"! ccrEnabled 0" does indicate that CCR is disabled on the (server) 
cluster. In fact, instances of this

'/var/mmfs/ssl/authorized_ccr_keys' does not exist

message have been seen in clusters where CCR was disabled. It's just 
somewhat puzzling that the error message is appears in 4.2.1 . 

  Felipe

----
Felipe Knop                                     [email protected]
GPFS Development and Security
IBM Systems
IBM Building 008
2455 South Rd, Poughkeepsie, NY 12601
(845) 433-9314  T/L 293-9314





From:   "J. Eric Wonderley" <[email protected]>
To:     gpfsug main discussion list <[email protected]>
Date:   01/13/2017 06:30 PM
Subject:        Re: [gpfsug-discuss] Authorized Key Messages
Sent by:        [email protected]



Our intent was to have ccr turned off since all nodes are quorum in the 
server cluster:

Considering this:
[root@cl001 ~]# mmfsadm dump config | grep -i ccr
 ! ccrEnabled 0
   ccrMaxChallengeCheckRetries 4
             ccr :  0   (cluster configuration repository)
             ccr :  1   (cluster configuration repository)

Will this disable ccr?

On Fri, Jan 13, 2017 at 5:58 PM, Felipe Knop <[email protected]> wrote:
Brian,

I had to check again whether the fix in question was in 4.2.0.0 (as 
opposed to a newer mod release), but confirmed that it seems to be.   So 
this could be a new or different problem than the one I was thinking 
about.

Researching a bit further, I found another potential match (internal 
defect number 981469), but that should be fixed in 4.2.1 as well. I have 
not seen recent reports of this problem.

Perhaps this could be pursued via a PMR.

  Felipe

----
Felipe Knop                                     [email protected]
GPFS Development and Security
IBM Systems
IBM Building 008
2455 South Rd, Poughkeepsie, NY 12601
(845) 433-9314  T/L 293-9314





From:        Brian Marshall <[email protected]>
To:        gpfsug main discussion list <[email protected]>
Date:        01/13/2017 03:21 PM
Subject:        Re: [gpfsug-discuss] Authorized Key Messages

Sent by:        [email protected]



We are running 4.2.1  (there may be some point fixes we don't have)

Any report of it being in this version?

Brian

On Fri, Jan 13, 2017 at 3:14 PM, Felipe Knop <[email protected]> wrote:
Brian,

This seems to match a problem which was fixed in 4.1.1.7 and 4.2.0.0.

Regards,

  Felipe

----
Felipe Knop                                     [email protected]
GPFS Development and Security
IBM Systems
IBM Building 008
2455 South Rd, Poughkeepsie, NY 12601
(845) 433-9314  T/L 293-9314





From:        Brian Marshall <[email protected]>
To:        gpfsug main discussion list <[email protected]>
Date:        01/13/2017 02:50 PM
Subject:        [gpfsug-discuss] Authorized Key Messages
Sent by:        [email protected]




All,

I just saw this message start popping up constantly on one our NSD 
Servers.

[N] Auth: '/var/mmfs/ssl/authorized_ccr_keys' does not exist

CCR Auth is disabled on all the NSD Servers.

What other features/checks would look for the ccr keys?

Thanks,
Brian Marshall
Virginia Tech_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss



_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss

_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss



_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss

_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss



_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss

Reply via email to