>>> Lars Marowsky-Bree <[email protected]> schrieb am 27.08.2012 um 12:59 in 
>>> Nachricht
<[email protected]>:
> On 2012-08-27T12:14:46, Ulrich Windl <[email protected]> 
> wrote:
> 
> > Hi!
> > 
> > I set up a Clustered Samba Server with SLES11 SP2 according to the manual 
> "Chapter 18. Samba Clustering". Everything seems to run now, but I cannot 
> reach the configured clustered IP address from an outside host. Local pings 
> on the IP address work though.
> > 
> > Are there any instructions how to debug the clustered IP address. I'm 
> lacking the background, I'm afraid.
> 
> Perhaps your switch or router are filtering the multicast MAC address
> that the hosts respond with to the ARP lookup?

Hi!

The network guys say no. Should "arp" show the Cluster-IP? I cannot see it, so 
I wonder if something's wrong. Could the "martian source" thing be responsible? 
I see this for the ARPs:
Aug 29 09:21:35 o1 kernel: [ 1261.556861] martian source 172.20.3.59 from
172.20.3.59, on dev br0

BTW: Inspecting the RA, I found a small problem with the MAC address:
                        IF_MAC=`echo $OCF_RESKEY_ip $NETMASK $BRDCAST | \
                                md5sum |                                \
                                sed -e 's#\(............\).*#\1#'       \
                                    -e 's#..#&:#g; s#:$##'              \
                                    -e 's#^\(.\)[02468aAcCeE]#\11#'`

Specifically in "#\11#", shouldn't that be "#\13#"? (MAC & 1) is the I/G-bit, 
while (MAC & 2) is the U/L-bit. So if the address is locally assigned 
(Administered) (which I guess is), the bit should be also set (says Wikipedia).

I could suggest to use the following code instead:
OUI=0x873184  # 24 bits used for OCF Cluster IP addresses
HASH=$(echo $OCF_RESKEY_ip $NETMASK $BRDCAST | md5sum | cut -c 1-6) # 24 bits
IF_MAC=$(printf "%06x$HASH" $(( (OUI & 0x3fffff) | 0xc00000 )) | sed -e 
's/../&:/g; s/:$//')

For unset variables "$OCF_RESKEY_ip $NETMASK $BRDCAST" I get:
# echo $IF_MAC
c7:31:84:68:b3:29
# echo | md5sum
68b329da9893e34099c7d8ad5cb9c940  -

(Tested with BASH  3.2.51 and coreutils-8.12-6.23.1)

> 
> Can you get the network trace of the arp traffic on the router into the
> subnet when an outside ping comes in?

I see this on the host (one cluster node):
o1:~ # tcpdump -p -i br0 -s100 -v -n host 172.20.3.59
tcpdump: listening on br0, link-type EN10MB (Ethernet), capture size 100 bytes
09:43:38.305460 arp who-has 172.20.3.59 tell 172.20.3.62
09:43:38.305493 arp reply 172.20.3.59 is-at f1:e9:91:b1:b9:51

(172.20.3.62 is the gateway) Packets also arrive via broadcast:
09:45:03.826371 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP 
(17), length 271) 172.20.3.59.138 > 172.20.3.63.138: NBT UDP PACKET(138)
09:45:13.836608 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP 
(17), length 271) 172.20.3.59.138 > 172.20.3.63.138: NBT UDP PACKET(138)

But I cannot connect:
# smbclient -U tester -L 172.20.3.59
Enter tester's password:
Connection to 172.20.3.59 failed (Error NT_STATUS_UNSUCCESSFUL)

Still don't know where to start debugging.

Regards,
Ulrich


_______________________________________________
Linux-HA mailing list
[email protected]
http://lists.linux-ha.org/mailman/listinfo/linux-ha
See also: http://linux-ha.org/ReportingProblems

Reply via email to