.org/show_bug.cgi?id=5081 2012/7/11 Jiaju Zhang jjzh...@suse.de: Anyway, please give me the debug log as last time to see if it is really a bug or not;) Thanks, Jiaju -- Yuichi SEINO METROSYSTEMS CORPORATION